Privacy Policy pgbet — We Protect Your Data as if It Were Our Own

1 Introduction

Pgbet deeply respects the privacy of every individual who uses our platform. As an online entertainment platform operating in Malaysia, we understand that user trust is our most valuable asset. This Privacy Policy has been prepared to comply with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.

This document details the types of personal information pgbet collects when you register, log in, make transactions, or simply browse our website. We also explain how that information is processed, stored, protected, and in certain circumstances shared — solely to enhance your experience and fulfil our legal obligations.

By registering or continuing to use the pgbet platform, you are deemed to have read, understood, and agreed to this Privacy Policy. If you do not agree with any part of this policy, we advise you not to use our services and to contact the support team for further clarification before making any decision.

2 Information We Collect

Pgbet collects various types of information to enable our platform to operate safely, efficiently, and in compliance with legal requirements. The information we collect falls into three main categories:

A. Information You Provide Directly:

• Full name as it appears on your official identification document.
• Email address, active Malaysian mobile number.
• Date of birth and identity card number (MyKad) or passport for age and identity verification purposes (KYC).
• Current residential address.
• Bank account or e-wallet details for processing deposits and withdrawals.
• Identity document copies submitted during the KYC process.

B. Information Collected Automatically:

• IP address, browser type, operating system, and device used.
• Server log data including access times, pages visited, and session duration.
• Cookie data and similar tracking technologies (explained further in Section 6).
• Geolocation data (at country/state level only, not precise address level).

C. Information From Third Parties:

• Verification information from our appointed KYC service providers.
• Anti-money laundering (AML) screening data from financial monitoring systems.
• Referral information from legitimate affiliate programs (where applicable).

3 How We Use Your Information

Every piece of information we collect is used solely for legitimate and necessary purposes. pgbet will not use your data beyond the scope defined in this policy. The following are the primary purposes for which your data is used:

• Account Management: Create, verify, and manage your user account on the pgbet platform.
• Transaction Processing: Process deposits and fund withdrawals securely and accurately in accordance with your instructions.
• Identity Verification (KYC): Fulfill legal obligations to ensure only eligible individuals who meet age requirements are permitted to use the platform.
• Platform Security: Detect and prevent fraudulent activity, money laundering, and unauthorized access to your account.
• Service Improvement: Analyze usage patterns on an aggregate (not individual) basis to improve platform design and user experience.
• Official Communications: Send important notifications relating to your account, transactions, policy updates, and security information.
• Promotions & Marketing: Send relevant promotional information — you may unsubscribe at any time through your account settings.
• Legal Compliance: Meet reporting and record-keeping requirements prescribed by Malaysian law.

4 Information Sharing

Pgbet understands that your trust depends on how we manage data sharing. We only share your information in limited, specific circumstances and always with appropriate protective measures in place.

Parties that may receive your data:

• Payment Service Providers: Banks, card processors, and e-wallet operators that process your financial transactions. They only receive the information necessary to complete the relevant transaction.
• KYC & AML Providers: Identity verification and financial monitoring companies duly appointed by pgbet to fulfil compliance obligations.
• Technology & Infrastructure Providers: Vendors providing cloud computing, cybersecurity, and database management services — bound by strict confidentiality agreements.
• Authority: Government agencies, law enforcement, or courts when required by Malaysian law or a valid court order.

All third parties that receive pgbet user data are bound by data processing agreements requiring them to protect that information to a standard no lower than pgbet's own. pgbet does not share data with companies within the same group except for legitimate platform operational purposes.

5 Data Security

User data security is pgbet's highest priority. We continuously invest in the latest security technologies and procedures to ensure your information is protected against unauthorized access, disclosure, alteration, or destruction.

• Data Encryption in Transit: All communications between your browser and pgbet's servers are protected by the TLS 1.3 protocol with a 256-bit SSL certificate.
• Data Encryption at Rest: Sensitive information such as passwords is stored using one-way hashing algorithms that cannot be decrypted.
• Strict Access Controls: Only pgbet staff with a legitimate business need may access user data, and every access is logged and monitored.
• Real-Time Monitoring: An intrusion detection system (IDS) monitors pgbet's network traffic around the clock to detect and respond to threats swiftly.
• Regular Security Audits: pgbet undergoes penetration testing and security audits by independent third parties at least once a year.
• Two-Factor Authentication (2FA): All user accounts are supported with 2FA, which is strongly recommended to be activated for an additional layer of protection.

While pgbet takes all reasonable and appropriate steps to protect your data, no digital security system is entirely perfect. In the event of a data breach affecting your information, pgbet is committed to notifying you within 72 hours of becoming aware of the incident, in line with international best practices.

6 Cookies & Tracking Technologies

Pgbet uses cookies and similar tracking technologies to enhance the user experience, understand platform usage patterns, and maintain the security of your login session. Cookies are small text files stored in your browser when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled as they are essential for the platform to function properly.
• Performance Cookies: Collect information on how users interact with our platform — most frequently visited pages, time spent, and so on. All data is aggregated and anonymized.
• Functional Cookies: Store user preferences such as text size, display theme, and personal settings to ensure a smoother experience on every visit.
• Analytics Cookies: Help us understand platform performance and identify areas for improvement through non-identifying, aggregated usage data.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect certain functions of the pgbet platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

7 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal information held by pgbet. We fully respect and facilitate the exercise of these rights.

To exercise any of the rights above, please contact the pgbet support team via live chat. We will process your request within 14 business days. We may require identity verification before processing the request in order to protect your account security.

8 Data Storage & Deletion

Pgbet retains your personal information only for as long as it is needed for the purposes stated in this policy or as required by Malaysian law. Different retention periods apply to different types of data, as outlined in the table in Section 2.

When your account is closed at your request or for other valid reasons, pgbet will:

• Delete or anonymize your personal data that is no longer required for legal or business purposes within 30 days of account closure.
• Retain financial records, KYC data, and transaction logs for the period prescribed by Malaysian law — typically between 5 and 7 years.
• Delete technical log and analytics data within 12 months on a rolling basis in accordance with our technical data retention policy.

Data retained for legal compliance purposes will be stored in an isolated environment with strictly limited access and may only be used for compliance, reporting, or related dispute resolution purposes.

9 Changes to This Privacy Policy

Pgbet reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. We are committed to keeping you informed of any significant changes.

When changes are made to this policy:

• The "Updated" date at the top of this policy will be revised to reflect the date of the latest review.
• For minor changes that do not affect users' fundamental rights, we will update the policy without specific notice.
• For significant changes that affect how we use your data, we will send a notice to your registered email address and/or display an in-platform notification at least 14 days before the changes take effect.
• Continued use of the pgbet platform after changes take effect constitutes acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

10 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how pgbet handles your personal information, we strongly encourage you to contact us directly. The pgbet Data Protection Team is ready to assist.

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the pgbet platform — the fastest way to get a response.
• Support Email: [email protected] — for written inquiries requiring an official record.
• Response Time: Privacy-related inquiries will be answered within 3 to 5 business days.

If you are not satisfied with how pgbet has handled your privacy complaint after going through our internal channels, you have the right to escalate the matter to the Personal Data Protection Commissioner of Malaysia, the authority responsible for overseeing PDPA 2010 compliance in Malaysia.