Privacy Policy — Pesiar88

This Privacy Policy (hereinafter referred to as the "Policy") is issued by pesiar88 (hereinafter referred to as "pesiar88", "we", "us", or "the Platform") and governs the collection, use, storage, disclosure, and protection of personal data submitted by users (hereinafter referred to as "User", "you", or "Player") of the pesiar88 website located at https://pesiar88.cam and all associated services.

Pesiar88 is committed to handling your personal data with integrity, transparency, and strict confidentiality. We recognise that our users, including the significant proportion of Malaysian players accessing the Platform from cities such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam, place considerable trust in us when they share personal information. We do not take that trust lightly.

This Policy should be read in conjunction with pesiar88's Terms & Conditions, which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail in respect of matters pertaining to account conduct and gaming operations.

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:

• "Personal Data" — Any information that identifies or could be used, alone or in combination with other information, to identify a specific natural person, including but not limited to name, national identification number, email address, telephone number, financial account details, and IP address.
• "Processing" — Any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — Pesiar88, being the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — Any third party that processes Personal Data on behalf of pesiar88 in accordance with this Policy and applicable data protection law, such as payment service providers and KYC verification services.
• "KYC Data" — Identity verification documentation submitted by Users pursuant to Know Your Customer requirements, including but not limited to copies of MyKad, passports, proof of address, and proof of payment method ownership.
• "Sensitive Data" — A subcategory of Personal Data warranting heightened protection, including financial account details, government-issued identification numbers, and health-related information (relevant in the context of responsible gambling requests).
• "Cookies" — Small data files stored on your device by your web browser that enable the Platform to recognise your device and remember certain preferences or session information.

Pesiar88 collects the following categories of personal data from users of the Platform. We collect only what is necessary for the stated purposes outlined in Clause 5 of this Policy.

Pesiar88 collects personal data through the following channels and mechanisms:

• Registration Form: Information you provide directly when creating a new pesiar88 account, including name, date of birth, email address, and contact number.
• KYC Submission Portal: Identity and address verification documents submitted voluntarily as part of the account verification process prior to withdrawal processing.
• Deposit and Withdrawal Transactions: Payment method details and transaction metadata generated when you make a deposit or submit a withdrawal request using Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or USDT TRC20.
• Platform Interaction: Gaming activity, betting history, session data, and behavioural analytics generated automatically as you interact with casino games and sports betting markets on the Platform.
• Customer Support Interactions: Information voluntarily provided by you when contacting pesiar88 support via live chat, WhatsApp, or email, including the content of your queries and any supporting documents attached.
• Cookies and Tracking Technologies: Technical and session data collected automatically via browser cookies, server logs, and similar technologies as described in Clause 11 of this Policy.
• Third-Party Verification Services: In certain circumstances, pesiar88 may receive supplementary identity or fraud risk information from licensed third-party KYC and AML service providers for the purpose of verifying your identity and assessing risk.

Pesiar88 processes your personal data for the following clearly defined purposes. We do not process personal data for purposes that are incompatible with those stated below.

Pesiar88 processes your personal data on one or more of the following legal grounds, in compliance with applicable data protection law:

• Contractual Necessity: Processing required to perform the contract between you and pesiar88, including account creation, payment processing, and provision of gaming and betting services.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC verification, anti-money laundering (AML) obligations, and regulatory reporting duties under our gaming licence.
• Legitimate Interests: Processing necessary for pesiar88's legitimate interests — including fraud detection, platform security, and improvement of services — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing undertaken on the basis of your explicit consent, where required — for example, in relation to certain optional communications or the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Pesiar88 does not sell, rent, or otherwise transfer your personal data to third parties for commercial purposes. Data is shared only in the following limited circumstances and subject to appropriate contractual safeguards:

• Payment Processors: Financial transaction data is shared with licensed payment service providers — including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow infrastructure, and FPX banking networks (Maybank, CIMB, Public Bank, Hong Leong Bank) — solely to process your deposit and withdrawal requests.
• KYC & AML Service Providers: Identity documents and verification data may be shared with licensed third-party KYC and AML service providers solely for the purpose of identity verification and fraud risk assessment.
• Game Studio Providers: Pseudonymised gaming session data may be shared with licensed game providers for the purpose of game outcome verification, dispute resolution, and regulatory audit compliance. Real names and full financial details are not shared with game studios.
• Regulatory and Law Enforcement Authorities: Pesiar88 may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required or compelled to do so by applicable law, court order, or regulatory direction.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, personal data held by pesiar88 may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. Users will be notified of any such transfer in advance where reasonably practicable.

As an internationally operated platform, pesiar88 may process or store certain personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, pesiar88 ensures that adequate safeguards are in place to protect your data to a standard equivalent to that which would apply within Malaysia.

Such safeguards may include contractual data protection clauses with receiving parties, processing only within jurisdictions recognised as providing adequate levels of data protection, and applying internal data governance standards that exceed minimum statutory requirements.

If you have questions about the specific countries to which your data may be transferred, please contact us using the details provided in Clause 15 of this Policy.

Pesiar88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulatory obligation. The following general retention guidelines apply:

• Active Account Data: Personal data relating to an active account is retained for the duration of your relationship with pesiar88 and for a minimum period of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC Documents: Identity verification documents are retained for the period required by the applicable regulatory framework governing our gaming licence, which is typically a minimum of five (5) years from the date of account closure or last transaction.
• Transaction Records: Financial transaction records, including deposits and withdrawals processed in MYR via all supported payment methods, are retained for a minimum of five (5) years for regulatory compliance and audit purposes.
• Customer Support Records: Records of customer support interactions are retained for a minimum of two (2) years from the date of the last interaction to support dispute resolution and quality assurance purposes.
• Technical and Log Data: Server logs and technical data collected via cookies and tracking technologies are typically retained for a rolling period of twelve (12) months, unless retention for a longer period is required for security investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with industry-standard data destruction procedures.

Pesiar88 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• Transport Encryption: All data transmitted between your device and pesiar88 servers is encrypted using TLS 1.2 or higher protocols. Our platform uses HTTPS on all pages with valid SSL certificates.
• At-Rest Encryption: Personal data stored in our databases, including KYC documents and financial records, is encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access to sensitive data is logged and subject to periodic access review.
• Two-Factor Authentication: Pesiar88 supports and encourages users to enable two-factor authentication (2FA) on their accounts to provide an additional layer of protection beyond password credentials.
• Fraud Detection Systems: Automated systems monitor the Platform continuously for suspicious activity, unusual transaction patterns, and potential security breaches, triggering human review where anomalies are detected.
• Incident Response: Pesiar88 maintains a documented data breach response procedure. In the event of a security incident that is likely to result in a high risk to your rights and freedoms, you will be notified promptly in accordance with applicable law.

Pesiar88 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session security, and analyse aggregated usage patterns for the purpose of improving our services for Malaysian players.

The following categories of cookies are used on the Platform:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These cookies enable core functions such as secure login sessions, account authentication, and shopping cart/balance management. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences and settings, such as your preferred language, display preferences, and previously visited sections, to provide a more personalised experience.
• Analytics Cookies: Used to collect anonymised, aggregated data about how Users interact with the Platform — including pages visited, time spent, and features used — to help us improve the Platform's design, performance, and content relevance for our Malaysian audience.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats by analysing technical signals associated with Platform access.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary cookies may impair your ability to use certain Platform features. Pesiar88 does not use third-party advertising cookies or cross-site tracking technologies for commercial profiling purposes.

Subject to applicable law and certain statutory limitations, you have the following rights in respect of personal data held about you by pesiar88. To exercise any of these rights, please contact our Data Protection team using the details in Clause 15. We will respond to all valid requests within thirty (30) calendar days.

Pesiar88 strictly prohibits the registration of accounts by persons under 21 years of age. The Platform is intended solely for adults who meet the minimum age requirement of 21 years, which is enforced through mandatory identity verification during the KYC process.

Pesiar88 does not knowingly collect personal data from individuals below the age of 21. In the event that we become aware that personal data of a person below the age of 21 has been collected — whether through misrepresentation during registration or otherwise — we will immediately suspend the relevant account, void all bets and activity, return any deposited funds to the originating payment method, and delete all personal data associated with the account as soon as is practicable.

If you have reason to believe that a minor has accessed the pesiar88 Platform or submitted personal data to us, please contact our support team immediately at the contact details provided in Clause 15.

Pesiar88 reserves the right to revise, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform functionality. The "Last Updated" date at the top of this Policy will be revised accordingly whenever material changes are made.

Where changes are considered material — meaning they significantly affect how your personal data is processed or the rights available to you — pesiar88 will endeavour to notify you by posting a prominent notice on the Platform or, where technically feasible, by sending a notification to your registered email address prior to the changes taking effect.

Your continued use of the pesiar88 Platform following the effective date of any revision to this Policy constitutes your acknowledgement of the updated Privacy Policy. If you do not accept the revised terms, you must cease using the Platform and may request account closure in accordance with the provisions of the Terms & Conditions.

For all enquiries, requests, or complaints relating to the processing of your personal data by pesiar88, or to exercise any of the rights described in Clause 12 of this Policy, please contact us using the following details:

• Email: [email protected] (plain text — not a clickable link). For data protection matters, please use the subject line: "Data Protection Request — [Your Registered Username]".
• Live Chat: Available 24/7 via the pesiar88 Platform. For data protection requests submitted via live chat, please request escalation to our compliance team.
• Response Timeframe: Pesiar88 will acknowledge receipt of all data protection requests within 5 business days and provide a substantive response within 30 calendar days. In cases of complexity, an extension of up to an additional 30 days may apply, and you will be notified accordingly.