999myr Privacy Policy – Our Commitment to Protecting Malaysian Players' Data

1 Introduction & Scope of This Privacy Policy

This Privacy Policy is issued by 999myr ("Platform", "we") and applies to all users who register, browse or use our online casino platform services at https://999myr.best. This document outlines our data protection practices and your rights as a data subject under Malaysia's Personal Data Protection Act (PDPA) and other applicable legislation.

By using the 999myr, you agree to the collection and processing of your personal data as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to discuss the options available to you.

This policy covers all services offered by 999myr including slots, Live Casino, table games such as baccarat and roulette, blackjack in all its variants, Sports Betting on football, badminton and e-sports, as well as all player account functions including deposits, withdrawals and communication with our customer support team.

2 Types of Personal Data We Collect

999myr collects your personal data through several means — data you provide directly during registration and use of the platform, as well as data collected automatically through your use of the platform. Below is a breakdown of the data we collect:

We only collect data that is genuinely necessary to provide the services you request. We do not collect sensitive data such as health information, political views or religious beliefs unless you voluntarily provide it in specific contexts, such as a self-exclusion request on health grounds.

3 How We Use Your Personal Data

999myr uses collected personal data solely for legitimate purposes directly related to the provision of our online casino platform services. The following are the specific purposes for which we use your data:

• Account management: To create and manage your player account, process registration, verify identity (KYC) and enable you to log in to the platform securely. 999myr.
• Transaction processing: To process deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost or ShopeePay, and to process withdrawals of your winnings to your registered payment method.
• Gaming services provided by: To allow you to access and play all games available on 999myr including slots, Live Casino, table games, blackjack, and Sports Betting.
• Fraud prevention and security: To detect, investigate and prevent fraudulent activity, money laundering, account abuse and any other security threats to the platform or other players.
• Legal compliance: To fulfil legal obligations applicable to us, including KYC/AML (Anti-Money Laundering) requirements, reporting to relevant authorities when required, and maintaining financial records for the periods prescribed by law.
• Customer support: To respond to player enquiries, complaints and support requests, and to improve the quality of our support services based on feedback received.
• Service communications: To send you important notifications relating to your account, such as transaction confirmations, security alerts, policy updates and relevant promotions — you may unsubscribe from marketing communications at any time.
• Platform improvements: To analyse usage patterns in aggregate (without identifying individuals) for the purpose of improving the platform's interface, performance and user experience 999myr as a whole.

We do not use your personal data for any purposes beyond those stated above without your prior consent. If we intend to use your data for a new purpose that materially differs from the original, we will notify you and obtain fresh consent where required.

4 Sharing Data with Third Parties

999myr does not sell, rent, or disclose players' personal data to third parties for marketing or commercial purposes. This is a non-negotiable commitment. However, there are limited circumstances in which we need to share certain data with other parties for legitimate operational purposes:

• Payment service providers: Data required to process your deposit and withdrawal transactions is shared with payment service providers such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX — solely to facilitate the processing of those transactions.
• Game providers: Game session data required is shared with game providers such as Evolution Gaming and Pragmatic Play to ensure games function correctly — including Live Casino with real dealers.
• Technology service providers: Cloud infrastructure providers, cybersecurity services and platform management tools we use may process certain data in their capacity as data processors on our behalf, subject to strict data protection agreements.
• Legal authorities: We may be required to disclose player data to authorities such as Bank Negara Malaysia, the Royal Malaysia Police or other enforcement bodies when lawfully required to do so by law or a valid court order. In such cases, we will disclose only the minimum data necessary and will notify the player concerned where permitted by law.

All third parties that receive player data 999myr in the context above are bound by strict confidentiality and data protection agreements. They are only permitted to use such data for the specific purpose related to the services they provide to us, and for no other purpose.

5 Data Security – How We Protect Your Information

999myr continuously invests in high-standard cybersecurity infrastructure and practices to keep our Malaysian players' personal data safe at all times. The key security measures we maintain include:

• Encryption in transit: All communications between your browser or application and the 999myr encrypted using TLS 1.3 protocol with 256-bit SSL encryption — ensuring no one can intercept or read your data in transit.
• Encryption at rest: Sensitive data such as payment information and identification numbers are stored in encrypted form on our servers — even in the event of unauthorized physical access to the servers, the data remains unreadable without the appropriate encryption key.
• Tiered access controls: A role-based access control (RBAC) system ensures that every staff member 999myr may only access data required for their specific job responsibilities. Access to player data is automatically logged and regularly audited.
• Two-factor authentication (2FA): Platform administration accounts 999myr is protected with two-factor authentication. We also encourage players to enable 2FA on their accounts for an added layer of protection.
• Continuous security monitoring: An active security monitoring system operates 24/7 to detect and respond to any threats or suspicious activity in real time.
• Regular penetration testing: 999myr conducts regular penetration testing and vulnerability assessments by independent third parties to identify and address security weaknesses before they can be exploited.

While we take all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. In the event of a data breach affecting the security of your personal data, 999myr is committed to notifying affected players within 72 hours of discovering a breach, in line with industry best practices.

6 Cookies, Tracking Technologies & Analytics

Platform 999myr uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly and understand how players use our services. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login session management, security and technical stability. These cookies cannot be disabled without significantly affecting platform functionality.
• Performance cookies: Collects aggregated, non-identifiable information about how players use the platform — for example, the most frequently visited pages and time spent on them. This data is used solely to improve the platform 999myr.
• Functional cookies: Storing your preferences such as language selection, display settings and login information (if you choose to save them) so your experience is more convenient when you return.
• Security cookies: Used to detect and prevent fraudulent activity, including helping identify suspicious login attempts and protecting your account from unauthorized access.

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may cause certain platform features 999myr is not functioning correctly. For instructions on how to manage cookies in popular browsers such as Chrome, Firefox, or Safari, please refer to the respective browser's support documentation.

7 Data Retention & Deletion

999myr retains players' personal data only for as long as necessary for the purposes set out in this policy, or as required by applicable Malaysian law. The following is a guide to our data retention periods:

• Active account data: Throughout the period your account remains active on the platform 999myr plus an additional period following account closure as specified below.
• Financial and transaction records: Retained for a minimum of 7 years from the transaction date, in compliance with applicable Malaysian financial and tax legislation.
• KYC and identity verification data: Retained for a minimum of 5 years after account closure, in accordance with AML (Anti-Money Laundering) requirements under Malaysian law.
• Customer support communication data: Retained for 2 years from the date of last communication, for reference purposes and resolution of any disputes that may arise.
• Technical and security log data: Retained for 12 months for security monitoring and incident investigation purposes.

When data is no longer needed and there is no legal obligation to retain it, 999myr will securely delete or anonymise that data using methods that ensure it cannot be recovered or re-linked to the individual concerned.

8 Players' Rights as Data Subjects

Under Malaysia's Personal Data Protection Act (PDPA) and 999myr, you have the following rights regarding the personal data we hold about you:

To exercise any of the above rights, please submit a written request to support@999myr.best, clearly stating the right you wish to exercise and providing the information needed to verify your identity. 999myr is committed to responding to all valid requests within 21 business days of receiving a complete request.

9 Children's Privacy & Protection of Minors

Platform 999myr is intended exclusively for users aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18 under any circumstances.

Registration process 999myr includes age verification as part of our KYC procedures. Any account found to have been registered by an underage individual will be closed immediately and all associated data will be permanently deleted from our systems as soon as possible.

Parents or guardians who discover that their minor child or ward has registered an account at 999myr are asked to contact us immediately at support@999myr.best. We will take prompt action to close the account in question and delete all associated data.

10 Amendments to This Privacy Policy

999myr reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data protection practices, new legal requirements, or changes to the services we offer.

Any material changes to this policy — meaning changes that significantly affect how we use your data or your rights — will be announced via a prominent notice on the platform and/or by email to your registered address at least 14 days before those changes take effect. This gives you sufficient time to read and understand the upcoming changes.

The "Updated" date shown at the top of this document will always reflect the date of the latest version of this Privacy Policy. We recommend reviewing this policy periodically to stay informed about how 999myr to protect your data. Continued use of the platform after any amendments take effect constitutes your acceptance of the updated version.

11 How to Contact Us About Privacy

For any questions, concerns or requests relating to this Privacy Policy or the protection of your personal data on the 999myr, please reach out to us through the following channels:

• Privacy Email: support@999myr.best — mark your email subject as "Privacy Enquiry" to speed up our response. We typically reply within 24 hours on business days.
• Live Chat: Accessible directly within the platform once you are logged in — available 24 hours a day, 7 days a week. Ideal for general privacy enquiries.
• Formal Written Request: For formal requests relating to data rights (access, correction, deletion), please send an email with the subject line "Data Rights Request — [Request Type]" along with your account number and a copy of your identification document for identity verification purposes.

Our team provides support in both Bahasa Malaysia and English. If you are dissatisfied with how 999myr handles your personal data or our response to your request, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the supervisory body under Malaysia's PDPA.