Privacy Policy pgbet — How We Protect Your Personal Data in Malaysia

This Privacy Policy ("Policy") is issued by pgbet and applies to all users who access or use the pgbet platform, including the website, mobile application, and all related services we offer to users in Malaysia.

Pgbet operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We recognise that member trust is our most valuable asset, and the protection of personal data is a core commitment pgbet makes to every member.

By registering a pgbet account or continuing to use our platform after a change notice has been issued, you consent to pgbet processing your personal data in accordance with the terms set out in this Privacy Policy. If you disagree with any aspect of this policy, please contact us or discontinue use of the platform.

Pgbet collects various categories of personal data depending on how you interact with our platform. Below is a detailed overview of the data we may collect:

A. Data You Provide Directly

• Identity information: Full name, identity card number (MyKad), date of birth, gender, nationality.
• Contact information: Email address, Malaysian mobile number, residential address.
• Account information: Username, password (stored in hashed form), language preference, and communication settings.
• Financial information: Bank account numbers, e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow), deposit and withdrawal history.
• Verification documents: MyKad copy, bank statement, or other documents submitted during the KYC process.

B. Automatically Collected Data

• Device data: IP address, device type, operating system, browser type, screen size.
• Platform activity data: Pages visited, games played, bets placed, session duration, navigation patterns.
• Cookie data: Session cookies, preference cookies, and analytics cookies (see Section 7 for further details).

Pgbet collects and processes your personal data only for legitimate and necessary purposes. We do not collect data beyond what is required to operate our services safely and effectively. The primary purposes of data processing include:

• Account management: Creating, verifying, and managing your pgbet account, including secure login and two-factor authentication.
• Transaction processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX (Maybank2u, CIMB Clicks), as well as withdrawals to your bank account or e-wallet.
• Identity verification (KYC): Complying with anti-money laundering (AML) legal requirements and verifying members' age eligibility (minimum 18 years).
• Fraud prevention: Identifying and investigating suspicious activity, multi-account usage, and platform abuse.
• Service improvement: Analysing usage patterns to improve the interface, platform performance, and the overall pgbet member experience.
• Service communications: Sending important notices regarding changes to terms, security updates, transaction status, and customer support responses.
• Marketing communications: With your consent, to send you information about relevant pgbet bonuses, promotions, and offers — you may unsubscribe from this at any time.
• Legal compliance: To fulfil reporting and record-keeping obligations under applicable Malaysian law.

In accordance with Malaysia's PDPA 2010, pgbet processes your personal data on the following lawful bases:

• Your consent: For processing that requires explicit consent, such as marketing communications and the use of non-essential cookies. You may withdraw this consent at any time.
• Contract performance: Processing necessary to deliver the services you have requested — including account management and payment processing.
• Legal obligations: Processing required under Malaysian law, including AML/KYC requirements and financial record retention.
• Legitimate interest: Processing for the purposes of platform security, fraud prevention, and service improvement, where these interests do not override your privacy rights.

Pgbet does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Your data may be shared only in the following limited circumstances, and only to the extent necessary for the stated purpose:

Approved Service Providers

Pgbet works with trusted third-party companies to deliver certain services. They are permitted to process your data only under pgbet's instructions and are bound by strict confidentiality agreements:

• Payment provider: Payment gateway providers that process transactions via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and any other payment method you use.
• Casino software providers: Live casino game providers that supply Baccarat, Roulette, Blackjack and other game tables on the pgbet platform.
• Analytics services: Analytics tools that help pgbet understand platform usage patterns for improvement purposes — data is shared in aggregated or anonymised form.
• Identity verification services: KYC providers that assist pgbet in verifying member identities in accordance with AML requirements.

Legally Mandated Disclosure

Pgbet may be required to disclose your data to Malaysian government authorities or other parties if compelled by a court order, warrant, or lawful legal directive. In such cases, pgbet will endeavour to notify you in advance, unless prohibited from doing so by law.

Pgbet implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or accidental disclosure.

Technical Security Measures

• 256-bit SSL Encryption: All communications between your browser and pgbet's servers are secured with TLS/SSL protocol using 256-bit encryption — the same standard used by Malaysia's leading banking institutions.
• Stored data encryption: Sensitive data such as passwords and financial information is stored in hashed/encrypted form within pgbet's database.
• Two-factor authentication (2FA): pgbet encourages the use of two-factor authentication to add an extra layer of protection to member accounts.
• Continuous security monitoring: pgbet's systems are monitored 24/7 to detect suspicious activity or unauthorised access attempts.
• Regular security audits: pgbet conducts regular penetration testing and security audits carried out by independent cybersecurity experts.

Data Retention Period

Pgbet retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. As a general guide:

• Active account data is retained for the duration your account remains active and for the required period following account closure for record-keeping and legal compliance purposes.
• Financial transaction records are retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to AML and accounting.
• Customer support communication logs are retained for 3 years after final resolution.

Pgbet uses cookies and similar tracking technologies to improve platform functionality, remember your preferences and understand how you use our services. Below are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect the functionality of the pgbet platform.

Under Malaysia's PDPA 2010, pgbet recognises and respects the following rights you hold over your personal data. To exercise any of these rights, contact us by email at support@pgbet-khelo.com or via live chat within the platform:

Pgbet is a platform strictly restricted to individuals aged 18 years and above. We do not knowingly collect, store or process any personal data of individuals under the age of 18.

Pgbet carries out age verification during registration and throughout the KYC process to ensure compliance with this age requirement. Should pgbet discover that personal data belonging to a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

Pgbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, applicable legislation, or the services we offer.

For changes that are material or that significantly affect how we process your personal data, pgbet will provide reasonable notice through:

• A prominent notice within the pgbet platform that you will see upon your next login.
• Email to the address you registered with pgbet (for highly significant changes).
• Updating the "Last Updated" date at the top of this document.

Continued use of the pgbet platform after the effective date of any changes constitutes acceptance of the updated privacy terms. If you do not agree with the changes, you have the right to close your pgbet account and request data deletion in accordance with the procedure described in Section 8.

For any questions, concerns, or requests relating to this Privacy Policy or how pgbet handles your personal data, you may reach us through the following channels:

• Privacy Email: privacy@pgbet-khelo.com
• General Support Email: support@pgbet-khelo.com
• 24/7 Live Chat: Via the chat icon within the pgbet platform

The pgbet privacy team is committed to responding to all privacy-related inquiries within 5 business days. For more complex matters such as data access or deletion requests, resolution may take up to 30 calendar days.