Privacy Policy permata88 —
Data Protection Malaysia users

Permata88 ("we", "Platform" or "permata88") treats user privacy as a trust that must be taken seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform.

This Policy applies to all permata88 platform users — whether via the website, Android mobile app, iOS app or any other access channel we provide. It also covers communications between you and the permata88 support team.

We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and are committed to ensuring that the collection and processing of your personal data is carried out responsibly, transparently and in compliance with applicable legal requirements.

Permata88 collects various types of information depending on how you interact with our platform. Generally, there are two main categories of data we collect:

Data you provide directly:

• Registration information: full name, date of birth, identity card or passport number, email address, and phone number.
• KYC (Know Your Customer) information: copies of identity documents, proof of address, and financial information required for transaction processing.
• Bank account or eWallet details for deposit and withdrawal purposes.
• Communication with our customer support team.

Data collected automatically:

• IP address, browser type, operating system and device information.
• Activity log records: login times, pages visited, and in-platform actions.
• Transaction data: deposit history, withdrawals and wagering.
• Cookie data and similar tracking technologies.
• General location information based on IP address.

All data we collect is used solely for purposes related to platform operations and service improvement. Specifically, your data is used to:

• Account management — registration, identity verification, secure login and account settings management.
• Transaction processing — processing deposits, withdrawals and other financial transactions securely and accurately.
• Platform security — detecting and preventing fraud, unauthorised access and other suspicious activity.
• Legal compliance — meeting KYC, anti-money laundering (AML) and reporting requirements mandated by authorities.
• Customer support — providing effective and relevant assistance when you contact us.
• Product improvement — analysing usage patterns in aggregate (without personal identifiers) to improve the platform.
• Service communications — sending important notifications related to your account, transactions and policy updates.

We do not use your data for any marketing purpose without your consent, and we do not analyse individual data to build behavioural profiles for third-party advertising.

Permata88 only shares user personal information in very limited situations and for legitimate purposes. We do not sell or trade user data in any form. Data sharing occurs only with:

• Payment and financial providers that are approved — to process deposit and withdrawal transactions. These providers are bound by confidentiality agreements and strict security standards.
• Third-party game providers — the minimum data required to verify accounts and manage gameplay sessions within their platform.
• Competent authorities — when required by law, court order or to comply with legitimate regulatory requirements.
• Technical service providers — such as cloud infrastructure providers that process data on our behalf under binding data processing agreements.

We implement a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or accidental destruction.

Key security measures we employ include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL.
• Data encryption at rest for all sensitive information.
• Role-based access control (RBAC) for internal staff.
• Two-factor authentication (2FA) for all internal system access.
• Real-time security threat monitoring 24/7.
• Regular penetration testing by independent third parties.
• Incident response procedures that are regularly tested and updated.

While we take all reasonable steps to protect your data, no security system is perfect. In the event of a data breach affecting your information, we will notify you within the timeframe required by applicable law.

Permata88 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly.

Types of cookies we use:

• Essential cookies — required for core platform functions such as session authentication and login security. These cookies cannot be disabled.
• User preference cookies — saving your preferences and settings such as language and display theme.
• Performance & analytics cookies — collecting non-identifiable usage data to help us understand how users interact with the platform.

You can manage or delete cookies through your browser settings. However, disabling essential cookies may affect overall platform functionality. permata88 does not use third-party cookies for advertising purposes.

As a permata88 user and under the Personal Data Protection Act 2010, you have the following rights regarding your personal data:

To exercise any of the above rights, contact our privacy team via Live Chat within the platform or through official support channels. We will process your request within 30 business days.

Permata88 is a platform exclusively for individuals aged 18 years and above entirely. We do not knowingly collect, store or process personal data from any individual under the age of 18.

If we discover that personal data of anyone under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

If you believe a child has registered or provided data to us, please contact our support team immediately.

Permata88 retains your personal data for as long as your account is active or as long as necessary to provide services to you. Retention periods vary by data type:

• Active account data — retained for as long as the account remains active, plus any period required by law.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysian legal requirements.
• KYC Documents — retained for a minimum of 5 years after account closure.
• Support communication logs — retained for 2 years for reference and service quality purposes.
• Analytics data — aggregated data without personal identifiers is retained indefinitely; individual data is deleted after 12 months.

When data is no longer needed, it will be securely deleted or anonymised so it can no longer be linked back to you.

Permata88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or relevant technological developments.

When there are material changes to this Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Notifying users via email or in-platform notifications for significant changes.
• Maintaining previous versions of this Policy, available upon user request for reference.

Continued use of the permata88 platform after changes are published constitutes acceptance of the updated policy.

If you have any questions, concerns or requests regarding this Privacy Policy or permata88's handling of your personal data, please contact us through the following channels:

• Live Chat — available 24/7 via the support icon within the platform.
• Support Email — [email protected] (displayed as plain text only).

Our privacy team will respond to all enquiries within 5 business days. For formal data rights requests, please include "Data Privacy Request" in the subject line of your communication to expedite processing.