Privacy Policy m99my — Malaysia Player Data Security

M99my respects the privacy rights of every player using our platform at m99my.onl. This Privacy Policy transparently explains how we handle your personal data — from how it is collected, used, and stored, to how you can control your information.

This document applies to all users of the m99my platform, including website visitors, registered members, and active players. By using our platform, you agree to the practices described in this Privacy Policy.

We are committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. If you have any questions about how we handle your data, our customer support team is available 24 hours a day, 7 days a week.

M99my only collects data that is strictly necessary to provide a safe, efficient, and compliant service. The following are the categories of data we collect:

We do not collect sensitive data such as health information, religious beliefs, or political affiliations unless specifically required for legal compliance purposes.

Every piece of data we collect has a clear and legitimate purpose. m99my does not use your data for any purpose beyond what is stated here without first obtaining your consent.

• Account Management — to process registration, verify identity, and manage your member profile.
• Transaction Processing — to ensure deposits and withdrawals are processed securely and accurately to the correct account.
• Fraud Prevention — to detect and block suspicious activity in order to protect your account.
• Service Communications — to send account notifications, security updates, and promotional information if you have consented to receive them.
• Legal Compliance — to meet reporting and regulatory requirements set by relevant authorities.
• Platform Improvements — to analyse aggregate usage patterns and improve the overall user experience.

We will not use your data to make automated decisions that significantly affect you without proper notification and explanation.

M99my does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data is only shared in the following limited situations:

• Trusted Service Providers — technical partners such as payment processors, cloud service providers, and identity verification systems, all subject to strict confidentiality agreements.
• Legal requirements — when required by court order, law enforcement authorities, or a legitimate regulatory body.
• Rights Protection — where necessary to detect, prevent, or address fraud, security issues, or violations of our terms of service.
• Business Transfers — in the event of a merger, acquisition, or asset transfer, provided the recipient adheres to an equivalent privacy policy.

All third parties we work with are required to uphold the same strict data protection standards that we follow. We conduct regular reviews to ensure ongoing compliance.

M99my continuously invests in security infrastructure to ensure your data is always protected. Our security measures include:

• 256-bit SSL Encryption for all data transmitted between your device and our servers.
• Password Storage using bcrypt hashing that cannot be decrypted.
• Two-factor authentication (2FA) available to all member accounts as an additional layer of protection.
• 24/7 Security Monitoring by our technical team to detect any threats or intrusions.
• Secure Servers in internationally certified data centers with strict physical and digital access controls.
• Penetration Testing (penetration testing) is conducted periodically by independent security auditors.

While we take comprehensive measures to protect your data, no system can be guaranteed 100% secure. In the event of a data breach that affects you, we will notify you within 72 hours of confirming the incident, along with the steps being taken to address it.

M99my uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies — required for core platform functions such as login, account sessions, and security. These cookies cannot be disabled.
• Performance Cookies — to collect information about how you use our platform, such as the most frequently visited pages. All data is collected anonymously.
• Functional Cookies — to save your preferences such as language and display settings for a more personalised experience.
• Analytics Cookies — to help us understand website traffic and aggregate user behaviour for improvement purposes.

You can manage or block cookies through your browser settings. Please note that disabling certain cookies may affect the functionality or user experience of our platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by m99my:

To submit any request relating to your data rights, please contact our customer support team via live chat. We will process your request within 14 business days.

M99my is a platform exclusively for adults aged 18 years and above. We do not intentionally collect or process personal data from individuals below this age limit.

If we discover or are notified that we have collected data from someone under the age of 18, we will take immediate steps to delete that data and close the associated account without further notice.

If you believe a child has registered or used our platform, please contact our support team immediately so we can take the appropriate action. We take child protection in the digital space seriously.

M99my retains your personal data for as long as your account is active or as long as necessary to provide services to you. The following are our data retention guidelines:

• Active account data — retained for as long as your account remains active and for 5 years after account closure for legal compliance purposes.
• Financial transaction data — retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• Access & Security Logs — retained for 90 days for security investigation and dispute resolution purposes.
• Communication data — customer support interaction records are retained for 2 years.
• Cookie data — depending on the cookie type, ranging from the current session up to a maximum of 2 years.

Once the retention period expires, your data will be securely deleted using industry-standard methods to ensure it cannot be recovered.

M99my reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features.

When we make significant changes, we will notify you via an in-platform notification or email to the address registered on your account at least 7 days before the changes take effect.

Your continued use of the m99my platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

For any questions, concerns, or complaints regarding your data privacy, please reach out to our customer support team, available 24 hours a day. We are committed to handling every inquiry with care and professionalism.