Pedas99 Privacy Policy – How We Protect Your Personal Information

1 Introduction & Scope of This Policy

Pedas99 ("we", "Platform") respects the privacy rights of every individual who uses our services. This Privacy Policy explains how we collect, process, store, and protect your personal information when you use the pedas99 website, our mobile app, or communicate with our support team.

This policy applies to all users accessing pedas99 from Malaysia and covers all data collected through account registration, platform usage, financial transactions, and interactions with our customer support services. By registering and using pedas99 services, you fully agree to the terms of this Privacy Policy.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in personal data management. In the event of any conflict between this policy and applicable law, the relevant law shall take precedence.

2 Types of Personal Data We Collect

Pedas99 only collects information that is strictly necessary to provide you with a safe, lawful, and high-quality service. The data we collect falls into three main categories:

A. Data You Provide Directly

• Full name as stated in your official identification document.
• Date of birth for the purpose of verifying the minimum age of 18.
• Email address and mobile number for account communications.
• Current residential address for legal compliance purposes.
• Bank account or eWallet details for processing deposits and withdrawals.
• Copies of identity documents (MyKad or passport) collected during the KYC process.

B. Automatically Collected Data

• IP address and general location information for account security and fraud prevention.
• Device type, operating system, and web browser version used.
• In-platform activity logs including login times, games played, and total wagering amounts.
• Cookie data and similar tracking technologies — see Section 6 for further details.

C. Data From Third-Party Sources

• Identity verification information from authorized KYC service providers.
• Transaction information from payment processors such as FPX, DuitNow, and eWallet providers.
• Compliance information from accredited anti-money laundering agencies.

3 How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. pedas99 never uses your information for purposes unrelated to the delivery of our services. The key purposes for data use are as follows:

• Account Management: Creating, verifying, and maintaining your player account, including password recovery and two-factor authentication.
• Transaction Processing: Processing deposits, withdrawals of wins, and any financial transactions you carry out on the platform.
• Legal Compliance: To fulfill compliance obligations under the PDPA 2010, anti-money laundering laws, and applicable KYC requirements.
• Platform Security: Detecting and preventing fraud, unauthorized access, multiple account usage, and other suspicious activities.
• Customer Support: Responding to inquiries, resolving complaints, and providing you with technical support.
• Marketing & Promotions: Sending you promotional information, bonus offers, and platform updates — only where you have given explicit consent.
• Service Improvement: Analyzing usage patterns to improve user experience, platform performance, and the breadth of game options available.
• Responsible Gaming: Detecting gameplay patterns that may indicate problem gambling and connecting you with appropriate support resources when needed.

4 Information Sharing & Disclosure

Pedas99 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. However, there are certain situations where we need to share your information with trusted parties:

• Payment Processors: Transaction information is shared with FPX, DuitNow, Touch 'n Go eWallet, Boost, and GrabPay solely for the purpose of processing your deposits and withdrawals.
• KYC Verification Providers: Identity documents are shared with licensed KYC partners solely for identity verification purposes.
• Technology Service Providers: Server infrastructure providers, cloud services, and analytics tools involved in the technical operation of our platform — all bound by strict confidentiality agreements.
• Statutory Authorities: When required by law, court order, or a legitimate request from a relevant authority such as a financial crime investigation or AML inquiry.
• Responsible Gaming Guardian: In cases where a self-exclusion programme or specific protection measure is required, the minimum necessary information may be shared with an accredited support body.

5 Data Security & Protection

Your data security is pedas99's top priority. We continuously invest in the latest security infrastructure to ensure your information is always protected from unauthorized access, leaks, or misuse.

The technical security measures we implement include:

• Data in transit is encrypted using TLS 1.3 protocol and 256-bit SSL certificates for all traffic between your device and our servers.
• Data at rest is encrypted using AES-256 standards for all sensitive information stored in our databases.
• Intrusion detection systems (IDS) and intrusion prevention systems (IPS) active 24 hours a day.
• Two-factor authentication (2FA) is available for all player accounts as an additional security layer.
• Environment isolation — production data is fully separated from development and testing environments.
• Regular security audits conducted by accredited independent cybersecurity firms.
• Mandatory privacy compliance and data security training for all staff with access to user data.

6 Cookies & Tracking Technologies

Pedas99 uses cookies and similar tracking technologies to enhance user experience, maintain login session security, and understand usage patterns on our platform. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as session authentication, account security, and transaction processing. These cookies cannot be disabled as they are essential to platform operation.
• Preference Cookies: Saving your preferences such as language settings, display theme, and game preferences so your experience is more comfortable on future visits.
• Analytics Cookies: Collecting aggregated and anonymized data on how users interact with our platform, helping us identify areas for improvement.
• Security Cookies: Helps detect suspicious activity, unauthorized login attempts, and protects your account from security threats.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect platform functionality and your overall user experience. For browser-specific cookie management guidance, please refer to your browser's help documentation.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 and international privacy principles, you have the following rights regarding the personal data we hold:

• Right of Access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to Rectification: You may request that we correct any inaccurate or incomplete information in our records.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data, subject to our legal obligations to retain certain records.
• Right to Restriction of Processing: You may request that we restrict how we use your data in certain circumstances.
• Right to Object to Marketing: You may opt out of having your data processed for direct marketing purposes at any time.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for the purpose of transferring it to another service provider.

8 Data Retention Period

Pedas99 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law. The general principles we follow are:

• Active account data is retained for the duration that the account remains active and in use.
• Following account closure, identity and transaction records are retained for a minimum of 5 to 7 years in accordance with Malaysian legal requirements relating to AML and taxation.
• Activity and security log data is retained for 2 years for investigation and audit purposes.
• Customer support records are retained for 3 years for dispute resolution reference.

When the retention period expires and there is no legal obligation to retain it further, your data will be securely deleted using an irrecoverable deletion method or anonymised so it can no longer be linked to your identity.

9 Third-Party Links & Services

The pedas99 platform may contain links to third-party websites or services such as payment providers, game providers, and social media platforms. It is important for you to know that:

• The pedas99 Privacy Policy does not apply to those third-party websites or services.
• Each third-party platform has its own privacy policy, which you should read and understand before using it.
• Pedas99 is not responsible for the privacy practices or content of any third-party websites.
• All game providers operating on the pedas99 platform have undergone rigorous security and data compliance assessments before being appointed as partners.

10 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, you may contact the pedas99 Data Protection Officer (DPO) team through the following channels:

• 24/7 Live Chat directly within the pedas99 platform — the fastest way to get a response.
• Email to [email protected] with the subject line "Privacy Inquiry" for faster handling.
• Via the Support section in the pedas99 mobile app.

We are committed to responding to all privacy inquiries within 14 business days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Malaysia Department of Personal Data Protection or other relevant authorities.