Privacy Policy 999myr – Protecting Your Personal Data Is Our Top Priority

When you register and use the 999myr platform, we collect certain personal information necessary to provide a secure, seamless, and high-quality service. All data collection is carried out transparently and with your consent.

The categories of information we collect are as follows:

In addition to information you provide directly, we also collect data automatically when you use our platform. This includes server logs, cookie data, device information, and usage patterns that help us identify and prevent fraudulent activity or unauthorised access.

The personal information we collect is used solely for lawful purposes that are stated before or at the time of collection. 999myr is committed to not using your data beyond the agreed scope.

• Account Management: Creating, verifying and maintaining your 999myr account, including processing registration applications and ensuring a secure login process.
• Transaction Processing: Processing deposits, withdrawals and any other financial transactions accurately and securely using your preferred payment method.
• KYC Verification: Verifying your identity to meet anti-money laundering (AML) compliance requirements and prevent identity fraud.
• Service Communications: Sending important notifications relating to your account, including transaction confirmations, security alerts and policy updates.
• Customer Support: Enabling the 999myr support team to provide effective and personalised assistance whenever you need help.
• Fraud Prevention: Analysing activity patterns to detect and prevent unauthorised access, fraud and any misuse of the platform.
• Platform Improvements: Using anonymised aggregate data to improve platform performance, interface design and the overall user experience.
• Responsible Gaming: Monitoring gaming patterns to identify players who may need support and proactively reaching out to them.
• Legal Compliance: Meeting applicable legal and regulatory obligations, including retaining transaction records for periods prescribed by law.

999myr maintains a strict policy regarding the sharing of your personal data. In general, we do not share your information with external parties. However, there are limited situations where sharing is necessary or required by law:

• Trusted Service Providers: We share necessary data with payment service providers (such as FPX, DuitNow and e-wallet processors) that assist us in operating the platform. All such providers are bound by strict confidentiality agreements.
• Game Software Providers: Required game session data is shared with our licensed game providers to ensure games function correctly and fairly.
• Legal Requirement: We may disclose your information to government authorities or law enforcement when required by a valid court order, warrant or statutory provision.
• AML Compliance: In cases involving suspected money laundering or financial crime, we are obligated to report to the relevant authorities in accordance with Malaysian law.
• Business Transfer: In the event of a merger, acquisition, or sale of company assets, your data may be transferred as part of that transaction, subject to equivalent privacy protections.

In all of the above circumstances, we ensure that only the minimum necessary information is shared, and the receiving party is bound by confidentiality and data security obligations equal to or higher than our own standards.

The security of your personal data is our top priority. 999myr continually invests in the latest security infrastructure to ensure your information is always protected against any threat.

• 256-bit SSL/TLS Encryption: All communications between your browser and the 999myr servers are fully encrypted using industry-standard security protocols.
• Stored Data Encryption: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using AES-256 algorithms.
• Multi-Layered Firewall: Our server infrastructure is protected by a multi-layered firewall system that continuously filters all incoming and outgoing traffic.
• 24/7 Threat Monitoring: Our cybersecurity team monitors our systems around the clock using advanced intrusion detection and prevention tools (IDS/IPS).
• Two-Factor Authentication (2FA): All administrative access to our systems requires two-factor authentication, eliminating the risk of unauthorised access even if a password is compromised.
• Regular Security Audits: We conduct regular penetration testing and independent security audits to identify and address any vulnerabilities.
• Staff Training: All staff who handle personal data receive comprehensive data protection training and are bound by strict confidentiality policies.

The 999myr platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform operates at its best. Below is a detailed explanation of the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login authentication, session management and security. The platform cannot operate without them and they cannot be disabled.
• Performance Cookies: Used to gather information about how you use the platform, including frequently visited pages and error messages. This data helps us improve platform performance.
• Functional Cookies: Allowing the platform to remember your preferences such as language, region and display settings to deliver a more personalised experience.
• Analytics Cookies: We use internal analytics tools to understand platform usage patterns. This data is aggregated and anonymised — it cannot be used to identify you personally.

You can control and manage cookie settings through your web browser. Most browsers allow you to view, delete, and block cookies. Please note, however, that disabling certain cookies may affect the functionality of the 999myr platform.

As a 999myr member and a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data. We are committed to facilitating the exercise of these rights:

To exercise any of the above rights, please contact the 999myr support team via the in-platform live chat or our official email. We will verify your identity before processing any request relating to your personal data to ensure the security of your information.

999myr retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. The following are our general data retention guidelines:

• Active Account Data: For as long as your account remains active and you continue using the 999myr platform, we retain all data necessary to operate your account.
• Financial Transaction Data: Transaction records are retained for seven (7) years after the transaction date, in accordance with Malaysia's accounting and tax legal requirements.
• KYC Documents: Identity verification documents are retained for five (5) years after account closure, in fulfilment of AML compliance requirements.
• Security Logs: Access and security activity logs are retained for two (2) years for investigation purposes in the event of a security incident.
• Marketing Data: Information related to marketing communications is retained for three (3) years or until you withdraw your consent.
• Inactive Account: Accounts inactive for more than three (3) years are subject to review, and data that is no longer required will be deleted or anonymised.

Once the retention period expires, your personal data will be securely deleted or anonymised so it can no longer be linked to you. The deletion process follows strict security procedures to prevent data recovery.

As 999myr works with international-grade technical service providers and gaming software vendors, your personal data may in limited circumstances be processed or stored outside Malaysia.

• All international data transfers are conducted only to countries or entities that provide a level of data protection equivalent to or higher than Malaysian standards.
• Contractually binding data transfer agreements are upheld with all international recipients, ensuring your data is protected to consistent standards.
• We use internationally recognised Standard Contractual Clauses as a protective mechanism for cross-border data transfers.
• The cloud service providers we use hold internationally recognised security certifications, including ISO 27001 and SOC 2 Type II.

999myr is a platform exclusively for individuals aged 18 years and above only. We take the matter of preventing underage access to our platform very seriously.

• We do not knowingly collect any personal information from individuals under the age of 18.
• Our registration and KYC process is designed to identify and block registrations by individuals who do not meet the minimum age requirement.
• If we become aware that we have inadvertently collected information from someone under the age of 18, we will promptly delete that information and close the account in question.
• Parents or guardians who discover that their child has an account on 999myr are encouraged to contact us immediately for prompt action.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, the 999myr privacy team is here to help. We take every enquiry seriously and will provide a thorough response.

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner or the relevant regulatory body under PDPA 2010.