S99my Privacy Policy – Personal Data Protection for Malaysian Users

S99my collects your personal information through several different channels, depending on how you interact with our platform.

• During account registration: You provide basic information such as your name, Malaysian phone number, email address, and date of birth. This information is required to open a valid s99my account and to verify that you meet the minimum age requirement of 21 years.
• During the KYC (Know Your Customer) process: For withdrawals exceeding certain limits, or where required for compliance purposes, s99my may request a copy of your Malaysian identity card (MyKad) or a valid identification document to verify your identity and prevent money laundering.
• During financial transactions: Information related to the payment method you use — whether Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u or CIMB Clicks — is recorded for financial administration and fraud prevention purposes. s99my does not store your full bank account or card numbers.
• Automatically during platform use: s99my's servers automatically log technical data such as IP address, browser type, operating system, pages visited, and session duration for the purposes of security, fraud detection, and platform performance optimisation.
• Through cookies and similar technologies: s99my uses standard cookies and web tracking technologies to store user preferences, maintain login sessions, and collect analytics data on how users interact with our platform.
• Through customer support communications: When you contact the s99my support team via live chat or email, records of those communications are retained to ensure continuity of service and the quality of support you receive.

S99my uses collected data solely for legitimate purposes directly related to providing platform services to you.

• Account administration and identity verification: Registration data is used to create and manage your s99my account, verify your identity at login, and process account-related requests such as password resets.
• Financial transaction processing: Payment information is used to process deposits and withdrawals in Malaysian Ringgit (RM), verify ownership of the payment method, and maintain transaction records for accounting and audit purposes.
• Gaming services provided by: Game activity records are used to calculate and credit winnings, manage account balances, process bets, and ensure the integrity of all games you play on s99my.
• Security and fraud prevention: Technical and geolocation data is used to detect suspicious activity, prevent unauthorised access to your account, identify multiple accounts, and protect the integrity of the s99my platform from abuse.
• Legal and regulatory compliance: User data may be used to meet Malaysian legal reporting obligations, including anti-money laundering (AML) requirements and legitimate requests from the relevant authorities.
• Service communications: Your phone number and email address are used to send important account-related notifications, such as transaction confirmations, security alerts, and relevant platform updates for s99my users.
• Responsible gambling: Game activity records are monitored to identify play patterns that may indicate signs of problem gambling, and to enable s99my to provide appropriate support to users who need it.
• Marketing and promotions (with your consent): With your consent, s99my may send you information about promotions, bonuses, and special offers that may interest you based on your gaming preferences. You may withdraw this consent at any time.

S99my does not sell your data. However, there are limited situations where sharing data with certain parties is necessary for platform operations.

• Payment service providers: Transaction information is shared with approved payment providers — such as Touch 'n Go, GrabPay, Boost, ShopeePay, and the banks involved in processing DuitNow and FPX — solely to facilitate the secure completion of your financial transactions.
• Game software providers: For live casino games such as baccarat and poker operated by third-party providers, the game session data required is shared with those providers to enable gameplay. These providers are bound by confidentiality agreements with s99my.
• Authorities and enforcement agencies: s99my will disclose user data to Malaysian authorities when required by applicable law, court order, or a legitimate criminal investigation. This includes investigations related to money laundering and fraud.
• Technical service providers: Companies that assist s99my with server hosting, cybersecurity, data analytics, and other technical support may access the data required to carry out their functions, subject to binding confidentiality agreements.

S99my implements multiple layers of security to protect your personal data from unauthorised access, modification, or disclosure.

• All data communications between your browser or app and s99my servers are protected using Transport Layer Security (TLS) 1.2 and above – ensuring no third party can intercept your data in transit.
• s99my user passwords are never stored in plain text. We use a robust hashing algorithm (bcrypt) with a unique salt for each user — meaning that even in the event of a s99my database breach, your password cannot be decrypted.
• s99my systems are continuously monitored for security anomalies, suspicious login attempts and cyberattacks. The s99my security team responds to threats in real time to protect user accounts.
• s99my staff access to user data is governed strictly by a need-to-know basis. A layered permissions system ensures that only authorised personnel who require access to specific data to perform their duties are permitted to do so.
• Security penetration testing is conducted regularly by independent security experts to identify and address vulnerabilities in s99my's infrastructure before they can be exploited by malicious parties.
• All sensitive s99my user data is stored on servers protected by strict physical and digital access controls, storage in restricted zones, encryption at rest, and regular secure backups.

S99my retains personal data only for as long as necessary for the stated purposes or as required under Malaysian law.

• Once the specified retention period has elapsed, s99my will securely delete or anonymise your data in accordance with certified data deletion procedures that ensure the data cannot be recovered by any party.
• Users who request closure of their s99my account may also request early deletion of their personal data, subject to the minimum retention requirements mandated by Malaysian law that cannot be waived.

S99my uses standard cookies and web technologies to enhance the user experience and maintain platform security.

• Required session cookies: These cookies are essential to the basic functionality of the s99my platform – such as maintaining your login status as you browse between pages, storing your updated account balance, and ensuring transactions are processed correctly. These cookies are automatically deleted when you close your browser.
• Preference cookies: Your personal settings — such as preferred language, display format, and game preferences — are saved so you don't have to reconfigure them each time you log in to s99my.
• Security cookies: Used to detect suspicious access attempts, prevent CSRF (Cross-Site Request Forgery) attacks, and verify that every request made to s99my's servers originates from a legitimate session.
• Analytics cookies: s99my uses aggregated, non-personal analytics data to understand how users interact with the platform – which pages receive the most visits, how long users spend in particular sections, and where users encounter difficulties – for the purpose of platform improvement.
• You can configure your browser to reject all cookies or to notify you whenever a cookie is sent. However, disabling required cookies may affect certain functions on the s99my platform, such as the ability to stay logged in.

As an s99my user based in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010.

• Right of Access: You have the right to request a copy of the personal data s99my holds about you. Such requests will be processed within 14 business days of receipt. A nominal fee may apply for requests involving a large volume of data.
• Right to Rectification: If the personal data held by s99my about you is inaccurate, incomplete, or outdated, you have the right to request that we correct or update it. Basic details such as your phone number can be updated directly through your account settings.
• Right to Object to Processing: You have the right to object to s99my using your data for direct marketing purposes at any time. Such requests will be actioned within 5 business days of receipt by the s99my team.
• Right to Erasure: In certain circumstances — such as when data is no longer needed for its original purpose or when you withdraw your consent — you may request that s99my delete your personal data, subject to the legal retention requirements set out in section 5.
• Right to Lodge a Complaint: If you believe that s99my has violated your privacy rights, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia or to contact the s99my team directly for an internal resolution.

• s99my strictly does not provide services to individuals under the age of 21. Our platform does not knowingly collect personal data from minors or individuals below the minimum age.
• Should s99my discover that personal data belonging to an individual under the age of 21 has been collected without valid consent, we will promptly delete that data and close the account in question.
• Parents or guardians who suspect their child has registered an s99my account without permission are encouraged to contact our support team immediately at support@s99my.xyz for prompt action.

• s99my reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or relevant technological developments. The new effective date will be displayed at the top of this page.
• For material changes that significantly affect how we handle your personal data, s99my will endeavour to provide at least 14 days' advance notice via the email address registered to your s99my account.
• Continued use of the s99my platform after changes to the Privacy Policy take effect will be considered your acceptance of the updated terms. If you do not agree with the changes, you have the right to close your s99my account.
• It is your responsibility to review this Privacy Policy page periodically to ensure you remain informed of the latest terms governing how s99my handles your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or how s99my handles your personal data, please contact us through the following channels.

• Privacy Officer Email: Send an email to support@s99my.xyz with the subject line "Privacy Inquiry" or "Data Request". The s99my team will respond within 3 business days for general inquiries and 14 business days for formal data access or deletion requests.
• Live Chat Platform: For privacy inquiries that do not require formal identity verification, you can reach the s99my support team via live chat, available 24 hours a day, 7 days a week, including Malaysian public holidays.
• Complaints procedure: If you are unsatisfied with s99my's response to your privacy request after the internal process has been completed, you have the right to file a formal complaint with the Personal Data Protection Commissioner of Malaysia, appointed under the Personal Data Protection Act 2010.