Privacy Policy PES 2017 — Personal Data Protection for Malaysian Players

1Personal Data We Collect

Pes 2017 collects your personal data through various interaction points on the platform — from account registration through to your day-to-day activity while playing. Below are the categories of data collected and the purposes for which they are collected:

Pes 2017 only collects data that is necessary for a clear and legitimate purpose. We do not collect data that is irrelevant or exceeds what is required to provide the services you signed up for. If you do not provide the required data (for example during KYC), we may be unable to process your withdrawal or provide the full range of pes 2017 platform services.

2How We Use Your Personal Data

Data collected by pes 2017 used solely for legitimate purposes directly related to the provision of platform services. The following are the primary purposes for which your data is used:

• Account Management: Creating and managing your pes 2017 account, processing registration, identity verification and password resets.
• Financial Transaction Processing: Processing deposits via DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost and ShopeePay, and processing withdrawals to the same payment methods.
• Provision of Betting Services: Enabling you to place bets on the Malaysia Super League, EPL, virtual sports, slots, Live Casino and all other games available on pes 2017.
• VIP Rewards Programme: Calculating and managing your VIP tier, reward points, weekly cashback, and automatic account upgrades based on your playing activity.
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, duplicate accounts and platform abuse that violates pes 2017's terms.
• Legal Compliance: Meeting legal compliance obligations including anti-money laundering (AML), KYC and Malaysia PDPA requirements.
• Customer Support: Processing and responding to enquiries, complaints and feedback submitted to the pes 2017 support team.
• Service Communications: Send important notifications regarding your account, transactions, changes to terms, security updates, and other relevant operational information.
• Platform Improvements: Analysing aggregated, anonymised usage patterns to understand how players use pes 2017 and to make improvements to the product and user experience.

Pes 2017 will not use your data for purposes beyond those stated above without first obtaining fresh consent from you. If you receive marketing communications from pes 2017, it is because you gave your consent at registration — and you may withdraw that consent at any time through your account settings or by contacting our support team.

3Sharing Data with Third Parties

Pes 2017 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, there are limited circumstances where pes 2017 needs to share your data with trusted third parties in order to provide our services to you:

• Payment Provider: Transaction information required for processing is shared with DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay solely to process your deposits and withdrawals. These providers are subject to Bank Negara Malaysia regulations and maintain their own security policies.
• Game Providers: Limited technical data required to load games from providers such as Pragmatic Play and PG Soft — without your full personal identifying information.
• Relevant Authority: Pes 2017 may be required by law to disclose certain data to Malaysian authorities — for example in the course of a legitimate financial crime investigation — when ordered to do so by a court or relevant regulatory body. We will not voluntarily disclose data beyond what is required by such an order.
• Technical Service Providers: Companies that provide technical infrastructure services for pes 2017 (such as server hosting and cybersecurity services) may have limited access to your data strictly within the scope of their technical role, and are bound by strict confidentiality agreements.

4Data Security at PES 2017

Pes 2017 invests seriously in data security infrastructure to protect your personal information. The technical and operational security measures we have implemented include:

• SSL 256-bit Encryption: All data transmitted between your device and pes 2017's servers is encrypted using SSL/TLS 256-bit protocol — the same security standard used by banking institutions in Malaysia.
• Stored Data Encryption: Sensitive data such as financial information and identity card numbers is stored in encrypted form within the pes 2017 database, never as plain text.
• Internal Access Controls: Only pes 2017 staff with a legitimate business need are permitted to access players' personal data, and all access is logged and audited on a regular basis.
• 24/7 Security Monitoring: An automated monitoring system watches the pes 2017 platform around the clock to detect suspicious activity, intrusion attempts, or anomalies in data access patterns.
• Two-Factor Authentication (2FA): pes 2017 offers two-factor authentication for your account — we strongly encourage all players to enable this feature for an added layer of security.
• Regular Security Audits: Independent security assessments are conducted regularly to identify and address any vulnerabilities before they can be exploited.

While pes 2017 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of a data security breach affecting your personal information, pes 2017 will notify you within 72 hours of confirming the incident, in line with industry best practices and Malaysian legal requirements.

5Cookies & Tracking Technologies

Pes 2017 uses cookies and similar tracking technologies to enhance your experience on the platform. The following outlines the types of cookies we use and their purposes:

• Essential Cookies: Required for the core functionality of the pes 2017 platform — including login session tracking, language preferences and security. These cookies cannot be disabled as the platform will not function properly without them.
• Performance Cookies: Collects information on how you use pes 2017 — which pages you visit most, load times and errors encountered. This data is aggregated and anonymised to help us improve the platform.
• Functional Cookies: Remembering your preferences such as language, display settings, and login details (if you select "remember me") to improve your experience on the platform.
• Analytics Cookies: Helping pes 2017 understand how players interact with the platform as a whole — this information is used for product development decisions, not for targeting individuals.

You can manage cookie settings through your web browser. Browsers such as Chrome, Firefox, Safari, and Edge allow you to delete existing cookies and prevent new ones from being saved. However, disabling essential cookies may affect the functionality of the pes 2017 platform — including potential issues with logging in or processing transactions.

Pes 2017 does not use third-party cookies for advertising or cross-site tracking purposes. All cookies we use are strictly for platform operation and improvement.

6Your Rights as a Data Subject

Under the Malaysia Personal Data Protection Act 2010 (PDPA), you as a player pes 2017 have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Pes 2017 will provide this within 21 days of receiving your request.
• Right to Rectification: If you find that personal data held by pes 2017 is inaccurate or incomplete, you have the right to request a correction. You may also update your basic profile information directly from your account settings without needing to contact us.
• Right to Object to Processing: You have the right to object to the processing of your data for certain purposes — in particular for marketing communications. You may withdraw your consent to marketing communications at any time from your pes 2017 account settings.
• Right to Request Erasure: You may request deletion of your personal data from pes 2017's systems upon account closure, subject to record-retention obligations required by law (for example, financial records that must be kept for anti-money laundering purposes).
• Right to Lodge a Complaint: If you believe pes 2017 has not handled your data properly, you have the right to lodge a complaint with the Malaysia Department of Personal Data Protection or the relevant regulatory body.

To exercise any of these rights, contact the pes 2017 support team via live chat or email at support@pes2017.net stating the type of request you are making. We will process your request and respond within the timeframe stipulated by Malaysia's PDPA.

7Data Retention & Deletion

Pes 2017 retains your personal data only for as long as necessary for the purpose it was collected, or as required under Malaysian law. The following are our data retention guidelines:

• Active Account Data: For as long as your pes 2017 account remains active, all your personal data is retained to enable the full provision of our services.
• Financial Records: Deposit and withdrawal transaction records are retained for a minimum of 7 years from the date of each transaction, in line with Malaysian financial regulations including anti-money laundering (AML) requirements.
• KYC Records: Identity verification documents are retained for a minimum of 5 years from the date of submission, or 5 years after account closure — whichever is later.
• Playing Activity Data: Betting and game history is retained for 3 years for customer support purposes, player self-protection, and compliance requirements.
• Communication Data: Customer support conversation records are retained for 2 years for team training and dispute resolution purposes.

Once the retention period has expired, or upon your request for deletion where no legal obligation to retain the data exists, pes 2017 will securely delete or de-identify the data using methods that prevent unauthorised recovery. Data that has been fully anonymised (meaning it can no longer be linked back to you) may be retained longer for aggregate analytics purposes.

8Changes to This Privacy Policy

Pes 2017 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer.

When material changes are made to this Privacy Policy — particularly changes that affect how we use or share your personal data — pes 2017 will:

• Updating the "Last Updated" date at the top of this page.
• Notifying you via your registered email and/or in-account notifications on pes 2017 at least 7 days before any changes take effect.
• Key changes are clearly summarised so you can understand what has changed without having to read through the entire document.

Your continued use of the pes 2017 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you may close your pes 2017 account and request deletion of your data by contacting our support team.

9Contact Us for Privacy Enquiries

If you have any questions, concerns or requests regarding the Privacy Policy of pes 2017 or the way we handle your personal data, our team is ready to help:

• Live Chat: Click the live chat icon on the pes 2017 platform. Available 24 hours a day. Average response time: under 3 minutes.
• Email: Send your privacy enquiry to support@pes2017.net with the subject line "Privacy Enquiry – [your username]". We will respond within 24 hours on business days.
• WhatsApp (Platinum & Diamond Members): Contact your dedicated account manager directly via WhatsApp for privacy enquiries that require identity verification beforehand.

For general enquiries about your account, deposits, withdrawals and bonuses — including privacy-related FAQs — please visit the Frequently Asked Questions pes 2017 first. Many frequently asked questions are already answered there in detail.