Privacy Policy — peri11

This Privacy Policy ("Policy") is issued by peri11 ("the Company", "we", "us", "our") and applies to all personal data collected, processed, stored, and shared in connection with the operation of the peri11 online casino and sports betting platform accessible at https://peri11.buzz and any associated mobile applications or interfaces (collectively, "the Platform").

peri11 is committed to safeguarding the privacy and personal data of all individuals who interact with the Platform, including registered players from Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and across Malaysia. We process personal data in accordance with applicable data protection principles, including those governing purposes limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.

By registering an account on peri11 and/or using our Services, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. If you do not agree with any part of this Policy, you should not create an account or use the Platform.

The following definitions apply throughout this Policy:

• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, directly or indirectly. This includes name, email address, phone number, payment account details, IP address, device identifiers, and behavioural data linked to an identified account.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, modification, disclosure, transfer, or deletion, whether by automated means or otherwise.
• "Data Controller" — peri11, in its capacity as the entity that determines the purposes and means by which Personal Data is processed.
• "Data Processor" — any third party engaged by peri11 to process Personal Data on the Company's behalf and under its documented instructions.
• "Consent" — a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their Personal Data for a stated purpose.
• "KYC Data" — identity verification documentation submitted by a Player for Know Your Customer compliance purposes, including copies of government-issued identification and proof of address.
• "Cookies" — small text files placed on a user's device by the Platform for the purpose of session management, preference storage, analytics, and personalisation.

peri11 collects the following categories of Personal Data from registered players and Platform visitors:

When you create a peri11 account, we collect: full legal name; date of birth; email address; Malaysian mobile telephone number; username; encrypted password; and, where applicable, the referral code of the player who invited you to the Platform.

To satisfy our KYC obligations and verify your identity prior to processing withdrawals above certain thresholds, we collect copies of: government-issued photo identification (Malaysian MyKad, passport, or driving licence); proof of current residential address (utility bill or bank statement dated within 3 months); and payment method ownership verification documentation (e.g., screenshot of your Touch 'n Go eWallet or Maybank account showing your registered name).

We record all deposit and withdrawal transactions, including: transaction amounts in Malaysian Ringgit (MYR) or cryptocurrency equivalent; timestamps; payment method type (e.g., DuitNow, FPX, Boost eWallet, GrabPay, USDT TRC20); partial payment account identifiers (not full card or account numbers); and transaction reference numbers issued by payment gateways.

peri11 records all gaming sessions and betting activity associated with your account, including: game titles played; bet amounts and outcomes; bonus offers claimed and wagering progress; session timestamps and duration; and responsible gambling tool usage (e.g., deposit limits set, cool-off periods applied).

When you access the Platform, we automatically collect: your device's IP address; browser type and version; operating system; device type (mobile, tablet, desktop); screen resolution; referring URL; pages visited and time spent; and session identifiers assigned by the Platform.

Records of all communications between you and peri11 support — including live chat transcripts, support emails, and any documents you share — are retained for the purposes of dispute resolution and service improvement.

peri11 collects Personal Data through the following channels:

• Directly from you — during account registration, KYC document submission, deposit and withdrawal requests, support interactions, and participation in promotions.
• Automatically via the Platform — through cookies, session tracking technologies, server logs, and analytics tools as you browse and interact with the Platform.
• From payment service providers — when you initiate a deposit or withdrawal via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or other accepted payment channels, relevant transaction data is shared with us by those payment processors.
• From third-party identity verification services — where applicable, peri11 may use third-party KYC service providers to assist with document verification, in which case those providers share verification outcomes with us.
• Via referral mechanisms — if you arrive at peri11 through a referral link, we receive data identifying the referring player's account for the purposes of administering the referral bonus programme.

peri11 processes your Personal Data for the following clearly defined purposes:

peri11 relies on the following legal bases when processing your Personal Data:

• Contractual necessity — processing required to perform the contract between peri11 and the Player (i.e., to operate your account, process transactions, and deliver gaming services).
• Legal obligation — processing required for compliance with applicable laws and regulations, including KYC/AML (anti-money laundering) requirements.
• Legitimate interests — processing conducted for purposes of fraud prevention, security monitoring, platform improvement, and business analytics, where those interests are not overridden by your privacy rights.
• Consent — processing for marketing communications (email and SMS notifications regarding promotions), cookie-based analytics beyond strictly necessary session cookies, and any other processing for which we have explicitly sought and obtained your consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

peri11 uses cookies and similar tracking technologies to operate the Platform effectively and improve user experience. The following categories of cookies are in use:

• Strictly Necessary Cookies — essential for the Platform to function. These include session authentication cookies that keep you logged in during a session, security tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional Cookies — remember your preferences such as language settings, preferred game categories, and display preferences. These improve the consistency of your experience across sessions.
• Analytics Cookies — collect aggregated, anonymised data about how players interact with the Platform (e.g., which pages are most visited, where users drop off in registration). This data helps peri11 improve the Platform's design and performance.
• Marketing & Personalisation Cookies — used (with consent) to deliver relevant promotional content and track the effectiveness of marketing campaigns. You may opt out of these cookies via the cookie preference panel accessible through the Platform.

peri11 does not sell, rent, or trade your Personal Data. We share data only in the following defined circumstances and with appropriate safeguards in place:

Transaction data is shared with Malaysian payment processors — including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking partners such as Maybank, CIMB, Public Bank, and Hong Leong Bank — to the extent necessary to process deposit and withdrawal instructions. These processors operate under their own privacy policies and relevant financial data protection regulations.

KYC documentation may be shared with third-party identity verification service providers engaged by peri11 to assist with document authenticity checks. These providers act as Data Processors under binding data processing agreements with peri11.

Certain aggregate, non-identifiable gameplay statistics may be shared with game studio partners for the purpose of game performance monitoring. Individual player identities are not disclosed to game studios.

peri11 will disclose Personal Data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, valid legal process, or in response to a legitimate request from a competent authority. Where legally permitted, we will notify affected players of such disclosures.

In the event of a merger, acquisition, restructuring, or sale of peri11's business operations, Personal Data held by the Company may be transferred to the acquiring entity as part of the transaction, subject to confidentiality obligations and continued compliance with this Policy.

peri11 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

Following the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with any individual.

peri11 implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS): All data in transit between user devices and peri11 servers is encrypted using current TLS protocols.
• Encryption at Rest: Sensitive stored data — including KYC documents, payment identifiers, and password hashes — is encrypted using industry-standard algorithms.
• Access Controls: Access to Personal Data within peri11's internal systems is restricted on a strict need-to-know basis. All internal access is logged and subject to periodic review.
• Two-Factor Authentication: Player accounts support two-factor authentication as an additional layer of security against unauthorised login.
• Regular Security Audits: peri11's platform and infrastructure undergo periodic independent security assessments to identify and remediate vulnerabilities.
• Incident Response: In the event of a data breach, peri11 will notify affected players and relevant authorities as required by applicable law, and will take immediate remediation steps.

As a data subject whose Personal Data is processed by peri11, you hold the following rights. To exercise any of these rights, contact our support team via live chat or email at [email protected] with the subject line "Data Rights Request":

If peri11 becomes aware that Personal Data has been collected from a person under 21 years of age, that data will be immediately deleted and the associated account will be closed. If you are a parent or guardian and believe your child has provided Personal Data to peri11, please contact our support team immediately at [email protected] so we can take prompt remedial action.

The peri11 Platform does not contain links to external third-party websites beyond those required for transaction processing with verified payment partners. Where any such reference to a third-party service exists, peri11 is not responsible for the privacy practices, content, or data handling of that third party. Players should consult the privacy policies of any third-party service they use independently in connection with their peri11 account — for example, the privacy policies of Touch 'n Go eWallet, Boost, GrabPay, or their banking institution — as those policies operate separately from this one.

peri11 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. Material changes — defined as changes that meaningfully alter how we collect, use, or share your Personal Data — will be communicated to registered players via email (to the registered account address) and/or via a prominent notice on the Platform, no less than 14 days prior to the change taking effect.

For minor or non-material clarifications (such as typographical corrections or improved explanatory language), we may update the Policy without prior notice, reflecting the new effective date at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Platform following any update constitutes acceptance of the revised Policy.

For any questions, requests, or concerns regarding this Privacy Policy or the handling of your Personal Data by peri11, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform interface — the fastest channel for routine queries.
• Email: [email protected] — for formal data rights requests, please use the subject line "Data Rights Request" and include your registered account username and a description of your request.

We aim to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within 30 calendar days of receiving a complete, verified request. For complex requests, we may extend this period by a further 30 days where necessary, in which case we will notify you of the extension within the initial 30-day period.