Berjayasama Privacy Policy — Protection of Your Personal Data

1 Introduction and Scope of the Privacy Policy

This Privacy Policy describes the personal data management practices of Berjayasama ("we", "the platform") in relation to all users of our platform, including website visitors, registered players, and prospective players. This document is designed to provide full transparency on how we handle your information.

By using the Berjayasama platform, accessing our website, or registering as a member, you agree to the practices described in this Privacy Policy. We encourage you to read this document carefully, as it contains important information about your rights as a data subject.

This Privacy Policy applies to all information collected through the Berjayasama platform, including our official website, mobile app, and all communication channels we use to interact with you.

2 Information We Collect

Berjayasama collects various types of personal information to enable us to provide safe, efficient, and responsible services. The information we collect falls into several main categories:

We only collect information that is strictly necessary for the stated purposes. Berjayasama does not collect information considered sensitive — such as medical details, religious beliefs, or political views — unless specifically required by applicable law.

3 How We Use Your Information

Berjayasama uses your personal information for lawful and necessary purposes. Every use of data has a sound legal basis, whether grounded in your consent, contractual necessity, the platform's legitimate interests, or legal obligations. The following are the primary purposes for which your data is used:

• Registration and Account Management: Processing your account application, verifying your identity through KYC, and managing your account on an ongoing basis, including information updates and account settings.
• Transaction Processing: Processing deposits, withdrawals, and any financial transactions you make on the platform securely and accurately.
• Fraud Prevention and Security: Monitoring account activity to detect any unauthorised access, fraud, or suspicious activity that could compromise your account security.
• Legal Compliance: Fulfilling our obligations under anti-money laundering laws, data protection regulations, and relevant gambling legislation.
• Customer Support: Providing assistance and resolving any enquiries or complaints you submit through our support channels.
• Responsible Gaming: Monitoring your wagering patterns to identify any signs of problem gambling and offering appropriate assistance under our responsible gaming programme.
• Service Communications: Sending important notifications about your account, policy changes, relevant promotions, and required platform updates.
• Platform Enhancements: Analysing aggregated usage patterns to improve the user experience, platform performance, and our service offerings.

Berjayasama will not use your data for any purpose other than those stated above without first obtaining your additional consent.

4 Sharing Information With Third Parties

Berjayasama takes a highly cautious approach to data sharing. We only share your personal information in limited and necessary circumstances. Third parties that may receive your data include:

• Payment Processors: Licensed and authorized payment service providers that help us securely process your deposit and withdrawal transactions. All providers are bound by strict confidentiality agreements.
• Game Service Providers: Casino game and sports betting software providers that supply game content within our platform. Data sharing is minimal and limited strictly to what is required for game functionality.
• Regulatory Authority: Regulatory bodies and law enforcement authorities when we are required to do so by law or a valid court order.
• Identity Verification Service Providers: A third-party KYC platform that helps us verify player identities as part of our compliance procedures.
• Technical Service Providers: Companies providing the infrastructure, hosting, cybersecurity, and analytics services required for our platform's operations.

5 Cookies and Tracking Technologies

The Berjayasama website and app use cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. Cookies are small text files stored on your device when you visit our platform.

The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are critical to your account security.
• Performance Cookies: Helping us understand how players use our platform, which pages are visited most frequently, and any technical issues that may arise. All data is collected anonymously.
• Functionality Cookies: Allowing the platform to remember your preferences — such as language, display settings, and login details (if you choose to be remembered) — for a more personalised experience.
• Analytics Cookies: Used to collect aggregated statistical information about platform usage to help us improve the services and content we offer.

You can manage your cookie settings through your web browser at any time. Please note, however, that disabling certain cookies may affect the functionality and user experience of the Berjayasama platform.

6 Data Security and Protection Measures

The security of your personal data is a responsibility we take very seriously. Berjayasama implements multiple layers of technical and procedural safeguards to protect your information from unauthorised access, loss, or disclosure.

• 256-bit SSL encryption for all data communications between your device and our servers.
• Two-factor authentication (2FA) system for an additional layer of protection during login.
• Round-the-clock security monitoring, seven days a week, by our cybersecurity team.
• Strict access controls — only authorised personnel may access players' personal data.
• Regular security audits conducted by independent third parties to identify and address system vulnerabilities.
• A clear incident response procedure to address any security breaches promptly and effectively.
• Regular data security training for all staff who handle players' personal information.

While we implement all reasonable security measures, no system can guarantee absolute security. You also play an important role in protecting your account by using a strong password, not sharing your login credentials, and reporting any suspicious activity to us promptly.

7 International Data Transfers

In the course of our global operations, your personal data may be transferred to and processed in countries outside your country of residence. Berjayasama ensures that any international data transfers are carried out with adequate safeguards and in compliance with applicable legal requirements.

Steps we take to protect data during international transfers include:

• Data is only transferred to countries or organizations that maintain an equivalent level of data protection.
• Executing Standard Contractual Clauses with all data recipients outside the country.
• Ensuring all third-party data processors maintain privacy and security policies aligned with our standards.
• Conducting data protection impact assessments before any new data transfer to a new region.

8 Data Retention Period

Berjayasama does not retain your personal data longer than necessary for the stated purposes or as required by law. The retention periods we apply are based on data category and relevant legal requirements:

Once the retention period expires, data will be securely deleted or anonymized in accordance with our strict internal procedures.

9 Your Rights as a Data Subject

As a berjayasama player, you have certain rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights. Here are your rights that you should know:

To exercise any of the above rights, please contact our support team via live chat or email. We will respond to your request within 30 business days. Certain rights may be subject to specific legal requirements that limit our ability to fulfill the request in full.

10 Children's Privacy

The berjayasama platform is strictly for adult users aged 18 and above. We do not knowingly collect, process, or store any personal information from individuals under the age of 18.

All players are required to verify their age during the registration and KYC process. Should we find that a minor's personal information has been inadvertently collected, we will take immediate steps to delete that information and close the account in question.

11 Changes to This Privacy Policy

Berjayasama reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When we make significant changes, we will notify you via:

• In-platform notifications when you are logged in to your account.
• Email to the address registered in your account for material changes.
• Update the "Last Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically. Your continued use of the Berjayasama platform following any changes constitutes your acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer via support email or live chat, available 24 hours a day, 7 days a week.