Privacy Policy perodua88 – Malaysian User Data Protection

1 Introduction and Our Privacy Commitment

Perodua88 takes the privacy of every user who trusts our platform seriously. As an online gaming platform operating in Malaysia, we recognise that your personal data is a responsibility we must manage with the utmost care. This Privacy Policy is drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data management.

We believe transparency is the foundation of trust. That is why we do not merely comply with legal requirements — we strive to go beyond the minimum standards to ensure your data is truly secure and used ethically. From the moment you register an account to every transaction you make, your personal details are protected by banking-grade security systems.

This policy applies to all perodua88 services, including the main website, mobile app, and all our official communication channels. If you have any questions after reading this document, our privacy team is available to assist you at any time.

2 Personal Data We Collect

Perodua88 collects your personal data through several methods — directly during registration, automatically through website technologies, and in some cases through trusted third-party sources. All data collection is carried out with a clear and legitimate purpose.

2.1 Data You Provide Directly

When you register an account or use perodua88 services, we collect the following information:

Identity documents such as MyKad or passport are collected solely for identity verification (KYC) and anti-money laundering (AML) compliance purposes. These documents are stored in a strictly access-controlled environment.

2.2 Automatically Collected Data

When you browse the perodua88 website or use the app, our systems automatically record technical information required to keep the platform running smoothly and securely:

• IP address and general geographic location (state, city)
• Device type, operating system and web browser used
• Pages visited, time of visit and session duration
• Deposit and withdrawal transaction records
• Game activity logs for fairness and security purposes
• Cookie and session data for a smoother user experience

3 How We Use Your Data

The personal data we collect is used exclusively for purposes related to the provision, improvement, and security of perodua88 services. We never use your data for unrelated purposes without your prior consent.

3.1 Primary Purposes of Data Use

• Account management: Create, verify and manage your user account, including the KYC process and identity verification.
• Transaction processing: Process deposits, withdrawal of wins and bonus payments quickly and securely.
• Platform security: Detect and prevent fraud, money laundering, unauthorized access and other suspicious activities.
• Regulatory compliance: Fulfil legal obligations, including Malaysia's PDPA, AML regulations and regulatory directives.
• Customer support: Resolve enquiries, complaints and support requests submitted to our support team.
• Personalisation: Personalise your gaming experience, promotional recommendations and communications based on your preferences.
• Product improvement: Analyse usage patterns in aggregate (without identifying individuals) to improve the platform.

3.2 Marketing Communications

We will only send you marketing communications if you have given consent during registration or have updated your communication preferences. You may opt out of promotional emails at any time via the "unsubscribe" link in any email or by contacting our support team.

4 Data Sharing & Disclosure

Perodua88 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is our core commitment to user privacy.

However, there are certain situations where we need to share your information with trusted parties to ensure our services function properly:

4.1 Trusted Service Providers

• Payment processors: FPX, Touch 'n Go, GrabPay, and Malaysian banks to process your financial transactions.
• KYC technology providers: Registered and audited third-party identity verification services.
• Game providers: Game software providers supplying slots, fish shooting, bingo, and wagering — limited to technically necessary data only.
• Cloud services: Server infrastructure providers that operate to ISO 27001 security standards.

All third-party service providers are required to comply with our privacy policy and are not permitted to use your data for any purpose other than those specified.

4.2 Disclosure Required by Law

Perodua88 may be required to disclose user data to government authorities or law enforcement in the following situations:

• Valid court orders or judicial directives under Malaysian law
• Fraud investigations or anti-money laundering inquiries by relevant enforcement agencies
• Mandatory reporting requirements under financial or gaming regulations
• Public safety protection in legally recognised emergency situations

5 Data Security Measures

The security of your data is an absolute priority for perodua88. We continuously invest in the best technologies and processes to ensure your personal data is always protected against cyber threats, unauthorized access and data breaches.

5.1 Encryption and Secure Infrastructure

• All communication between your device and our servers is protected by encryption TLS 1.3 and SSL 256-bit — the same level of encryption used by the world's leading banks.
• Sensitive data such as passwords is stored as bcrypt hashes that cannot be decrypted.
• Our databases are fully encrypted at rest using AES-256.
• Our server infrastructure is protected by multi-layer firewalls and an intrusion detection system (IDS).

5.2 Access Control and Monitoring

• Access to user data among perodua88 staff is restricted on a need-to-know basis.
• All internal system access is logged and continuously monitored by our cybersecurity team.
• Two-factor authentication (2FA) is mandatory for all internal access to systems containing user data.
• Penetration testing is conducted regularly by independent security firms.

6 Cookies, Sessions and Tracking Technologies

Perodua88 uses cookies and similar tracking technologies to keep our website functioning properly, enhance the user experience, and understand how our platform is used. Below is an explanation of the types of cookies we use:

6.1 Types of Cookies We Use

• Essential Cookies: Required for basic website functions such as login authentication and session security. Cannot be disabled.
• Performance Cookies: Collect information on how visitors use our site (most visited pages, errors encountered) for continuous improvement.
• Functional Cookies: Save your preferences such as language, time zone and display settings for ease of use.
• Analytics Cookies: Used by internal analytics tools to understand aggregate usage patterns without identifying individuals.

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect certain features on the perodua88 platform. Third-party marketing cookies are not used on our platform.

7 User Rights Under PDPA

As a perodua88 user residing in Malaysia, you are protected under the Personal Data Protection Act 2010 (PDPA). perodua88 fully respects these rights and provides straightforward mechanisms for you to exercise them.

To exercise any of the above rights, please contact our Data Protection Officer via email [email protected] or via live chat on the platform. We may require identity verification before processing your request to ensure the security of your data.

8 Data Retention Period

Perodua88 does not retain your personal data longer than necessary for the purposes stated in this policy. Our retention periods are determined based on the type of data and applicable legal requirements:

• Active account data: Retained for the duration your account is active plus 7 years after account closure (AML and financial requirements).
• Transaction records: Retained for 7 years in line with Malaysian financial reporting requirements.
• KYC Documents: Retained for 5 years after the business relationship ends in accordance with anti-money laundering requirements.
• Access and security logs: Retained for 2 years for security incident investigation purposes.
• Customer support communication data: Retained for 3 years for reference and service improvement purposes.
• Aggregate analytics data: May be retained indefinitely as it contains no personally identifiable information.

Once the retention period expires, your data will be securely deleted using industry-recognised data deletion methods, or permanently anonymised if retention for statistical purposes is required.

9 Changes to This Privacy Policy

Perodua88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or security technology improvements. You will be notified of any material changes through:

• In-platform notification on perodua88 upon your next login
• Email sent to your registered address at least 14 days before changes take effect
• Update the "Last Updated" date at the top of this document

Your continued use of the perodua88 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

10 Contact Our Data Protection Officer

If you have any questions, concerns or complaints regarding this Privacy Policy or how perodua88 handles your personal data, please do not hesitate to contact us. Our privacy team is ready to assist you at any time.

You may contact the perodua88 Data Protection Officer via the official email [email protected] or via live chat on the platform, available 24 hours a day, 7 days a week. All privacy-related enquiries are handled in strict confidence and responded to within the specified timeframe.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), which oversees PDPA compliance in the country.