Privacy Policy

1. Introduction

Petroga ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you book Petronas Twin Tower tickets, KLCC Tower tickets, or other tours through our website and services.

This policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards including GDPR where applicable.

2. Information We Collect

2.1 Personal Information

When you book Petronas Tower tickets or tours, we collect:

• Full name
• Email address
• Phone number
• Billing address
• Payment information (processed securely by payment providers)
• Date of birth (for age verification)
• Nationality and passport information (for certain tours)

2.2 Booking Information

• Tour dates and times
• Number of guests (adults, children, infants)
• Special requirements or preferences
• Booking history and transaction records

2.3 Technical Information

• IP address
• Browser type and version
• Device information
• Cookies and similar tracking technologies
• Pages visited and time spent on site

3. How We Use Your Information

We use your information for the following purposes:

• Process and confirm Petronas Twin Tower ticket bookings
• Send booking confirmations and e-tickets
• Communicate about your tours and provide customer support
• Process payments and prevent fraud
• Send important updates about your booking
• Improve our website and services
• Send promotional offers (with your consent)
• Comply with legal obligations
• Analyze website usage and trends

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract Performance: To fulfill your Petronas Tower ticket bookings
• Consent: For marketing communications (you can withdraw anytime)
• Legitimate Interests: To improve our services and prevent fraud
• Legal Obligation: To comply with Malaysian and international laws

5. Information Sharing and Disclosure

We may share your information with:

5.1 Service Providers

• Petronas Twin Towers management (for ticket validation)
• Tour operators and guides
• Payment processors
• Email service providers
• Cloud hosting services

5.2 Legal Requirements

We may disclose your information if required by:

• Malaysian government authorities
• Law enforcement agencies
• Court orders or legal processes
• Protection of rights and safety

5.3 We Never Sell Your Data

Petroga does not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Security

We implement industry-standard security measures to protect your information:

• SSL/TLS encryption for all data transmission
• Secure payment processing (PCI DSS compliant)
• Regular security audits and updates
• Access controls and authentication
• Employee training on data protection
• Regular backups and disaster recovery plans

7. Cookies and Tracking Technologies

We use cookies to enhance your experience:

7.1 Types of Cookies

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand website usage
• Marketing Cookies: Used for targeted advertising (with consent)
• Preference Cookies: Remember your settings

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

8. Your Rights

Under Malaysian PDPA and GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we use your data
• Portability: Receive your data in a machine-readable format
• Object: Opt-out of marketing communications
• Withdraw Consent: Revoke previously given consent

To exercise these rights, contact us at info@petroga.com.my

9. Data Retention

We retain your information for:

• Booking data: 7 years (for financial and legal compliance)
• Marketing data: Until you unsubscribe or request deletion
• Technical logs: 12 months
• Customer support records: 3 years

10. International Data Transfers

Your data may be transferred to and processed in countries outside Malaysia. We ensure adequate protection through:

• Standard contractual clauses
• Data processing agreements
• Compliance with international data protection standards

11. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children. Parents/guardians must provide information for children's Petronas Tower ticket bookings.

12. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for their privacy practices. Please review their privacy policies before providing any information.

13. Changes to Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated date. Significant changes will be communicated via email.

14. Contact Us

For privacy-related questions or to exercise your rights:

15. Complaints

If you have concerns about how we handle your data, you can file a complaint with: