Privacy Policy myr99

1 Information Collected

Myr99 collects various types of personal information from users to provide services that are safe, efficient, and responsible. This data collection occurs directly when you register an account, carry out financial transactions, or interact with our platform, as well as automatically through tracking technologies as you browse our website.

Information you provide directly:

• Identity information: full name, date of birth, identification card number (MyKad), gender and nationality.
• Contact information: email address, phone number and current residential address.
• Financial information: bank account number, account holder name, bank type and deposit and withdrawal transaction records.
• KYC verification documents: copies of MyKad, utility bills, or other official documents as proof of address.
• Account information: username, password (stored as an encrypted hash) and account settings.

Information collected automatically:

• Technical data: IP address, web browser type, operating system, screen resolution, and device information.
• Usage data: pages visited, session duration, games played, betting history, and usage patterns.
• Location data: approximate geolocation information based on IP address for legal compliance verification purposes.
• Cookie and tracking data: session information, user preferences, and analytics data collected through first-party cookies.

2 How We Use Your Data

The personal data we collect is used solely for specific, legitimate purposes directly related to the provision of myr99 services. We do not use your data for any other purpose without your prior consent.

If myr99 intends to use your data for any new purpose not stated in this policy, we will notify you in advance and obtain your consent before that new processing begins.

3 Information Sharing

Myr99 values your privacy and does not share your personal information with third parties except in the following limited and controlled situations:

• Payment service providers: Financial information required is shared with licensed payment providers such as DuitNow, FPX, Touch 'n Go eWallet, Boost and GrabPay solely to process your deposit and withdrawal transactions.
• Game providers: Minimum necessary data is shared with third-party game providers to enable access to games integrated within the myr99 platform.
• Legal authorities: myr99 fully complies with valid court orders, directives from law enforcement authorities, and applicable legal compliance requirements in Malaysia.
• Technical service providers: Companies that provide cloud computing, hosting, and technical infrastructure services required for the operation of the myr99 platform may access your data under strict confidentiality agreements.

Every third party we engage with is required to sign a data processing agreement that meets data protection standards equivalent to the level of protection we offer you.

4 Cookies & Tracking Technologies

Myr99 uses cookies and similar tracking technologies to enhance the user experience, maintain account security, and understand how users interact with our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as secure login, session management, and CSRF verification. These cookies cannot be disabled as they are essential to the security of your account.
• Performance Cookies: Collecting anonymous information about how you use our platform to help us improve the user experience. This data does not personally identify you.
• Functional Cookies: Remembering your preferences and settings such as preferred language, display settings and login details so you do not need to reconfigure them each time.
• Analytics Cookies: Helping us understand overall platform usage patterns for the purpose of continuously improving our services.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect certain functions on the myr99 platform, including the ability to stay securely logged in.

5 Data Security

Keeping your personal data secure is a responsibility we take very seriously. myr99 has implemented multiple layers of technical and organisational protection to ensure your data is safe from unauthorised access, disclosure, alteration or destruction.

• 256-bit SSL/TLS Encryption: All data communications between your device and myr99 servers are encrypted using the latest industry-standard encryption protocols.
• Two-factor authentication (2FA): We offer an additional layer of security through two-factor authentication to protect your account from unauthorised access even if your password is compromised.
• Multi-layered firewall: myr99 servers are protected by an advanced firewall system and a 24-hour intrusion detection and prevention system (IDS/IPS).
• Continuous monitoring: Our cybersecurity team continuously monitors platform activity to quickly detect and respond to any threats or suspicious activity.
• Internal access controls: Access to user data is restricted to staff who require it to perform their duties, based on the principle of least privilege.
• Regular security audits: myr99 conducts regular penetration testing and security audits by independent third parties to ensure our system defences remain up to date.

6 Data Retention & Deletion

Myr99 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable Malaysian law.

• Active account data: Retained for the duration your account remains active and used to provide myr99 services to you.
• Data after account closure: Once an account is closed, we retain the necessary records for a minimum period of 7 years in accordance with Malaysia's tax and financial legal requirements, after which the data will be securely deleted or anonymised.
• Transaction records: Retained for 7 years in accordance with Anti-Money Laundering (AML) and Counter Financing of Terrorism (CFT) compliance requirements.
• Security logs: Retained for 12 months for the purpose of security incident investigations if required.

Once the retention period expires, your data will be permanently deleted using secure deletion methods that ensure the data cannot be recovered. Data that does not need to be fully deleted will be anonymised so it can no longer be linked to you.

7 Your Rights

As a myr99 user protected under the Malaysia Personal Data Protection Act 2010, you have the following rights regarding your personal data:

To exercise any of the rights above, contact our data protection team by email at [email protected] or via LiveChat within the platform. We will process your request within 14 business days. For complex cases, this period may be extended to 30 days, with notification to you.

8 Children's Data

The myr99 platform is strictly for users aged 18 and above. myr99 does not knowingly collect, process or store personal data from individuals under the age of 18.

Should we discover that we have unknowingly collected data from underage users, we will immediately take the following actions:

• Immediately closing the relevant account.
• Permanently deleting all associated personal data.
• Returning any funds remaining in the relevant account through appropriate channels.

Parents or guardians who believe their child has registered an account on myr99 without authorisation are urged to contact us immediately at [email protected] so that immediate action can be taken.

9 Policy Amendments

Myr99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform operational needs. Any amendments take effect immediately upon being published on myr99.org.

When we make significant changes to this policy, we will notify you through the following methods:

• In-platform notifications when you log in to your myr99 account.
• Email to your registered email address at least 14 days before material changes take effect.
• A clear notice on the main page of the myr99.org website.

Continued use of the myr99 platform after the effective date of any amendment constitutes your acceptance of the updated policy. If you do not agree with the amendments, you have the right to close your account before the amendment takes effect.

10 Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or the way we handle your personal data, the myr99 data protection team is ready to assist you.

• Data Protection Officer (DPO): [email protected]
• General Support: [email protected]
• LiveChat: Available 24/7 directly within the myr99 platform.

We are committed to addressing all privacy-related enquiries seriously and within a reasonable timeframe. You also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you are not satisfied with how we have handled your complaint.