Privacy Policy pecah404 — Personal Data Protection for Malaysian Users

At pecah404, we believe privacy is more than a legal obligation — it is the foundation of the trust we build with every member. This Privacy Policy is written in plain, accessible language because we want you to genuinely understand how your personal data is handled, not simply sign a document you never read. If any part of this is unclear, please contact us at support@pecah404.net and we will address it promptly.

Pecah404 collects various types of personal data from members to keep the platform running smoothly and to deliver the best possible experience. The data we collect can be grouped into the following categories:

Data You Provide Directly:

• Full name as it appears on your identification document
• A valid and active email address
• An active Malaysian mobile number
• Date of birth (for age verification)
• Current residential address
• National identification number or passport number (when KYC verification is required)
• Payment method details you have registered (account holder name, e-wallet or bank account number)

Automatically Collected Data:

• IP address and associated geographic location information
• Device type, operating system, and web browser used
• The date, time, and duration of each login session
• Gaming records including bets placed, game outcomes, and transaction history
• Pages visited within the platform and your navigation patterns
• Cookie data and similar tracking technologies as further described in Section 8

Data From Third-Party Sources:

• Identity verification information from the KYC service providers we work with
• Transaction-related information from payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX
• Fraud prevention information from third-party security service providers

Pecah404 uses the personal data collected for the following purposes:

We only use your personal data for the purposes stated above, or for other related and compatible purposes. If we intend to use your data for a new purpose that differs significantly from the original, we will seek your consent beforehand or notify you through an appropriate notice.

Pecah404 processes your personal data on the basis of one or more of the following legal grounds, depending on the context of the processing in question:

• Contract Performance: Processing required to provide you with pecah404 services once you have registered and agreed to our Terms & Conditions — including processing deposits, running games, and processing winnings withdrawals.
• Legal Obligations: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, identity verification (KYC), and financial reporting mandated by relevant regulations.
• Legitimate Interests: Processing for legitimate business purposes such as fraud prevention, platform security enhancement, usage analysis to improve our services, and the protection of our legal rights — provided these interests do not override your privacy rights.
• Consent: For marketing communications and certain other purposes where your explicit consent is required — you may withdraw this consent at any time without affecting your eligibility to continue using pecah404's services.

Pecah404 never sells or rents your personal data to third parties. However, there are specific circumstances where we need to share your information with trusted third parties in order for our services to operate:

• Payment Providers: Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and banks via FPX (Maybank2u, CIMB Clicks, and others) require transaction information to process your deposits and withdrawals. These providers are governed by their own privacy policies and payment industry security standards.
• Game Providers: Slots, table, and Live Casino providers may receive session information necessary to run the games properly. Only the minimum required information is shared.
• Identity Verification (KYC) Providers: To meet legal requirements, we engage third-party services that verify member identities. These providers are subject to strict confidentiality agreements with pecah404.
• Lawful Authorities: Where required by law or a valid court order, pecah404 may be obligated to disclose your personal data to the relevant authorities. We will endeavour to inform you of any such disclosure unless prohibited from doing so by law.

Pecah404 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or to comply with applicable legal requirements. The following is a general guide to our data retention periods:

• Active Account Data: For as long as your account remains active on pecah404 and for a reasonable period following account closure.
• Financial Transaction Records: A minimum of 7 years from the date of the transaction, in line with applicable Malaysian financial and tax record-keeping requirements.
• Identity Verification (KYC) Records: Minimum 5 years after the business relationship ends, in line with applicable anti-money laundering requirements.
• Support Communication Logs: 3 years from the date of last communication, for reference and dispute resolution purposes.
• Cookie & Tracking Data: Depends on the type of cookie — see Section 8 for more details.

Once personal data is no longer needed and there is no legal obligation to retain it, pecah404 will securely delete or anonymise it using industry-approved methods.

As a pecah404 member and as an individual whose data we process, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact our privacy team at support@pecah404.net clearly stating the right you wish to exercise along with your account details. We will process your request within 30 calendar days and inform you of the action taken.

Pecah404 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures we have in place include:

• 256-bit SSL Encryption for all data in transit between your device and pecah404 servers
• Data encryption at rest for sensitive information stored on our servers
• Role-based access control (RBAC) ensuring that only authorised personnel can access your personal data
• 24/7 security monitoring to detect and respond to any suspicious activity promptly
• Regular security audits by independent third parties to ensure our security standards remain current
• Privacy and security training for all pecah404 staff who handle member personal data
• Incident Response Plan to respond swiftly in the event of any data breach

While we implement robust security measures, no security system can guarantee 100% protection at all times. You also play an important role in keeping your account secure — choose a strong password, never share your login credentials, and notify us immediately if you suspect any suspicious activity on your pecah404 account.

Pecah404 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The types of cookies we use are:

• Essential Cookies: Cookies that are necessary for the platform to function properly — such as maintaining your login session and saving your language preference. These cookies cannot be disabled without affecting core platform functionality.
• Performance Cookies: Collects information about how you use our platform — the pages visited most frequently, time spent, and any errors encountered. This helps us improve platform performance and usability.
• Functional Cookies: Allows the platform to remember your preferences such as your username, chosen language, and display settings, so you do not need to reconfigure them each time you visit.
• Security Cookies: Used to detect fraudulent activity, verify users, and protect the platform against cyber threats. These cookies are essential for keeping your account secure.

You can manage cookie settings through your web browser's preferences. However, disabling certain cookies may affect the functionality of the pecah404 platform. For guidance on managing cookies, please refer to your web browser's documentation.

Pecah404 is a digital entertainment platform designed exclusively for adults aged 18 and above. We do not knowingly collect, use, or store any personal data belonging to individuals under the age of 18.

If we discover that we have inadvertently collected personal data from a minor, we will take the following steps immediately:

• Closing the account in question immediately
• Deleting all collected personal data
• Refunding any deposits made, where feasible

If you become aware that a minor under the age of 18 has registered an account on pecah404, please notify us immediately at support@pecah404.net so that appropriate action can be taken.

In the course of operating pecah404, your personal data may need to be transferred to or processed in countries outside Malaysia — for example, by technology service providers or game providers operating abroad. In such cases, pecah404 ensures that:

• Data recipients outside Malaysia are bound by data protection agreements equivalent to the standards set under Malaysia's Personal Data Protection Act (PDPA)
• Appropriate safeguards are in place to ensure your data remains protected at all times, even when it is transferred outside Malaysia
• Such data transfers are carried out only when strictly necessary to deliver the services you use

Pecah404 reserves the right to update or modify this Privacy Policy at any time. Changes may arise due to updates in applicable laws, the introduction of new services, or improvements to our privacy practices.

For significant and material changes to how we use your personal data, we will:

• Sending email notifications to all active members at least 14 days before the changes take effect
• Displaying a clear notice on the pecah404 homepage regarding upcoming changes
• Updating the "Last updated" date at the top of this Privacy Policy

Your continued use of the pecah404 platform after any Privacy Policy changes take effect will be considered your consent to the amended policy. If you do not agree with any changes, please stop using the platform and contact us to close your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out to the pecah404 privacy team via:

• Email: support@pecah404.net
• Operating Hours: 24 hours a day, 7 days a week
• Language of Service: Bahasa Melayu
• Response Time: Typically within a few minutes; no longer than 24 hours for privacy-related enquiries

For formal privacy rights requests (access, correction, deletion, and others), please state clearly in your email that this is a privacy rights request so it can be directed to the appropriate team. We will acknowledge receipt of your request within 48 hours and provide a full response within 30 calendar days.