Permata123 Privacy Policy — Personal Data Protection for Malaysian Players

Permata123 is the data controller of your personal data as defined under Malaysia's Personal Data Protection Act 2010 (PDPA). This means permata123 is the entity that determines the purposes and means of processing your personal data collected through our platform.

This Privacy Policy sets out in detail:

• Types of personal data we collect from you
• The purpose for which such data is collected and used
• Third parties who may be granted access to your data and the circumstances under which this occurs
• How long we retain your data in our systems
• Your rights regarding your personal data and how to exercise them
• The security measures we take to protect your data

Permata123 is committed to ensuring that all personal data processing is carried out lawfully, fairly, and transparently, in line with the data protection principles set out under Malaysia's PDPA 2010.

Permata123 collects several categories of personal data depending on how you interact with our platform. We only collect data that is genuinely necessary for the stated purposes — we do not collect excessive data irrelevant to permata123's operations.

Data you provide directly:

• Identity Information: Full name, Malaysian identity card number (MyKad), date of birth, and gender collected upon permata123 account registration.
• Contact Information: An active Malaysian mobile number, email address, and where applicable, your Malaysian residential address.
• Financial Information: Details of the payment methods you use for deposits and withdrawals — including e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or FPX accounts (Maybank2u, CIMB Clicks). permata123 does not directly store your payment password or PIN information.
• KYC Verification Documents: A copy of the identity card or passport submitted during the Know Your Customer (KYC) process for identity verification.

Automatically collected data:

• Platform Usage Data: Your permata123 game history, bet types, bet amounts, wins, losses, and account activity.
• Technical Data: IP address, device type, operating system, web browser type, screen resolution, and language settings.
• Approximate Location Data: General location based on your IP address for the purpose of verifying that you are accessing from Malaysia.
• Cookie Data: Information collected through cookies and similar tracking technologies as described in section 7 of this policy.

Permata123 uses collected personal data only for legitimate and necessary purposes. Every use of data has a solid legal basis under PDPA 2010 — whether grounded in contractual necessity, legitimate interest, or legal compliance.

The primary purposes for which permata123 uses your data:

• Service Provision: Managing your permata123 account, processing deposits and withdrawals, maintaining game records, and providing access to all platform features.
• Identity Verification & KYC: Verifying your identity to meet anti-money laundering (AML) compliance requirements and to prevent fraud.
• Platform Security: Detecting and preventing fraudulent activity, multiple account usage, bonus abuse, and any conduct that violates the permata123 Terms & Conditions.
• Customer Support: Resolving enquiries, complaints, and technical issues that you report to the permata123 support team.
• Service Communications: Sending important notifications relating to your account, transactions, security updates, and changes to permata123's policies.
• Marketing (with consent): Sending promotional information, bonus offers, and the latest permata123 news, provided you have given consent to receive marketing communications.
• Legal Compliance: Meeting the reporting and regulatory compliance requirements set by the relevant authorities.
• Platform Improvements: Analysing usage patterns in aggregate (not at the individual level) to improve the user experience and technical performance of permata123.

Permata123 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is a core principle we never compromise on.

That said, there are limited situations where permata123 may share your personal data with carefully selected third parties:

• Payment Service Providers: Transaction information that must be shared with e-wallet and banking providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) solely for the purpose of processing your deposits and withdrawals.
• Game Software Providers: Minimum gameplay data required by selected game providers (such as Pragmatic Play, NetEnt, and Playtech) to ensure games function correctly within the permata123 platform.
• Technology Providers: Companies that provide the technical infrastructure, cloud services, analytics, and cybersecurity capabilities that enable permata123 to operate. All such providers are bound by strict data processing agreements.
• Relevant Authorities: Law enforcement agencies, regulatory bodies, or courts where required by Malaysian law or a valid court order.

Permata123 invests significantly in security infrastructure to protect your personal data against unauthorised access, use, disclosure, alteration, or destruction. We employ multiple layers of technical and organisational security controls to keep your data safe at all times.

Key security measures employed by permata123:

• 256-bit SSL Encryption: All communications between your browser or app and permata123's servers are protected by 256-bit Secure Socket Layer (SSL) encryption — the same standard used by Malaysia's leading banking institutions.
• Encryption of Data at Rest: Sensitive data stored in the permata123 database is encrypted using industry-standard encryption algorithms.
• Strict Access Controls: Access to user personal data within permata123's internal systems is restricted to staff who genuinely require it to carry out their duties, enforced through a strict "minimum necessity" principle.
• 24/7 Security Monitoring: Automated security monitoring systems operate around the clock to detect and respond to any suspicious activity or attempted security breaches.
• Two-Factor Authentication: The permata123 login process uses OTP verification via your registered phone number as an additional layer of security.
• Payment Data Segregation: Sensitive payment information such as card details and bank account data is handled entirely by certified payment providers and is never stored directly within the permata123 system.

Permata123 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required under applicable Malaysian law. Data minimisation is central to our approach to data management.

• Active Account Data: For as long as your permata123 account remains active, your personal data and activity records are retained for the purposes of service delivery and regulatory compliance.
• After Account Closure: Financial transaction records and KYC documents are retained for a minimum of 7 years after account closure, in line with Malaysia's anti-money laundering (AML) legal requirements.
• Security Logs: Security activity logs are retained for 2 years for investigation purposes in the event of a dispute or security incident.
• Marketing Data: Data used for marketing communications will be deleted promptly once you withdraw your consent to receive such communications.

Once the retention period expires, permata123 will securely delete or anonymise your personal data in a manner that prevents it from being recovered or linked back to you.

Permata123 uses cookies and similar technologies to enhance the user experience, maintain platform security, and understand how players interact with our platform. Cookies are small text files stored on your device when you visit permata123.

You can manage cookie usage through your browser settings. Please note, however, that disabling certain cookies may affect the functionality of some areas of the permata123 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding your personal data held by permata123. We fully respect these rights and have clear procedures in place to help you exercise them.

• Right of Access: You have the right to request a copy of the personal data permata123 holds about you. Requests will be processed within 21 business days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you in the permata123 system.
• Right to Withdraw Consent: For data processed on the basis of your consent (such as marketing communications), you may withdraw that consent at any time without affecting the validity of prior processing.
• Right to Object to Processing: Under certain circumstances, you have the right to object to permata123's processing of your personal data, particularly for direct marketing purposes.
• Right to Request Erasure: In certain circumstances permitted by law, you may request that permata123 delete your personal data, provided that mandatory data retention requirements do not apply.

To exercise any of the rights above, please contact permata123 by email at support@permata123.run, clearly stating your request. permata123 may need to verify your identity before processing any request relating to personal data, in order to safeguard your account security.

The permata123 platform is intended exclusively for adults aged 18 and above. We do not knowingly collect, store, or process the personal data of individuals under the age of 18.

Permata123 conducts age verification during the registration process and may request additional verification documents at any time if there is doubt about the account holder's age. Should permata123 discover that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the associated account.

Permata123 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. Each new version will be published on this page with a clear update date at the top of the document.

For material amendments that significantly affect your privacy rights, permata123 will endeavour to notify you via an in-platform notification or by email to your registered address at least 14 days before the changes take effect. Your continued use of the permata123 platform after the effective date will be considered your acceptance of the amended Privacy Policy.

We encourage you to review this page periodically to stay informed about how permata123 manages your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or how permata123 handles your personal data, please do not hesitate to reach us through the following channels:

• Privacy Email: support@permata123.run (please state "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24 hours a day, 7 days a week on the permata123 platform

Our Bahasa Malaysia-proficient team will respond to privacy-related enquiries within 3 working days. For more complex data access requests, the processing period is up to 21 working days as stipulated under Malaysia's PDPA 2010.

Permata123 also accepts privacy-related complaints in writing. If you are not satisfied with how we have handled your privacy complaint, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia.