Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by m99my ("Company", "we", "us", "our") and applies to all personal data collected, processed, stored, or otherwise handled in connection with your use of the m99my platform accessible at https://m99my.cam ("Platform"), including the website, mobile-optimised interface, and all associated services, games, and features.

m99my is committed to protecting the privacy of all individuals who interact with our Platform, including registered players, prospective users, and visitors. This Policy is intended to provide clear and accessible information about our data handling practices in compliance with applicable data protection legislation.

By registering an account or otherwise using the m99my Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue your use of the Platform.

2 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and behavioural data.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, alteration, or deletion.
• "Data Controller" means m99my, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of m99my, strictly in accordance with our instructions.
• "Data Subject" means you — the individual whose Personal Data is being processed.
• "Cookies" means small text files stored on your device by a website to remember information about your preferences or session.
• "KYC" means Know Your Customer — the identity verification process required to authenticate a Player's identity before certain transactions are processed.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia, as amended or updated from time to time.

3 Data We Collect

m99my collects the following categories of Personal Data in the course of providing our services. We collect only what is necessary for the purposes described in Section 5 of this Policy.

4 How We Collect Your Data

m99my collects Personal Data through the following means:

4.1 Directly from You

The majority of Personal Data we hold is provided directly by you when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our customer support team, or participate in promotional activities. This includes information submitted through registration forms, identity verification uploads, and live chat or email interactions.

4.2 Automatically Through Platform Use

When you visit or use the m99my Platform, certain Technical Data and Usage Data is collected automatically through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, browser configuration, device identifiers, and behavioural data relating to your activity on the Platform. Please see Section 10 for full details of our Cookie practices.

4.3 From Third-Party Service Providers

We may receive Personal Data from third parties in limited circumstances, including from payment processors (such as those facilitating Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect transactions), KYC verification providers, fraud detection services, and analytics platforms. Such data sharing is strictly governed by contractual data processing agreements.

5 How We Use Your Data

m99my uses the Personal Data we collect for the following purposes:

• Account Creation and Management: To register your account, verify your identity, manage your profile settings, and maintain the security and integrity of your account.
• Payment Processing: To process deposits and withdrawals through your chosen payment method, including e-wallets and bank transfers, and to maintain accurate transaction records.
• Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) regulations, and to respond to lawful requests from regulatory authorities.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other forms of abuse or misconduct on the Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through live chat and email.
• Service Improvement: To analyse Platform usage patterns, identify technical issues, and develop improvements to the features and performance of m99my.
• Responsible Gambling: To monitor player activity for signs of problem gambling, apply account restrictions where appropriate, and communicate with players regarding responsible gambling resources.
• Marketing and Promotions: To send you information about promotions, bonuses, and relevant offers — subject to your communication preferences and applicable opt-out rights.
• Legal Obligations: To comply with any court order, legal process, or lawful request from a competent governmental or regulatory authority.

6 Legal Basis for Processing

m99my processes your Personal Data on the following legal bases as applicable to the type of processing being performed:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the m99my Terms and Conditions, including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML, KYC, and tax reporting obligations.
• Legitimate Interests: Processing carried out for the purposes of fraud prevention, platform security, service improvement, and responsible gambling monitoring, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing undertaken based on your freely given, specific, and informed consent — including for certain marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing and Disclosure

m99my does not sell, rent, or commercially exploit your Personal Data for the benefit of third parties. We may, however, share your Personal Data with the following categories of recipients in the circumstances described:

7.1 Payment Service Providers

To process your deposit and withdrawal transactions, we share the minimum necessary Personal Data with our payment partners, including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect. These providers are contractually bound to process your data only for the purpose of facilitating transactions on your behalf.

7.2 Identity Verification Providers

Where required for KYC compliance, we share Identity Data and KYC documentation with licensed third-party identity verification service providers. These providers operate under strict data processing agreements and are prohibited from using your data for any purpose beyond the verification process.

7.3 Regulatory and Law Enforcement Authorities

m99my may disclose Personal Data to competent regulatory bodies, law enforcement agencies, or judicial authorities where required to do so by applicable law, court order, or regulatory directive. We will endeavour to notify you of such disclosure where permitted by law.

7.4 Technology and Infrastructure Partners

We engage third-party technology providers for cloud hosting, security monitoring, and platform analytics. These providers act as Data Processors on our behalf and are contractually restricted to processing your data solely in accordance with our documented instructions.

8 Data Retention

m99my retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as we are required to retain it under applicable law. Our general retention principles are as follows:

• Account Data: Retained for the duration of your account and for a minimum period of five (5) years following account closure, as required by applicable AML and regulatory retention obligations.
• Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction in accordance with applicable financial recordkeeping requirements.
• KYC Documentation: Retained for the minimum period required by applicable AML and regulatory obligations, typically five (5) years from the end of the customer relationship.
• Communication Data: Support transcripts and correspondence retained for up to three (3) years from the date of the interaction, unless a longer period is required for dispute resolution purposes.
• Marketing Preferences: Retained until you withdraw consent or object to processing, plus a reasonable additional period to honour opt-out requests.

Where Personal Data is no longer required for any purpose and no legal retention obligation applies, m99my will securely delete or anonymise the data.

9 Data Security

m99my implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include, but are not limited to:

• 256-bit TLS encryption for all data transmitted between your device and the m99my Platform.
• Encryption of Personal Data and financial records stored on our servers.
• Two-factor authentication (2FA) available on all registered accounts.
• Role-based access controls ensuring that only authorised personnel have access to Personal Data, and only to the extent required for their specific role.
• Continuous monitoring and intrusion detection systems to identify and respond to security anomalies in real time.
• Regular security audits and penetration testing conducted by qualified security professionals.
• Staff training on data protection responsibilities and secure data handling practices.

Notwithstanding the above, no method of electronic transmission or data storage is completely secure. In the unlikely event of a data breach that is likely to result in a risk to your rights or freedoms, m99my will notify affected individuals and relevant authorities as required by applicable data protection law.

10 Cookies & Tracking Technologies

m99my uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyse usage patterns. The following categories of cookies may be set when you visit the m99my Platform:

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may affect your ability to use certain features of the m99my Platform. Please note that our Platform does not currently respond to Do Not Track (DNT) browser signals.

11 International Data Transfers

Some of the third-party service providers engaged by m99my may be located in or operate from jurisdictions outside of Malaysia. Where Personal Data is transferred to a country that does not provide an equivalent level of data protection to that applicable in Malaysia, m99my will ensure that appropriate safeguards are in place prior to the transfer.

Such safeguards may include entering into standard contractual clauses approved by the relevant data protection authority, obtaining binding corporate rules, or relying on other legally recognised transfer mechanisms. You may request information about the specific safeguards applicable to any particular international data transfer by contacting us using the details in Section 15.

12 Your Data Rights

As a Data Subject, you hold a number of rights in relation to your Personal Data. m99my is committed to honouring these rights promptly and without unnecessary obstacles. Your rights include:

• Right of Access: You have the right to request a copy of the Personal Data that m99my holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any Personal Data that is inaccurate or incomplete. You may update certain information directly through your account settings, or by contacting our support team.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that m99my restricts the processing of your Personal Data in certain circumstances, for example where you contest the accuracy of the data or where processing is unlawful.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you have the right to receive your Personal Data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing of your Personal Data where that processing is based on legitimate interests, including for direct marketing purposes. Where you object to marketing, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact m99my's support team via live chat or by email at the address provided in Section 15. We will respond to all rights requests within thirty (30) calendar days of receipt. In complex or high-volume cases, this period may be extended by a further two months, in which case we will notify you accordingly.

13 Minors and Age Restriction

The m99my Platform is strictly intended for individuals who are at least 21 years of age. We do not knowingly collect Personal Data from any person under the age of 21. If we become aware that Personal Data has been submitted by a person under the age of 21, we will immediately suspend the associated account, void any transactions or winnings, and securely delete the Personal Data in question.

If you have reason to believe that a minor has registered an account on the m99my Platform, please notify us immediately using the contact details in Section 15.

14 Amendments to This Policy

m99my reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. The most current version of this Policy will always be accessible on the m99my Platform, with the effective date prominently displayed at the top of the document.

Where material changes are made to this Policy — particularly changes that significantly affect how we process your Personal Data — m99my will provide reasonable advance notice to registered players via email or a prominent notification on the Platform. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by m99my, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the m99my Platform
• Email: [email protected]

For data subject rights requests, including access, rectification, erasure, restriction, or portability requests, please include your registered account username and a brief description of your request. We may ask you to verify your identity before fulfilling the request.

We endeavour to respond to all privacy-related enquiries within five (5) business days and to complete data subject rights requests within thirty (30) calendar days of receipt.