Privacy Policy Petron77 – Malaysian Player Data Protection

Petron77 ("we", "the Platform" or "Petron77") respects the privacy of every player and user on our platform. This Privacy Policy is designed to clearly and transparently explain how we collect, process, use, store and protect your personal information when you use the Petron77 platform.

This document applies to all users of the Petron77 platform, including registered players, website visitors, mobile app users, and anyone who interacts with our services through any channel. By registering an account or continuing to use the Petron77 platform, you consent to the collection and use of your personal information as described in this Privacy Policy.

1.1 Information You Provide Directly

When you register an account on Petron77 or use our services, you may be asked to provide the following personal information:

• Identity information: Full name, date of birth, identification card number (MyKad), gender and nationality.
• Contact information: Mobile number, email address and postal address.
• Financial information: E-wallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay), bank account numbers for FPX (Maybank2u, CIMB Clicks) and DuitNow information related to transaction verification.
• Verification documents: A copy of your MyKad or passport, a selfie with the document, and proof of current address (for the KYC process).
• Communication: Records of conversations with the Petron77 customer support team via live chat, email, or other channels.

1.2 Automatically Collected Information

When you use the Petron77 platform, our systems automatically collect certain technical information required to deliver a smooth and secure service:

• Device data: Device type, operating system, phone model, screen resolution, and unique device identifier.
• Network data: IP address, browser type, general geographic location (state/city) and internet service provider.
• Game data: Game history, betting history, set limits, session duration, and account activity records.
• Transaction data: A complete record of all deposits and withdrawals, including the payment method used, amount and transaction time.
• Cookie data: Information collected through the cookies and tracking technologies described in Section 6.

Petron77 uses collected personal data solely for the following legitimate and stated purposes:

2.1 Service Provision

• Creating and managing your player account on Petron77.
• Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), Boost, and ShopeePay.
• To process your withdrawal requests securely and promptly.
• Providing access to all games on the Petron77 platform, including slots, blackjack, baccarat, lottery, live casino, and sports betting.
• Delivering relevant bonuses, promotions, and offers to you.

2.2 Security & Fraud Prevention

• Verifying your identity through the KYC process to prevent fraud and money laundering.
• To detect and prevent unauthorised access to your account.
• Monitoring suspicious activity and protecting the integrity of the Petron77 platform.
• Complying with legal reporting requirements related to anti-money laundering (AML).

2.3 Responsible Gaming

• Monitoring your gameplay patterns to detect signs of problem gambling.
• Enforcing the deposit limits, loss limits and session time limits that you set yourself.
• Honouring self-exclusion requests and cooling-off periods as requested by you.

2.4 Service Improvement

• Analysing aggregated usage data (without identifying individuals) to improve the user experience on the Petron77 platform.
• Developing new features based on the needs and feedback of Malaysian players.
• Testing and optimising platform performance specifically for smartphone users in Malaysia.

2.5 Marketing Communications

With your consent, Petron77 may send you information about new promotions, special bonuses, or the latest platform features via email or SMS. You can opt out of marketing communications at any time by using the "unsubscribe" link in any email or by contacting our support team.

Petron77 does not sell your personal data. However, in certain limited circumstances, we may share your data with the following parties for legitimate purposes:

3.1 Trusted Service Providers

Petron77 works with carefully selected third-party service providers to run our platform operations. These include payment gateway providers that process Touch 'n Go, GrabPay, DuitNow, FPX, Boost, and ShopeePay transactions; cloud computing providers that store data; and gaming software providers that supply game content to the Petron77 platform. All providers are bound by strict confidentiality agreements and may only use shared data for the specific purposes defined.

3.2 Legal Requirements

Petron77 may be required to disclose players' personal information to the relevant authorities where mandated by Malaysian law, a court order, or in efforts to prevent financial crime and money laundering. In such cases, we will only disclose the minimum information necessary.

3.3 Full Protection Under All Circumstances

In all instances where your data is shared, Petron77 ensures adequate protection through contractual agreements, technical safeguards and ongoing monitoring. We will not share your data with advertisers, data brokers or third-party marketing parties without your explicit consent.

Petron77 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

4.1 Technical Security Measures

• 256-bit SSL Encryption: All communications between your browser and Petron77's servers are encrypted using the latest TLS protocol.
• Database encryption: Sensitive data is stored in encrypted form in our database — including passwords, which are never stored as plain text.
• Layered access controls: A role-based access control system ensures that only authorised personnel can access player data.
• Continuous monitoring: An active threat detection system monitors the Petron77 platform around the clock for any suspicious activity.
• Regular security testing: Penetration testing and security audits are conducted regularly by independent specialists.

4.2 Organisational Security Measures

• Mandatory data security training for all Petron77 staff with access to player data.
• A strict password policy and multi-factor authentication are enforced across all internal systems.
• A clear incident response procedure is in place to address any security breaches promptly and effectively.

Petron77 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required under applicable Malaysian law.

• Active account data: Retained for as long as your account remains active on Petron77.
• Data after account closure: Financial transaction records and identity data may be retained for up to 7 years after account closure to comply with Malaysia's AML and tax-related legal requirements.
• Support communication logs: Conversation records with the support team are retained for 2 years.
• Technical log data: System logs and technical data are retained for 90 days for troubleshooting and security purposes.
• Marketing data: Deleted within 30 days after you withdraw your marketing consent.

Once the retention period expires, your personal data will be securely deleted or anonymised so that you can no longer be identified from it.

The Petron77 platform uses cookies and similar tracking technologies to enhance your experience, ensure account security and understand how players interact with our platform. The following are the types of cookies we use:

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Petron77's internal policies, you have the following rights regarding your personal data:

7.1 Right of Access

You have the right to request a copy of the personal data we hold about you. This request can be submitted to the Petron77 support team, and we will provide the requested information within a reasonable timeframe.

7.2 Right to Rectification

If you find that any personal data we hold is inaccurate or out of date, you have the right to request a correction. Inaccurate information affecting your transactions or account security will be prioritised for immediate rectification.

7.3 Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data — for example, when the data is no longer needed for its original purpose. However, this right may be limited where Petron77 is legally required to retain the data.

7.4 Right to Object to Processing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Once an objection is received, Petron77 will cease processing your data for that purpose with no penalty to you.

7.5 How to Submit a Data Rights Request

To exercise any of the above rights, please contact our privacy team by email at support@petron77.xyz with the subject line "Personal Data Rights Request". Please include your full name, Petron77 account number, and details of your request. We will respond within 14 business days.

The Know Your Customer (KYC) process is a core part of Petron77's commitment to security and legal compliance. Data collected during KYC is used solely for the following purposes:

• Verifying that players are at least 18 years of age.
• Ensuring that accounts are held by legitimate individuals and not false identities.
• Complying with Malaysia's Anti-Money Laundering and Anti-Terrorism Financing (AMLA) legal requirements.
• Protecting players from having their identity misused by irresponsible parties.

KYC documents are stored in a secure environment with full encryption and are accessible only to authorised verification staff. They are not shared with any third parties except where required by law.

The Petron77 platform integrates several third-party services that are essential to our platform's operations. These third parties maintain their own privacy policies, and Petron77 encourages you to read them. The main categories of third parties involved in the Petron77 ecosystem are:

• Payment providers: Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and banks offering FPX (Maybank, CIMB, and others) will only receive the minimum transaction information required to process your payment.
• Game providers: Game software developers that provide slots, blackjack, baccarat, and live dealer content may receive anonymised session IDs solely to ensure proper game functionality.
• Analytics services: Anonymised and aggregated usage data is used to understand platform usage patterns and improve the user experience.

Petron77 carefully selects all third-party partners and ensures they uphold data protection standards comparable to our own.

10.1 Right to Amend

Petron77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. When material changes are made, we will notify you via your registered email or through an in-platform notification.

The "Updated" date at the top of this document will always reflect the date of the most recent revision. Your continued use of the Petron77 platform after any changes are published will be considered your acceptance of the updated policy.

10.2 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Petron77 handles your personal data, please reach us through the following channels:

• Email: support@petron77.xyz (subject: "Privacy Enquiry")
• Live Chat 24/7: Via the chat icon on the Petron77 platform
• Frequently Asked Questions: Petron77 FAQ Page