Privacy Policy 99slot – Personal Data Protection for Malaysia Users

1Introduction and Scope of Privacy Policy

This Privacy Policy is published by 99slot ("We", "Platform") and applies to all users who access or use our platform, including the 99slot.plus website, mobile app, and all related services.

We understand that your trust is our most valuable asset. When you register an account, make a transaction, or simply browse our website, you are entrusting us with your personal information. We take this responsibility very seriously.

This policy is formulated in accordance with Malaysia Personal Data Protection Act 2010 (PDPA) and transparently explain:

• The types of personal data we collect from you.
• The purpose and manner in which we use that data.
• The parties who may receive your data and under what circumstances.
• The security measures we implement to protect your data.
• Your rights regarding your personal data and how to exercise them.

By using the 99slot platform, you agree to the terms set out in this Privacy Policy. If you do not agree, please discontinue use of our platform.

2Information We Collect

We only collect data that is genuinely necessary to provide our services to you. The following are the categories of data we collect:

A. Data You Provide Directly

• Identity Data: Full name, date of birth, identity card or passport number.
• Contact Data: Email address, phone number.
• Financial Data: Bank account details, e-wallet numbers (for processing deposits and withdrawals).
• KYC Documents: Copy of identity card, bank statement, or utility bill for identity verification.

B. Automatically Collected Data

• Technical Data: IP address, browser type and version, operating system, screen resolution.
• Usage Data: Pages visited, time spent, click actions, navigation patterns.
• Device Data: Unique device identifier, device model, network information.
• Location Data: General location based on IP address (country and state only, not precise location).

3How We Use Your Data

Your personal data is used responsibly for the following purposes only:

• Account Management: Creating, verifying, and maintaining your user account.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions securely and accurately.
• Identity Verification (KYC): Verify your identity in compliance with anti-money laundering (AML) and KYC requirements.
• Customer Service: Providing technical support, resolving disputes, and answering your inquiries.
• Platform Security: Detect and prevent fraud, unauthorised access, and suspicious activity.
• Service Improvement: Analyse usage patterns to improve platform design and user experience.
• Marketing Communications: Send promotional information, bonus offers, and the latest updates — only if you have consented to receive them.
• Legal Compliance: Fulfil legal obligations and respond to requests from lawful authorities.

4Data Sharing with Third Parties

99slot does not sell your personal data to any third party. However, there are limited situations where we need to share your data with certain parties to fulfil our services:

• Payment Providers: FPX, Touch 'n Go, GrabPay, MAE, ShopeePay, and bank payment providers to process your financial transactions. They only receive information necessary for the relevant transaction.
• Technology Service Providers: Server hosting, analytics, and infrastructure companies that help us operate the platform. All these providers are bound by strict confidentiality agreements.
• Regulatory Authority: Government agencies, regulatory bodies, or law enforcement authorities when required by Malaysian law.
• Fraud Investigators: Dedicated anti-fraud agencies when necessary to investigate suspicious activity affecting your account or our platform.

In all of the above cases, we ensure only the minimum necessary data is shared, and all data recipients are bound by strict confidentiality and security obligations.

5Data Security Measures

Protecting your personal data is our top priority. We implement multiple layers of technical and organisational security to keep your data safe at all times:

• Data Encryption in Transit: All communication between your app/website and our servers uses TLS 1.3 protocol with 256-bit encryption.
• Data Encryption at Rest: Sensitive data such as passwords and financial information is stored in encrypted form (encrypted at rest).
• Role-Based Access Control: Only authorised staff with a specific business need may access user data. All access is automatically logged.
• Regular Security Audits: Our platform undergoes regular security audits and penetration testing by independent third parties.
• 24/7 Monitoring: A threat detection system operates around the clock to identify and block any unauthorized access attempts.
• Two-Factor Authentication (2FA): You can enable 2FA for an additional layer of protection on your account.

6Cookies and Tracking Technologies

The 99slot website and app use cookies and similar tracking technologies to enhance the user experience and understand how our platform is used. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collect anonymous information about how users use the platform to help us improve our services.
• Functional Cookies: Remember your preferences and settings such as text size, display theme, and other preferences.
• Analytics Cookies: We use first-party analytics to understand platform usage patterns. This data is used in aggregate form and is not linked to your personal identity.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may significantly affect platform functionality.

7Data Storage and Retention Period

We retain your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by law:

• Active Account Data: Retained for as long as your account is active and for 5 years after account closure, in compliance with Malaysian legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in compliance with accounting and anti-money laundering laws.
• Communication Logs: Retained for 2 years for customer support and dispute resolution purposes.
• Technical and Log Data: Retained for 90 days, then automatically deleted or anonymised.

Once the retention period expires, your data will be securely deleted or anonymized so it can no longer be linked to your identity.

8Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

9Cross-Border Data Transfers

In the operation of the 99slot platform, your personal data may be transferred, stored, or processed outside Malaysia — for example, on servers located in other countries to ensure platform performance and reliability.

When cross-border data transfers occur, we ensure protection equivalent to Malaysia's PDPA is upheld through:

• Use of contractual clauses requiring data recipients to uphold equivalent data protection standards.
• Transfers only to countries with recognized data protection laws.
• Application of additional safeguards such as end-to-end encryption for highly sensitive data.

10Amendments to This Privacy Policy

99slot reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. You will be notified of any material changes through:

• Prominent notifications on the 99slot website and app.
• Email notification to all registered users (for significant amendments).
• In-app notification on your next mobile login.

The "Updated" date at the top of this page indicates when this Privacy Policy was last revised. We encourage you to review this page periodically. Continued use of the 99slot platform after any amendments constitutes acceptance of the revised terms.

11Contact Our Privacy Officer

For any inquiries, requests, or complaints regarding your privacy and personal data, please contact our Data Privacy Officer:

• Email: [email protected]
• Live Chat: Available 24/7 on the 99slot app (please state that your request is privacy-related)
• Response Time: We will acknowledge receipt of your request within 2 business days and resolve it within 14 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia or the relevant regulatory authority.