P200m Privacy Policy —
Your Data is Safe, Confidential & Protected

P200m is an online betting platform operating in the Malaysian market. As a platform that handles members' financial and personal information, we take data protection responsibilities very seriously. This Privacy Policy is designed to provide you with full transparency on how we manage your data.

This policy applies to all personal data collected through p200m's various channels, including the main p200m website, mobile applications (where applicable), interactions with the customer support team, financial transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and other local Malaysian banks, as well as any written or verbal communications between you and p200m.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the processing of personal data in the commercial sector in Malaysia. As a company operating for Malaysian users, p200m is bound by PDPA requirements in all aspects of handling members' personal data.

If you have any questions about this Privacy Policy or how p200m handles your data, you may contact our privacy team through the channels listed at the end of this document. We aim to respond to all privacy-related enquiries within 3 business days.

P200m collects your personal data in several ways — directly when you provide it to us, automatically when you use our platform, and occasionally through legitimate third-party sources such as payment service providers. Below is a detailed breakdown of the types of data we collect:

Data you provide directly to us:

• Full name as it appears on your identity document
• An active Malaysian mobile number
• Account password (stored as a non-reversible hash)
• Financial information required to process deposits and withdrawals (relevant e-wallet or bank account number)
• Identity verification documents such as a photo of your ID card when requested for the KYC (Know Your Customer) process
• Information you share when contacting customer support, including chat logs

Data collected automatically during platform use:

• IP address and network information
• Device type, operating system, and web browser used
• In-platform activity history, including games played, bets placed, and results
• Deposit and withdrawal records and transaction history
• Time and duration of each login session
• Usage data for platform features, including the sections most frequently visited
• Cookie and tracking technology data as described in Section 06

P200m uses members' personal data solely for legitimate and necessary purposes. We do not use your data for any purpose not stated in this policy without first obtaining your explicit consent. The permitted purposes for data use are as follows:

Platform operation and account management purposes:

• Creating and managing your p200m member account
• Verifying your identity during login and key transactions
• Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX
• Processing withdrawal requests to your payment account
• To manage the VIP programme and provide rewards appropriate to your membership tier
• To provide customer support when you need assistance

Security and legal compliance purposes:

• Detecting and preventing fraud, money laundering, and suspicious activity
• Verifying that you meet the eligibility requirements, including the minimum age of 18
• Complying with applicable legal requirements, regulations, or court orders
• Maintaining internal audit records for risk management purposes
• Monitoring usage patterns to identify indicators of problem gambling in the context of responsible gaming

Service improvement purposes:

• Analysing usage patterns to improve the platform's interface and overall user experience
• Testing new features and ensuring platform stability through technical monitoring
• Sending relevant service communications such as transaction confirmations and security notifications
• To keep you informed about relevant p200m promotions and offers, where you have given consent to receive marketing communications

P200m does not sell, rent, or share members' personal data with third parties for marketing or commercial purposes. This is a core commitment that will not change. That said, there are limited situations where p200m needs to share data with specific parties to keep the platform running properly or to meet legal obligations.

Third parties that may receive your data in limited and legitimate contexts:

• Payment Service Providers: Required transaction information is shared with providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and the FPX gateway to process your deposits and withdrawals. Such sharing is limited strictly to the information necessary for processing the relevant transaction.
• Licensed Game Providers: Third-party game providers that supply slots, Live Casino, and other games on the p200m platform may receive limited game session data necessary to operate those games. They are bound by strict data protection agreements with p200m.
• Statutory Authority: p200m will disclose data when required by Malaysian law or upon receipt of a valid order from a competent authority such as the police, a court, or a relevant government agency. In such cases, we will disclose only the minimum data necessary.
• Technical Service Providers: Companies that assist p200m in managing technical infrastructure, such as cloud server services and security monitoring systems, may have limited access to technical data. All such providers are bound by strict confidentiality agreements.

In all data-sharing cases described above, p200m ensures that only the minimum necessary data is shared, that recipients are bound by confidentiality obligations equal to or stricter than this policy, and that there is a valid legal basis for each instance of data sharing.

Member data security is p200m's highest technical priority. We continuously invest in security infrastructure and follow industry best practices to ensure your data is protected against unauthorised access, loss, alteration, or inadvertent disclosure.

Technical security measures we employ:

• Encryption of Data at Rest: All personal and financial data stored in p200m's databases is encrypted using AES-256 (Advanced Encryption Standard 256-bit) — the encryption standard used by leading banks and intelligence agencies worldwide.
• Data Encryption in Transit: All communications between your device and p200m's servers are protected by TLS 1.3 (Transport Layer Security), ensuring that data cannot be intercepted in transit.
• Two-Factor Authentication: p200m offers two-factor authentication (2FA) as an additional layer of security to protect your account from unauthorised access even if your password becomes known to another party.
• 24/7 Security Monitoring: p200m's security team continuously monitors platform activity to identify any suspicious patterns or intrusion attempts. Our automated alert system responds to threats within a very short timeframe.
• Regular Security Audits: p200m undergoes independent security audits by qualified third-party firms every quarter to identify and address vulnerabilities before they can be exploited.
• Hashed Password: Your account password is never stored in plain text. We use a strong one-way hashing algorithm, meaning even p200m's internal staff cannot view or recover your original password.

Despite all these security measures, no system can guarantee absolute 100% security. In the unlikely event of a data security breach affecting members' personal information, p200m is committed to notifying affected members within a reasonable timeframe and taking immediate steps to limit the impact of the breach.

Like most modern websites, p200m uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how our platform is used. This section clearly outlines the types of cookies we use and their purposes.

Types of cookies used by p200m:

• Session Cookies: A temporary cookie required to maintain your login session while you use the platform. It is deleted automatically when you log out or close your browser. Without this cookie, the platform cannot recognise you during your session and you would need to log in again each time you open a new page.
• Preference Cookies: Cookies that store your preferences — such as language, display settings, and other customisations — so you do not have to reconfigure them each time you visit the platform.
• Security Cookies: Cookies used to detect and prevent fraudulent activity, ensure that transactions are carried out by legitimate users, and protect your account from unauthorised access attempts.
• Analytics Cookies: Cookies that help us understand how users interact with the platform — which sections are visited most frequently, how long users spend on each page, and similar behaviour. This information is used solely to improve the platform and user experience. Analytics data is collected in aggregate form without identifying individual users.

You can manage and delete cookies through your web browser settings. Please note, however, that deleting or blocking essential cookies may affect certain functions of the p200m platform and your overall user experience. Security and session cookies in particular are required for the platform to function properly.

P200m retains members' personal data only for as long as necessary for the purposes stated in this policy or as required by Malaysian law. We do not keep data longer than needed — this is a data minimisation principle we strictly uphold.

Data retention period guidelines by category:

• Active Account Data: For as long as your account remains active at p200m, your personal data and account information will be retained to allow you to continue using the platform without interruption.
• Data After Account Closure: When an account is closed — whether at the member's request or by p200m — core account data will be retained for a minimum of 7 years for legal compliance and financial audit purposes as required under Malaysian law. After this period, data will be securely deleted.
• Financial Transaction Records: Records of deposits, withdrawals, and other financial transactions are retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements.
• Security Logs: Security activity and audit logs are retained for 2 years for the purposes of security incident investigation if required.
• Support Chat Logs: Communication records with the customer support team are retained for 2 years for quality control purposes and future reference as needed.
• Marketing Data: If you withdraw consent to receive marketing communications, we will stop using your data for that purpose within 14 business days.

All servers storing p200m member data are housed in data centres that meet stringent physical and digital security standards. Physical access to these data centres is restricted and monitored 24/7. Data is regularly backed up to separate locations to ensure recovery is possible in the event of a technical disaster.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have certain rights regarding your personal data held by p200m. p200m is committed to fully respecting and facilitating the exercise of these rights.

To exercise any of the rights above, please contact the p200m privacy team by email at support@p200m.biz with the subject line "Personal Data Request", clearly stating the right you wish to exercise along with the account information required to verify your identity.

P200m is a platform designed exclusively for adults aged 18 and above. We strictly prohibit children or minors under the age of 18 from registering or using our platform in any capacity.

P200m does not knowingly collect personal data from individuals under the age of 18. If we discover that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the account in question.

If, as a parent or guardian, you discover that your underage child has registered an account at p200m, please contact us immediately at support@p200m.biz so we can take appropriate action without delay.

In certain circumstances, the personal data of p200m members may need to be transferred to or accessed from outside Malaysia — for example, for technical support by service providers located in other countries, or for data backup purposes at secure international data centres.

When cross-border data transfers are required, p200m ensures that:

• The recipient country or territory has a level of data protection equivalent to or higher than Malaysia's
• A valid data transfer agreement exists between p200m and the receiving party, ensuring your data is protected to the required standard
• Data transfers are limited to the minimum data necessary
• Recipient parties are bound by confidentiality and data security obligations that are equivalent to or stricter than our own

P200m does not transfer members' personal data to countries that lack adequate data protection laws, unless with your explicit consent or as required by law.

P200m reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or added platform features. We are committed to keeping members informed of any material changes to this policy.

When there are significant changes to how we use your personal data, we will:

• Updating the "Last Updated" date displayed at the top of this document
• Displaying a clear notice on the p200m homepage regarding any changes that have taken place
• Sending notifications to members via email or in-platform alerts for significant changes

It is your responsibility to review this Privacy Policy from time to time. Your continued use of the p200m platform after any changes are published will be deemed as your acceptance of the updated policy. If you do not agree with the changes made, you have the right to close your account and discontinue use of the p200m platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or how p200m handles your personal data, our privacy team is ready to help. We treat every privacy enquiry seriously and strive to provide thorough, satisfactory responses.

Channels to reach the p200m privacy team:

• Dedicated Privacy Email: support@p200m.biz (use the subject line "Privacy Inquiry" for faster processing)
• Live Chat: Available 24/7 within the p200m platform — select the "Privacy & Data" category when starting a chat session
• WhatsApp & Telegram: Number and ID are available after logging in to your account via the Support section

For data rights requests (access, correction, deletion), we aim to provide an initial response within 3 business days and to fulfil the request within 14 business days from receipt of a complete request.