Privacy Policy – petron77

1. Introduction & Scope

This Privacy Policy ("Policy") is published by petron77 ("petron77", "we", "us", "our"), the operator of the online gaming platform accessible at petron77.club and all associated subdomains, mobile applications, and services (collectively, the "Platform").

This Policy explains how petron77 collects, processes, stores, uses, and protects personal data relating to individuals who visit, register with, or use the Platform ("you", "Player", "User"). It also describes your rights in relation to your personal data and how you may exercise them.

By registering an account or otherwise using the petron77 Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy should be read in conjunction with petron77's Terms & Conditions, which govern your use of the Platform.

petron77 is committed to protecting the privacy of all Malaysian players and handling personal data responsibly, in accordance with the obligations imposed by our international gaming licence and applicable data protection principles.

2. Data Controller

For the purposes of this Policy, petron77 acts as the data controller in respect of personal data collected through the Platform. As data controller, petron77 determines the purposes and means by which your personal data is processed.

If you have any questions regarding how petron77 handles your personal data, or wish to exercise any of your data rights set out in Section 12, please contact our Data Protection contact using the details provided in Section 15 of this Policy.

3. Data We Collect

petron77 collects the following categories of personal data:

3.1 Identity Data: Full legal name, date of birth, nationality, and government-issued identification details (e.g., Malaysian IC / MyKad number, passport number) collected during registration and KYC verification.

3.2 Contact Data: Email address, Malaysian mobile phone number, and residential address.

3.3 Financial Data: Payment method details (e.g., Touch n Go eWallet account identifiers, Boost account identifiers, bank account numbers for Maybank, CIMB, or Public Bank), transaction history, deposit amounts, withdrawal requests, and wallet balances. petron77 does not store full card numbers or payment credentials directly — these are handled by our licensed payment processors.

3.4 KYC Documentation: Copies or images of identity documents uploaded during verification, including selfie photographs used for liveness checks.

3.5 Usage Data: Information about how you interact with the petron77 Platform, including pages visited, games played, bet histories, session durations, login timestamps, and device information (IP address, browser type, operating system, device identifiers).

3.6 Communications Data: Records of communications between you and petron77, including live chat transcripts, support emails, and feedback submissions.

3.7 Responsible Gaming Data: Records of any responsible gaming tool activations, including deposit limit settings, self-exclusion requests, and cooling-off periods, where applicable.

4. How We Collect Your Data

petron77 collects personal data through the following means:

• Direct provision: Information you provide when registering an account, completing KYC, making deposits or withdrawals, contacting support, or responding to surveys or promotions;
• Automated collection: Technical data gathered automatically when you access the Platform, including via cookies, web beacons, server logs, and similar tracking technologies;
• Third-party sources: Identity verification data from KYC and AML screening providers; fraud risk signals from fraud detection services; payment confirmation data from licensed payment processors;
• Publicly available sources: Information from public registers or databases used for regulatory compliance and fraud prevention purposes.

5. Legal Basis for Processing

petron77 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the petron77 Platform services, including account management, payment processing, and game delivery;
• Legal obligation: Processing required to comply with petron77's licensing conditions, anti-money laundering obligations, fraud prevention requirements, and applicable data protection laws;
• Legitimate interests: Processing for fraud detection, platform security, product improvement, and responsible gaming enforcement, where those interests are not overridden by your rights;
• Consent: Processing for non-essential marketing communications, where you have opted in. You may withdraw consent at any time by updating your communication preferences in your petron77 account settings.

6. How We Use Your Data

petron77 uses collected personal data for the following purposes:

• Creating, verifying, and managing your petron77 account;
• Processing deposits, withdrawals, and other financial transactions in Malaysian Ringgit (MYR);
• Verifying your identity and age (21+ requirement) through KYC procedures;
• Detecting, investigating, and preventing fraud, money laundering, collusion, and other prohibited activity;
• Fulfilling legal and regulatory obligations under petron77's international gaming licence, including AML and responsible gaming reporting;
• Enforcing petron77's Terms & Conditions and other platform policies;
• Providing customer support and responding to enquiries and complaints;
• Administering bonuses, promotions, and loyalty programmes;
• Sending service-related communications (account notifications, security alerts, deposit confirmations);
• Sending marketing communications where you have consented to receive them;
• Improving and developing the petron77 Platform through aggregated and anonymised analytics;
• Enforcing responsible gaming tools and self-exclusion measures.

7. Sharing & Disclosure of Your Data

petron77 does not sell your personal data to third parties. We may share your data with the following categories of recipients where necessary:

7.1 Payment Processors. Licensed payment service providers including Touch n Go eWallet, Boost, and banking partners (Maybank, CIMB, Public Bank) receive financial data necessary to process your transactions.

7.2 KYC and AML Providers. Identity verification and anti-money laundering screening services receive identity documents and personal details necessary to fulfil petron77's regulatory compliance obligations.

7.3 Licensing and Regulatory Authorities. petron77's licensing authority may require access to certain account data, transaction records, and compliance reports. petron77 is obligated to comply with such requests.

7.4 Fraud Prevention Services. Fraud detection and cybersecurity providers may receive technical and behavioural data to identify and prevent fraudulent activity on the Platform.

7.5 Legal and Law Enforcement. Where required by applicable law, court order, or legitimate law enforcement request, petron77 may disclose personal data to relevant authorities.

7.6 Service Providers. Trusted third-party service providers engaged by petron77 to operate elements of the Platform (e.g., cloud hosting, customer support software) may process data on petron77's behalf under strict contractual data protection obligations.

All third parties with whom petron77 shares personal data are required to handle it in accordance with applicable data protection standards and are prohibited from using it for any purpose other than those specified by petron77.

8. International Data Transfers

Given the international nature of petron77's gaming licence and technology infrastructure, your personal data may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, petron77 ensures that appropriate safeguards are in place to protect your data, including contractual protections equivalent to those required under applicable data protection law.

By using the petron77 Platform, you acknowledge and consent to the transfer of your data in circumstances where such transfers are necessary for the performance of your contract with petron77 or for legitimate interests described in this Policy.

9. Data Retention

petron77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including legal, regulatory, and compliance obligations. Specifically:

• Account and transaction data is retained for a minimum of five (5) years from account closure, in compliance with anti-money laundering record-keeping obligations;
• KYC documentation is retained for the duration of the account and for a minimum of five (5) years thereafter;
• Communications data is retained for two (2) years from the date of the communication, unless required longer for dispute resolution;
• Responsible gaming records, including self-exclusion history, are retained in accordance with petron77's licensing obligations.

Where data is no longer required and there is no legal basis for retention, petron77 will securely delete or anonymise it.

10. Security Measures

petron77 implements and maintains appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the petron77 Platform;
• Encrypted storage of sensitive personal and financial data at rest;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Two-factor authentication (2FA) available for all player accounts;
• Automated anomaly detection for unusual login patterns and account activity;
• Regular security audits and vulnerability assessments of the petron77 infrastructure.

While petron77 takes all reasonable precautions, no system is entirely immune from security risks. You are responsible for maintaining the security of your own account credentials and for notifying petron77 promptly if you suspect any unauthorised access to your account.

11. Cookies & Tracking Technologies

The petron77 Platform uses cookies and similar tracking technologies to provide a functional, secure, and improved user experience. The categories of cookies used are as follows:

11.1 Strictly Necessary Cookies. These cookies are required for the Platform to function and cannot be disabled. They include session authentication tokens, security cookies, and cookies that remember your login state.

11.2 Analytics Cookies. petron77 uses first-party analytics to understand how players interact with the Platform — which games are most popular, how navigation flows work, and where technical issues occur. This data is aggregated and used to improve the petron77 experience. Analytics cookies do not identify you personally.

11.3 Preference Cookies. These cookies remember your settings and preferences, such as your language choice and display settings, so that you do not need to reconfigure them on each visit.

petron77 does not use third-party advertising cookies or behavioural tracking cookies for ad targeting. You can manage or disable non-essential cookies through your browser settings; however, disabling strictly necessary cookies may impair your ability to use the Platform.

12. Your Rights

Subject to applicable law and petron77's legal and licensing obligations, you have the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data petron77 holds about you;
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected;
• Right to Erasure: You may request deletion of your personal data where there is no longer a lawful basis for petron77 to retain it. Note that regulatory retention obligations may limit the scope of erasure requests;
• Right to Restriction: You may request that petron77 restrict the processing of your data in certain circumstances;
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request that your data be provided to you in a structured, commonly used, machine-readable format;
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing communications;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact petron77 using the details in Section 15. petron77 will respond to all valid requests within thirty (30) days. We may require identity verification before processing certain requests.

13. Children & Minors

The petron77 Platform is strictly restricted to individuals aged 21 years and above. petron77 does not knowingly collect personal data from persons under the age of 21. All accounts undergo mandatory KYC age verification. Where petron77 discovers that an account belongs to an underage individual, the account will be permanently closed, all associated data will be handled in accordance with applicable law, and the matter may be referred to relevant authorities.

If you are a parent or guardian and believe a person under 21 has accessed the petron77 Platform, please contact us immediately at the address in Section 15.

14. Changes to This Privacy Policy

petron77 may update this Privacy Policy from time to time to reflect changes in our practices, licensing obligations, or applicable data protection law. When material changes are made, petron77 will provide reasonable notice via the Platform or by email to your registered address. The "Last Updated" date at the top of this Policy indicates when it was most recently revised.

Your continued use of the petron77 Platform following the effective date of any updated Policy constitutes acceptance of the revised terms. If you do not agree to the revised Policy, you must cease using the Platform.

15. Contact Us

For questions, concerns, or requests relating to this Privacy Policy or petron77's data protection practices, please contact us at:

Note petron77 staff will never request your account password via email or live chat. If you receive such a request, treat it as a phishing attempt and report it immediately.