Privacy Policy

petros77 ("we", "us", "our", "the Platform") takes the privacy of its Members and website visitors seriously. This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal data in connection with the petros77 online casino and sports betting platform accessible at https://petros77.cam.

This Policy applies to all individuals who access or use the Platform, including registered Members, prospective Members, and any other visitors. It covers all data processing activities related to account registration, identity verification, payment processing, gameplay activity, customer support interactions, marketing communications, and general platform usage.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, all of which together govern your relationship with petros77.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifiers, or factors specific to that person's identity.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of Processing Personal Data. For users of the petros77 Platform, the Data Controller is petros77.
• "Data Processor" — a third party that Processes Personal Data on behalf of the Data Controller (e.g., payment processors, KYC service providers).
• "Member" — any individual who has completed registration and holds an active or suspended account on the petros77 Platform.
• "KYC" — Know Your Customer; the identity and document verification process conducted to confirm a Member's identity, age, and eligibility.
• "Cookies" — small data files placed on a user's device by a website to store information about their browsing session or preferences.

petros77 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, petros77 is responsible for determining why and how your Personal Data is processed, and for ensuring that such processing is conducted lawfully, fairly, and in a transparent manner.

petros77 engages certain third-party Data Processors to assist with specific operational functions — including payment processing, identity verification, fraud detection, and customer support infrastructure. All third-party processors are contractually bound to process Personal Data only in accordance with petros77's documented instructions and to maintain appropriate security standards.

petros77 collects Personal Data that is necessary to operate the Platform, comply with applicable obligations, and deliver a secure and personalised service. The following table summarises the categories of data we collect:

petros77 does not collect special category data (such as health data, racial or ethnic origin, or religious beliefs) unless expressly required for specific responsible gambling support functions, and only with your explicit consent.

petros77 collects Personal Data through the following channels and methods:

• Direct provision: Information you submit during account registration, KYC verification, payment transactions, support requests, or promotional opt-ins.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser data, and session logs via server logs and analytics tools.
• Cookies and tracking technologies: First-party cookies and similar technologies used to maintain session state, remember preferences, and gather aggregate usage analytics. See Section 12 for full details.
• Third-party sources: Identity and address verification data received from KYC service providers; fraud screening data from anti-fraud partners; payment confirmation data from payment processors including DuitNow, FPX, Maybank, CIMB, and cryptocurrency network confirmations.
• Referrals: Where a Member refers another individual to the Platform using the petros77 Refer A Friend programme, we collect the referred individual's contact details solely for the purpose of account invitation and referral reward processing.

petros77 processes your Personal Data for the following purposes:

1. Account creation and management: To register, maintain, and secure your petros77 account, including authentication and access control.
2. Identity verification and KYC compliance: To confirm your identity and age (21+ requirement), verify your eligibility to use the Platform, and satisfy applicable compliance obligations.
3. Payment processing: To process deposits and withdrawals via your chosen payment method, including e-wallets (Touch 'n Go, Boost, GrabPay), bank transfers (Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX), and cryptocurrency networks (BTC, ETH, USDT).
4. Service delivery: To provide access to games, sports betting markets, live casino tables, and all other Platform features you utilise.
5. Responsible gambling: To monitor gameplay patterns that may indicate problem gambling behaviour, apply deposit and loss limits, enforce self-exclusion requests, and fulfil our duty of care obligations.
6. Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and other prohibited activities.
7. Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions.
8. Marketing and promotions: To send you information about petros77 promotions, bonuses, and updates where you have provided consent or where we have a legitimate interest to do so. You may opt out of marketing communications at any time.
9. Platform analytics and improvement: To understand how Members use the Platform, identify technical issues, and improve service quality, performance, and user experience.
10. Legal and regulatory compliance: To meet our obligations under applicable laws and regulations, respond to lawful requests from authorities, and maintain required records.

petros77 processes Personal Data on the basis of one or more of the following lawful grounds:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and service delivery.
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including KYC, anti-money laundering (AML), and responsible gambling requirements.
• Legitimate interests: Processing carried out for purposes of fraud prevention, platform security, and operational analytics, where such interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, informed consent — primarily used for marketing communications and certain cookie deployments. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

petros77 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. Your data may be shared with third parties only in the following circumstances:

• Payment service providers: Financial institutions and payment processors handling your transactions, including DuitNow, FPX, e-wallet operators (Touch 'n Go, Boost, GrabPay), and cryptocurrency infrastructure providers. These parties receive only the data necessary to process your transaction.
• KYC and identity verification providers: Third-party services that perform identity document verification and age confirmation on our behalf as part of the KYC process.
• Fraud prevention and AML services: Specialist providers that assist in screening transactions and account behaviour for indicators of fraud or money laundering.
• Customer support platform providers: Technology partners that operate our live chat and ticketing infrastructure. These providers process communication data solely to facilitate support delivery.
• Game software providers: Licensed game studios whose software is integrated into the petros77 Platform. Gameplay data may be shared with providers for the purpose of game operation, auditing, and RTP certification.
• Regulatory and law enforcement authorities: Where petros77 is legally required to disclose data in response to a court order, regulatory demand, or lawful governmental request.
• Corporate transactions: In the event of a merger, acquisition, or sale of petros77 assets, Personal Data may be transferred to the acquiring entity, subject to continued protection under equivalent privacy standards.

petros77 operates internationally and may transfer your Personal Data to service providers or infrastructure located outside of Malaysia. When such transfers occur, petros77 ensures that appropriate safeguards are in place to protect your data, which may include:

• Standard contractual clauses approved under applicable data protection frameworks
• Transfers to jurisdictions recognised as providing an adequate level of data protection
• Other lawful transfer mechanisms appropriate to the circumstances

By using the petros77 Platform, you acknowledge that your data may be transferred to and processed in countries other than your country of residence. Where international transfers involve countries without equivalent data protection standards, petros77 implements contractual and technical safeguards to ensure your data remains protected to the standard described in this Policy.

petros77 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with applicable legal and regulatory retention obligations. The following general retention principles apply:

• Active account data: Retained for the duration of your membership and for a minimum of five (5) years after account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years following the end of the business relationship, as required under applicable financial crime prevention regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support records: Retained for three (3) years from the date of the interaction, or longer where the matter relates to an unresolved dispute or ongoing investigation.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, plus a reasonable period for suppression list management.
• Technical and analytics data: Aggregated or anonymised after a period not exceeding twenty-four (24) months from collection.

Where Personal Data is no longer required, it is securely deleted or anonymised in accordance with petros77's data destruction procedures.

petros77 implements a comprehensive range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Encryption in transit: All data transmitted between your device and the petros77 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Encryption at rest: Sensitive data stored on our systems, including KYC documents and financial data, is encrypted using strong encryption standards.
• Access controls: Strict role-based access controls ensure that Personal Data is accessible only to authorised petros77 personnel who require it for specific operational purposes.
• Two-factor authentication: Available to all Members to protect account access. petros77 staff accessing systems containing Personal Data are required to use multi-factor authentication.
• Intrusion detection and monitoring: Continuous monitoring of Platform systems for unusual access patterns, potential intrusions, and security anomalies.
• Data breach response: petros77 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected Members promptly and in accordance with applicable notification obligations.

petros77 uses cookies and similar tracking technologies to operate the Platform effectively and to provide a personalised experience. The following categories of cookies may be set when you visit the Platform:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that maintain your login state and security tokens. These cannot be disabled without affecting core Platform functionality.
• Functional cookies: Remember your preferences such as language selection, display settings, and previously selected payment methods to improve your experience on return visits.
• Analytics cookies: Collect anonymised or aggregated data about how visitors use the Platform — including pages visited, session duration, and navigation paths. This data helps petros77 identify performance issues and improve the Platform.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and other malicious behaviour on the Platform.

You may control cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. petros77 does not use third-party advertising cookies or place cookies for the benefit of third-party advertisers.

Subject to applicable law, you hold the following rights in respect of your Personal Data held by petros77. To exercise any of these rights, please contact us using the details in Section 17.

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is being processed.
• Right to Rectification: You may request the correction of inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for continued processing. Note that this right is subject to our legal obligation to retain certain records for compliance purposes.
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a structured, machine-readable copy of your Personal Data to transfer to another service provider.
• Right to Object: You may object to processing of your Personal Data carried out on the basis of legitimate interests, including processing for direct marketing purposes. Objections to direct marketing will always be honoured.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a relevant data protection authority if you believe your data has been processed unlawfully.

petros77 will respond to all verified data rights requests within thirty (30) days of receipt. Where requests are complex or numerous, we may extend this period by a further sixty (60) days with prior notice to you.

The petros77 Platform is strictly for individuals aged 21 and above. petros77 does not knowingly collect Personal Data from persons under the age of 21. Age verification is a mandatory component of the KYC process, and accounts held by persons determined to be under 21 years of age will be immediately suspended and all associated data handled in accordance with applicable legal requirements.

The petros77 Platform does not contain links to external third-party websites. However, the Platform integrates third-party services including game providers, payment processors, and support infrastructure providers. These third parties operate under their own privacy policies and petros77 is not responsible for the data practices of third-party services beyond its direct contractual obligations with them as Data Processors.

petros77 carries out due diligence on all third-party service providers prior to engagement and requires contractual commitments regarding data protection standards as a condition of any data processing arrangement.

petros77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. The effective date and last updated date at the top of this Policy will be revised accordingly.

Where changes are material, petros77 will provide reasonable advance notice to registered Members via email or a prominent notice on the Platform. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with the amended Policy, you should cease using the Platform and may request account closure as described in our Terms & Conditions.

For any queries, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by petros77, please contact our support team using the following channels. Data protection requests are handled with priority.

Support is available in English, Bahasa Melayu, and Chinese. If you are dissatisfied with petros77's handling of a data protection concern, you have the right to escalate the matter to a relevant data protection supervisory authority in your jurisdiction.