Pelita88 Privacy Policy — Member Personal Data Protection

1 Information We Collect

To provide safe, seamless, and high-quality services to pelita88 members, we collect several categories of personal information as described below. We only collect information that is strictly necessary and do not engage in excessive data collection.

2 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for purposes unrelated to the services you use. Below is a complete list of how your data is used:

• Account management: Creating, maintaining, and securing your member account, including registration processing, login, and two-factor authentication.
• Payment processing: Processing your deposits and withdrawals securely through authorised payment channels including bank transfers and digital wallets.
• Service communications: Sending important account notifications, transaction confirmations, security updates, and relevant promotions via email or SMS.
• Fraud prevention: Detecting and preventing unauthorised access, fraudulent activity, money laundering, and platform abuse through continuous monitoring.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support to members who need it.
• Legal compliance: Fulfilling legal obligations under Malaysia's PDPA, anti-money laundering (AML) requirements, and other applicable regulations.
• Platform improvements: Analysing usage patterns in aggregate and anonymous form to improve platform performance, user interface, and overall service quality.

3 Sharing Information With Third Parties

Pelita88 does not share your personal data with external parties except in very limited situations and under strict controls. The following are circumstances under which data sharing may occur:

• Trusted payment providers: Information required to process transactions is shared with authorised payment gateways such as FPX, Touch 'n Go eWallet, and local bank transfer systems. All such providers are bound by strict confidentiality agreements.
• Licensed game providers: Our licensed game software providers may receive basic information required to operate your game session. No sensitive financial data is shared in this process.
• Legal authorities: Where required by court order, law enforcement investigation, or regulatory obligation, pelita88 may be required to disclose certain data to the relevant authorities.
• Technical services: Our cloud service and technical infrastructure providers who operate our servers and data storage systems are bound by data processing agreements that comply with international standards.

4 Data Security & Protection Measures

Your data security is an absolute priority for pelita88. We continuously invest in the latest security infrastructure to ensure your data remains protected against cyber threats at all times.

• End-to-end encryption: All communications between your device and our servers use TLS 1.3 protocol with AES-256 encryption, the highest security standard in the industry.
• Two-factor authentication (2FA): We offer two-factor authentication for all member accounts as an added security layer that protects your account even if your password is compromised.
• 24/7 monitoring: Our automated security monitoring system operates around the clock to detect suspicious activity, unusual login attempts, and potential cyber threats.
• Regular security testing: pelita88 conducts regular penetration testing and security audits by certified independent security experts to identify and address vulnerabilities.
• Internal access controls: Access to members' personal data within our organisation is restricted on a need-to-know basis, and every access is recorded in audit logs retained for 5 years.

While we take all reasonable precautions, no security system can be guaranteed 100% secure. You also play an important role in protecting your account by choosing a strong password and never sharing your login credentials with anyone.

5 Cookies & Tracking Technologies

The pelita88 website uses cookies and similar tracking technologies to enhance your browsing experience, enable certain features to function correctly, and help us understand how our platform is used.

• Essential cookies: These cookies are required for core website functions such as maintaining your login session and remembering language preferences. Without them, certain parts of the platform will not work properly.
• Performance cookies: Analytics cookies help us understand how visitors interact with our website — which pages are visited most, time spent, and navigation paths. All such data is collected anonymously.
• Functional cookies: These cookies remember your preferences such as display settings, preferred language, and login details so you do not have to re-enter them every time you visit our platform.
• Cookie duration: Session cookies are automatically deleted when you close your browser. Persistent cookies remain for a set period (typically 30 days to 1 year) or until you manually delete them.

You can manage or block cookies through your web browser settings. However, blocking essential cookies may affect the functionality of our platform. For more information on managing cookies in popular browsers, visit your browser's support website.

6 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the international privacy principles we adhere to, you have the following rights regarding your personal data held by pelita88:

• Right of access: You may request a copy of all personal data we hold about you. Requests will be processed within 7 business days.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to request a correction. You can update basic information directly through your account profile page.
• Right to erasure: You may request deletion of your personal data under certain circumstances, such as when the data is no longer needed for its original purpose. This right is subject to legal obligations that require us to retain certain data.
• Right to object to processing: You may object to the processing of your data for direct marketing purposes at any time. We will immediately cease using your data for that purpose.
• Right to restriction: Under certain circumstances, you may request that we limit how we use your data while any dispute is being resolved.
• Right to data portability: You may request a copy of your data in a machine-readable format for transfer to another service provider where applicable.

To exercise any of the above rights, contact our privacy team via Live Chat or our support email. We may need to verify your identity before processing the request to protect your account security.

7 KYC & Identity Verification Process

As a responsible and compliant platform, pelita88 conducts a thorough Know Your Customer (KYC) process as part of our commitment to preventing money laundering and financial fraud.

• Required documents: To complete KYC verification, you will need to submit a clear copy of your Malaysian identity card (MyKAD), a recent bank statement (no older than 3 months), and a selfie holding your identity document.
• Processing time: Standard KYC verification is completed within 24 business hours. In cases requiring further review, the process may take up to 3 business days.
• Document security: All submitted KYC documents are encrypted during transmission and stored on secure servers protected by strict access controls. These documents are never shared with external parties unless required by law.
• Ongoing KYC requirements: pelita88 reserves the right to request additional KYC verification at any time should there be significant changes in your transaction patterns or account activity, in the interest of all parties' security.

8 Cross-Border Data Transfers

As pelita88 operates as an international digital platform, your personal data may be stored or processed on servers located outside Malaysia. We take the following measures to ensure your data remains protected even during cross-border transfers:

• Data transfer agreements: All cross-border data transfers are conducted under agreements that comply with internationally recognized data protection standards, ensuring protection equivalent to Malaysia's standards.
• Securely located servers: Our server infrastructure is hosted in certified data centres compliant with ISO 27001 standards for information security management.
• Encryption in transit: All data transferred across borders uses fully encrypted channels, ensuring no third party can access your data in transit.

9 Changes to This Privacy Policy

Pelita88 reserves the right to update or amend this privacy policy at any time to reflect changes in our privacy practices, legislative changes, or service improvements. Each new version will include a clear update date at the top of this page.

For significant changes affecting how we use your data, we will notify you via your registered email or in-platform notification at least 14 days before the changes take effect. Continued use of the pelita88 platform after that notice period constitutes your acceptance of the updated policy.

We encourage you to review this page periodically. The version history of our privacy policy is available upon request through our support team.

10 Contact Our Privacy Team

If you have any questions, concerns, or wish to exercise your privacy rights, the pelita88 privacy team is here to help. All privacy-related enquiries will be handled with full confidentiality and professionalism.

• Live Chat: The fastest way to get help — average response time under 90 seconds, available 24 hours a day, 7 days a week including public holidays.
• Privacy email: For more detailed privacy enquiries or to submit a written data subject rights request, contact us at [email protected] — we will respond within 24 business hours.
• FAQ: Answers to frequently asked questions about privacy and data protection are available at FAQ page us.