Privacy Policy menang99 — How We Protect Your Information

SEC 1 Introduction

Menang99 is committed to protecting the privacy of every player who entrusts us with their personal information. This Privacy Policy is prepared in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

We understand that in today's digital age, the security of personal information is something deeply valued. That is why we continually invest in systems and procedures that ensure your data never falls into the wrong hands. From data encryption in transit to strict internal access controls, every security layer is designed to give you peace of mind as a menang99 user.

SEC 2 Data We Collect

Menang99 collects several categories of information for the purposes described in this policy. The following is a summary of the data we collect:

2.1 Registration & Identity Information

• Full name as stated on your identity document;
• Date of birth (for age verification);
• Email address and mobile phone number;
• Residential address;
• National Identity Card number (MyKad) or equivalent identity document, collected during the KYC process.

2.2 Financial Information

• Bank name and bank account number (for withdrawal purposes only);
• Registered e-wallet details (Touch 'n Go eWallet, Boost, GrabPay);
• Deposit and withdrawal transaction history on the platform.

2.3 Activity & Technical Data

• IP address and device information (operating system, browser type);
• Game history and wagering activity on the platform;
• Login session timestamps and duration;
• Cookie and website tracking technology data (detailed in Section 9);
• Communication logs with the customer support team.

SEC 3 How We Use Your Data

Menang99 uses the data collected for the following purposes:

• Account Management: Create and maintain your account, process registration and verify identity;
• Transaction Processing: Process deposits and withdrawals securely and in a timely manner;
• Service Provision: Allow you to access and play all games on the menang99 platform;
• Security & Fraud Prevention: Detect and prevent fraudulent activity, money laundering and the use of multiple accounts;
• Legal Compliance: Meet KYC, AML compliance obligations and prescribed reporting requirements;
• Responsible Gaming: Monitor gameplay patterns to identify signs of problem gambling and provide assistance recommendations;
• Customer Support: Handle inquiries, complaints and support requests effectively;
• Marketing (with consent): Send promotional information, offers and platform updates — only to players who have consented to receive such communications.

SEC 4 Legal Basis for Data Processing

Menang99 processes your personal data on the basis of one or more of the following legal grounds:

• Contract Performance: Processing required to provide the services you registered for;
• Legitimate Interests: To prevent fraud, maintain platform security, and improve service quality;
• Legal Obligation: To comply with KYC, AML, and applicable regulatory requirements;
• Consent: For optional marketing activities and promotional communications.

SEC 5 Data Sharing

Menang99 does not sell your personal data. We share information only in the following limited circumstances:

5.1 Service Providers

We share necessary data with third-party service providers that support platform operations, including payment processors, cloud service providers and identity verification providers. All such providers are bound by strict data protection agreements and are prohibited from using your data for any other purpose.

5.2 Legal Requirements

Menang99 may disclose information when required by law, court order or direction from a competent authority. In such cases, we will endeavour to notify you in advance unless prohibited from doing so.

5.3 Security Protection

If we believe disclosure is necessary to prevent physical harm, financial loss or to report suspected illegal activity to the relevant authorities.

SEC 6 Data Security

Menang99 implements a range of technical and organisational measures to protect your data, including:

• Encryption in Transit: All communications are secured with TLS 1.3 protocol and 256-bit SSL encryption;
• Encryption at Rest: Sensitive data is stored in encrypted form using industry-standard algorithms;
• Access Controls: Only authorized personnel operating under the principle of least privilege may access player data;
• Regular Security Audits: The platform undergoes regular penetration testing and independent security audits;
• 24/7 Monitoring: Threat monitoring systems operate around the clock to detect suspicious activity;
• Two-Factor Authentication (2FA): Available to all player accounts as an added layer of security.

While we take these measures, no system can be guaranteed 100% secure. We encourage you to also take precautions by using a strong, unique password and enabling 2FA on your account.

SEC 7 Data Retention Period

Menang99 retains your personal data for as long as your account is active or as long as necessary for the purposes stated in this policy. Following account closure, certain data may need to be retained for a longer period due to legal requirements:

• KYC records and financial transactions: retained for a minimum of 7 years for AML compliance purposes;
• Customer support communication logs: retained for 3 years;
• Technical and security log data: retained for 12 months;
• Game history: retained for 5 years for responsible gaming and compliance purposes.

Once the retention period expires, data will be securely deleted or anonymised using methods that ensure recovery is no longer possible.

SEC 8 Your Rights

As a menang99 player, you have the following rights regarding your personal data:

To exercise any of the above rights, contact our privacy team by email at [email protected] or via Live Chat. We will process your request within 30 calendar days.

SEC 9 Cookies & Tracking Technologies

The menang99 website and app use cookies and similar tracking technologies to enhance the user experience and collect usage information. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management. These cookies cannot be disabled;
• Performance Cookies: Collect information on how you use the website to help us improve platform performance;
• Functional Cookies: Save your preferences such as language and display settings to make your experience more comfortable;
• Analytics Cookies: Help us understand overall usage patterns for continuous improvement.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect platform functionality. Menang99 does not use third-party cookies for advertising purposes.

SEC 10 Cross-Border Data Transfer

Menang99's operations may involve transferring your personal data to servers located outside Malaysia. In such cases, we ensure that a level of protection equivalent to Malaysia's PDPA standards is maintained through:

• Legally binding data processing agreements with all data recipients;
• Selection of cloud service providers that comply with international data protection standards;
• Implementation of technical and organisational security measures that are equivalent to or exceed PDPA requirements.

SEC 11 Children's Privacy

Menang99 is a platform exclusively dedicated to adults aged 18 and above. We do not knowingly collect or process personal data of individuals under 18 years of age. Should we discover that information from a minor has been inadvertently collected, such data will be deleted immediately and the relevant account will be terminated.

If you have reason to believe that a minor has registered on our platform, please contact us immediately at [email protected].

SEC 12 Policy Amendments

Menang99 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the technologies we use. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page;
• Send notifications via email or in-platform messages to all registered users;
• Display a clear notice on the platform's home page for at least 7 days before changes take effect.

Continued use of the platform after the effective date of such changes will be deemed acceptance of the updated Privacy Policy.

SEC 13 Contact Us

For any enquiries, concerns, or requests regarding your personal data privacy, please reach us through the following channels:

• Privacy Email: [email protected] (state "Privacy Inquiry" in the email subject);
• Live Chat: Available 24/7 via the chat icon on the platform;
• FAQ: Browse FAQ page us for answers to general questions about privacy.

We are committed to responding to all privacy inquiries within 5 business days. For more complex data rights requests, processing may take up to 30 calendar days.