Privacy Policy pragmatic

1Introduction

Pragmatic ("we", "Platform") is committed to protecting the privacy and security of all users' personal data. This Privacy Policy has been established to comply with applicable data protection laws and to ensure every player in Malaysia fully understands how their information is managed.

We believe that transparency is the foundation of trust. That is why we explain honestly and in detail every aspect of how your data is managed — from how we collect information, what it is used for, who it may be shared with, and how you can take control of your own data.

This Privacy Policy should be read together with Pragmatic's Terms and Conditions and our Responsible Gaming Policy, all of which form the complete agreement framework between you and Pragmatic.

2Personal Data We Collect

Pragmatic collects various types of information depending on how you interact with our platform. Below is a comprehensive overview of the data categories we process:

We only collect data that is strictly necessary for the stated purposes. Pragmatic does not collect sensitive information such as biometric data or medical information except in very specific circumstances and with your explicit consent.

3How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. Below are the primary ways we use your personal information:

• Account Management: Creating and maintaining your account, verifying your identity through the KYC process and handling account-related requests.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions securely and efficiently through trusted payment providers.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorised access and any suspicious activity that could harm the platform or other players.
• Service Communications: Sending important notifications relating to your account, security updates, transaction confirmations and updated policy information.
• Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support when needed.
• Platform Improvements: Analysing aggregated and anonymised usage data to improve user experience, platform performance and product offerings.
• Legal Compliance: Meeting reporting obligations to relevant authorities in accordance with applicable laws.

4Data Sharing with Third Parties

Pragmatic does not sell your personal data to anyone. However, we may share your information in the following limited situations, solely for legitimate platform operational purposes:

• Payment Providers: Information required to process deposits and withdrawals is shared with licensed payment providers such as FPX, DuitNow and digital wallet operators in Malaysia.
• Game Providers: Required game session data is shared with game software providers to ensure a smooth and fair gaming experience.
• Regulatory Authority: We comply with lawful requests from legal authorities, regulatory bodies, or court orders enforced in accordance with proper procedures.
• KYC & Fraud Prevention Services: Identity information is shared with licensed identity verification service providers for KYC checks and suspicious transaction monitoring.

All third parties we work with are bound by strict confidentiality agreements and are required to comply with data protection standards at least equivalent to those of pragmatic itself. We do not permit them to use your data for any purpose other than those stated.

5Data Security

Pragmatic invests seriously in security infrastructure to protect your personal data against ever-evolving threats. The key technical and organizational measures we implement are as follows:

• TLS 1.3 encryption for all data transmitted between your device and our servers.
• AES-256-bit encryption for data stored in our databases.
• Two-factor authentication (2FA) for all user accounts and internal staff access.
• Real-time 24/7 threat monitoring with automated intrusion detection systems.
• Periodic independent security audits conducted by qualified third-party cybersecurity firms.
• Strict role-based access control — pragmatic staff can only access data required for their specific duties.
• Mandatory cybersecurity awareness training for all pragmatic staff on a regular basis.

6Cookie Usage & Tracking Technologies

Pragmatic uses cookies and similar tracking technologies to enhance your experience, ensure account security, and understand how our platform is used. Below are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login session management, security, and basic preferences. These cookies cannot be disabled as the platform will not function properly without them.
• Performance & Analytics Cookies: Helping us understand how players interact with the platform so we can improve its design and functionality. This information is collected in aggregate and anonymised form.
• Functional Cookies: Saving your preferences such as language, display settings and other choices to deliver a more personalised experience.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage your cookie settings through your browser settings. However, disabling certain cookies may affect the functionality of some sections of the Pragmatic platform.

7Your Rights as a Data Owner

As a pragmatic player, you have the following rights regarding your personal data. We are committed to facilitating the exercise of these rights within a reasonable timeframe:

8Data Retention & Deletion

Pragmatic retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law.

• Active Account Data: Retained for as long as your account is active and for an additional period following account closure as required by law.
• Financial Transaction Records: Retained for a minimum of seven years to comply with applicable financial and tax legal requirements in Malaysia.
• Security Logs: Retained for 90 days for the purposes of security incident investigation and fraud prevention.
• Marketing Data: Retained for as long as you have consented to receive marketing communications. Once you withdraw your consent, data will be deleted within 30 days.

Once the retention period expires, data will be securely deleted or anonymized so that it can no longer be associated with you as an individual.

9Cross-Border Data Transfers

In the course of its operations, Pragmatic may need to transfer your personal data to servers or parties operating outside Malaysia. Where such transfers occur, we ensure adequate protection through the following measures:

• Data transfer agreements compliant with internationally recognised data protection standards.
• Ensuring that data recipients in destination countries comply with protection standards equivalent to Malaysia's requirements.
• Using approved standard contractual clauses to protect your rights during data transfers.

You may contact us for more information about the cross-border data transfer mechanisms we use.

10Children's Privacy

The pragmatic platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

Should we discover that personal data of a minor under the age of 18 has been collected without proper age verification, we will take immediate action to delete that data and close the relevant account in accordance with established procedures.

11Changes to the Privacy Policy

Pragmatic reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to how we operate.

Whenever we make material changes to this Privacy Policy, we will notify you via your registered email or an in-platform notification at least seven days before the changes take effect. The effective date and latest version number are always displayed at the top of this document.

Continued use of the pragmatic platform after changes take effect means you accept the updated Privacy Policy. If you disagree with any changes, you have the right to close your account before they come into effect.

12Contact Us Regarding Privacy

If you have any enquiries, concerns, or wish to exercise your data rights, Pragmatic's Data Protection Officer (DPO) team is always ready to assist you.

• Privacy Email: [email protected]
• Live Chat: Available 24/7 on the pragmatic platform
• Response Time: Within 48 working hours for general enquiries; 72 hours for security incident reports

We value every piece of feedback and will address all privacy-related enquiries seriously, thoroughly, and within a reasonable timeframe. Your trust in Pragmatic is the asset we value most.