Privacy Policy W99MY —
Your Data, Our Responsibility

W99my collects various types of information depending on how you interact with our platform. We categorise this information into three main sections to help you understand more clearly what we store and why.

A. Information You Provide Directly:

• Registration Information — Full name, email address, phone number, date of birth, and the password you choose when opening a new account.
• Identity Verification Documents (KYC) — A copy of your Malaysian identification card (MyKad), passport, bank statement, or other documents required for identity verification and AML compliance purposes.
• Financial Information — Bank account numbers and digital wallet details (such as Touch 'n Go eWallet, GrabPay, or Boost) used for deposit and withdrawal transactions.
• Communication Information — Correspondence between you and the w99my support team, including live chat conversation records and emails.

B. Information Collected Automatically:

• Device & Technical Data — IP address, web browser type, operating system, device type, and screen resolution.
• Usage Data — Pages visited, games played, session duration, actions taken within the platform, and navigation patterns.
• Location Data — General location information derived from your IP address for geographic region verification and compliance purposes.
• Cookies and Session Data — Information stored in your browser to facilitate platform use and maintain your login session.

C. Information from Third Parties:

• Identity verification information from our licensed KYC service providers.
• Payment verification information from licensed payment processors.
• Risk and compliance information from AML service providers.

Every piece of information we collect is used for a legitimate and specific purpose. W99my does not use your data arbitrarily — every use has a clear justification, whether based on contractual necessity, legal obligation, our legitimate interests, or your consent.

We will not use your data for purposes not stated in this policy without first obtaining your consent. Should we wish to use your data for a new purpose that differs from the original purpose of collection, you will be notified and given the opportunity to withdraw your consent.

W99my does not sell, does not rent, and does not trade users' personal information to any third party for their own commercial purposes. This is our absolute commitment and will not change.

However, there are limited situations where we may share your information with certain parties:

• Licensed Service Providers — Companies that assist us in operating the platform, including payment processors, KYC providers, cloud service providers, and data analytics firms. All such providers are bound by strict confidentiality agreements.
• Relevant Authorities — When required by law, court order, or direction from a competent regulatory authority. W99my will comply with valid legal requirements while protecting user interests to the extent permitted.
• Fraud Investigation — To fraud prevention agencies or industry partners where there is strong evidence of fraudulent activity, money laundering, or other criminal activity.
• Business Transfer — In the event that w99my is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction. Users will be notified in advance.

W99my uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how users interact with our platform. There are several types of cookies we use:

• Necessary Cookies (Required) — These cookies are required for core platform functions such as login authentication, session security, and fraud detection. They cannot be disabled as they are essential to platform operations.
• Preference Cookies — Stores your preferences such as display language, display settings, and game preferences so you do not need to reconfigure them each time you log in.
• Analytics Cookies — Helps us understand how users use the platform — which pages are most popular, where users encounter issues, and how we can improve the user experience.
• Marketing Cookies — Used to display relevant promotions and offers to you based on your activity and interests on the w99my platform. These cookies are only activated with your consent.

You can manage your cookie preferences through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the platform.

W99my retains your personal information for as long as your account is active or as long as necessary to provide services to you. After account closure, we may still need to retain certain data for a period prescribed by applicable law — typically between 5 and 7 years for financial records and transactions for compliance and audit purposes.

Data that is no longer required will be securely deleted or anonymised in accordance with established procedures. We use irreversible data deletion methods to ensure that deleted information cannot be recovered.

The w99my platform infrastructure operates in data centres that comply with international security standards. Any cross-border data transfers (where applicable) are carried out with appropriate safeguards, including data transfer agreements that meet applicable data protection requirements.

As a w99my user, you have certain rights regarding your personal data. We fully respect and facilitate the exercise of these rights.

W99my takes data security seriously and has implemented a range of technical and organisational controls to protect your personal information from unauthorised access, loss, modification, or accidental disclosure.

Technical Controls:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data stored in databases using industry-standard encryption algorithms.
• Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) that continuously monitor network traffic.
• Multi-layer firewall and role-based access control (RBAC) for internal systems.
• Regular vulnerability scanning and penetration testing.
• Automated encrypted data backups to ensure continuity of service.

Organisational Controls:

• Mandatory data privacy and security awareness training for all w99my staff.
• Minimum access control policy — staff are only granted access to data necessary for their role.
• Documented security incident management procedures that are regularly tested.
• Non-disclosure agreements (NDA) binding all staff and contractors.
• Periodic reviews of access rights and system activity logs.

While we implement comprehensive security measures, please note that no system is 100% immune to all cyber threats. You also play an important role in protecting your account — ensure your password is strong and unique, enable two-factor authentication, and never share your login details with anyone.

The w99my Platform is exclusively for adults aged 18 and above. We do not knowingly collect or process personal information from individuals under the age of 18. Our registration process requires age verification through a strict KYC procedure.

If we discover or are made aware that personal information of a minor has been collected without proper verification, we will take immediate steps to delete that information and close the relevant account. Parents or guardians who believe their child has registered on our platform are urged to contact our support team immediately.

The w99my platform may contain references or integrations with third-party services such as payment processors, game providers, and technology partners. While we only work with trusted partners, w99my is not responsible for the privacy practices or content of those third-party websites or services.

Every third-party service provider we engage is bound by a data processing agreement requiring them to protect your data to a standard equivalent to our own privacy policy. We conduct due diligence before appointing any new provider.

W99my reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Any material amendments will be communicated to users via in-platform notifications or email at least 14 days before the changes take effect.

The "Updated" date at the top of this document will always reflect the date of the latest version. Your continued use of the w99my platform after any amendment takes effect constitutes your acceptance of the updated terms. We encourage you to review this policy periodically.

If you disagree with any amendments, you have the right to stop using the platform and request account closure. Please contact our support team for assistance with this process.