peluang99 Privacy Policy — How We Handle Your Personal Data

Introduction

peluang99 ("the Platform", "we", "us", "our") operates an online casino and sports betting service accessible through the domain peluang99.cam. This Privacy Policy applies to all personal data processed in connection with the Platform — including information collected when a user browses the website, creates an account, makes a deposit or withdrawal in MYR, places a wager, contacts support, or participates in a loyalty or promotional programme.

This policy applies equally to players located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other areas of Malaysia, as well as to users accessing the Platform from other jurisdictions. It should be read together with the Terms & Conditions and the Responsible Gambling policy, both of which form part of the agreement governing use of peluang99.

Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal data" means any information relating to an identified or identifiable natural person — including, without limitation, a name, identification number, location data, email address, financial details, or device identifier.
• "Processing" means any operation performed on personal data, including collection, recording, storage, organisation, retrieval, use, disclosure, transfer, erasure, or destruction.
• "Controller" means the entity that determines the purposes and means of processing personal data.
• "Processor" means an entity that processes personal data on behalf of the Controller under a contractual arrangement.
• "User" or "you" means the natural person who accesses or uses the Platform, including a registered account holder.
• "KYC" means Know Your Customer — identity verification procedures required to confirm the identity, age, and payment ownership of a player.

Data Controller

peluang99 acts as the Data Controller in respect of personal data collected and processed through the Platform. As Controller, peluang99 determines the purposes for which personal data is processed and is responsible for ensuring that processing is conducted lawfully, fairly, and transparently in accordance with applicable international data protection standards.

Where peluang99 engages a third-party service provider — such as a payment processor, KYC verification bureau, fraud prevention service, or game content supplier — that third party acts as a Processor under a contractual agreement that restricts their use of personal data to the specific purposes for which it was shared.

Data We Collect

Registration and Account Data

When you create a peluang99 account, we collect your legal name, date of birth, residential address, email address, mobile phone number, and a username you choose. This information is required to create and administer your account, enforce the 21+ age requirement, and ensure only one account is registered per person.

Identity Verification (KYC) Data

To comply with anti-money laundering, fraud prevention, and responsible gambling requirements, we may collect copies of a valid Malaysian identity document (such as your MyKad or passport), a recent proof of address (such as a utility bill or bank statement), a selfie or liveness-check image, and payment account ownership evidence. Documents must be submitted only through the secure platform portal.

Financial and Transaction Data

We record deposits made via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Bitcoin (BTC), USDT, and other accepted methods — including transaction amounts in MYR, timestamps, reference numbers, and outcome records. Withdrawal requests, bonus claims, wagering history, and balance movements are similarly recorded.

Technical and Device Data

Platform use generates technical data including IP address, browser type and version, device type and operating system, session timestamps, pages visited, referral URLs, and error logs. This data supports security monitoring, fraud detection, platform stability, and responsible gambling monitoring.

Support and Communication Data

When you contact support via live chat, WhatsApp, or email, we may retain transcripts, ticket references, issue descriptions, screenshots, and response records. These records are used to resolve disputes, improve support quality, and maintain evidence of advice given.

Responsible Gambling Data

If you set deposit limits, activate a cooling-off period, or apply for self-exclusion, we record the restriction, its parameters, and the date it was applied. This data is retained for as long as necessary to enforce the restriction and to comply with responsible gambling obligations.

Legal Basis for Processing

peluang99 processes personal data on the following legal bases, depending on the activity:

• Performance of a contract: processing your registration details, transactions, wagers, and account maintenance is necessary to deliver the services you have contracted to receive.
• Legal obligation: KYC verification, anti-money laundering screening, age enforcement, responsible gambling records, and transaction logs are required to comply with applicable regulatory and legal obligations.
• Legitimate interests: fraud detection, security monitoring, technical stability, loss-prevention analytics, and support-quality improvement are carried out on the basis of legitimate interests, where those interests are not overridden by your rights.
• Consent: promotional communications and non-essential analytics cookies are processed on the basis of your consent, which may be withdrawn at any time without affecting the lawfulness of prior processing.

How We Use Your Data

Personal data collected by peluang99 is used for the following purposes:

• Creating, verifying, and administering player accounts.
• Processing MYR deposits, wagers, withdrawals, and bonus credits.
• Conducting KYC, age verification, source-of-funds, and payment ownership checks.
• Detecting, investigating, and preventing fraud, money laundering, and prohibited account conduct.
• Enforcing responsible gambling restrictions, including self-exclusion and deposit limits.
• Resolving disputes, investigating complaints, and maintaining accurate records for audit and legal purposes.
• Sending operational notices relating to account security, verification, withdrawals, policy changes, and responsible gambling reminders.
• Monitoring and improving platform performance, game availability, and customer support quality.
• Sending promotional communications where consent has been provided and not subsequently withdrawn.

Data is not used to build third-party advertising profiles, is not sold to data brokers, and is not used for purposes incompatible with those stated at the time of collection.

Cookies and Tracking Technologies

peluang99 uses cookies and similar tracking technologies to maintain secure login sessions, remember language and display preferences, detect fraudulent or automated access, gather aggregated analytics on page performance, and support responsible gambling monitoring.

Strictly necessary cookies — required for login sessions, security, and core platform function — cannot be disabled without impairing service. Functional and analytics cookies may be managed through your browser settings or a cookie preference tool presented at first access. Disabling analytics cookies will not affect your ability to play, deposit, or withdraw.

Third-party analytics tools that are used receive only aggregated or pseudonymised data and are contractually prohibited from using that data for their own advertising purposes.

Sharing with Third Parties

peluang99 may share personal data with:

• Payment processors: FPX banking partners, e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow), Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency processing services — strictly for the purpose of executing and reconciling transactions.
• Identity and fraud verification providers: KYC bureaus and fraud-screening services that verify documents and cross-reference identity data against watchlists or adverse-information databases.
• Gaming content suppliers: game studios providing the casino, live dealer, and sports betting products; these suppliers may receive session tokens or pseudonymised game-log data for audit and settlement purposes.
• Legal and regulatory authorities: where disclosure is required by applicable law, court order, regulatory inquiry, or licence condition. peluang99 will inform you of such disclosure where lawfully permitted to do so.
• Professional advisers: lawyers, accountants, and auditors who are bound by professional confidentiality obligations.

No personal data is sold, rented, or shared with third-party marketers, data aggregators, or social media advertising platforms.

International Data Transfers

peluang99 is operated under international gaming arrangements, and some data processors — including KYC verification providers and game content suppliers — may be located outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in the player's home jurisdiction, peluang99 will take reasonable steps to ensure the transfer is safeguarded by appropriate contractual mechanisms, such as standard data protection clauses or equivalent contractual commitments.

Malaysian players should note that personal data may be processed on servers located outside Malaysia. By using the Platform, you acknowledge that such transfers may occur in the course of delivering the services described in these terms.

Data Retention

peluang99 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following retention principles:

• Account and identity data is retained for the duration of an active account and for a minimum period after account closure to comply with anti-money laundering, audit, and regulatory record-keeping obligations.
• Transaction records — including MYR deposits, withdrawals, wagers, and bonus activity — are retained for the period required under applicable financial record-keeping rules.
• KYC documentation is retained for the period required by applicable anti-money laundering and fraud prevention obligations.
• Responsible gambling restriction records are retained for a minimum period after a self-exclusion or limit is applied, to ensure restrictions remain enforceable and auditable.
• Support transcripts and dispute records are retained for a reasonable period to enable investigation of complaints or legal proceedings.
• Technical logs are retained for a shorter period sufficient for security monitoring, fraud investigation, and platform diagnostics.

After the relevant retention period expires, personal data is securely deleted or irreversibly anonymised unless a legal hold or ongoing investigation requires continued retention.

Security Measures

peluang99 implements a layered approach to data security, including:

• TLS encryption for all data in transit between user devices and platform servers.
• Encryption at rest for sensitive personal data, KYC documents, and financial records.
• Multi-factor authentication options for player accounts.
• Role-based access controls that limit staff access to personal data on a need-to-know basis.
• Regular penetration testing, vulnerability scanning, and security patch management.
• Intrusion detection systems and anomaly monitoring for unusual account or transaction behaviour.
• Staff data protection training and confidentiality obligations.

Despite these measures, no online system can guarantee absolute security. Players should use a strong, unique password for their peluang99 account, enable available multi-factor authentication, and report any suspected unauthorised access promptly through the support contact provided below.

User Rights

Subject to applicable law and the specific circumstances of your request, you may hold the following rights in relation to your personal data held by peluang99:

To exercise any of these rights, contact support using the plain-text email address displayed in the Contact section below. Requests will be acknowledged promptly and responded to within a reasonable period after identity is confirmed. We will not charge a fee for standard requests.

Children and Minors

peluang99 is strictly an adult service. Registration and use of real-money games or sports betting is prohibited for any person under the age of 21. We do not knowingly collect personal data from anyone under 21. If peluang99 discovers that data has been collected from a person under the minimum age, that data will be deleted and the associated account will be closed after any eligible balance — if applicable — is returned following required verification.

If you believe that a minor may have accessed peluang99 using your identity or device, please contact support immediately so that appropriate action can be taken. Information about parental controls and filtering software is available on the Responsible Gambling page.

Changes to This Privacy Policy

peluang99 may update this Privacy Policy periodically to reflect changes in the Services, applicable law, regulatory guidance, or internal data-handling practices. When a material change is made, we will present a notice on the Platform at or around the time the revised policy becomes effective. The "Last reviewed" date at the top of this page reflects the most recent version.

Continued use of peluang99 after a revised Privacy Policy takes effect constitutes acknowledgment that you have read the updated version. Where a change significantly affects the basis on which your personal data is processed and where consent is required, we will seek your consent before applying the change to your data.

Contact Us

For privacy-related enquiries, data-subject rights requests, or concerns about how your personal data is handled, please contact the peluang99 support team. Support is available 24/7 on Malaysia Time (MYT, GMT+8) through live chat and through the website email, which is displayed as plain text below — it is not a clickable link.

Email (plain text): [email protected]

Please include your registered account name, the nature of your request, and relevant details such as transaction references or the specific data category your request concerns. We may need to verify your identity before acting on a rights request. We will endeavour to acknowledge your request within five business days and to provide a substantive response within thirty days.