Privacy Policy Petros88 – Our Commitment to Protecting Your Data

Petros88 is committed to protecting the privacy and personal information of all members and users of our platform. We believe that member trust is the foundation of the long-term relationship we are building with our Malaysian player community of over 850,000.

This Privacy Policy is drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. It outlines:

• The types of personal information we collect from petros88 members.
• How and why we collect that information.
• How that information is used in petros88's platform operations.
• Circumstances under which we may share information with required third parties.
• The security measures we take to protect your data.
• Your rights regarding your personal data held by petros88.

Petros88 collects various categories of personal data depending on the nature of your interaction with our platform. Below is a detailed table of the data types we collect:

We do not collect sensitive data such as health information, religious beliefs, or political views. All data we collect is limited to what is necessary to deliver petros88 services safely, efficiently, and responsibly.

Petros88 collects personal data through several distinct channels. Understanding each of these channels will help you make informed decisions about the information you share with us:

• Account Registration: When you register a new petros88 account, you provide us directly with your name, phone number, email address, and other basic details. This information is required to create a valid and secure account.
• Identity Verification (KYC): When you request a withdrawal above a certain limit, or when our system identifies a need for verification, we may ask for a copy of your identity document such as your Malaysian MyKad or passport.
• Financial Transactions: Each time you make a deposit via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay, or submit a withdrawal to your local bank account, our system records the necessary transaction details.
• Gaming Activity: The petros88 platform records betting history, games played, wager amounts, and outcomes for audit, security, and responsible gaming programme purposes.
• Website & App Usage: Like most online platforms, petros88 automatically collects certain technical data – such as IP address, browser type, and device information – when you use our platform. This data is collected via cookie technology and server logs.
• Get in Touch with Our Team: When you reach out to the petros88 support team via live chat, email, or WhatsApp, those interactions are recorded for service quality and troubleshooting purposes.

Petros88 does not purchase or acquire your personal data from third-party sources for marketing purposes without your clear and explicit consent.

Petros88 uses the personal data collected for the following legitimate and necessary purposes:

• Service Delivery: Processing account registrations, verifying identity, handling deposits and withdrawals in MYR, and enabling access to slots, Live Casino, football betting, and other sports.
• Security & Fraud Prevention: Identifying and preventing unauthorized access, fraud, money laundering, and platform abuse. petros88's security systems analyze usage patterns to detect suspicious activity.
• Legal Compliance: Fulfilling the legal and regulatory obligations applicable to petros88 as an online entertainment platform, including Malaysia's PDPA requirements and Know Your Customer (KYC) requirements.
• Customer Support: Handling enquiries, complaints, and support requests from petros88 members efficiently and effectively. Conversation history helps our team deliver better and more consistent support.
• Platform Improvements: Analyzing aggregated usage data (without identifying individuals) to understand how members use petros88 and make improvements that enhance the overall user experience.
• Responsible Gaming Programme: Monitoring betting patterns to identify members who may need assistance or support related to responsible gambling, and activating the appropriate protection tools.
• Marketing Communications (with Consent): Sending information about petros88 promotions, new bonuses, and exclusive offers via email or SMS to members who have consented to receive marketing communications. You may withdraw this consent at any time.

Petros88 does not sell members' personal data. However, in the course of operating our platform, there are limited situations where we need to share data with carefully selected third parties:

• Payment Service Providers: Required transaction data is shared with approved payment processors (such as DuitNow, FPX, Touch 'n Go, GrabPay, Boost, and ShopeePay systems) to securely process deposits and withdrawals in MYR. These providers are bound by strict confidentiality agreements.
• Game Providers: Required session details are shared with licensed game providers (such as Evolution Gaming, Pragmatic Play, and PG Soft) to enable bet verification and winnings payouts. No unnecessary personal identification data is shared.
• Competent Authority: Petros88 will disclose personal data to law enforcement agencies, regulatory authorities, or courts when required to do so under applicable Malaysian law or a valid court order.
• Technical Service Providers: Companies that assist us with technical operations — such as secure server hosting, cybersecurity systems, and platform analytics — may have limited access to data required for their specific tasks. All such providers are bound by strict data protection agreements.

In all cases of data sharing, petros88 ensures that only the minimum necessary data is shared, that third-party providers adhere to security and privacy standards equivalent to or stricter than our own, and that no data is shared for third-party marketing purposes without your consent.

Petros88 invests seriously in security infrastructure to protect our members' personal data. The technical and organisational measures we have implemented include:

• AES-256 Encryption: All personal and financial data stored in our systems is encrypted using the AES-256 standard. Data transmitted between your device and petros88's servers is protected by TLS 1.3 protocol.
• Strict Access Control: Only petros88 staff who genuinely require access to specific data to carry out their duties are permitted to do so. The principle of least privilege (minimum necessary access) is strictly enforced across all our internal systems.
• 24/7 Security Monitoring: An automated security monitoring system operates around the clock to detect any unauthorised access attempts, cyberattacks, or suspicious activity targeting petros88's systems and data.
• Two-Factor Authentication: Login and sensitive transaction processes at petros88 use OTP verification via SMS to your registered Malaysian phone number as an additional layer of security.
• Regular Security Audits: petros88 conducts regular security audits and penetration testing to identify and address security vulnerabilities before they can be exploited.
• Secure Data Backup: Critical data is regularly backed up to secure, separate locations to ensure service continuity in the event of an unexpected incident.

While we take all reasonable steps to protect your data, no system is 100% impenetrable. We also recommend that you take your own security precautions, such as using a strong and unique password, not sharing your login credentials, and promptly reporting any suspicious activity on your petros88 account to our support team.

Petros88 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law:

• Active Account Data: For as long as your petros88 account remains active. If your account is suspended at your own request, basic data is retained to facilitate reactivation should you choose to return.
• Financial Transaction Data: A minimum of 7 years from the transaction date, in compliance with Malaysia's legal requirements for financial record retention. This includes deposit history in RM, withdrawals, and betting history.
• KYC Data (Identity Verification): A minimum of 5 years from the date of verification or account closure, whichever is later, in compliance with applicable anti-money laundering (AML) requirements.
• Support Communication Data: 2 years from the date of your last interaction, to support historical reference in any related follow-up cases.
• Technical & Log Data: 90 days for standard technical logs. Security logs related to investigated incidents may be retained longer until the relevant case is resolved.

Once the retention period ends and there is no legal requirement to keep the data longer, your personal data will be securely deleted or anonymized from all active petros88 systems. Anonymized data (which cannot be used to identify you) may be retained for aggregate analytics purposes.

The petros88 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. The following are the types of cookies we use:

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect petros88 platform functionality, including the ability to log in and make transactions. Optional cookies can be disabled without impacting core platform functions.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and petros88's privacy policy, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Submit your request by email to support@petros88.com and we will respond within 14 business days.
• Right to Rectification: If you find that any personal information held in petros88's records is inaccurate or outdated, you have the right to request an immediate correction. Some details can be updated directly from your account profile page.
• Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data when it is no longer needed for the purpose it was collected, or when you withdraw your consent and there is no other valid legal basis for processing. Please note that this right may be limited by legal record-keeping obligations binding on us.
• Right to Withdraw Consent: For data processed on the basis of your consent (e.g. marketing communications), you may withdraw that consent at any time via your petros88 account notification settings or by contacting our support team.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes, particularly direct marketing. Once your objection is received, we will immediately stop processing your data for that purpose.

Petros88 is a platform strictly for users aged 21 and above. We do not knowingly collect or store personal data from individuals under the age of 21.

The petros88 registration process requires age verification – all registrants must confirm they are 21 years of age or older. In addition, our KYC (identity verification) process helps identify and prevent registration by underage individuals.

If you are a parent or guardian and believe that your minor child has registered or used the petros88 platform without your knowledge, please contact our support team immediately at support@petros88.com. We will investigate promptly and take appropriate action, including account closure and deletion of all related data, if underage use is confirmed.

We also encourage parents and guardians to enable parental controls on devices used by children and teenagers to prevent access to online gambling platforms. Petros88 does not market our services to minors and does not use content that appeals to children.

Petros88 may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements in how we protect your privacy. When we make material changes:

• The "Last Updated" date at the top of this document will be revised to reflect the latest version.
• Petros88 members will be notified via in-platform notifications or email to their registered address of any significant changes.
• The latest version of this Privacy Policy is always available on this page for your reference.
• For material changes, we will provide at least 14 days' notice before the changes take effect, giving you sufficient time to review them.

Continued use of the petros88 platform after an updated Privacy Policy takes effect will be considered acceptance of the revised terms. If you do not agree with any changes to this Privacy Policy, please stop using the platform and contact us to discuss available options, including account closure and data deletion.

If you have any questions, concerns, or requests regarding this Privacy Policy or how petros88 handles your personal data, please contact us through the following channels:

• Email (Privacy Enquiries): support@petros88.com – include "Privacy Enquiry" in the email subject line for faster handling.
• Live Chat: Available 24/7 directly within the petros88 platform — the fastest way to get an immediate response from our team.
• WhatsApp: Reach the petros88 support team via WhatsApp for assistance in Bahasa Melayu, available around the clock.

We welcome your feedback on this Privacy Policy. If you believe petros88 has not complied with our privacy policy or applicable data protection laws, please notify us first so we have the opportunity to address your concerns directly. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.