Peluang44 Privacy Policy – Data Protection for Malaysian Members

This Privacy Policy is published by Peluang44 and applies to all members who use the Sports Betting, Live Casino, poker, e-sports platform and all other services provided through peluang44.com and any associated mobile applications.

We understand that privacy is a deeply personal and sensitive matter. When you register a Peluang44 account, you are entrusting us with information that identifies you as an individual. That trust is not something we take lightly. Peluang44 is committed to handling your personal data with the highest degree of confidentiality, security and respect we can provide.

This document clearly outlines:

• What types of personal data we collect from you
• How and why we use that data
• Who we share your data with (if anyone) and under what circumstances
• How long we retain your data
• Your rights regarding your personal data
• How to contact us if you have questions or concerns about your privacy

Peluang44 collects various types of personal information from our members depending on how you interact with our platform. The main categories of data we collect are as follows:

2.1 Data You Provide Directly

• Account Registration Information: Full name, Malaysian mobile number, email address, date of birth and password chosen when creating a new account.
• Identity Verification (KYC) Information: A copy of your MyKad or Malaysian passport, a selfie for facial verification, and in some cases proof of address such as a utility bill when required for larger withdrawal amounts.
• Financial Information: Malaysian bank account details, and the account numbers for Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay that you use for deposits and withdrawals. peluang44 does not store credit or debit card numbers directly — transactions are processed through PCI-DSS certified third-party payment processors.
• Customer Support Communications: Live chat, email, and WhatsApp conversation histories with our support team are retained for service quality purposes and as documentation in the event of any dispute.

2.2 Automatically Collected Data

• Platform Usage Data: Complete betting history, deposit and withdrawal records, games played, session duration, and account settings preferences.
• Technical Data: IP address, device type and model, operating system, web browser used, screen resolution and login session information including timestamps and geographic location.
• Cookie Data: Information collected through cookies and similar tracking technologies when you visit the Peluang44 platform. Further details about cookies are explained in Section 8 of this document.

Peluang44 uses the personal data collected for the following purposes, all of which are lawful, necessary, and proportionate:

It should be emphasised that Peluang44 never uses your personal data for purposes unrelated to the operation of the platform or the provision of services to you. Any use of data for new purposes not stated here will require notice to you and, where necessary, your fresh consent.

Peluang44 does not sell, rent, or trade members' personal data to any party for commercial purposes. However, there are limited situations where we may need to share your data with carefully selected third parties:

4.1 Service Providers (Data Processors)

We work with third-party service providers that help us operate the platform, including:

• Payment processors: Companies that process DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay transactions on our behalf. They receive only the data necessary to complete each transaction.
• Casino and Sports software providers: Gaming technology companies that provide slots software, Live Casino, and Sports Betting software integrated into the peluang44 platform. They are bound by strict confidentiality agreements.
• IT and cloud infrastructure providers: Companies that provide server hosting, data storage, and cybersecurity services to ensure the peluang44 platform operates securely and reliably.
• Analytics services: Analytics tools that help us understand how members use the platform, for the purpose of improving the user experience.

All of these service providers are bound by strict data processing agreements and are only permitted to use your data for the purposes we specify. They are not authorised to use that data for their own purposes.

4.2 Authorities and Legal Requirements

Peluang44 may be required to disclose your personal data to Malaysian government authorities or law enforcement bodies in the following circumstances:

• When required by applicable Malaysian law or court order
• To comply with anti-money laundering (AML) reporting requirements to the relevant authorities
• To investigate and prevent fraud, cybersecurity threats or other unlawful activities
• To protect the rights, property, or safety of Peluang44, our members, or the public

Peluang44 does not retain your personal data for longer than necessary. Retention periods depend on the type of data and the purpose for which it was collected:

• Active account information — Retained for the lifetime of your account and for 7 years after account closure to comply with Malaysian legal and tax requirements.
• Financial transaction records — Retained for a minimum of 7 years in accordance with the Companies Act and applicable Malaysian financial regulations.
• KYC documents (MyKad, passport) — Retained for 5 years after the business relationship ends, in accordance with Malaysian AML requirements.
• Customer support communication records — Retained for 3 years for service quality purposes and to resolve any disputes that may arise.
• Technical log data (IP address, session logs) — Retained for 12 months for security and fraud detection purposes.
• Marketing data (promotional email preferences) — Retained for as long as you have not withdrawn your consent. Once you opt out of marketing communications, the relevant data will be updated within 10 business days.

Once the relevant retention period has elapsed, your personal data will be securely deleted or anonymised in accordance with our established data disposal procedures. Anonymised data can no longer identify you personally and may continue to be used for our internal analytics and statistical purposes.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Peluang44's internal policies, you have the following rights regarding your personal data:

• Right of Access: You have the right to know what personal data we hold about you and to request a copy of it. Data access requests will be processed within 21 days.
• Right to Rectification: If the personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request a correction. Corrections will be made within 14 days of a valid request.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. This right is subject to legal obligations that require us to retain certain data for a minimum period.
• Right to Object to Processing: You have the right to object to the processing of your personal data for direct marketing purposes at any time. Such an objection will be enforced immediately.
• Right to Withdraw Consent: For processing that relies on your consent, you may withdraw that consent at any time without affecting the validity of any processing carried out before the withdrawal.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for the purpose of transferring it to another service provider, where technically feasible.

To exercise any of the above rights, please contact our Data Privacy Officer at privacy@peluang44.com or via live chat within the platform. We may need to verify your identity before processing your request to protect the security of your data.

Peluang44 continually invests in security infrastructure to protect our members' personal data from unauthorised access, loss, misuse, disclosure, alteration or destruction. The technical and organisational security measures we have in place include:

• Data Encryption in Transit: All communications between your device and Peluang44's servers are protected with TLS 1.3 and 256-bit SSL encryption — the same security standards used by leading financial institutions worldwide.
• Data Encryption at Rest: Sensitive data such as passwords, KYC information, and financial details are stored in encrypted form within our databases. Passwords are hashed and cannot be decrypted — not even by peluang44 staff.
• Internal Access Controls: Access to member data within peluang44's internal systems is restricted on a least-privilege basis — each staff member can only access the data required to perform their specific role. All access is logged and monitored.
• Two-Factor Authentication (2FA): All peluang44 internal systems with access to member data are protected by mandatory two-factor authentication for all staff.
• Regular Security Audits: Peluang44's security systems and procedures are regularly audited by independent, certified cybersecurity firms to identify and address any vulnerabilities.
• Incident Response Plan: peluang44 has a clearly defined security incident response procedure. In the event of a data breach affecting members, we will notify the affected members and relevant authorities within the timeframe required under Malaysian law.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against every threat. We therefore also encourage you to take precautionary measures on your end — particularly by using a strong, unique password for your Peluang44 account and enabling two-factor authentication.

Peluang44 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

You can manage your cookie settings through the privacy dashboard in your Peluang44 account or through your web browser settings. Please note that blocking certain cookies may affect the functionality or your experience on the Peluang44 platform.

Peluang44 may send you marketing communications about promotions, special offers, major sporting events and platform updates. These communications will only be sent if you have given your consent at the time of registration or while using the platform.

You can manage your marketing communication preferences in the following ways:

• Email Unsubscribe: Click the "Unsubscribe" link at the bottom of any marketing email you receive from Peluang44
• Account Settings: Go to the "Communication Settings" section in your Peluang44 account to manage your email, SMS, and push notification preferences
• Contact Support: Email support@peluang44.com or use live chat to request the removal of all marketing communications

Please note that even if you opt out of marketing communications, we still need to send you important transactional communications such as deposit confirmations, account security notifications, and essential information about Peluang44's services. These communications cannot be stopped as they form part of the core service you use.

While peluang44 protects your data at the platform level, your account security also depends on the steps you take personally. Here are the measures we recommend to all Malaysian members to keep their peluang44 account secure:

• Use a strong, unique password for your Peluang44 account — a combination of uppercase letters, lowercase letters, numbers, and symbols, at least 12 characters long
• Do not use the same password for peluang44 and your other online accounts
• Enable two-factor authentication (2FA) from your account security settings
• Never share your login credentials with anyone, including family members
• Always log out of your peluang44 account when using a public or shared device
• Review your login history regularly to detect any suspicious access
• Report immediately to our customer support team if you suspect your account has been accessed without authorisation

Peluang44 will never ask for your password via email, live chat or phone. If you receive any communication claiming to be from Peluang44 that requests your password or sensitive account information, treat it as a phishing attempt and report it to us immediately.

The Peluang44 platform may from time to time contain links to third-party websites or services, such as payment providers or game providers. This Privacy Policy applies solely to the Peluang44 platform and does not cover the privacy practices of those third parties.

We are not responsible for the privacy practices or content of any third-party websites that may be linked from our platform. We encourage you to read the privacy policy of any third-party website you visit. Please note that payment providers such as FPX, Touch 'n Go eWallet, and GrabPay have their own privacy policies governing how they handle your transaction information.

Peluang44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. The date of the most recent update is always displayed at the top of this document.

When we make material changes to this Privacy Policy, we will notify you through:

• A prominent notice displayed on the platform's main page upon login
• Email to the address registered to your Peluang44 account
• Push notifications within the mobile platform if you have enabled notifications

Continued use of the peluang44 platform after a revised Privacy Policy takes effect will be considered acceptance of the updated privacy terms. If you do not agree with the changes, please stop using the platform and contact us to close your account and delete your data in accordance with the rights described in Section 6 above.

If you have any questions, concerns, or complaints regarding how Peluang44 handles your personal data, or if you wish to exercise any of your rights as a data subject, please contact us through the following channels:

• Privacy Email: privacy@peluang44.com — for all privacy and data-related enquiries and requests. Responded to within 5 business days.
• General Support Email: support@peluang44.com — for general enquiries about your account and services. Responded to within 2 hours.
• 24/7 Live Chat: Stay on the Peluang44 platform — for immediate assistance in Bahasa Melayu from a real human agent.

If you are dissatisfied with how we have handled your privacy enquiry or complaint after contacting us, you have the right to lodge a complaint with the Department of Personal Data Protection under Malaysia's Ministry of Communications and Digital, in accordance with the procedures set out under PDPA 2010.

Peluang44 is committed to responding to all privacy-related requests thoroughly, promptly, and in the spirit of this Privacy Policy. We value the trust you place in us by using the Peluang44 platform, and we will always strive to ensure that trust is well-founded.