Privacy Policy pusyy – Our Commitment to Protecting Your Data

Pusyy collects member personal information only for legitimate purposes necessary to enable us to provide a high-quality service. The types of information we collect are as follows:

We do not collect sensitive data such as medical information, sexual orientation, or religious beliefs unless required by law. All information you provide during registration and the KYC process is handled with the highest level of confidentiality.

All information we collect from pusyy members is used exclusively for the following purposes only. We do not use your data for any other purpose without first obtaining your consent:

• Account management: Creating and maintaining your member account, including the identity verification (KYC) process required by law.
• Payment processing: Processing deposit and withdrawal transactions securely and efficiently through the various supported payment methods.
• Customer support: Understanding and resolving inquiries, complaints, or technical issues you report to the pusyy support team.
• Platform security: Detecting and preventing fraud, money laundering, account misuse, and other illegal activities that could harm the platform and other members.
• Legal compliance: Meeting compliance obligations set out under applicable Malaysian law, including reporting requirements to relevant authorities.
• Service improvement: Analyzing platform usage patterns in aggregate (without identifying individuals) to improve features and the overall user experience.
• Marketing communications: Sending information about pusyy promotions, bonuses, and special offers — only to members who have consented to receive such communications. You may unsubscribe at any time.

Pusyy will not use your personal data to make automated decisions that affect your rights without appropriate human review.

Pusyy takes an extremely cautious approach to the sharing of member personal data. We does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where data sharing is necessary:

• Payment service providers: Transaction details are shared with verified payment processors (such as FPX, DuitNow, and e-wallet providers) solely for the purpose of completing your financial transactions.
• Technology service providers: Cloud infrastructure providers and technical service vendors supporting pusyy platform operations, under strict confidentiality agreements.
• Legal authorities: Information required by law enforcement agencies, courts, or regulatory authorities under a valid court order or legal obligation.
• Identity verification: Third-party services used for identity verification (KYC) and anti-money laundering (AML) checks as required by law.

All third parties we engage with are subject to strict data protection agreements and are required to handle shared information to a standard equivalent to pusyy's security standards. pusyy remains responsible for ensuring third parties comply with the data protection obligations set out.

Pusyy continuously invests in the latest security infrastructure to ensure member personal data is always protected against cyber threats, unauthorised access, and data breaches. The key security measures we implement include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and pusyy servers is protected with the same industry-grade encryption used by leading financial institutions.
• Two-factor authentication (2FA): Members are encouraged to enable two-factor authentication for an additional layer of account protection.
• 24/7 Monitoring: The pusyy cybersecurity team continuously monitors systems around the clock to detect and respond to any threats in real time.
• Regular security audits: We conduct regular penetration testing and security audits carried out by qualified independent security firms.
• Role-based access control: Access to member personal data within pusyy's internal systems is strictly restricted on a need-to-know basis, with every access recorded in an audit log.
• Secure data backup: Backup copies of data are stored at a separate location with full encryption to ensure smooth data recovery in the event of a system failure.

While pusyy takes all reasonable precautions, no security system can guarantee 100% absolute protection. You also play an important role in keeping your account secure by using a strong password and not sharing your login details with anyone.

Pusyy uses cookies and similar tracking technologies to enhance the user experience on our platform. Below is an explanation of the types of cookies we use:

• Essential cookies: Required for core platform functions such as login session verification, basket management, and security settings. These cookies cannot be disabled.
• Performance cookies: Used to collect anonymous information about how visitors use our platform, helping us improve performance and the user interface.
• Functional cookies: Allowing the platform to remember your preferences such as language, region, and display settings to provide a more personalized experience.
• Analytics cookies: Helping us understand traffic patterns and feature usage for product development and improvement purposes.

You can manage or disable non-essential cookies through your web browser settings at any time. Please note that disabling certain cookies may affect some features of the pusyy platform. By continuing to use our platform, you consent to the use of cookies as described in this policy.

As a pusyy member and Malaysian citizen, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). pusyy fully respects and facilitates the exercise of these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.
• Right to Rectification: If you find that any personal data we hold about you is inaccurate or outdated, you have the right to request an immediate correction.
• Right to Erasure: You may request deletion of your personal data, subject to our legal obligations to retain certain records for periods prescribed by law.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, without providing any justification.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider if desired.
• Right to Restriction of Processing: In certain circumstances, you have the right to request that the processing of your personal data be temporarily restricted while a dispute or investigation is ongoing.

To exercise any of the above rights, please contact the pusyy privacy team via email at [email protected] or through the platform's live chat. pusyy will respond to all valid requests within the timeframe required by applicable law.

Pusyy retains member personal data only for as long as it is needed for the purposes stated in this policy, or as required by applicable Malaysian law. Retention periods depend on the type of data and its purpose of use:

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity. Our deletion process complies with industry standards to ensure deleted data cannot be recovered by any party.

Pusyy reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology used, legal requirements, or other relevant operational reasons.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date shown at the top of this document
• Displaying a clear notice on the pusyy platform homepage
• Sending email notifications to all active members for material changes

If you have any questions, concerns, or wish to exercise your privacy rights, the pusyy privacy team is ready to assist you at any time.