Privacy Policy m99myr – Your Data is Protected Fully

This Privacy Policy describes the practices for collecting, using, disclosing and protecting the personal information of users on the m99myr. By using this platform, you agree to the terms set out in this Privacy Policy. If you do not agree, please stop using the platform.

This Privacy Policy was drafted to comply with Personal Data Protection Act 2010 (PDPA) Malaysia and leading international data protection standards. We treat your privacy as a priority, not merely a legal obligation.

M99myr collects various types of personal data depending on how you interact with our platform. Below are the full details of the data collected:

Data collected is used solely for purposes related to providing m99myr services to you. The following is a complete list of data usage purposes:

• Identity verification (KYC): To ensure every account is legitimate and compliant with anti-money laundering (AML) legal requirements.
• Transaction processing: To process deposits, withdrawals, and any financial transactions in your account accurately and securely.
• Customer support: To identify you when you contact support and resolve any account issues efficiently.
• Service communications: To send important notifications relating to your account, active promotions, and security updates.
• Fraud detection: To detect and prevent any suspicious activity that could compromise your account or the platform.
• Product improvement: To understand how users interact with the platform in order to improve the overall user experience.
• Legal compliance: To comply with the reporting and record-keeping requirements mandated by applicable Malaysian law.

M99myr will not use your data for purposes outside the list above without first obtaining your explicit consent.

M99myr does not sell users' personal data to any third party for marketing or commercial purposes. Your data is only shared in the following limited situations:

• Payment service providers: Licensed payment gateways such as FPX, DuitNow and e-wallet processors receive only the minimum data required to process transactions.
• Technical service providers: Cloud infrastructure providers and security service providers that help us operate the platform securely, subject to strict confidentiality agreements.
• Legal authority: Data is shared when required by court order, regulatory directive or valid legal obligation. m99myr will endeavour to notify you before such disclosure unless prohibited by law.
• Game providers: Minimum information required to enable access to games from third-party providers such as Pragmatic Play and Evolution Gaming, all subject to data protection agreements.

M99myr implements comprehensive technical and organisational security measures to protect users' personal data from unauthorised access, loss, or destruction:

• Data encryption in transit: All communications between your device and m99myr servers are protected by TLS 1.3 protocol and 256-bit SSL encryption.
• Data encryption at rest: Sensitive data such as banking information and identity documents are stored in an encrypted format that cannot be read without the appropriate decryption key.
• Tiered access control: Access to user data within m99myr's internal systems is restricted to staff who require it to perform their duties only.
• 24/7 security monitoring: An active intrusion detection system continuously monitors all suspicious activity around the clock.
• Regular backups: Data is regularly backed up to a secure, separate location to ensure recovery is possible in the event of an unexpected incident.
• Security audits: Independent security assessments are conducted periodically by qualified third parties to identify and address any system vulnerabilities.

The m99myr platform uses cookies and similar tracking technologies to enhance the user experience and understand platform usage patterns. The types of cookies used are:

• Essential Cookies: Required for basic platform functions such as login verification and session security. These cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies: Collects information on how users interact with the platform — most visited pages, time spent, and any error messages encountered — to help us improve the platform.
• Functional Cookies: Stores user preferences such as language, display settings, and login details to make the platform easier to use on future visits.
• Analytics Cookies: Used to understand overall usage patterns for product improvement purposes. This data is processed in aggregate and does not identify individual users.

You can manage or disable cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the m99myr platform.

The m99myr platform is exclusively for adult users aged 18 and above. We do not knowingly collect, store or process any personal data from individuals under the age of 18.

In some cases, your personal data may be processed or stored on servers located outside Malaysia — particularly in connection with cloud infrastructure services and international game providers.

• Any cross-border data transfer is only carried out to countries or entities that maintain a level of data protection equivalent to Malaysia's standards.
• All cross-border data transfers are governed by contractual agreements that require recipients to comply with strict data protection standards.
• m99myr ensures that any such data transfer complies with the requirements of Section 129 of Malaysia's Personal Data Protection Act 2010.

M99myr retains users' personal data for as long as your account is active or as long as necessary to provide our services. After account closure, data is retained according to the following schedule:

Once the specified retention period expires, data will be securely deleted or anonymised so it can no longer be linked to any individual.

As an m99myr user, you have the following rights regarding your personal data under Malaysia's PDPA:

• Right of Access: You have the right to know what personal data we hold about you and how it is used. Access requests can be submitted through customer support.
• Right to Rectification: You have the right to correct or update your personal data if it is inaccurate or outdated. Basic corrections can be made directly through your account settings.
• Right to Restrict Processing: In certain situations, you have the right to request that we restrict how we process your data while any dispute is being resolved.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time by updating your communication preferences in your account.
• Right to Erasure: You may request the deletion of your personal data, subject to legal obligations that require us to retain certain records.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, there are several ways to contact us:

• Live Chat: The fastest way — our support team is available 24 hours a day, 7 days a week via the chat icon in the corner of the platform.
• Email: Send your detailed enquiry to [email protected]. We aim to respond within 24 hours for general enquiries.
• FAQ Page: Review our FAQ page for answers to frequently asked questions about privacy and account security.

This Privacy Policy takes effect from 1 January 2026. m99myr reserves the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated to users via account notifications at least 14 days before the changes take effect.