Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by peti4d ("peti4d", "we", "us", "our"), the operator of the online gaming platform accessible at peti4d.asia. This Policy describes how peti4d collects, uses, processes, discloses, and safeguards personal data relating to players, registered users, and visitors to our platform ("you", "your", "data subject").

peti4d is committed to protecting your personal data and processing it fairly and transparently in accordance with applicable data protection legislation, including the standards required under our international gaming authority licence conditions. By registering an account or using any service offered at peti4d.asia, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside our Terms & Conditions, which are incorporated by reference and govern your use of the peti4d platform.

2. Data Controller

peti4d is the data controller responsible for the personal data collected through peti4d.asia. As data controller, peti4d determines the purposes and means of processing your personal data and is accountable for ensuring that processing is carried out lawfully, fairly, and transparently.

For all data protection enquiries, including requests to exercise your data subject rights, you may contact peti4d's data protection contact point via the support channels listed in Section 16 of this Policy.

3. Personal Data We Collect

peti4d collects personal data in the following categories:

4. How We Use Your Personal Data

peti4d uses your personal data for the following purposes:

• Account Management — to register your account, verify your identity, and maintain your player profile;
• Service Delivery — to operate gaming products, process bets, calculate and pay winnings, and manage your MYR wallet;
• Payment Processing — to facilitate deposits and withdrawals via your chosen Malaysian payment method;
• KYC & AML Compliance — to verify your identity and source of funds as required by our gaming licence conditions and applicable anti-money laundering obligations;
• Customer Support — to respond to your enquiries, resolve disputes, and provide technical assistance;
• Responsible Gaming — to monitor gaming patterns for signs of problem gambling and to apply or communicate responsible gaming tools where appropriate;
• Security & Fraud Prevention — to detect and prevent fraud, unauthorised account access, collusion, and other prohibited conduct;
• Platform Improvement — to analyse usage patterns and improve the performance, design, and functionality of the peti4d platform;
• Marketing — to send promotional communications where you have provided consent or where a legitimate interest applies, subject always to your right to opt out;
• Legal Compliance — to comply with applicable laws, court orders, and requests from regulatory or law enforcement authorities.

5. Legal Bases for Processing

peti4d processes your personal data on the following legal bases:

• Contractual Necessity — processing required to perform our obligations under the player agreement, including account management, payments, and game operation;
• Legal Obligation — processing required to comply with KYC, AML, gaming regulatory, and tax reporting requirements;
• Legitimate Interests — processing for fraud prevention, platform security, and business analytics, where such interests are not overridden by your rights;
• Consent — processing for marketing communications and optional analytics cookies, where you have given explicit consent that you may withdraw at any time.

6. Sharing Your Personal Data

peti4d does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to data processing agreements:

• Payment Processors — FPX network participants (Maybank, CIMB, Public Bank), Touch n Go eWallet, Boost, Visa, and Mastercard acquirers, to facilitate your transactions;
• KYC & Identity Verification Partners — licensed third-party identity verification services used to fulfil our AML and gaming licence verification obligations;
• Game Studio Providers — licensed game software providers who operate the live casino, slot, sportsbook, and table game products accessible through peti4d, to the extent necessary to deliver those services;
• IT & Cloud Infrastructure Providers — hosting and cloud service providers operating infrastructure on which peti4d's platform runs, subject to strict data security contractual obligations;
• Professional Advisers — lawyers, accountants, and auditors retained in connection with the operation of the business, on a confidential basis;
• Regulatory & Law Enforcement Authorities — gaming regulators, financial intelligence units, police, and courts where disclosure is required by law or regulatory obligation.

7. International Data Transfers

peti4d's primary operations and data storage are conducted within the jurisdiction of its gaming licence. Where personal data is transferred to third-party service providers located in other jurisdictions, peti4d ensures that appropriate safeguards are in place, which may include standard contractual clauses approved by the relevant data protection authority, binding corporate rules, or reliance on adequacy decisions.

If you require further information about the specific safeguards applied to international transfers of your personal data, please contact us using the details in Section 16.

8. Data Security

peti4d implements technical and organisational security measures appropriate to the risk presented by the processing of your personal data. These measures include:

• TLS 1.3 encryption for all data in transit between your device and peti4d servers;
• Encryption of sensitive data fields at rest using industry-standard algorithms;
• Bcrypt hashing with per-user salts for all stored passwords;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments;
• Automated anomaly detection systems monitoring for unauthorised access attempts;
• Incident response procedures compliant with applicable data breach notification requirements.

While peti4d takes all reasonable precautions, no data transmission over the internet can be guaranteed to be completely secure. You are responsible for maintaining the security of your own account credentials and for notifying peti4d promptly if you suspect unauthorised access.

9. Data Retention

peti4d retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, including compliance with legal and regulatory obligations. Indicative retention periods are as follows:

• Account and KYC records — retained for a minimum of 5 years following account closure, as required by applicable AML and gaming regulations;
• Transaction records — retained for a minimum of 5 years following the relevant transaction date;
• Gaming activity logs — retained for a minimum of 3 years;
• Support communications — retained for 2 years following resolution of the relevant matter;
• Marketing consent records — retained for the duration of your consent and for 1 year following its withdrawal to demonstrate compliance;
• Technical and server logs — retained for 90 days, unless required for a specific security investigation.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised.

10. Cookies & Tracking Technologies

peti4d uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies — required for the platform to function, including session authentication, security tokens, and load balancing. These cookies cannot be disabled without preventing access to core platform functionality;
• Functional Cookies — store your preferences such as language settings and responsible gaming tool configurations to enhance your experience;
• Analytics Cookies — used to collect aggregated, anonymised data about how players navigate and use the platform, enabling peti4d to identify and improve areas of the product. These require your consent;
• Session Replay / Heatmap Tools — where deployed, used to identify usability issues in anonymised form, subject to consent.

You may manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain functional cookies may affect the quality of your experience on the platform.

11. Your Data Subject Rights

Subject to applicable law, you have the following rights in relation to your personal data held by peti4d:

• Right of Access — to request a copy of the personal data we hold about you;
• Right to Rectification — to request correction of inaccurate or incomplete personal data;
• Right to Erasure — to request deletion of your personal data where there is no longer a lawful basis for us to retain it, subject to our legal and regulatory retention obligations;
• Right to Restriction — to request that we restrict the processing of your personal data in certain circumstances;
• Right to Data Portability — to receive a copy of your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity;
• Right to Object — to object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent — where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact peti4d via Live Chat or email as described in Section 16. We will respond to verified requests within 30 days. In complex cases, this period may be extended by a further 60 days, in which case you will be informed of the extension and the reasons for it.

12. Children's Privacy

The peti4d platform is strictly for persons aged 21 years and over. peti4d does not knowingly collect personal data from individuals under the age of 21. Where peti4d discovers that personal data has been submitted by an individual who is under 21, the relevant account will be immediately suspended, all collected data will be deleted as soon as practicable, and any deposits received may be returned pending verification.

If you are aware of a person under 21 who has registered with peti4d, please notify us immediately via Live Chat support.

13. Marketing Communications

peti4d may send you promotional communications about offers, bonuses, new game launches, and platform features by email or SMS where you have provided explicit consent to receive such communications during registration or subsequently through your account settings. You may withdraw your consent and opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email;
• Updating your communication preferences in your peti4d account settings;
• Contacting peti4d support via Live Chat or email.

Withdrawal of consent for marketing will not affect any other aspect of your account or your ability to use the peti4d platform. peti4d will continue to send you transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts) regardless of your marketing preferences, as these are necessary for the operation of your account.

14. Third-Party Links

The peti4d platform may contain references to or integrations with third-party services, including licensed game studio platforms operated by our game provider partners. peti4d is not responsible for the privacy practices of third-party operators. When you access any third-party service, you do so subject to that third party's own privacy policy. We encourage you to review the privacy policies of any third-party services you interact with in connection with your peti4d account.

15. Changes to This Privacy Policy

peti4d may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via the email address on file or through a platform notification, at least 14 days before the changes take effect where practicable.

The date of the most recent revision is displayed at the top of this Policy. Continued use of the peti4d platform following the effective date of any update constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you should close your account before the effective date of the changes.

16. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact peti4d through the following channels:

• Live Chat — available 24/7 from your peti4d account dashboard;
• Email — [email protected] (plain text — not a clickable link).

peti4d aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 days. Where a matter cannot be resolved to your satisfaction, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.