pedas99 Privacy Policy

1.1 This Privacy Policy is issued by the pedas99 platform ("pedas99", "We", "Us", or "Our"), accessible at pedas99.club. It governs our collection, processing, storage, use, and disclosure of personal data relating to Members and visitors to the pedas99 platform ("You" or "Your").

1.2 pedas99 is committed to protecting the privacy and personal data of all individuals who interact with our platform. We process personal data in accordance with applicable data protection laws and the principles of transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

1.3 By registering an account with pedas99, accessing our website, or otherwise using any pedas99 service, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this policy, please cease using the platform and contact our support team to request account closure.

1.4 This Privacy Policy should be read alongside the pedas99 Terms & Conditions, which governs your use of the platform as a whole. Definitions used in the Terms & Conditions apply in this policy unless the context requires otherwise.

2.1 pedas99 collects the following categories of personal data, as applicable to your interaction with the platform:

2.2 pedas99 does not collect or process special categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where explicitly required by applicable anti-money-laundering (AML) regulation and only to the extent strictly necessary.

pedas99 collects personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing identity verification, making a deposit, requesting a withdrawal, contacting support, or updating your account profile;
• Automated Technical Collection: Data collected automatically when you access the pedas99 platform, including IP address, device identifiers, browser characteristics, session duration, and navigation paths, via server logs and analytics tools;
• Cookies and Similar Technologies: Data collected through cookies, web beacons, and local storage technologies placed on your device during platform use (see Section 6);
• Third-Party Payment Processors: Transaction confirmation and reference data received from payment service providers (Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and others) when you make deposits or withdrawals;
• Identity Verification Services: Data received from third-party KYC and AML compliance service providers used to verify identity and age during account registration or withdrawal processing.

pedas99 processes personal data only where a lawful basis exists under applicable data protection law. The following table summarises our processing purposes and the corresponding legal basis:

5.1 pedas99 does not sell, rent, or trade your personal data to any third party for commercial purposes.

5.2 We may share your personal data with the following categories of third parties, strictly for the purposes identified and under appropriate contractual data protection obligations:

• Payment Service Providers: To process deposits and withdrawals. Sharing is limited to the data necessary to complete the specific transaction;
• KYC and AML Service Providers: To verify your identity, age, and source of funds in compliance with regulatory requirements;
• IT Infrastructure and Cloud Service Providers: Hosting, database management, and security services engaged by pedas99 to operate the platform;
• Gaming Platform Providers: Game studios and live casino operators whose games are integrated into the pedas99 platform, to the extent necessary for technical game operation;
• Regulatory Authorities and Law Enforcement: Where required by Applicable Law, court order, or regulatory requirement, including reporting obligations under AML legislation.

5.3 All third parties with whom pedas99 shares personal data are required to maintain appropriate technical and organisational security measures and to process data only for the specified purpose for which it was shared.

6.1 The pedas99 platform uses cookies and similar tracking technologies to operate core platform functionality, maintain authenticated sessions, and collect analytical data on platform usage.

6.2 The following categories of cookies are used:

• Strictly Necessary Cookies: Required for core platform function, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing platform functionality;
• Functional Cookies: Remember your preferences such as language settings, display preferences, and game lobby configuration;
• Analytical Cookies: Collect anonymised or pseudonymised data on how Members navigate and use the platform to enable ongoing improvement of the user experience;
• Marketing Cookies: Used to present relevant promotional content to you based on your platform activity. These are only deployed where you have provided appropriate consent.

6.3 You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the platform, though some personalisation features may be affected. Disabling strictly necessary cookies may impair core platform functionality including the login process.

7.1 pedas99 implements a layered security framework to protect personal data against unauthorised access, disclosure, alteration, and destruction, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and pedas99 servers;
• Encryption of sensitive data fields at rest within our database infrastructure;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Multi-factor authentication requirements for internal administrative access to production systems;
• Regular penetration testing and security audits by independent third-party security firms;
• Intrusion detection systems and 24/7 security monitoring of production infrastructure.

7.2 Full payment card numbers are never stored on pedas99 infrastructure. Payment processing is delegated entirely to PCI-DSS compliant third-party payment processors.

7.3 In the event of a personal data breach that presents a risk to the rights and freedoms of Members, pedas99 will notify affected individuals and relevant regulatory authorities as required by Applicable Law, within the prescribed notification timeframes.

8.1 pedas99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to comply with legal, regulatory, tax, or accounting obligations.

8.2 The following indicative retention periods apply:

• Account and Identity Data: Retained for the duration of the active account relationship, plus a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations;
• Transaction Records: Retained for a minimum of seven (7) years following the date of the transaction, in accordance with financial record-keeping requirements;
• Technical and Usage Data: Retained for up to twenty-four (24) months from the date of collection, following which it is anonymised or deleted;
• Support Communications: Retained for up to three (3) years from the date of the last communication, unless the subject matter necessitates longer retention.

8.3 Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes.

Subject to applicable data protection law, you have the following rights in respect of your personal data held by pedas99:

• Right of Access: To request a copy of the personal data we hold about you and information about how it is processed;
• Right to Rectification: To request correction of inaccurate or incomplete personal data;
• Right to Erasure: To request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations;
• Right to Restriction: To request that we restrict processing of your personal data in certain circumstances, for example where you contest its accuracy;
• Right to Data Portability: To receive your personal data in a structured, commonly used, machine-readable format where processing is based on your consent or a contract;
• Right to Object: To object to processing of your personal data for direct marketing purposes. You may withdraw marketing consent at any time through your account settings or by contacting support;
• Right to Withdraw Consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact the pedas99 support team. We will respond to all valid requests within thirty (30) days, or notify you if an extension is required.

10.1 The pedas99 platform is strictly restricted to individuals aged 21 and above. We do not knowingly collect personal data from persons under the age of 21.

10.2 If pedas99 becomes aware that personal data has been collected from an individual under the age of 21, that account will be closed immediately and all associated personal data will be deleted as soon as reasonably practicable, subject to any overriding legal retention obligations.

10.3 If you believe that a person under 21 has registered an account with pedas99, please notify us immediately at [email protected].

11.1 In operating the pedas99 platform, your personal data may be transferred to and processed in countries outside Malaysia, including where our technology service providers or game studio partners maintain servers or processing facilities.

11.2 Where personal data is transferred internationally, pedas99 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that required under applicable Malaysian data protection law, including through the use of standard contractual clauses or equivalent transfer mechanisms.

12.1 pedas99 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The most current version will always be accessible at pedas99.club/privacy-policy with the effective date prominently displayed.

12.2 Where changes are material, we will notify active Members by email or via an in-platform notification prior to the changes taking effect. Continued use of the pedas99 platform following the effective date of an updated policy constitutes acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data pedas99 holds about you, please contact our support team:

Email: [email protected]
Response Time: We aim to respond to all privacy-related enquiries within five (5) business days.

Our support team is available 24/7 and can assist with data access requests, marketing opt-outs, consent withdrawal, and any other privacy-related matter. For account security requests, please have your registered email address available for identity verification purposes.