petron77 Privacy Policy – How We Handle Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how petron77 ("petron77", "we", "us", "our"), the operator of the online gaming platform at petron77.win (the "Platform"), collects, uses, stores, discloses, and protects the personal data of individuals ("you", "Player") who access or use the Platform, including Players based in Malaysia and other jurisdictions.

petron77 is committed to handling personal data responsibly and in compliance with applicable data protection laws and the requirements of the international gaming authorities under whose guidelines petron77 operates. By registering a petron77 Account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read in conjunction with petron77's Terms & Conditions, which are incorporated by reference.

2. Data We Collect

petron77 collects the following categories of personal data from Players:

• Registration Data: Full name, date of birth, email address, username, and password (stored in hashed form). This data is provided directly by you at the point of Account creation.
• Identity Verification Data: Government-issued identification documents (e.g., MyKad, passport), proof of address, and source-of-funds documentation collected as part of petron77's KYC (Know Your Customer) process.
• Contact Information: Email address, mobile number, and any correspondence you initiate with petron77 customer support.
• Financial Data: Deposit and withdrawal transaction records, including payment method type, transaction amounts in MYR, and transaction timestamps. petron77 does not retain full payment card numbers or complete e-wallet credential strings.
• Gaming Activity Data: Game session logs, betting history, wagering amounts, bonus redemptions, and Account balance history.
• Technical Data: IP address, device type, browser type and version, operating system, session duration, pages visited, and referral source. This data is collected automatically via server logs and analytics tools when you access the Platform.
• Geolocation Data: Approximate geographic location derived from IP address, used to comply with jurisdictional access restrictions and deliver localised content relevant to Malaysian users.
• Communications Data: Records of your interactions with petron77's customer support team, including live chat transcripts and email correspondence.

3. How We Use Your Data

petron77 uses your personal data for the following purposes:

• Account administration: Creating, managing, and maintaining your petron77 Account, including verification of your identity and eligibility to use the Platform.
• Service delivery: Processing deposits, withdrawals, bets, and all other Platform transactions in MYR.
• KYC and regulatory compliance: Verifying your identity, age (21+), and source of funds in accordance with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations applicable to online gaming operators.
• Fraud prevention and security: Monitoring Account activity to detect and prevent fraudulent transactions, bonus abuse, money laundering, and unauthorised access.
• Responsible gaming: Identifying patterns of potentially problematic gambling behaviour and facilitating access to petron77's responsible gaming tools, including self-exclusion and deposit limit features.
• Customer support: Responding to your enquiries and resolving disputes or technical issues relating to your petron77 Account.
• Communications: Sending you transactional notifications (e.g., deposit confirmations, withdrawal updates), security alerts, and — where you have given consent — promotional communications about petron77 offers and services.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, design, and content of the petron77 Platform.
• Legal obligations: Retaining and disclosing data as required by applicable law, court orders, or regulatory authority requests.

4. Legal Basis for Processing

petron77 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the petron77 Terms & Conditions, including account management and transaction processing.
• Legal obligation: Processing required to comply with AML/CTF legislation, age verification requirements, and the directions of regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out in pursuit of petron77's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Where petron77 relies on your consent as the legal basis for processing (e.g., for sending marketing communications), you may withdraw that consent at any time by contacting petron77 customer support or updating your Account communication preferences.

5. Data Sharing & Disclosure

petron77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. petron77 may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: Licensed payment service providers that process MYR transactions on behalf of petron77, including e-wallet operators and banking partners. These processors are bound by contractual data protection obligations.
• Game content providers: Licensed game studios and platform providers whose games are integrated into the petron77 Platform may receive limited session data necessary to facilitate game delivery and audit trail requirements.
• Identity verification services: Third-party KYC service providers that assist petron77 in verifying the identity and documentation of Players in accordance with regulatory requirements.
• Regulatory and law enforcement authorities: Competent governmental, regulatory, and law enforcement bodies to the extent required by applicable law, court order, or regulatory direction.
• Professional advisers: Legal counsel, auditors, and other professional service providers engaged by petron77 in connection with its lawful business operations, subject to confidentiality obligations.

All third-party service providers engaged by petron77 are required to maintain appropriate technical and organisational security measures and to process personal data only in accordance with petron77's documented instructions.

6. Payment Data

6.1 petron77 processes all financial transactions in MYR. Payment methods accepted include Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and other methods available in the petron77 cashier from time to time.

6.2 Payment instrument credentials (e.g., full card numbers, e-wallet account tokens) are handled exclusively by petron77's certified payment processing partners and are not stored on petron77's own servers. petron77 retains only transaction metadata (amount, method type, timestamp, and status) necessary for Account management and audit purposes.

6.3 All payment processing channels used by petron77 are secured by industry-standard encryption protocols and are subject to periodic security assessments.

7. Cookies & Tracking Technologies

7.1 petron77 uses cookies and similar tracking technologies (including web beacons and session tokens) to operate the Platform, maintain login sessions, analyse user behaviour, and deliver a personalised experience.

7.2 The following categories of cookies are used on the petron77 Platform:

• Strictly necessary cookies: Required for the Platform to function, including session management and security tokens. These cannot be disabled without impairing Platform functionality.
• Analytical cookies: Used to collect anonymised data on how Players use the Platform, including page visit counts, session durations, and navigation paths. This data helps petron77 identify and address performance issues.
• Functional cookies: Store your preferences (e.g., language settings, recently played games) to improve the consistency of your experience across sessions.

7.3 You may control or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality or performance of the petron77 Platform.

8. Data Retention

8.1 petron77 retains personal data for as long as your Account remains active and for a period thereafter as required by applicable law and regulatory obligations. In accordance with standard online gaming industry requirements, account and transaction records are typically retained for a minimum period of five years following Account closure.

8.2 Where petron77 no longer has a lawful basis for retaining your personal data and no legal retention obligation applies, petron77 will securely delete or anonymise that data.

9. International Data Transfers

9.1 petron77's Platform infrastructure and third-party service providers may involve the transfer and processing of your personal data in jurisdictions outside of Malaysia. Where such transfers occur, petron77 ensures that appropriate safeguards are in place — including contractual data processing agreements — to maintain a level of data protection consistent with the standards described in this Policy.

10. Your Rights

Subject to applicable law and regulatory constraints, you have the following rights in respect of your personal data held by petron77:

• Right of access: You may request confirmation of whether petron77 holds personal data about you and, if so, a copy of that data.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data petron77 holds about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to petron77's legal retention obligations.
• Right to object: You may object to petron77's processing of your personal data where that processing is based on legitimate interests or carried out for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact petron77 customer support. petron77 will respond to verified data subject requests within the timeframe required by applicable law. petron77 may need to verify your identity before processing a request.

11. Children & Minors

The petron77 Platform is strictly intended for adults aged 21 and above. petron77 does not knowingly collect personal data from individuals under the age of 21. If petron77 discovers that personal data has been collected from a minor, the relevant Account will be closed and the data deleted as soon as reasonably practicable. If you believe a minor has registered a petron77 Account, please contact our support team immediately.

12. Security Measures

12.1 petron77 implements appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data in transit, restricted access controls on systems holding personal data, regular security assessments, and staff training on data protection obligations.

12.2 Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. petron77 cannot warrant absolute security but is committed to maintaining industry-standard protections and responding promptly to any identified security incidents.

12.3 In the event of a data breach that poses a risk to affected individuals, petron77 will notify the relevant regulatory authorities and, where required, affected Players in accordance with applicable notification obligations.

13. Policy Updates

petron77 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal obligations, or Platform functionality. The revised Policy will be published on this page with an updated effective date. Where changes are material, petron77 will notify registered Players by email or via a Platform notification. Your continued use of the petron77 Platform following notification of a Policy update constitutes your acceptance of the revised terms.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or petron77's data processing practices, please contact the petron77 Data Protection team via the customer support channel accessible from your petron77 Account dashboard, or by email at: [email protected]

petron77 is committed to resolving privacy enquiries promptly and will respond to all data subject requests within the timeframes required by applicable law.