Privacy Policy Petronas888 — Member Personal Data Protection We Guard With Full Commitment

Petronas888 ("we", "the platform") is fully committed to protecting the privacy and personal data security of every member who uses our services. This Privacy Policy explains in detail how we collect, process, store, and protect your personal information when you use the petronas888 platform — including our official website, mobile app, and all related services.

This policy applies to all individuals who interact with petronas888 in the following capacities:

• Registered members with an active account on the platform
• Prospective members who are in the process of registration or account verification
• Website visitors who have not registered an account
• Former members whose accounts have been terminated

Petronas888 acts as the data controller for all personal information collected through our platform. We process such data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the guidelines issued by the Personal Data Protection Commissioner of Malaysia.

Petronas888 collects your personal information through various channels — whether provided directly by you during registration, collected automatically as you use the platform, or received from legitimate third parties such as payment providers.

A. Information you provide directly:

• Full name as stated on your identification document
• National identification number (MyKad) or passport number
• Date of birth and gender
• Current residential address
• Mobile phone number
• Email address
• Bank account or e-wallet details for deposit and withdrawal purposes
• KYC verification documents such as copies of your identity card, utility bills, or bank statements

B. Information collected automatically:

• IP address and network information
• Device type, operating system, and web browser version
• Login session data including date, time, and duration
• Game history and betting activity
• Website cookie and tracking technology data
• Financial transaction logs including deposits and withdrawals

Every piece of personal data we collect is used for clear and lawful purposes only. petronas888 will not use your information for any purpose not stated in this policy without obtaining your prior consent.

The primary purposes for which we use your personal data include:

• Member account management — registration, identity verification, profile management, and account recovery
• Financial transaction processing — processing deposits, verifying withdrawals, and resolving any transaction disputes
• Legal compliance — fulfilling obligations under PDPA 2010, anti-money laundering (AML) laws, and directives from competent authorities
• Platform Security — detecting and preventing fraud, account abuse, and suspicious activity
• Service improvement — analysing usage patterns to improve user experience and platform stability
• Service Communications — sending important notifications related to your account, transactions, and policy changes
• Targeted marketing — sending promotional information and exclusive offers (with your consent only)
• Responsible gaming — monitoring gameplay patterns to identify risk indicators and provide necessary support

Petronas888 only processes your personal data where a valid legal basis exists under Malaysia's PDPA 2010. The basis we apply depends on the purpose of the processing in question:

• Contract performance — processing necessary to fulfil the agreement between you and petronas888, including account management and transaction processing
• Legal Obligations — processing required to comply with applicable Malaysian laws, including KYC requirements and AML reporting
• Legitimate interest — processing for platform security, fraud prevention, and service improvement purposes that do not affect your fundamental rights
• Consent — processing for marketing and promotional communications, which requires your explicit consent

Petronas888 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We only share your data in the following limited and controlled circumstances:

• Payment service providers — to securely process your deposits and withdrawals through approved channels
• Technology service providers — companies that assist us in operating the platform, data storage, and analytics, all of whom are bound by strict confidentiality agreements
• Game providers — limited information required to verify identity and provide access to games within our platform
• Legal authorities — when required by law, court order, or directive from a competent enforcement agency
• Recipients during business restructuring — in the event of a merger, acquisition, or asset sale, relevant data may be transferred to the new entity, subject to prior notice to you

All third parties that receive your personal data from petronas888 are required to process that information in accordance with PDPA 2010 and to uphold security standards equivalent to our own.

Petronas888 continually invests in the latest security infrastructure to ensure your personal data is always protected against unauthorised access, loss, or breach. The technical and organisational security measures we employ include:

• 256-bit SSL/TLS encryption — all data transmitted between your device and our servers is fully encrypted
• Database encryption — sensitive data is stored in an encrypted state using the latest industry standards
• Two-factor authentication (2FA) — an additional security layer for account access
• Role-based access control — only authorised personnel with a legitimate need may access member personal data
• 24/7 security monitoring — a real-time threat detection system that monitors for any unusual activity
• Regular security audits — periodic security reviews by independent parties to identify and address vulnerabilities
• Secure data backup — data is regularly backed up to a secure, protected location

While we take all reasonable precautions, no system can be guaranteed 100% secure. In the event of a data breach that may affect your rights, petronas888 is committed to notifying you within the timeframe required by applicable law.

Petronas888 uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how our platform is used. Here are the types of cookies we use:

• Essential Cookies — required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Performance Cookies — collecting information about how you use the website to help us improve platform performance and stability.
• Functional Cookies — remembering your preferences such as language, display settings, and login details for your convenience.
• Analytical Cookies — helping us understand aggregate usage patterns through approved analytics tools.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality and security of the platform. We recommend allowing at least essential cookies for an optimal user experience.

Petronas888 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable Malaysian law.

The general guidelines for our data retention periods are as follows:

• Active account data — retained for the duration your account remains active at petronas888
• Financial transaction data — retained for a minimum of 7 years from the transaction date in accordance with tax and anti-money laundering legal requirements
• KYC Documents — retained for 5 years from the date of verification or account closure, whichever is later
• Customer support communication logs — retained for 3 years
• Analytics and usage data — retained in anonymised form for a maximum of 2 years

Upon expiry of the retention period, data will be securely deleted or anonymised using industry-approved methods, ensuring it cannot be recovered or re-identified.

Under Malaysia's PDPA 2010, you have certain rights regarding the personal data we hold about you. petronas888 respects and facilitates the exercise of these rights:

To exercise any of the rights above, please contact our Data Protection Officer (DPO) team via email at [email protected]. We will process your request within 21 working days. Some requests may be subject to identity verification before processing.

Petronas888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technological developments, or new legal requirements. We are committed to informing you of any material amendments.

When an amendment occurs, we will:

• Updating the "Effective Date" at the top of this document
• Displaying a clear notice on the platform's homepage for a minimum of 14 days
• Sending email notifications to all registered members for material amendments

Continued use of the petronas888 platform after any amendments take effect will be considered acceptance of the updated privacy terms. If you do not agree with the amendments, you have the right to close your account before the effective date.

If you have any questions, concerns, or complaints regarding how petronas888 handles your personal data, we encourage you to contact us directly. Our team is ready to assist.

You can reach the petronas888 Data Protection Officer (DPO) through the following methods:

• DPO Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available on the platform 24/7

We will endeavour to resolve all privacy-related inquiries within 21 working days. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the Ministry of Communications and Digital.