Perodua88 Privacy Policy
& Data Protection Notice

1. Introduction

Perodua88 ("we", "us", "our", "the Company", "the Platform") operates the online casino and sports betting platform accessible at https://perodua88.cam. We take the privacy and security of our users' personal data very seriously.

This Privacy Policy ("Policy") describes, in accordance with applicable data protection principles, how Perodua88 collects, uses, stores, discloses, and otherwise processes personal data submitted by individuals ("Players", "Users", "you") who register for and use the Platform's Services, including but not limited to online gaming, sports betting, financial transactions, and customer support interactions.

By registering an Account with Perodua88, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must not register an Account or use the Platform.

This Policy should be read together with our Terms & Conditions, which govern your overall use of the Platform.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Account" — the registered user profile created by a Player on the Perodua88 Platform.
• "Controller" — the entity that determines the purposes and means of processing personal data; in this context, Perodua88.
• "Data Subject" — any identified or identifiable natural person whose personal data is processed; in this context, any registered Player.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, contact details, financial information, identity documents, device identifiers, and behavioural data.
• "Processing" — any operation or set of operations performed on personal data, including collection, storage, use, disclosure, erasure, or destruction.
• "Processor" — a third party that processes personal data on behalf of the Controller.
• "Services" — all gaming, betting, financial, and support services offered by Perodua88 via the Platform.
• "Special Category Data" — sensitive personal data including health information, which Perodua88 may process in limited circumstances for responsible gambling compliance purposes.

3. Personal Data We Collect

Perodua88 collects the following categories of personal data from Players, depending on the nature of their interaction with the Platform:

3.1 Identity & Contact Data

Collected at registration and KYC verification stages. Required for account management, identity verification, and compliance with anti-money laundering obligations.

3.2 Financial Data

Collected for deposit and withdrawal processing via supported Malaysian payment channels including Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Bitcoin (BTC), and USDT. Financial data is never stored in full on our servers where third-party payment processors are involved; only reference identifiers necessary for reconciliation are retained.

3.3 Technical & Usage Data

Collected automatically when you access the Platform. Used for fraud detection, security monitoring, service optimisation, and responsible gambling analytics.

3.4 Gaming & Betting Activity Data

Records of games played, bets placed, wagering patterns, win/loss history, and responsible gambling tool usage (e.g., deposit limits set, self-exclusion periods). This data is used to deliver personalised service, comply with regulatory requirements, and operate our responsible gambling programme.

3.5 Communications Data

Records of your interactions with our customer support team via live chat, email, and any other support channel. Retained for quality assurance, dispute resolution, and regulatory compliance purposes.

4. How We Collect Your Data

Perodua88 collects personal data through the following mechanisms:

• Direct Submission: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Collection: Technical data collected automatically via cookies, server logs, and tracking technologies when you access or use the Platform.
• Third-Party Sources: Identity and fraud-screening data obtained from KYC verification partners, payment processors, and fraud prevention services where we have a legal basis to do so.
• Publicly Available Sources: In limited circumstances, information from publicly available databases used for fraud detection and compliance screening.

5. Purpose of Processing & Legal Basis

The table below sets out the primary purposes for which Perodua88 processes personal data, along with the applicable legal basis for each processing activity:

6. Data Sharing & Third-Party Disclosure

6.1 Categories of Recipients

Perodua88 does not sell, rent, or trade your personal data. We may share personal data with the following categories of third parties, strictly on a need-to-know basis:

• Payment Service Providers: Malaysian e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), banking networks (Maybank, CIMB, Public Bank, Hong Leong), DuitNow/FPX infrastructure operators, and cryptocurrency payment processors — solely for the purpose of processing deposits and withdrawals.
• KYC & Identity Verification Partners: Third-party providers engaged to perform identity document verification, liveness checks, and anti-money laundering screening.
• Fraud Prevention Services: External fraud intelligence platforms that assist in detecting and preventing fraudulent account activity.
• Game Content Providers: Aggregated, anonymised gameplay data may be shared with game content providers for RTP auditing and performance reporting. No identifiable personal data is shared with game providers.
• IT Infrastructure and Cloud Service Providers: Hosting and data storage providers operating under strict data processing agreements with equivalent data protection standards.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory directive, we may disclose personal data to relevant authorities.

6.2 Data Processing Agreements

All third-party processors engaged by Perodua88 are required to execute data processing agreements that mandate equivalent data protection standards. We conduct due diligence on all third-party processors before engagement and on a periodic basis thereafter.

7. Data Retention

Perodua88 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to applicable legal and regulatory retention obligations. The following retention periods generally apply:

• Account & Identity Data: Retained for the duration of the Account's active status, plus a minimum of five (5) years following Account closure — in compliance with anti-money laundering regulatory requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years following the date of transaction, in accordance with financial record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years following Account closure or the date of the last transaction.
• Customer Support Records: Retained for a maximum of three (3) years from the date of the last interaction, or longer if required for an ongoing dispute.
• Marketing Preferences and Consent Records: Retained for the duration of the opted-in period, plus three (3) years thereafter for legal accountability purposes.
• Technical & Log Data: Retained for a maximum of twenty-four (24) months for fraud detection and security monitoring purposes.

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

8. Data Security Measures

Perodua88 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction:

• Encryption in Transit: All data transmitted between your device and the Perodua88 platform is protected by 256-bit SSL/TLS encryption. The presence of "HTTPS" in the platform URL and the padlock symbol in your browser confirm this protection is active.
• Encryption at Rest: Sensitive personal data stored in Perodua88's databases is encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Access to personal data within the Perodua88 organisation is restricted on a strict role-based, need-to-know basis. All internal access is logged and subject to audit.
• Network Security: The Platform's infrastructure is protected by firewalls, intrusion detection systems, and continuous security monitoring.
• Penetration Testing: Perodua88 conducts regular security assessments and penetration testing of its platform infrastructure.
• Incident Response: In the event of a data security incident that poses a risk to Players' rights or interests, Perodua88 will notify affected Players and relevant authorities in accordance with applicable obligations.

9. Cookies & Tracking Technologies

The Perodua88 Platform uses cookies and similar tracking technologies to deliver its Services, maintain session continuity, and improve the user experience. A "cookie" is a small text file placed on your device by a website you visit.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. For browsers used in Malaysia, including Chrome, Firefox, Safari, and Edge, instructions for managing cookies are available via each browser's help section.

10. Your Data Rights

As a Data Subject, you are entitled to exercise the following rights in respect of your personal data held by Perodua88. Requests may be submitted to our support team via the contact details in Section 15.

Perodua88 will respond to verifiable data rights requests within thirty (30) days. We may request proof of identity before actioning any request. Where a request cannot be fulfilled due to legal retention obligations or other overriding grounds, we will inform you of the reason in writing.

11. Protection of Minors

The Perodua88 Platform is strictly prohibited to individuals under the age of 21 years. We do not knowingly collect personal data from individuals under this age threshold.

Where Perodua88 identifies or has reasonable grounds to suspect that a registered Account is held by a person under 21 years of age, we will immediately suspend the Account, void all balances and winnings, and permanently delete all personal data associated with the Account beyond what is required for legal compliance purposes.

If you believe a minor has registered an Account on the Platform, please contact our support team immediately at the address set out in Section 15.

12. International Data Transfers

Perodua88's operations and technology infrastructure involve the transfer of personal data across international borders. Where personal data is transferred outside of Malaysia or the jurisdiction in which the Platform is licensed, we ensure that appropriate safeguards are in place, including:

• Data processing agreements with all third-party recipients incorporating standard contractual clauses aligned with recognised international data protection standards;
• Engagement of processors located in jurisdictions with adequacy determinations or equivalent protections;
• Encryption of data in transit for all cross-border transfers.

By using the Perodua88 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Malaysia, including those where the data protection laws may differ from those applicable in Malaysia.

13. Third-Party Links & Integrations

The Perodua88 Platform may reference or integrate with third-party payment processors, identity verification providers, and game content aggregators. These third parties operate under their own privacy policies and Perodua88 is not responsible for the data processing practices of independent third parties.

We recommend that Players review the privacy policies of all third-party services with which they interact in connection with their Perodua88 Account, particularly payment service providers such as Maybank, CIMB, Touch 'n Go eWallet, and others listed in our payment methods documentation.

14. Changes to This Privacy Policy

Perodua88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material in nature, we will provide reasonable advance notice to Players via their registered email address or via a prominent in-platform notification.

The effective date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform following the posting of any updated Privacy Policy constitutes your acceptance of those changes. If you do not agree with any amended terms, you must cease using the Platform and may request Account closure.

The current version of this Privacy Policy is always accessible at https://perodua88.cam/privacy-policy.

15. Contact Us & Data Protection Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact Perodua88 using the following details:

• Email (plain text — not a clickable link): [email protected]
• Subject Line: Please mark data-related enquiries with "Privacy Request — [Your Registered Email]"
• Live Chat: Available 24/7 via the in-platform chat widget for general support enquiries
• Response Time: Written privacy requests will receive an acknowledgement within 5 business days and a substantive response within 30 days

For urgent account security matters, including suspected unauthorised access, please contact our support team immediately via live chat for the fastest response.