My99 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Players

My99 collects your personal information from various sources when you interact with our platform. This information is collected to enable my99 to provide a safe, responsible, and high-quality online casino service to players in Malaysia. The following are the categories of information we may collect:

Information You Provide Directly:

• Registration Information — full name, active Malaysian phone number, email address, username, and password chosen when creating your my99 account.
• Identity Verification (KYC) Information — a copy of your MyKad, recent bank statement, or other identity verification documents requested by my99 for account verification and legal compliance purposes.
• Payment Information — transaction details for deposits and withdrawals made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks). my99 does not store your full bank account number or payment card details — this information is handled directly by the respective payment providers.
• Communication Information — the content of messages you send to the my99 support team via live chat, email, or WhatsApp, including enquiries, complaints, and feedback you provide.

Automatically Collected Information:

• Technical Data — IP address, device type, operating system, browser type and version, screen resolution, and other technical information about the device you use to access my99.
• Usage Data — game history, betting records, wins and losses, pages visited within the platform, and the time and duration of each gaming session.
• Cookie Data — information stored via cookies and similar tracking technologies placed when you browse my99-khelo.com. Further details about cookies are set out in Section 05.
• Approximate Location Data — general geographic location derived from your IP address for the purpose of verifying permitted geographic regions. my99 does not collect the precise GPS location of your device.

My99 uses the personal information collected for the following purposes, all of which are directly related to providing you with online casino platform services as a member:

• Account Management — creating, verifying, managing, and securing your my99 account, including a secure login process and account recovery where required.
• Financial Transaction Processing — processing your deposits and withdrawals in MYR via your chosen Malaysian local payment methods, and maintaining accurate transaction records.
• Identity Verification (KYC) — verifying your identity to meet applicable legal compliance requirements, prevent fraud, and protect other members from irresponsible activity.
• Gaming Services Provision — ensuring you can access all 1,000+ my99 games, recording your game history, automatically calculating the daily 0.8% rebate, and managing your loyalty programme.
• Customer Support — enabling my99's support team to help you resolve any issues or enquiries effectively, using the context of previous interactions to provide more relevant assistance.
• Account-Related Communications — sending you important notifications about your account, security updates, policy changes, and information on bonuses or promotions you are eligible to receive.
• Fraud Prevention & Security — identifying and preventing fraud, account misuse, money laundering, and other illegal activities that could compromise the safety of the platform and other members.
• Responsible Gaming — monitoring gameplay patterns to identify signs of potential gambling problems and providing appropriate support to members who may need it.
• Platform Improvements — analysing aggregated (not individual) usage data to understand how Malaysian players use the platform and to drive continuous improvements to the user experience.

My99 takes a highly cautious and limited approach to sharing your personal information with other parties. We do not sell or rent your data to any party for marketing purposes. Information is only shared in the situations set out below, and only the information that is strictly necessary will be shared:

• Local Payment Providers — the necessary transaction information is shared with Malaysian local e-wallet and banking providers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks) solely for the purpose of processing your deposits and withdrawals. These providers have their own privacy policies and are bound by confidentiality agreements with my99.
• Game Providers — the minimum technical information required to run games is shared with providers such as Pragmatic Play, Evolution Gaming, PG Soft, and others integrated into the my99 platform. These providers do not receive your personal financial information.
• Compliance & Identity Verification Services — KYC (Know Your Customer) and AML (Anti-Money Laundering) service providers engaged by my99 to meet legal compliance requirements may receive certain identity verification information necessary for those processes.
• Legal Authorities — my99 may be legally required to disclose certain information to Malaysian authorities or regulatory bodies with the legal authority to request it. Such disclosures are only made where a legitimate legal obligation exists.
• Business Transfer — in the event of a merger, acquisition, or asset sale, user information may be transferred as part of the assets involved. You will be notified before any such transfer takes place and will be given appropriate options.

All third parties that receive data from my99 are bound by strict confidentiality and data protection agreements. They may only use the information received for the specific agreed purpose and may not process your data for any other purpose without my99's consent.

Protecting your personal data is a responsibility my99 takes with the utmost seriousness. We have implemented multiple layers of technical and organisational security controls to ensure your information is always protected from unauthorised access, loss, destruction, or unnecessary disclosure:

• 256-Bit SSL Encryption — all data transmitted between your web browser and my99's servers is encrypted using 256-bit TLS/SSL protocol. Our website URL begins with https:// as confirmation that encryption is active.
• Data-at-Rest Encryption — sensitive data stored in my99's databases, including personal information and financial records, is encrypted at rest using robust encryption methods.
• Two-Factor Authentication (2FA) — 2FA is available and strongly encouraged for all my99 accounts, adding an extra layer of security to ensure only you can access your account, even if your password has ever been compromised.
• Internal Access Controls — only my99 staff with a legitimate business need are granted access to users' personal data. All access is logged and monitored on a regular basis.
• Continuous Security Monitoring — an automated monitoring system operates 24/7 to detect any unusual activity or potential intrusion attempts.
• Regular Security Audits — my99 undergoes regular internal and external security audits to identify and address any security vulnerabilities before they can be exploited.
• Incident Response Procedure — my99 has a comprehensive security incident response procedure in place. In the event of a material data breach, you will be notified within a reasonable timeframe in accordance with applicable legal requirements.

My99 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure essential functions operate correctly, and understand how Malaysian players use our website. Below are the types of cookies we use:

You can manage your cookie preferences through your web browser at any time. Most modern browsers allow you to view, delete, or block cookies from specific websites. Please note that disabling essential cookies may affect the functionality of the my99 platform and impact your gaming experience.

My99 does not use third-party cookies for targeted advertising based on your personal browsing behaviour on other websites. We respect your privacy beyond our own platform.

As a registered my99 member, you have the following rights regarding the personal data we hold about you. All requests relating to these rights may be submitted by email to support@my99-khelo.com and will be processed within 30 business days from the date a complete request is received:

My99 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required under applicable Malaysian law. The following are general retention period guidelines:

• Active Account Information — personal data for active accounts is retained for as long as your account remains active on the my99 platform. This information is updated whenever you make changes in your profile settings.
• Financial Transaction Records — deposit records, withdrawals, and betting history are retained for a minimum of seven (7) years following each transaction, in line with Malaysian financial law requirements relating to audit records.
• KYC & Identity Verification Information — identity verification documents (MyKad, bank statements) are retained for a minimum of five (5) years following account closure or termination of the business relationship, to meet AML compliance requirements.
• Customer Support Records — communications with the my99 support team are retained for two (2) years for reference and service improvement purposes.
• Upon Account Closure — upon account closure (whether voluntary or by my99), personal data not required to be retained by law will be deleted or anonymised within 90 days after account closure.
• Cookie & Analytics Data — cookie data is retained for the duration specified in the Section 05 table. Anonymised analytics data may be retained for a longer period for aggregate platform trend analysis purposes.

Once the mandatory retention period has lapsed, my99 will delete or anonymise your personal data using secure procedures to ensure it cannot be recovered or re-identified.

My99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new technology requirements, or updates to applicable data protection laws in Malaysia. Whenever material changes are made, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying in-platform notifications to inform members of changes made.
• Sending a summary email to the registered email address if the changes made are significant.

Your continued use of the my99 platform after any Privacy Policy amendment is published will be considered your acceptance of the updated terms. If you do not agree with the changes made, you have the right to close your account and withdraw your balance before the changes take effect.

For any enquiries, concerns, or requests relating to my99's Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Privacy Email: support@my99-khelo.com — include "Privacy Enquiry" in the subject line for a faster resolution.
• Live Chat: Available on my99-khelo.com — for immediate enquiries, 24 hours a day, 7 days a week.
• Response Time: Privacy-related enquiries are typically answered within 1–3 business days. Data rights requests (access, deletion, etc.) are processed within 30 business days.