M99y Privacy Policy – How We Protect Your Data

M99y ("we", "our platform") values the privacy of every member and visitor who uses our website and mobile app. This Privacy Policy is designed to ensure you fully understand how your personal information is handled, protected, and used within the m99y platform ecosystem.

As an online betting platform operating in Malaysia, we are committed to handling personal data in a responsible, secure, and transparent manner. We understand that your trust is our most valuable asset, and we will never take lightly the responsibility you place in us when sharing your personal information.

This policy applies to all information collected through the m99y website at m99y.pro, our mobile app for Android and iOS, and all services, features, and functions related to our platform.

We collect personal information from you through various channels and methods. The following are the main categories of information we collect:

A. Information You Provide Directly

• Registration Information: Full name, date of birth, email address, phone number and the username you chose when creating your account.
• Identity Verification (KYC) Information: Copies of your ID card, passport, utility bill, or other documents required to verify your identity and address.
• Financial Information: Bank account details, e-wallet account numbers (Touch 'n Go, GrabPay, Boost), and other payment information required to process deposits and withdrawals.
• Communications: Any messages, complaints, or enquiries you send to our support team via live chat or email.

B. Information Collected Automatically

• Device Data: Device type, operating system, phone model, unique device identifier and app version in use.
• Log & Usage Data: IP address, browser type, pages visited, session time and duration, actions taken on the platform.
• Location Data: General geographic location based on IP address for compliance and security purposes.
• Game Data: Betting history, wins, losses, game preferences, and platform usage patterns.

C. Information from Third-Party Sources

• Identity verification by a licensed KYC service provider.
• Payment processing information from recognised financial service providers.
• Blacklist screening from anti-fraud and anti-money laundering agencies.

The personal information we collect is used solely for the following purposes:

• Account Management: Creating, verifying and maintaining your member account, including a secure login process.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions on the platform quickly and securely.
• Identity Verification (KYC): Meeting legal compliance requirements including anti-money laundering and age verification.
• Customer Support: Providing effective assistance when you contact our support team via live chat or email.
• Platform Security: Detecting and preventing fraudulent activity, hacking, multi-account use and any security threats.
• Service Improvement: Analysing usage patterns to improve user experience, interface and platform performance.
• Important Communications: Sending account-related notices, policy updates, promotions you have opted in to receive and important security information.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of addiction and offering appropriate assistance to members who need it.
• Legal Compliance: Fulfilling legal obligations, regulations and directives from the relevant authorities.

We do not use your information for any purpose not stated above without first obtaining your consent. Any material new use will be communicated to you via a clear notice before it takes effect.

M99y does not sell, rent, or trade your personal information to any third party for marketing purposes. We only share your information in the following limited situations:

• Approved Service Providers: Third-party companies that assist us in operating the platform, including payment processors, KYC service providers, cloud service providers, and game suppliers. All such parties are bound by strict confidentiality agreements and are only permitted to use your data for the specific purposes we designate.
• Legal Requirements: When required by law, court order, or direction from a legitimate government authority, we may need to disclose your information without prior notice to you.
• Interest Protection: If we believe disclosure is necessary to protect the rights, property, or safety of m99y, our members, or the public from a serious threat.
• Business Transfer: If m99y is involved in a merger, acquisition, or sale of assets, user information may be transferred as part of the business assets. You will be notified by email before your information becomes subject to a different privacy policy.

All data sharing with third parties is subject to data protection agreements that obligate them to safeguard your information to the same high standards we uphold ourselves.

We invest seriously in security infrastructure to ensure your personal information is always protected against unauthorised access, disclosure, alteration or destruction. The technical security measures we employ include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and m99y's servers is encrypted using the latest industry-standard encryption protocols.
• Two-Factor Authentication (2FA): You can enable 2FA on your account for an additional layer of protection during login.
• 24/7 Security Monitoring: Our security team continuously monitors systems to detect any threats or suspicious activity.
• Data-at-Rest Encryption: Sensitive information stored in our databases is also encrypted, not only during transmission.
• Strict Access Controls: Only authorised m99y staff with a legitimate business need may access member personal information.
• Regular Security Audits: Our systems undergo regular penetration testing and independent security audits.
• Secure Data Backup: Data backups are performed regularly and stored at a separate location with the same level of encryption.

While we employ the latest security measures, no system in the world can guarantee 100% absolute security. In the event of any security breach affecting your data, we are committed to notifying you within 72 hours of becoming aware of it.

M99y uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how visitors use our website, which pages are most popular and where technical issues occur.
• Functional Cookies: Remembering your preferences and settings such as username, preferred language and display settings.
• Analytics Cookies: Used to collect statistical information about platform usage for the purpose of continuous improvement.

You can control and delete cookies through your browser settings. However, disabling certain cookies may affect the functionality and your experience on the m99y platform. We recommend allowing at least essential cookies to ensure the platform works properly.

We retain your personal information for as long as your account is active or as long as it is needed to provide services to you. Retention periods are also determined by applicable legal and regulatory requirements.

• Active Account Data: Retained for the duration your account remains active and until a deletion request is received and processed.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with legal requirements relating to financial records and anti-money laundering.
• KYC Documents: Retained for the period specified by compliance regulations, typically no less than 5 years after account closure.
• Communication Logs: Live chat and email history is retained for 2 years for support and dispute resolution purposes.
• Anonymized Analytics Data: Anonymized data may be retained longer for analytics and platform improvement purposes.

Once the retention period expires, your data will be deleted or anonymised in a secure and permanent manner. We use data deletion methods that meet industry standards to ensure your information cannot be recovered after the deletion process.

As an m99y member, you have the following rights regarding your personal information. We fully respect these rights and will process each request within a reasonable timeframe:

• Right of Access: You may request a copy of the personal information we hold about you at any time.
• Right to Rectification: If any of your information is inaccurate or incomplete, you may request that we correct or complete it.
• Right to Erasure: You may request deletion of your personal information, subject to our legal obligations to retain certain records.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict the processing of your data.
• Right to Object: You may object to the processing of your data for specific purposes such as direct marketing.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of the above rights, please contact our data protection team by email at [email protected]. We will respond to your request within 30 business days.

The m99y platform is strictly for individuals aged 18 and above. We do not knowingly collect or store any personal information from individuals under the age of 18.

If we find that we have inadvertently collected personal information from someone under the age of 18, we will take immediate steps to delete that information and close the relevant account.

If you as a parent or guardian believe that your underage child has registered or used our platform, please contact us immediately at [email protected] so that we can take the appropriate action promptly.

M99y reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements, or the services we offer. The "Last Updated" date at the top of this page will always reflect the most current version of this policy.

For material or significant changes, we will provide clear notice via:

• A prominent notice on our platform's home page at least 14 days before changes take effect.
• Email notification to the email address registered on your account.
• A pop-up notification in our mobile app during the next login session.

Continued use of the m99y platform after any amendment takes effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before the amendment's effective date.

If you have any questions, concerns or requests regarding this Privacy Policy or how m99y handles your personal data, please do not hesitate to contact us: