Privacy Policy paru2 – Our Commitment to Protecting Malaysian Players' Personal Data

1Introduction & Scope of Privacy Policy

Welcome to the Privacy Policy page paru2. As operators of an online casino platform dedicated to Malaysian players, we understand that your trust in us begins with the assurance that your personal data is in safe and responsible hands. This Privacy Policy is designed to give you complete clarity on our data management practices.

This Privacy Policy applies to all personal information collected by paru2 through our platform — whether via the website, mobile application (if available), email communications, customer service interactions or any other means related to the use of paru2's services. By registering and using the paru2 platform, you confirm your consent to the collection and use of your data as described in this Privacy Policy.

2Types of Personal Data We Collect

Paru2 collects various types of personal data when you register, use the platform, and interact with our team. Below is a complete list of the data we collect along with the specific purpose of each category:

Paru2 does not collect sensitive data such as health information, religious beliefs, political affiliations or biometric data unless specifically required by applicable Malaysian law for legitimate compliance purposes.

3Purposes for Using Personal Data

Paru2 uses collected personal data solely for the lawful purposes stated here. We do not use your data for any other purpose without first obtaining your additional consent. The primary purposes for which paru2 uses your data are as follows:

• Identity & Eligibility Verification: To verify that every paru2 user is an eligible individual — a Malaysian citizen or resident aged 18 and above — and to prevent identity fraud and multiple account creation.
• Financial Transaction Processing: To process deposits via DuitNow, FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay, and to manage withdrawals of winnings to your preferred Malaysian bank account within 3–10 minutes.
• Platform Service Provision: To enable you to enjoy your favourite games on paru2 — such as Fish Hunter, Casino War, Cleopatra, Balloon and more — and to personalise your gaming experience according to your preferences.
• Customer Support: To help you resolve any technical issues, account enquiries, payment concerns or general questions about the paru2 platform via live chat or email.
• Security & Fraud Prevention: To detect and prevent suspicious activity, fraud, money laundering, or any attempt to misuse the paru2 platform.
• Legal Compliance: To fulfil legal and regulatory obligations in force in Malaysia, including reporting requirements to the relevant authorities where required by law.
• Platform Improvement: To analyse usage patterns on an aggregate basis (not individual data) for the purpose of improving the user experience, platform performance, and the range of games we offer.
• Service Communications: To send you important notifications related to your account, such as deposit confirmations, withdrawal confirmations, security alerts, and updates to terms relevant to your use of paru2.

4Legal Basis for Data Processing

Paru2 processes your personal data on one or more of the following legal bases recognised under Malaysia's Personal Data Protection Act (PDPA) 2010:

• Consent: By registering and using the paru2 platform, you provide explicit consent for us to process your data for the purposes stated in this Privacy Policy. You may withdraw this consent at any time, though doing so may affect our ability to continue providing services to you.
• Contract Performance: Certain data processing is necessary to fulfil the service contract between you and paru2 — for example, we need your bank account number to process your winnings withdrawals.
• Legitimate Interests: paru2 has a legitimate interest in processing certain data for platform security, fraud prevention and service improvement purposes — provided that such interests do not override your fundamental rights.
• Legal Obligations: Certain data processing is mandatory under applicable Malaysian law, such as anti-money laundering (AML) compliance requirements and know-your-customer (KYC) obligations.

5Data Sharing & Disclosure

Paru2 takes its commitment to "no sharing without consent" very seriously. As a general rule, we do not disclose your personal data to third parties. However, there are limited situations in which such disclosure may occur and is necessary:

• Payment Service Providers: To process your financial transactions, a minimum amount of data must be shared with our Malaysian payment gateway providers — including DuitNow, FPX, Touch 'n Go, GrabPay, Boost, and ShopeePay operators. All these providers are bound by strict confidentiality agreements and may only use your data for payment processing purposes.
• Legal Compliance & Regulatory Authorities: paru2 may be required by law to disclose your personal data to Malaysian government authorities or competent law enforcement bodies when compelled to do so by a valid court order or an official request made in accordance with proper legal procedures.
• Business Transfer: In the event that paru2 is involved in any merger, acquisition or asset sale, user data may be transferred as part of that process. In such circumstances, we will provide you with reasonable notice and ensure that the receiving party is bound by equivalent data protection obligations.

6Data Security Measures

Paru2 continually invests in the latest security infrastructure to ensure your personal data is always protected against cyber threats, unauthorised access, data loss and misuse. Key security measures we employ include:

• 256-bit SSL Encryption: All communications between your browser and paru2's servers are encrypted using high-grade TLS/SSL protocols, ensuring that your data cannot be intercepted in transit.
• Data at Rest Encryption: Sensitive data stored in paru2's databases — including financial information and passwords — is kept in encrypted form using robust, modern encryption algorithms.
• Strict Access Controls: Only paru2 staff with a legitimate business need are granted access to players' personal data, and every instance of access is systematically logged and monitored.
• 24/7 Security Monitoring: paru2's security monitoring system operates around the clock to detect any suspicious activity or threats to the integrity of player data.
• Two-Factor Authentication: The paru2 system supports additional verification via OTP to protect your account from unauthorised access.
• Regular Security Audits: paru2 conducts regular security assessments and audits to identify and address any vulnerabilities in our systems before they can be exploited.

7Data Retention Period

Paru2 adheres to the principles of data minimisation and limited retention — meaning we only keep your personal data for as long as is genuinely necessary. Retention periods vary depending on the type of data and the purpose for which it was collected:

• Active Account Data: Retained for as long as your paru2 account is active and for a reasonable period after account closure to fulfil applicable legal and business obligations.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with applicable Malaysian financial and tax legislation, including requirements related to DuitNow, FPX and other payment method transactions.
• Customer Support Communication Logs: Retained for two (2) years from the date of communication for reference purposes and to resolve any disputes that may subsequently arise.
• Technical Data & Access Logs: Retained for ninety (90) days for security and technical fault analysis purposes, after which they are automatically deleted or anonymised.
• Marketing Data: Retained until you withdraw your marketing consent or submit a deletion request, which we will process within thirty (30) days of receiving the request.

Once the applicable retention period has expired, paru2 will delete or cease processing the relevant data in accordance with secure and irreversible data disposal procedures. Every deletion is logged for internal audit purposes.

8Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you as a data subject have certain rights regarding your personal data held by paru2. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, please contact the paru2 team via the platform's live chat or by emailing [email protected], stating the right you wish to exercise along with your account details. We will process your request within thirty (30) days of receiving a complete submission.

9Cookies, Pixels & Tracking Technologies

The paru2 platform uses cookies and similar technologies to enhance the user experience, maintain login session security, and analyse overall platform usage. Cookies are small text files stored on your device when you visit the paru2 platform.

The types of cookies used by paru2 include:

• Essential Cookies: Required for core paru2 platform operations — such as maintaining your login session and ensuring session security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saves your personal settings such as preferred language and display preferences to provide a more tailored experience.
• Analytics Cookies: Helps paru2 understand how players interact with the platform on an aggregate level — this information is used to improve platform design and performance. Analytical data of this nature does not personally identify any individual.

You can control or delete cookies through your internet browser settings at any time. Please note, however, that disabling essential cookies may affect certain functions of the paru2 platform, including the ability to log in and play.

10Child & Minor Protection

Paru2 takes child protection extremely seriously. Our platform is intended solely for individuals aged 18 and above. We do not knowingly collect, use, or retain the personal data of anyone under the age of 18.

Should paru2 discover that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate action to delete that data from our systems and close the account in question without condition. Any winnings accumulated by a minor are void and will not be paid out.

11Privacy Policy Amendments

Paru2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, the technologies we use, new legal requirements or feedback from our player community. Where material amendments are made, we will notify you via a prominent notification on the platform or to the email address registered to your paru2 account.

The "Updated" date at the top of this document will always reflect the currently in-force version of the Privacy Policy. It is your responsibility to review this Privacy Policy periodically to stay informed of how paru2 handles your personal data. Your continued use of the paru2 platform following the publication of any amendments constitutes your acceptance of the updated Privacy Policy.

12Contact Us About Privacy

If you have any questions, concerns, or complaints regarding paru2's Privacy Policy or the way we handle your personal data, we encourage you to reach out to us directly. The paru2 team is ready to provide clear explanations and assist you with any privacy-related issues:

We are committed to addressing every privacy-related enquiry with care, professionalism, and within a reasonable timeframe. Your satisfaction with how your personal data is handled is our priority — and every piece of feedback you provide helps us better protect the privacy of the paru2 Malaysia player community.