99group Privacy Policy – Us Protect Your Data

99group is a leading digital entertainment platform operating in Malaysia, offering registered members a wide range of online casino games, Slots, Sports Betting, and more. We understand that your trust depends not only on the quality of the games we offer, but also on how responsibly and transparently we handle your personal information.

This Privacy Policy explains in detail the types of personal information we collect from you, the purposes of that collection, how we store and protect your data, and your rights as a data owner. This document applies to all users of the 99group platform, including website visitors, registered members, and former members.

This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming Policy us, all of which together form the comprehensive agreement between you and 99group.

99group only collects information that is strictly necessary to provide you with the best possible service. We categorize the data we collect into three main types:

A. Information You Provide Directly

• Full name as stated in your official identity document.
• An active email address for communication and account verification purposes.
• A valid Malaysian mobile phone number.
• Date of birth for age verification purposes (you must be 18 years of age or older).
• Copy of identity document (MyKad or passport) for KYC verification.
• Payment method information including bank account or e-wallet details.
• Current residential address for identity verification purposes.

B. Information Collected Automatically

• IP address and approximate geolocation data for security and fraud detection purposes.
• Device type, operating system, and browser version in use.
• Platform activity logs including games played, access dates and times.
• Session data and cookies used to enhance the user experience.
• Financial transaction information including deposits, withdrawals, and wagering history.

C. Information From Third Parties

• Identity verification information from the KYC service providers we use.
• Fraud detection data from approved security service providers.
• Information shared by payment partners for transaction processing purposes.

Every piece of information we collect has a clear and legitimate purpose. Below is a comprehensive summary of how 99group uses your personal data:

We will not use your data for any purpose not stated above without first obtaining your consent. If we wish to use your data for a new or different purpose, we will notify you and seek the appropriate permission.

99group does not sell or trade your personal information. However, there are limited situations where we need to share your data with specific parties in order to deliver our services effectively:

• Payment Service Providers: Transaction information is shared with approved payment processors such as online banking providers and e-wallet platforms solely to process your deposits and withdrawals.
• KYC & Identity Verification Providers: Identity data is shared with controlled third-party verification partners to fulfill KYC requirements mandated by law.
• Game Providers: The minimum technical information required is shared with our gaming platform providers to ensure a smooth and secure gaming experience.
• Authorities & Regulatory Bodies: 99group will disclose your personal information when required by law, court order, or direction from a legitimate law enforcement agency.
• Technical Service Providers: Cloud infrastructure providers, cybersecurity vendors, and technical support personnel may have limited access to certain data in the course of their duties, and all are bound by strict confidentiality agreements.

All third parties involved in processing your data are required to meet security and privacy standards at least equivalent to those we uphold at 99group. We conduct regular due diligence reviews on all our data partners.

99group continuously invests in the latest security infrastructure to ensure your personal data is protected against all threats, whether internal or external to our organization. Our key security measures include:

• End-to-End Encryption: All communications between your device and the 99group platform are secured by TLS 1.3 with 256-bit encryption — your data cannot be read by any third party during transmission.
• Two-Factor Authentication (2FA): Your account can be strengthened with an additional layer of security through2FA, which requires verification via a second device each time you log in.
• 24/7 Security Monitoring: Our cybersecurity team continuously monitors all platform activity to detect and neutralise threats in real time.
• Regular Penetration Testing: The 99group platform undergoes regular penetration testing by independent security experts to identify and address any vulnerabilities.
• Role-Based Access Control: Internal staff can only access the data required for their specific role — no one has unrestricted access without controls and oversight.
• Secure Data Backup: Your data is automatically backed up and stored at a separate location with full encryption to prevent data loss from unforeseen events.

While we take all reasonable steps to protect your data, no system can guarantee 100% absolute security. We therefore also encourage you to take your own protective measures, such as using a strong and unique password and not sharing your login credentials.

99group uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. We use four main types of cookies:

• Essential Cookies (Required): Required for core platform functions such as login, session security, and language preferences. Without these cookies, the platform cannot function properly and they cannot be disabled.
• Functional Cookies: Saves your preferences such as display settings, preferred currency, and recent game history to streamline your experience on future visits.
• Analytical Cookies: Helps us understand how users interact with our platform through anonymised statistical data. This information is used to continuously improve platform design and functionality.
• Marketing Cookies (With Consent): Used to display more relevant offers and promotions based on your interests, with your explicit consent only.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the99group platform. For more information on how to manage cookies, please refer to your web browser's guide.

As a data subject under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by us. 99group is committed to honouring each of these rights:

To submit any request relating to the rights above, please contact the 99group customer support team via live chat on our platform. We will process your request within 30 business days.

99group retains your personal data only for as long as necessary to fulfill the original purpose of collection or to comply with applicable legal and regulatory requirements. Retention periods vary by data type:

• Active Account Data: Retained for the full duration your account remains active, plus any additional period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of seven (7) years after a transaction is made, in line with Malaysia's financial and taxation legal requirements.
• KYC Documents: Retained for a minimum of five (5) years after the business relationship ends for anti-money laundering (AML) compliance purposes.
• Activity & Security Logs: Retained for 12 months for security investigation and dispute resolution purposes.
• Marketing Data (With Consent): Retained until you withdraw your consent or request deletion.

Once the retention period has ended, your data will be securely deleted using methods that ensure it cannot be recovered. For data stored in physical format, appropriate destruction methods will be applied.

99group reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or technological developments that affect how we process data.

You will be notified of any material changes to this Privacy Policy through:

• Clear notice on the 99group platform homepage.
• An email to your registered account address at least 14 days before the changes take effect.
• Update the "Last Updated" date at the top of this document.

Continued use of the 99group platform after any changes to the Privacy Policy take effect will be considered your acceptance of the amended terms. If you disagree with any changes, you have the right to close your account and request data deletion in accordance with the rights set out in Section 7.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is available to assist you 24 hours a day, 7 days a week.

You can reach us through the following methods:

• Live Chat: Use the Live Chat function in the bottom-right corner of the 99group platform for immediate assistance.
• Email: [email protected] — we aim for a response time within 24 hours.
• FAQ Page: Visit the page FAQ us for answers to frequently asked questions about privacy and account security.

For formal requests relating to your personal data rights (access, correction, deletion), please clearly state the type of request and include sufficient identifying information to allow us to verify your identity before processing. This is a security measure to protect your account from unauthorized access.