Poki Official Document

Poki Privacy Policy – Data Protection & Privacy for Malaysian Players

At poki, your privacy is more than a legal obligation — it is a core value we uphold. This Privacy Policy clearly and transparently explains how we collect, use, protect, and manage your personal data as a poki platform player in Malaysia.

Last Updated: 1 January 2026. This Privacy Policy takes effect immediately. By continuing to use the poki platform after this date, you are deemed to have read and agreed to all provisions contained in this document. Please review this policy from time to time, as we may update it.

Poki's Commitment to Your Privacy

Six data protection principles that form the foundation of how poki manages the personal information of every Malaysian player.

256-bit SSL Encryption at All Times

Every bit of data transmitted between your device and poki's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's major banks such as Maybank and CIMB. No information is sent in plain text that could be intercepted or read by unauthorised parties.

Data Is Never Sold to Third Parties

Poki has never and will never sell, rent, or trade players' personal data to any third party for commercial marketing purposes. Your information belongs to you — poki uses it solely for the purposes clearly stated in this Privacy Policy and nothing beyond that.

Secure & Limited Data Storage

Poki players' personal data is stored on servers protected by multi-layered firewalls, intrusion detection systems (IDS) and strict access controls. Only staff who require access to specific data in order to carry out their duties are permitted to do so – with a full audit log maintained for every access.

Player Rights Fully Guaranteed

As a poki player, you have the full right to access, correct, download, and request the deletion of your personal data at any time. poki respects these rights and will process every data-related request within a reasonable timeframe at no charge.

Payment Data Not Stored at poki

Your payment details – whether via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay or FPX (Maybank2u, CIMB Clicks) – are never stored directly on Poki's servers. All transactions are processed through certified payment gateways that comply with international PCI DSS standards.

Compliance with Malaysia's Personal Data Protection Act

Poki operates fully within Malaysia's applicable personal data protection legal framework. We continuously monitor legislative developments and update our data management practices to ensure full compliance at all times.

Types of Data We Collect

Poki only collects data that is strictly necessary to deliver the best service to players in Malaysia.

Identity Data
  • Full name as per MyKad
  • National identity card number (MyKad)
  • Date of birth
  • Current residential address
  • Identity document image (for KYC)
Contact Data
  • Active email address
  • Malaysian phone number
  • Preferred language for communications
  • Communication logs with customer support
  • Feedback and complaints submitted
Financial Transaction Data
  • Deposit and withdrawal records (RM)
  • Payment methods used
  • Full transaction history
  • Current account balance
  • Bonus and promotion status
Gaming Activity Data
  • Games played (slots, fishing games, etc.)
  • Bet values and winnings
  • Duration and frequency of gaming sessions
  • Favourite game preferences
  • Responsible gaming feature usage records
Device Technical Data
  • IP address at time of access
  • Web browser type and version
  • Operating system and device model
  • Cookie and session information
  • Login date and time logs
Analytics & Usage Data
  • Pages visited within the platform
  • Time spent in each section
  • User navigation paths
  • Platform performance data from the user's perspective
  • User satisfaction feedback

Poki's Data Security Layers

A multi-layered security infrastructure that protects the data privacy of every Poki player at all times.

SSL 256-bit Full data encryption during transmission
Multi-Layer Firewall Server protection against unauthorised access
2FA Verification Additional login security layer
24/7 Monitoring Continuous monitoring for suspicious activity
Regular Audits Independent security audits
PCI DSS Payment data security standards

Your Rights as a Poki Player

Poki fully respects your rights regarding personal data. Below is a complete list of the rights you hold as a poki platform player.

1
Data Access Rights

You have the right to know what personal data Poki holds about you at any time. Send a request to [email protected] and we will provide a complete, readable copy of your data within 14 working days.

2
Right to Data Rectification

If any information Poki holds about you is inaccurate or out of date, you have the right to request a prompt correction. You may update basic information directly through your Poki account profile settings, or contact our support team for corrections that require document verification.

3
Right to Erasure ("Right to be Forgotten")

You may request that Poki delete your personal data upon account closure, provided doing so does not conflict with our legal obligations. Poki is legally required to retain certain financial transaction records for the period prescribed by Malaysian regulations.

4
Right to Restrict Data Processing

You have the right to request that Poki restrict how your data is processed in certain circumstances – for example, during a dispute review process or if you question the accuracy of the data held. While a restriction is active, Poki will retain the relevant data but will not process or use it for any other purpose.

5
Right to Data Portability

You may request that Poki provide your personal data in a structured, machine-readable format (such as CSV or JSON) upon formal request. This allows you to transfer your data to another platform should you choose to do so.

6
Right to Object to Processing

You have the right to object to poki processing your data for direct marketing or profiling purposes at any time. You may withdraw your consent to receive marketing communications via the unsubscribe link in any email we send, or through the notification settings in your poki account.

IMPORTANT: This Privacy Policy applies to all users of the poki platform (poki.vin), including visitors, registered players, and former players. By using the poki platform in any capacity, you agree to the collection and use of data as described in this document. If you do not agree, please discontinue your use of the poki platform.

1. Information We Collect

Poki collects your personal information through several different methods throughout your interactions with our platform. We strictly adhere to the principle of data minimisation – collecting only the information that is genuinely necessary to deliver the best possible service to you as a player in Malaysia.

1.1 Information You Provide Directly

This information is collected when you register a poki account, update your profile, contact customer support, or participate in promotions and tournaments. It includes your full name, MyKad number, date of birth, email address, Malaysian phone number, and residential address. During the KYC (Know Your Customer) verification process, we also collect a copy of your official identification document to meet applicable legal compliance requirements.

1.2 Automatically Collected Information

When you use the Poki platform, our systems automatically collect certain technical information required for the platform's functionality and security. This includes your IP address, browser type, operating system, pages visited, session duration and cookie data. This information is used solely for operational, security and platform improvement purposes – not to identify you as a specific individual.

1.3 Financial Transaction Information

Records of all financial transactions carried out on the Poki platform – including deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX through Maybank2u or CIMB Clicks – are retained for financial record-keeping, verification, fraud prevention and compliance with financial reporting requirements mandated under Malaysian law. All amounts are recorded in Malaysian Ringgit (RM).

2. How We Use Your Data

Poki uses your personal data solely for legitimate and reasonable purposes directly related to the provision of our digital entertainment platform services. We do not use your data for any other purpose without first obtaining your additional consent.

2.1 Account Management & Services

  • Processing account registration and verifying your identity through the KYC process.
  • Processing deposits, withdrawals, and all financial transactions in Malaysian Ringgit (MYR).
  • Provides access to all poki games, including Lucky Keno, Golden Rooster, Red White Blue, Super Andar Bahar, Ocean King, Mission Impossible, Bombing Fishing, and more.
  • Managing poki's VIP programme, bonuses, promotions, and monthly tournaments.
  • Sending important service communications related to your account.

2.2 Security & Compliance

  • Detecting and preventing fraud, money laundering and other suspicious activities.
  • Fulfilling applicable legal and regulatory obligations in Malaysia.
  • Verifying that all Poki players meet the minimum age requirement (18 and above).
  • Implementing responsible gaming programmes, including deposit limits and self-exclusion.
  • Maintaining transaction records for audit and legal compliance purposes.

2.3 Platform Improvements

  • Analysing usage patterns to better understand the needs and preferences of Malaysian players.
  • Testing and developing new features relevant to the poki community.
  • Resolving technical issues and improving overall platform performance.
  • Personalising your experience based on your preferences and gaming history.

2.4 Marketing Communications (With Your Consent)

Where you have given your consent, Poki may send you information about promotions, bonuses, tournaments and new platform features via email or notifications. You may withdraw this consent at any time by clicking the unsubscribe link in any marketing email or by adjusting your Poki account settings.

poki's Data Minimisation Principles: We use your data only for the purposes stated at the time of collection. Should we need to use your data for a new purpose not specified in this Privacy Policy, we will obtain fresh consent from you before doing so.

3. Sharing Data with Third Parties

Poki does not sell, rent or trade players' personal data to third parties. However, there are limited situations where we may need to share certain information with trusted external parties in order to deliver Poki's services effectively.

3.1 Trusted Service Providers

Poki works with a number of trusted third-party service providers — including payment gateways (to process DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX transactions), cloud service providers for secure hosting, and gaming software providers. All of these service providers are bound by strict confidentiality agreements and may only use shared data for specific, limited purposes.

3.2 Legal Requirements

Poki may be required to disclose certain personal data to Malaysian authorities if compelled by a court order, subpoena, law enforcement agency request, or other valid legal requirement. In such situations, poki will disclose only the minimum information necessary and will, where permitted by law, notify you of such disclosure.

3.3 Business Transfers

In the event of a merger, acquisition, asset sale or similar corporate transaction, Poki player data may be transferred to the successor entity. Poki will ensure that any such successor entity adopts a Privacy Policy at least equivalent to this one before any data transfer takes place.

poki's Guarantee: Under no circumstances will poki share your personal data with third parties for their own commercial marketing purposes without first obtaining your explicit consent. This is an absolute guarantee that cannot be compromised in any situation.

4. Security & Data Protection

Poki continuously invests in the latest technology and security practices to ensure every Malaysian player's personal data is protected to the highest possible standard. Data security is not merely an added feature at poki – it is the foundation of trust that keeps our platform running.

4.1 Technical Security Measures

  • 256-bit SSL encryption for all communications between your browser and Poki's servers.
  • Passwords are stored using an irreversible one-way hashing algorithm.
  • A multi-layer firewall system that monitors and filters all incoming and outgoing traffic.
  • An intrusion detection and prevention system (IDS/IPS) operating 24/7.
  • Two-factor authentication (2FA) is available for all poki accounts for added security.
  • Regular data backups to a separate, geographically secure location.

4.2 Organisational Security Measures

  • Role-based access control (RBAC) ensuring staff can only access data relevant to their specific responsibilities.
  • Regular security audits conducted by recognised independent third parties.
  • Mandatory cybersecurity awareness training for all Poki staff.
  • Full audit logs for every access to sensitive player data.
  • Detailed incident response procedures for managing any data breach.

4.3 Shared Responsibilities

While poki takes all reasonable security measures, data security also depends on your own actions as a player. You are responsible for choosing a strong and unique password for your poki account, not sharing your login credentials with anyone, keeping your device updated with the latest security patches, and promptly reporting any suspicious activity to poki support.

5. Cookie Policy

The poki platform uses cookies and similar tracking technologies to enhance your gaming experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit a website.

Poki uses cookies to maintain your login session, store your personal preferences such as language and interface settings, detect suspicious activity for security purposes, and collect anonymised analytics data to help us understand how the poki platform is used. You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the poki platform.

6. Your Rights as a Player

Poki fully respects your rights regarding personal data as guaranteed by applicable Malaysian law. To exercise any of the rights listed below, please contact us by email at [email protected], stating the right you wish to exercise along with your poki account details for identity verification.

These rights include the right to access your data, the right to correct inaccurate information, the right to erasure in certain circumstances, the right to restrict data processing, the right to data portability in a machine-readable format, and the right to object to processing for direct marketing purposes. Poki will process all valid requests within 14 working days and will notify you of the outcome.

7. Data Retention & Deletion

Poki retains your personal data for as long as your account remains active or as long as necessary to provide the services you have requested. Upon account closure, Poki will delete or anonymise personal data that is no longer required within a reasonable timeframe, subject to the exceptions set out below.

7.1 Data That Must Be Retained Longer

Certain categories of data are required by law to be retained by poki for longer periods, even after an account is closed. This includes financial transaction records, which must be kept for a minimum of 7 years for audit and Malaysian financial compliance purposes, KYC verification records and identity documents that may be required for investigative purposes, and communication logs related to unresolved disputes or complaints.

7.2 Deletion Upon Request

Where there is no legal obligation to retain your data, Poki will process data deletion requests within 30 business days. Once deleted, the data cannot be recovered. Poki will provide written confirmation upon completion of the deletion process.

8. Children's Privacy

The Poki platform is intended exclusively for individuals aged 18 and above and is neither designed for nor targeted at underage children or minors. Poki does not knowingly collect, process or store personal data from individuals under the age of 18.

Important Note on Child Protection: Should Poki discover that we have inadvertently collected data from a minor, the account in question will be closed immediately and all collected data will be deleted without delay. If you suspect that a child is using the Poki platform, please contact us immediately at [email protected].

9. Changes to the Privacy Policy

Poki reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements or technological developments that affect how we manage personal data. The "Last Updated" date at the top of this document will be revised whenever material changes are made.

For material changes, Poki will provide reasonable notice via your registered email address or through a prominent notice on the poki.vin platform before the changes take effect. We encourage you to review this Privacy Policy periodically. Your continued use of the Poki platform after any changes take effect constitutes your implied acceptance of the updated policy.

10. Contact Us

If you have any questions or concerns, or wish to exercise any of your rights regarding your personal data, Poki's privacy team is here to help. We are committed to responding promptly and clearly to all privacy-related enquiries.

  • Privacy Email: [email protected]
  • Operating Hours: 24 hours a day, 7 days a week, including Malaysian public holidays
  • Support Language: Bahasa Malaysia & English
  • Average Response Time: Within 2 hours for email enquiries
  • Data Request Processing Timeframe: Within 14 business days for requests requiring review
Responsible Gaming – Poki's Top Priority

Poki is an entertainment platform intended purely for enjoyment. Your gaming activity data is also used to help identify patterns that may indicate problem gambling, so that we can offer appropriate assistance. For full details on Poki's self-management tools, visit Responsible Gaming page us. This platform is intended for users aged 18 and above only.

Officially Licensed
SSL 256-bit
Certified RNG
24/7 Support
Local Payments
Fast Withdrawals

Your Data Is Safe with Poki – Ready to Play?

Now you know how poki protects your privacy and personal data to the highest security standards. Join over 300,000 Malaysian players enjoying a safe, fair, and responsible experience at poki. Register for free today!

For players aged 18 and above only. Terms & conditions apply. Please gamble responsibly.

Bahasa Melayu