Privacy Policy pro2 – Online Casino Player Data Protection Malaysia

Welcome to the Privacy Policy page pro2. This document explains how the pro2 platform – accessible at pro2.my – collects, uses, stores, protects and discloses personal information that you provide or that we collect through your use of the platform.

This Privacy Policy applies to all registered pro2 players, visitors to pro2.my, and any individual who interacts with our platform in any capacity – including via email, live chat, or registration forms. It covers all services we offer: slots, Live Casino, video poker, table games, VIP programmes, bonuses and promotions, as well as all customer support channels.

Pro2 is the data controller for the personal information you provide to us. This means we determine the purposes and methods of processing your personal data, and we are fully responsible for ensuring that such processing complies with Malaysia's Personal Data Protection Act (PDPA) 2010 and all applicable implementing regulations.

We are committed to handling your privacy in a transparent, fair manner that respects your rights as an individual. This policy is written in plain language — no confusing legal jargon — so you always know exactly what happens to your data at pro2.

Pro2 collects your personal data through several means: information you provide directly during registration and use of the platform, information collected automatically through your use of our website, and information received from legitimate third parties such as payment service providers.

Pro2 uses the personal data we collect solely for legitimate, clearly stated purposes. We do not use your data for any other purpose without first obtaining your consent. The primary purposes for which we use your data are as follows:

• Account Management: To register, verify and manage your pro2 account, including processing logins, identity verification and account settings management.
• Payment Processing: To process MYR deposits via FPX (Maybank2u, CIMB Clicks), DuitNow, Touch 'n Go eWallet, GrabPay, Boost or ShopeePay, and to process winnings withdrawals to your Malaysian bank account.
• Game Service Provision: To enable you to access and play all games on the pro2 platform, including slots, live casino and video poker.
• Legal Compliance (KYC & AML): To fulfil the Know Your Customer (KYC) and anti-money laundering (AML) requirements mandated under Malaysian law.
• Fraud Prevention: To detect, investigate and prevent fraudulent activity, platform abuse or violations of our Terms & Conditions.
• Responsible Gaming: To monitor gameplay patterns in order to identify players who may need responsible gaming support, and to connect them with relevant resources.
• Marketing (with Consent): To send players who have consented to receive marketing communications information about pro2's latest promotions, bonuses and offers. You may withdraw this consent at any time.
• Product Improvement: To analyse platform usage patterns on an aggregated basis (without identifying individuals) in order to improve the playing experience and develop better new features for Malaysian players.
• Customer Support: To handle your enquiries, complaints and requests via live chat or email, and to maintain communication records for quality control purposes.

In accordance with Malaysia's PDPA 2010, pro2 only processes your personal data on a valid legal basis. The following outlines the legal grounds we rely on for each type of processing:

• Contract: Processing necessary to fulfil the service contract between you and pro2 — this includes account management, payment processing, and the provision of gaming services.
• Legal Obligation: Processing required under Malaysian law, including KYC and AML compliance and reporting to authorities where legally mandated.
• Legitimate Interest: Processing for the purposes of fraud prevention, platform security and service improvement that does not unduly affect your rights and freedoms.
• Consent: Processing for marketing purposes and promotional communications — this requires your explicit consent and may be withdrawn at any time without affecting any other services we provide to you.

Pro2 does not sell, rent or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where we need to share your data with certain parties as part of our service operations:

• Payment Service Providers: Required financial transaction information is shared with Malaysian payment processors such as FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay processors solely to process your deposits and withdrawals in MYR. These providers are bound by strict confidentiality agreements and their own data security standards.
• Game Software Providers: Required game data is shared with game software providers solely to ensure games function properly. No more personal identifying data is shared than is strictly necessary.
• Legal Authorities: pro2 will disclose your personal data to law enforcement agencies, regulatory bodies, or Malaysian courts where required by law, court order, or AML/KYC compliance obligations. We will notify you of any such disclosure unless prohibited from doing so by law.
• Technology Service Providers: Certain technical services such as cloud hosting, analytics and IT support may involve authorised third-party providers. All such providers are bound by data processing agreements that ensure your data is protected to the same standards as pro2.

In all of the above situations, pro2 ensures that only the minimum necessary data is shared, and all parties receiving your data are bound by appropriate confidentiality and data protection obligations.

The security of your data is a responsibility that pro2 takes very seriously. We implement a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and pro2's servers is protected by 256-bit SSL encryption – the same standard used by Maybank2u and CIMB Clicks. Whenever you see the padlock icon in your browser's address bar, your data is secure.
• Data Encryption at Rest: Sensitive data stored in our databases, including financial information and identity verification details, is stored in encrypted form. Even in the event of unauthorised access to the database, the data cannot be read without the decryption key.
• Internal Access Controls: Access to players' personal data within pro2 is restricted to staff who genuinely require it to carry out their responsibilities (the "need to know" principle). All access is logged and monitored.
• Two-Factor Authentication (2FA): All pro2 internal systems that store or process player data are secured with two-factor authentication for staff who access them.
• 24/7 Security Monitoring: Our cybersecurity team monitors pro2's systems continuously, 24 hours a day, 7 days a week, to detect and respond to any threats or suspicious activity in real time.
• Regular Penetration Testing: pro2 conducts regular penetration testing carried out by independent security specialists to identify and address any system vulnerabilities before they can be exploited.

Pro2 retains your personal data for as long as it is needed for the purposes set out in this Privacy Policy, or for as long as Malaysian law requires us to do so. The general principles governing our retention periods are as follows:

• Active Account Data: For as long as your pro2 account remains active and you continue to use our platform, your account data will be retained to enable the uninterrupted provision of our services.
• Financial & Transaction Records: Records of all financial transactions – MYR deposits via FPX, DuitNow, TNG eWallet, GrabPay, withdrawals and so on – are retained for seven (7) years after a transaction occurs, in accordance with Malaysia's tax and AML legal requirements.
• Identity Verification Data (KYC): Identity verification documents submitted during the KYC process are retained for five (5) years after the business relationship ends, in accordance with Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Closed Account Data: Following account closure at a player's request, core data will be retained for the period required by law and subsequently deleted or anonymised securely.
• Support Communication Data: Live chat transcripts and support emails are retained for two (2) years for quality control purposes and to assist in resolving any disputes that may arise.

Once your data is no longer needed and the specified retention period has lapsed, pro2 will delete or anonymise it in a secure and irreversible manner.

As a player pro2 residing in Malaysia, you have the following rights under PDPA 2010 with respect to the personal data we hold about you. We are committed to making it easy for you to exercise these rights, promptly and without unnecessary hassle:

• Right of Access

  You have the right to obtain a copy of the personal data that pro2 holds about you. Submit your request to [email protected] and we will process it within 14 business days.

• Right to Rectification

  If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Log in to your pro2 account to update basic information, or contact support for more complex corrections.

• Right to Erasure ("Right to be Forgotten")

  In certain circumstances, you have the right to request deletion of your personal data. Please note that this right is not absolute — there are situations where we are required to retain your data to comply with legal obligations such as AML requirements and financial record-keeping.

• Right to Restrict Processing

  You have the right to request a restriction on the processing of your personal data in certain circumstances, such as when you dispute the accuracy of the data or object to processing based on legitimate interest.

• Right to Data Portability

  You have the right to receive your personal data in a machine-readable format for transfer to another data controller. This applies to data you have provided to us on the basis of consent or contract.

• Right to Object to Processing

  You have the right to object to the processing of your personal data for direct marketing purposes at any time, as well as in certain circumstances where processing is based on our legitimate interests. Contact us to withdraw your marketing consent.

To exercise any of the above rights, contact pro2's Privacy Officer by email [email protected] with the email subject "Data Rights Request – [your name]". We will acknowledge receipt of your request within 3 business days and process it within 14 business days.

Pro2 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser or device when you visit our website.

The types of cookies used by pro2 are:

• Essential Cookies (Required): Required for core platform functions – login, session management, security and site navigation. These cookies cannot be disabled as the platform will not function properly without them.
• Optional Cookies (Functional): Saves your preferences such as interface language, game settings, and display preferences so you don't have to reconfigure them every time you log in.
• Analytics Cookies: To collect information about how you use the pro2 platform in aggregate, without identifying you personally. This data is used to understand usage patterns and improve platform functionality.
• Performance Cookies: To help us monitor the platform's technical performance — including load times, errors and other technical details — enabling us to identify and resolve technical issues more quickly.

You can manage and control cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the pro2 platform and your overall experience. For more information, refer to the help documentation for your browser (Chrome, Safari, Firefox, or Edge).

Platform pro2 is an adult entertainment service that is not intended for individuals under the age of 18. We do not knowingly collect personal data from individuals under the age of 18.

If you are a parent or guardian who believes that your child under the age of 18 has provided personal data to pro2, please contact us immediately at [email protected]. We will take prompt steps to verify the situation, delete the relevant data and close any account that may have been registered by an underage individual.

Pro2 implements technical and procedural measures to prevent registration by underage individuals, including age verification during the registration process and identity verification during withdrawals. If you suspect any breach of age restrictions, please notify us immediately.

Pro2 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our privacy practices, relevant legislation (including amendments to PDPA 2010), or changes to the services we offer.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying in-platform notifications on pro2 to inform active players of the changes.
• For significant changes that materially affect your rights, we may send an email notification to the address registered to your account.

It is your responsibility to review this page periodically. Your continued use of the platform pro2 following the publication of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to discontinue use of the platform and request account closure.

If you have any questions, concerns or complaints regarding this pro2 Privacy Policy, the way we handle your personal data, or if you wish to exercise any of your rights as a data subject, please contact pro2's Privacy Officer through the following channels:

• Email (Recommended): [email protected] – include the subject line "Privacy" or "Data Request" to ensure your query is routed directly to our Privacy Officer. We aim to respond within 2 business days.
• Live Chat: Available 24/7 within the pro2 platform. Ideal for general privacy enquiries or when you need an immediate response.

All communications with pro2's Privacy Officer are confidential and handled as a high priority. We will acknowledge receipt of any formal complaint or request within 3 business days and aim to provide a full resolution within 14 business days.

If you are dissatisfied with how pro2 has handled your privacy query or complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Digital, in accordance with the provisions of PDPA 2010.