Petron99 Privacy Policy – Personal Data Protection for Malaysian Members

Petron99 collects your personal data in three main ways: information you provide directly during registration and platform use, information generated automatically through your activity on the platform, and information from legitimate third-party verification processes. Below is a detailed explanation of each category:

Data You Provide Directly

• Registration information. Full name, Malaysian phone number, email address, and the password you selected when registering a new Petron99 account.
• Identity verification (KYC) information. A copy of your MyKad or other valid identification document, date of birth, and residential address — collected when required for account verification or when processing withdrawals above a certain threshold.
• Financial information. Details of the payment methods you use for deposits and withdrawals at Petron99 — including e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow information, or bank account details for FPX via Maybank2u or CIMB Clicks. Petron99 does not store credit or debit card numbers directly.
• Support communications. Any messages, emails, or live chat transcripts between you and the Petron99 support team, including the content of any complaints or enquiries you have submitted.

Automatically Generated Data

• Game activity data. Records of every gaming session on Petron99 — including games played (slots, live casino, Malaysia Super League sports betting, MLBB e-sports), total wagers, outcomes, and session duration.
• Technical data. IP address, device type, operating system, browser type, and access log data. This information is used for account security and technical platform improvements.
• Cookie and session data. Information stored via cookies and related tracking technologies that support platform functionality and allow Petron99 to recognise your login session between visits.

Every piece of data Petron99 collects has a specific, justifiable purpose. We use your personal data for the following:

• Account and platform operations. To create and manage your Petron99 account, process deposits and withdrawals in MYR (RM) via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX through Maybank2u and CIMB Clicks, and manage your VIP Rewards programme.
• Identity verification and legal compliance. To fulfil KYC (Know Your Customer) requirements, verify the minimum age of 18, and comply with applicable anti-money laundering (AML) laws.
• Security and fraud prevention. To detect and prevent unauthorised access, fraudulent activity, or multiple-account usage that violates Petron99's Terms & Conditions.
• Customer support. To handle enquiries, complaints, and assistance requests submitted to the Petron99 support team in Bahasa Melayu via live chat, email, or WhatsApp.
• Service communications. To send important notifications related to your account — including transaction confirmations, security alerts, VIP level updates, and material policy changes.
• Platform improvement. Aggregated usage data (with no personally identifiable information) is used to understand usage patterns, identify technical issues, and inform product improvement decisions at Petron99.
• Consent-based marketing. To send you promotions, bonuses, and exclusive offers — only if you agreed to receive marketing communications during registration or through your preference settings. You may withdraw this consent at any time.

Petron99 does not share, sell, or disclose your personal data to third parties except in the following limited and justifiable circumstances:

• Payment service provider. Required transaction data is shared with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow, and banks handling FPX (Maybank, CIMB) solely for the purpose of processing your deposits and withdrawals in RM.
• Game and technology providers. Game providers partnered with Petron99 (such as Pragmatic Play, PG Soft, Evolution Gaming) may receive a unique session identifier that cannot be used to directly identify you, solely for the purpose of ensuring game integrity.
• Legal authorities. Petron99 will disclose personal data to the relevant Malaysian authorities when required by law — including in financial crime investigations, money laundering cases, or upon a valid court order.
• KYC service provider. The identity verification process may involve authorised third-party services to validate the authenticity of your documents. These providers are bound by strict confidentiality agreements with Petron99.
• Business transfer. In the event of a merger, acquisition, or transfer of Petron99's business assets, user data may be transferred as part of that transaction. In such cases, members will be notified in advance and the receiving party will be required to uphold an equivalent privacy policy.

Petron99 invests seriously in security infrastructure to ensure your personal data is always protected. Below are the key security measures we have in place:

• 256-bit SSL encryption. All data transmitted between your device and Petron99's servers is encrypted using SSL 256-bit standards — the same standard used by leading financial institutions. This ensures your data cannot be intercepted in transit.
• Data encrypted at rest. Sensitive personal data stored in Petron99's databases is also encrypted at the storage level — meaning your data remains protected even in the event of an unauthorised access attempt on our infrastructure.
• Strict internal access controls. Only Petron99 staff with a legitimate business need have access to member personal data. This access is logged, monitored, and reviewed on a regular basis.
• 24/7 security monitoring. Petron99's automated monitoring system operates around the clock to detect suspicious activity, repeated failed login attempts, and unusual access patterns — with immediate alerts sent to our security team.
• Two-factor authentication (2FA). Petron99 offers and encourages the use of two-factor authentication for all accounts — an additional layer of security that requires OTP verification via SMS on top of your regular password.
• Data retention period. Member personal data is retained for as long as the account is active, and for the period required by Malaysian AML and PDPA legislation following account closure — typically 7 years for financial records. Data that is no longer required is securely deleted.

Petron99 uses cookies and similar tracking technologies to keep the platform running smoothly and enhance your experience. Below are the types of cookies we use:

• Essential cookies (required). These cookies are essential for the Petron99 platform to function — including session cookies that maintain your logged-in status while you use the platform, and security cookies that help detect fraudulent activity. They cannot be disabled without affecting platform functionality.
• Functional cookies (optional). These cookies remember your preferences — such as your interface language, favourite games, and display settings — so you don't have to reconfigure them every time you log in to Petron99.
• Analytics cookies (optional). These cookies collect aggregated, non-individually identifiable usage data to help Petron99 understand which parts of the platform are most frequently used and where improvements are needed. This data is not shared with third parties for marketing purposes.

You can manage your cookie settings through your browser settings. However, disabling essential cookies may affect your ability to log in and use the Petron99 platform properly.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have specific rights regarding the personal data Petron99 holds about you. Petron99 respects and facilitates the exercise of these rights:

• Right of access. You have the right to request a copy of the personal data Petron99 holds about you. This request can be made by emailing support@petron99.best by clearly stating that this is a data access request under the PDPA.
• Right to rectification. If you find that personal data held by Petron99 is inaccurate or incomplete, you have the right to request a correction. For basic details such as your phone number or email address, you can update these directly through your Petron99 account settings.
• Right to opt out of marketing processing. You have the right to opt out of direct marketing at any time. You can do this via the "unsubscribe" link in Petron99 marketing emails, or through the communication preferences settings in your account.
• Right to erasure (subject to legal limitations). You may request the deletion of your personal data. However, please note that Petron99 may be legally required to retain certain records — particularly financial and transaction records — for periods prescribed under Malaysia's AML laws, even after your account is closed.
• Right to lodge a complaint. If you believe Petron99 has violated your privacy rights, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.

The Petron99 platform is exclusively for individuals aged 18 and above. Petron99 does not knowingly collect or process personal data from individuals under the age of 18. Should Petron99 discover that data belonging to a person under 18 has been collected, that data will be deleted immediately and the relevant account will be closed.

Parents and guardians who are concerned that a minor in their care may have registered on Petron99 are encouraged to contact our support team immediately via email or live chat for prompt action.

The Petron99 platform may contain links to third-party websites or services in certain contexts — such as links to game provider websites or regulatory bodies. Petron99's Privacy Policy does not apply to those third-party websites or services.

Petron99 is not responsible for the privacy practices or content of any third-party websites that may be linked from our platform. We recommend reading the privacy policy of every third-party website you visit. It is Petron99's policy to minimise third-party links within our platform and to ensure that any links that do exist lead to trusted destinations.

Petron99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform improvements. Here is how we handle policy amendments:

• The "Updated" date at the top of this page will always reflect the date of the most recent amendment. Check this date each time you visit to stay informed of any latest changes.
• Material amendments that significantly affect your privacy rights will be communicated via an in-platform notification or email at least 14 days before taking effect.
• Your continued use of the Petron99 platform after any amendments take effect constitutes your acceptance of the updated policy.
• If you disagree with any amendments made to this Privacy Policy, you have the right to close your Petron99 account and request the deletion of eligible data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by Petron99, our team is ready to assist through the following channels:

• Email. Send your privacy enquiries to support@petron99.best with the subject line "Privacy Policy Enquiry". We are committed to responding within 3 business days for privacy-related enquiries.
• Live Chat. Petron99's Bahasa Malaysia support team is available 24/7 via in-platform live chat for general privacy and data management enquiries.
• Formal PDPA request. For formal requests under the PDPA (data access, correction, or deletion), please submit via email with your account number and sufficient proof of identity so we can process your request securely.