Privacy Policy — MYR999

This Privacy Policy (hereinafter referred to as the"Policy") describes how MYR999 (hereinafter referred to as "MYR999", "We", "Us", or "the Platform"), operating through the websitehttps://myr999.cam, collects, processes, stores, and protects the personal data of its registered users and website visitors (hereinafter referred to as "Player", "User", or "You").

MYR999 takes data privacy seriously. We operate an online casino and sports betting platform serving players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond — and we are committed to handling your personal information with transparency, care, and in accordance with applicable data protection standards.

By registering an account on MYR999 or using any of our services, you acknowledge that you have read and understood this Privacy Policy, and you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should discontinue use of the Platform immediately.

This Privacy Policy should be read alongside our Terms & Conditions, which govern your use of the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

MYR999 collects the following categories of personal data from registered players and platform visitors:

MYR999 collects personal data through the following channels:

• Direct Submission: Information you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, or contacting customer support.
• Automated Platform Collection: Technical data collected automatically when you access or use the Platform, including IP address, session identifiers, device fingerprinting data, and browsing patterns within the Platform.
• Payment Processors: Transaction confirmation data received from Malaysian payment services including Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB Bank, Public Bank, Hong Leong Bank, RHB, and cryptocurrency processing services.
• KYC Verification Partners: Identity verification outcomes and risk assessment data provided by our third-party KYC service providers following document submission.
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, and similar technologies as further described in Section 10 of this Policy.

MYR999 processes your personal data for the following specific and legitimate purposes:

• Account Registration and Management: Creating, maintaining, and administering your MYR999 player account, including processing login authentication and managing account preferences.
• Identity Verification (KYC): Confirming your identity, age (21+ minimum), and address in compliance with our licensing obligations and anti-money laundering requirements.
• Financial Transaction Processing: Processing deposits and withdrawals in MYR through local Malaysian payment channels including TNG eWallet, DuitNow, FPX, and bank transfers, as well as cryptocurrency transactions.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct on the Platform.
• Regulatory Compliance: Meeting our obligations under the laws and regulations of our operating jurisdiction, including responding to lawful requests from regulatory and law enforcement authorities.
• Responsible Gambling: Monitoring gaming patterns to identify players who may be experiencing gambling-related harm, enabling timely intervention and support through deposit limit tools and self-exclusion programmes.
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance through our 24/7 live chat, WhatsApp, and Telegram support channels.
• Platform Improvement: Analysing usage patterns and player feedback to improve the performance, usability, and content of the MYR999 platform.
• Marketing Communications: Where you have expressly consented, sending you information about promotions, bonuses, and new features relevant to your account. You may withdraw marketing consent at any time.

MYR999 processes your personal data under one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and MYR999 — including account management, payment processing, and delivering the gaming services you have requested.
• Legal Obligation: Processing required to comply with applicable laws, regulations, and licensing conditions — including KYC, anti-money laundering obligations, and responses to lawful regulatory requests.
• Legitimate Interests: Processing undertaken in pursuit of MYR999's legitimate business interests, including fraud prevention, platform security, and improving service quality, where such interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications and non-essential analytics cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

MYR999 does not sell, rent, or share your personal data with unaffiliated third parties for their own commercial or marketing purposes. Personal data is shared only in the following circumstances:

• Payment Service Providers: Sharing of payment account details and transaction data with Malaysian payment processors including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong, RHB), and cryptocurrency processing services, to the extent necessary to execute financial transactions.
• KYC and Identity Verification Providers: Sharing of identity documents and personal details with our authorised third-party KYC verification partners for identity and age verification purposes.
• Game Technology Providers: Game providers may receive technical session identifiers to support game delivery and record-keeping. Game providers are not provided with directly identifying personal data beyond what is operationally required.
• Legal and Regulatory Authorities: Disclosure of personal data to competent authorities, courts, or regulators where required by applicable law, court order, or lawful regulatory request.
• Fraud Prevention Networks: Sharing of relevant fraud signals with industry-standard anti-fraud networks and databases where we have a legitimate interest in preventing financial crime.
• Corporate Transactions: In the event of a merger, acquisition, or asset sale, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

All third parties to whom MYR999 discloses personal data are required to process that data in accordance with applicable privacy standards and solely for the purposes for which it was shared.

MYR999 operates internationally and some of our data processing activities may involve the transfer of personal data to countries outside Malaysia. Where such transfers occur, MYR999 takes appropriate measures to ensure that your data receives an adequate level of protection, including:

• Entering into data processing agreements with third-party processors that incorporate appropriate contractual safeguards
• Conducting transfers only to jurisdictions or processors that meet recognised data protection standards
• Limiting the scope and volume of data transferred to the minimum necessary for the specified processing purpose

If you have questions about specific international data transfers involving your personal data, please contact our support team as detailed in Section 16 of this Policy.

MYR999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

• Account and Registration Data: Retained for the duration of the active account relationship, and for a minimum of five (5) years following account closure to comply with applicable anti-money laundering and record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by applicable regulatory requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Communications: Retained for up to three (3) years from the date of the communication unless longer retention is required for dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of the consent and for a reasonable period thereafter as evidence of consent, typically three (3) years.
• Technical and Usage Logs: Retained for up to twelve (12) months for security and performance analysis purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

MYR999 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us provide and improve our services. We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management cookies, authentication tokens, and security cookies. These cannot be disabled without significantly impairing Platform functionality.
• Functional Cookies: Remember your preferences — such as language settings, account display preferences, and region — to improve your experience on the Platform.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform, which pages are most visited, and where technical errors occur. This data helps us improve Platform performance.
• Marketing Cookies: Where you have provided consent, used to deliver relevant promotional information about MYR999 based on your usage patterns. These are not used to serve advertising on third-party websites.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the MYR999 Platform. For most browsers, instructions for managing cookies can be found in the browser's Help menu.

Subject to applicable law and our legal obligations, you have the following rights with respect to your personal data held by MYR999:

• Right of Access: You have the right to request a copy of the personal data MYR999 holds about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held on your account. Minor corrections may be made directly through your account settings.
• Right to Erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. This right is subject to our legal retention obligations (e.g., KYC records required by anti-money laundering regulations).
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of data or object to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where is based on our legitimate interests. You may also withdraw consent for marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

To exercise any of these rights, please contact our support team via24/7 live chat or email as detailed in Section 16. We will respond to verified requests within a reasonable timeframe, and in any event no later than thirty (30) days from receipt of a valid request.

MYR999 strictly prohibits use of the Platform by individuals under the age of 21 years. We do not knowingly collect personal data from persons under 21. Age verification is a mandatory component of our KYC process, and accounts for which age verification cannot be satisfactorily completed will be suspended pending verification or closed.

If MYR999 becomes aware that personal data has been collected from a person under the age of 21 without the verification process detecting this, we will take immediate steps to delete that data and close the associated account. Any deposits made by a confirmed underage player will be returned net of applicable transaction costs.

If you are a parent or guardian and believe that a minor may have registered on our Platform, please contact us immediately through our 24/7 live chat support.

MYR999 employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the MYR999 Platform
• Two-factor authentication (2FA) options available for account login
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Regular security vulnerability assessments and penetration testing
• Secure, encrypted storage of sensitive data including financial information and identity documents
• Monitoring systems for detection of unusual access patterns and potential data breaches

Despite these measures, no system is completely immune to security risks. In the event of a data breach that is likely to result in significant risk to your rights and freedoms, MYR999 will notify affected individuals and relevant authorities in accordance with applicable legal requirements and within the timeframes specified by those requirements.

You are also responsible for maintaining the security of your account. Do not share your login credentials, use a strong unique password, and log out of the Platform when using shared or public devices.

The MYR999 Platform integrates with third-party services to deliver certain functionality, including payment processing, identity verification, and game delivery. Each of these third-party service providers operates under its own privacy policy and data protection practices.

MYR999 is not responsible for the privacy practices of third-party services that are not under our direct control. Players should review the privacy policies of relevant third-party providers — including Malaysian payment services such as Touch 'n Go eWallet (by TNG Digital Sdn Bhd), Boost (by Axiata Digital Sdn Bhd), and GrabPay (by Grab) — for information about how they handle your personal data.

The MYR999 platform does not contain links to external third-party websites beyond its operational payment and game delivery integrations. Any external links that may appear are provided for operational purposes only and do not constitute endorsements of those sites' privacy practices.

MYR999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform services. Where changes are material, we will provide reasonable advance notice to registered Players through one or more of the following methods:

• A platform notification displayed upon next account login
• An email notification sent to your registered account email address
• Prominent notice on the Privacy Policy page with an updated "Last Updated" date

Your continued use of the MYR999 Platform following notification of any changes to this Policy constitutes your acceptance of those changes. If you do not agree with revised Privacy Policy terms, you should cease using the Platform and contact our support team to request account closure.

We recommend reviewing this Privacy Policy periodically to stay informed of our current data practices. This Policy was last reviewed and updated on 1 January 2026.

If you have questions, concerns, or requests regarding this Privacy Policy or the personal data MYR999 holds about you, please contact our support team through any of the channels below. All privacy-related enquiries are handled with priority: