Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how pussyapp ("Company", "we", "us", "our"), the operator of the online gaming platform accessible at pussyapp.cam (the "Platform"), collects, processes, stores, and protects the personal data of individuals ("User", "Player", "you") who access or use the Platform.

pussyapp takes the privacy of its users seriously. We are committed to handling your personal data responsibly and in compliance with applicable data protection legislation, including the requirements imposed by our international gaming licensing authority. This Policy has been drafted to give you a clear, comprehensive understanding of our data practices.

By registering an Account on pussyapp, making a deposit, or otherwise using the Platform, you acknowledge that you have read, understood, and agreed to the practices described in this Policy. This Policy should be read alongside our Terms & Conditions.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means pussyapp, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means a third-party service provider that processes Personal Data on behalf of pussyapp under a data processing agreement.
• "KYC Data" means identity verification documents and related information submitted by a User in connection with Know Your Customer obligations, including MyKad, passport, and proof of address documents.
• "Payment Data" means financial information associated with deposits and withdrawals, including e-wallet account references (Touch 'n Go eWallet, Boost, GrabPay), bank account numbers (Maybank, CIMB, Public Bank, Hong Leong), DuitNow IDs, and cryptocurrency wallet addresses.
• "Technical Data" means device, browser, and network information automatically collected when you access the Platform, including IP addresses, device identifiers, operating system, browser type, and session data.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by the User to the processing of their Personal Data for a specific purpose.

3 Data We Collect

pussyapp collects the following categories of personal data in connection with the provision of our Platform services:

pussyapp does not collect sensitive personal data (such as racial or ethnic origin, health data, biometric data, or political opinions) except where strictly required by our KYC and anti-money laundering compliance obligations. Where such data is collected, it is processed under strict access controls and retained only for the minimum period required by law.

4 Data Processing

pussyapp processes your personal data for the following specific purposes:

1. Account Creation and Management: To register your Account, verify your identity, manage your profile, and maintain the security of your Account on the Platform.
2. Payment Processing: To facilitate deposits via Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, and other supported methods, and to process withdrawal requests to your designated Payment Method in Malaysian Ringgit (MYR) or cryptocurrency.
3. KYC and Compliance: To verify your identity and age (21+ requirement), meet anti-money laundering (AML) obligations, and comply with our licensing authority's regulatory requirements.
4. Service Delivery: To provide access to games, sports betting markets (including Liga Super Malaysia, EPL, Champions League, UFC), live casino products, and all other features of the Platform.
5. Customer Support: To respond to your queries, resolve disputes, and provide technical assistance via live chat and email.
6. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct on the Platform.
7. Responsible Gambling: To administer responsible gambling tools including deposit limits, loss limits, self-exclusion periods, and cooling-off requests, and to identify patterns of behaviour that may indicate problem gambling.
8. Marketing Communications: To send promotional offers, bonus notifications, and relevant product updates where you have given your consent to receive such communications. You may withdraw this consent at any time through your Account settings.
9. Legal Obligations: To comply with applicable laws, regulatory requirements, and court orders where applicable.
10. Platform Improvement: To analyse usage patterns, identify technical issues, and improve the performance and user experience of the Platform. This processing is carried out using aggregated and anonymised data where possible.

5 Legal Basis for Processing

pussyapp relies on the following legal bases for processing your personal data, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our contract with you — including account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML, and licensing obligations.
• Legitimate Interests: Processing carried out for our legitimate business interests, including fraud prevention, security monitoring, Platform improvement, and responsible gambling controls — where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given consent, such as marketing communications and optional personalisation features. You have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Third Parties

pussyapp does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of third parties only where necessary and under appropriate contractual safeguards:

• Payment Service Providers: Including the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and Malaysian banking partners (Maybank, CIMB, Public Bank, Hong Leong) to process deposit and withdrawal transactions. These parties receive only the minimum data necessary to process the relevant transaction.
• KYC and Identity Verification Partners: Third-party identity verification providers who assist with document validation, age verification, and fraud screening as part of our KYC process.
• Game Content Providers: Licensed game studios that supply gaming content to the Platform may receive session-level technical data necessary for game delivery and fair-play auditing. These partners do not receive your identity or payment data.
• Cloud and Infrastructure Providers: Hosting, database, and CDN service providers who store and transmit Platform data on our behalf under data processing agreements.
• Legal and Regulatory Authorities: Where required by law, court order, or regulatory direction, we may disclose your personal data to law enforcement agencies, our licensing authority, or other competent public authorities.
• Anti-Fraud and AML Services: Third-party screening services that help us detect money laundering, fraud, and sanctioned-person matches in compliance with our regulatory obligations.

All third-party Data Processors engaged by pussyapp are subject to written data processing agreements that require them to process your data only on our documented instructions, maintain appropriate technical and organisational security measures, and not engage sub-processors without our prior consent.

7 Payment Data & Financial Security

pussyapp handles payment data with the highest level of security and confidentiality. All financial transactions — including deposits via Touch 'n Go eWallet, DuitNow instant transfer, FPX bank transfer, Boost, GrabPay, and cryptocurrency channels — are processed over encrypted connections using industry-standard TLS protocols.

pussyapp does not store full credit or debit card numbers on its own servers. Card transaction data is tokenised and handled exclusively by our PCI-DSS compliant payment processing partners. E-wallet and bank transfer references are stored in encrypted form within our secure database infrastructure.

Your payment method details are used solely for the purpose of processing deposits, withdrawals, and refunds associated with your pussyapp Account. We do not use your payment data for any other purpose without your explicit consent.

8 Cookies & Tracking Technologies

pussyapp uses cookies and similar tracking technologies to operate the Platform, maintain your session, and improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session authentication, account security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, preferred game categories, and responsible gambling tool settings.
• Analytical Cookies: Used to collect aggregated data about how players use the Platform, which pages are visited most, and where technical errors occur. This data helps us improve the Platform experience. Analytics data is processed in anonymised or pseudonymised form where possible.
• Security Cookies: Used for fraud detection, bot identification, and unusual session behaviour monitoring to protect your Account and the integrity of the Platform.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform, including the ability to maintain your logged-in session. pussyapp does not use third-party advertising cookies or cross-site tracking for advertising network purposes.

9 Data Retention

pussyapp retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations. The following general retention periods apply:

• Account Data (active accounts): Retained for the lifetime of your Account and for a period of 5 years following permanent Account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years from the date of verification, or longer where required by our licensing authority.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in compliance with financial regulatory requirements.
• Customer Support Records: Retained for 3 years from the date of the last interaction, unless the record relates to an unresolved dispute or legal matter.
• Marketing Preference Data: Retained until you withdraw consent or close your Account, whichever is earlier.
• Technical and Log Data: Typically retained for 12 months for operational and security monitoring purposes.

Following the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Data that has been anonymised is not subject to this Policy and may be retained indefinitely for analytical purposes.

10 Security Measures

pussyapp implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and pussyapp servers is encrypted using industry-standard TLS protocols, equivalent to the encryption used by major Malaysian banks.
• Encrypted Data Storage: Personal data and payment data stored in our databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication (2FA): Available for all pussyapp Accounts to provide an additional layer of security against unauthorised access.
• Regular Security Audits: Our Platform undergoes periodic independent security assessments, including penetration testing and vulnerability scanning.
• Fraud Monitoring: Real-time transaction monitoring and anomaly detection systems are in place to identify and respond to suspicious account activity.

11 User Rights

Subject to applicable law and the terms of our licensing obligations, you have the following rights in relation to your personal data held by pussyapp:

To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will respond to all valid requests within 30 days. In complex cases, this period may be extended by a further 60 days with prior notice. Identity verification may be required before we can process your request.

Please note that certain rights are subject to limitations where processing is required for legal compliance, fraud prevention, or the fulfilment of our contractual obligations to you.

12 Minors & Age Restrictions

pussyapp strictly prohibits the registration and use of its Platform by any person under the age of 21 years. The Platform is intended solely for adult players who meet the 21+ age requirement.

We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated Account, forfeit any associated bonus funds, and securely delete the personal data of the minor as promptly as technically feasible.

All registered Accounts are subject to KYC age verification prior to the processing of the first withdrawal. Accounts that cannot provide satisfactory proof of age will be suspended pending investigation.

13 Cross-Border Data Transfers

pussyapp operates an international platform, and your personal data may be processed by us or our third-party service providers in countries outside of Malaysia. Such transfers may include the processing of KYC documents by verification partners, storage of transactional data on cloud infrastructure, and access by technical support staff located in various jurisdictions.

Where personal data is transferred outside of Malaysia, pussyapp takes appropriate steps to ensure that adequate protections are in place, including:

• Transferring data only to countries that have been assessed as providing an adequate level of data protection;
• Implementing standard contractual clauses or equivalent safeguards in agreements with third-party recipients of personal data; and
• Ensuring that Data Processors in third countries are bound by contractual obligations equivalent to those applied within Malaysia.

For further information about the specific safeguards applied to any particular cross-border transfer, please contact our support team.

14 Amendments to This Policy

pussyapp reserves the right to update or modify this Privacy Policy at any time. Material changes to this Policy will be communicated to registered Users by email notification or by a prominent notice displayed on the Platform prior to the changes taking effect.

The date of the most recent revision is always displayed at the top of this page. We encourage you to review this Policy periodically to stay informed of how we are protecting your data. Your continued use of the Platform following the publication of any revised Policy constitutes your acknowledgement of the updated terms.

If any proposed amendment requires your renewed consent for a specific processing activity, we will seek that consent separately before proceeding with the updated processing.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform. Average response time under 5 minutes.
• Email: [email protected] (plain text — this is not a clickable link). Average response time within 2 hours.
• Subject Line: Please include "Privacy Request" in the subject line of any email query relating to this Policy to ensure prompt routing to our data protection team.
• Operating Hours: 24/7, GMT+8 Malaysia Time.

When submitting a data rights request or privacy enquiry, please include your full name, registered email address, and Account username so that we can verify your identity and locate the relevant records efficiently.