Privacy Policy — permata123

§ 01 — Introduction

Introduction

permata123 ("we", "us" or "our") operates the website accessible at permata123.cam (the "Site"). This Privacy Policy ("Policy") describes how permata123 collects, uses, stores, discloses and safeguards the personal information of individuals ("you" or "User") who access or use the Site.

This Policy applies to all personal data processed in connection with the Site, including data provided by Users during account registration, identity verification, payment transactions, customer support interactions and general browsing of the Site.

By using the permata123 Site, you acknowledge that you have read and understood this Policy and agree to the processing of your personal data as described herein. This Policy should be read in conjunction with the Terms & Conditions, which govern your general use of the Site.

§ 02 — Definitions

Definitions

The following terms are used throughout this Policy and should be interpreted consistently:

§ 03 — Data We Collect

Data We Collect

permata123 collects personal data only where it is necessary to provide the services described on the Site, to comply with legal and regulatory obligations, or to improve the quality and security of the User experience. The categories of data we may collect include the following:

3.1 — Account and Identity Data

• Full legal name as it appears on a government-issued identity document;
• Date of birth (used to verify the 21+ age requirement);
• Malaysian identity card number or passport number, as submitted during KYC;
• Email address and chosen username;
• Residential address (including city — for example, Kuala Lumpur, Johor Bahru, Penang, Petaling Jaya or Shah Alam);
• Contact telephone number where provided.

3.2 — Financial and Transaction Data

• Payment method identifiers (e.g., masked bank account numbers, e-wallet account references for Touch 'n Go eWallet, Boost, GrabPay, DuitNow or FPX);
• Transaction history, including deposit amounts in MYR, withdrawal requests, bonus claims and wagering activity;
• Cryptocurrency wallet addresses where applicable (BTC, ETH, USDT).

3.3 — Technical and Usage Data

• IP address, browser type, operating system and device identifiers;
• Pages visited, session duration, navigation paths and interaction events;
• Referral source and search terms that led to the Site;
• Cookie identifiers and similar tracking technology outputs.

3.4 — Communications Data

• Content of messages sent to permata123 via email, live chat or any other supported channel;
• Records of customer support interactions, including query nature and resolution status;
• Survey responses and feedback submitted voluntarily.

3.5 — Responsible Gambling Data

• Self-exclusion requests and the parameters of any active exclusion;
• Deposit limit settings and modification history;
• Session limit and reality check preferences.

§ 04 — How We Use Your Data

How We Use Your Data

permata123 processes personal data for specific, identified purposes. The table below summarises the main processing activities, the categories of data involved and the corresponding purpose:

§ 05 — Legal Basis for Processing

Legal Basis for Processing

permata123 processes personal data on one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform obligations under the User agreement, including account management, transaction processing and KYC verification.
• Legal obligation: Processing required to comply with applicable anti-money laundering, data protection and other regulatory requirements.
• Legitimate interests: Processing carried out to pursue the legitimate interests of permata123 in preventing fraud, improving platform security and maintaining the integrity of the service, where those interests are not overridden by the rights of the Data Subject.
• Consent: Where required, processing is carried out on the basis of the User's freely given, informed and unambiguous consent, which may be withdrawn at any time without detriment to the User's access to services that do not depend on that consent.

§ 06 — Data Sharing

Data Sharing and Disclosure

permata123 does not sell personal data to third parties. Personal data may be shared in the following limited circumstances:

• Payment service providers: Financial data is shared with payment processors (including providers supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank and cryptocurrency network processors) to the extent necessary to complete approved transactions.
• Identity verification providers: Identity documents and associated data may be shared with third-party KYC and fraud detection services engaged by permata123 for compliance purposes.
• Analytics and technology providers: Technical and usage data may be shared with service providers who assist in operating, maintaining and improving the Site. Such providers are contractually bound to process data only on permata123's instructions and to maintain appropriate security standards.
• Regulatory and law enforcement authorities: permata123 may be required to disclose personal data to regulators, law enforcement agencies or courts in response to lawful requests, including those relating to anti-money laundering investigations or court orders.
• Business transfers: In the event of a merger, acquisition or sale of the permata123 business, personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

§ 07 — Data Retention

Data Retention

permata123 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five years following account closure, in order to meet anti-money laundering record-keeping requirements.
• Transaction data: Retained for a minimum of five to seven years following the date of each transaction, consistent with applicable financial record-keeping obligations.
• Customer support records: Retained for three years from the date of each support interaction unless a longer retention period is required for ongoing dispute or legal proceedings.
• Technical and usage data: Retained in identifiable form for up to twenty-four months from collection, after which it may be anonymised and retained for analytical purposes without restriction.
• Responsible gambling records: Self-exclusion records are retained for the duration of the exclusion period and for five years following its expiry, to prevent premature re-registration.
• Consent records: Records of consent and consent withdrawal are retained for as long as necessary to demonstrate compliance with applicable data protection requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard methods that prevent reconstruction of the original data.

§ 08 — Security Measures

Security Measures

permata123 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, disclosure or alteration. These measures include, without limitation:

• Encryption of personal data in transit using industry-standard protocols;
• Access controls limiting system access to authorised personnel with a documented need;
• Regular security assessments and vulnerability reviews of platform infrastructure;
• Monitoring and logging of access to systems that process personal data;
• Staff training on data protection obligations and security best practices.

Notwithstanding these measures, no method of transmission over the internet or electronic storage is completely secure. permata123 cannot guarantee absolute security but commits to maintaining measures proportionate to the risks associated with the data it processes.

§ 09 — Cookies & Tracking

Cookies and Tracking Technologies

permata123 uses cookies and similar tracking technologies to support the operation of the Site, to analyse usage patterns and to enhance the User experience. The following categories of cookies may be deployed:

• Strictly Necessary Cookies: Essential to the functioning of the Site; for example, maintaining your session state after login. These cannot be disabled without affecting core functionality.
• Functional Cookies: Remember User preferences such as language settings and notification preferences to provide a more consistent experience across sessions.
• Analytical Cookies: Collect aggregated information about how Users navigate the Site, which pages are visited most frequently and where errors occur, in order to improve performance and content.
• Preference Cookies: Store certain display or interface settings chosen by the User to avoid the need to reconfigure on each visit.

Users can manage cookie preferences through their browser settings. Disabling certain categories of cookies may affect the availability of some features. Most modern browsers provide controls to view, manage, restrict or delete cookies; please refer to your browser's help documentation for specific instructions.

§ 10 — Your Rights

Your Data Protection Rights

Subject to applicable law and the specific circumstances of your request, you may exercise the following rights in relation to your personal data held by permata123:

To exercise any of the above rights, submit a written request to permata123 from the email address associated with your registered account. We will acknowledge your request within a reasonable period and aim to respond substantively within thirty calendar days. Where requests are complex or numerous, this period may be extended by a further thirty days, with notification.

permata123 will not discriminate against Users for exercising their data protection rights. However, certain rights may be subject to exceptions where processing is required to comply with legal obligations or to defend against legal claims.

§ 11 — Minors & Age Policy

Minors and the 21+ Age Requirement

permata123 is intended exclusively for adults aged 21 and above. We do not knowingly collect, use or store personal data relating to individuals under the age of 21. Age verification is applied at registration and may be reinforced through KYC document checks at any point during the account lifecycle.

If a parent or legal guardian becomes aware that a minor has provided personal data to permata123, they should contact us immediately so that the data may be identified and deleted. permata123 will take prompt action upon receiving such a notification.

Adults who share a device with minors are responsible for ensuring that the permata123 Site is not accessible to those individuals. parental control tools and device management features can help restrict access where appropriate.

§ 12 — Policy Amendments

Amendments to This Privacy Policy

permata123 reserves the right to update or revise this Privacy Policy at any time, including in response to changes in applicable law, shifts in data processing practices or updates to Site functionality. When material changes are made:

• The revised Policy will be published on this page with an updated "Last updated" date visible at the top;
• Where practicable, registered account holders may receive notification of material changes via their registered email address or through an in-platform notice;
• Continued use of the Site following publication of the revised Policy constitutes acceptance of those changes.

Users are encouraged to review this Policy periodically, particularly before submitting sensitive personal information. Archived versions of this Policy may be made available on request.

§ 13 — Contact Us

Contact Us

If you have any questions, concerns or requests in relation to this Privacy Policy or permata123's data processing practices, please contact the permata123 team. All data protection enquiries should be submitted in writing, clearly identifying the account in question and the specific concern or right being exercised.

Email: [email protected] (plain text — not a clickable link)

Please allow up to thirty calendar days for a substantive response to data protection requests. In the event that a satisfactory resolution cannot be reached through direct communication, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

For questions about responsible gambling tools, self-exclusion or deposit limit settings, please visit the dedicated Responsible Gambling page.