Privacy Policy 99ab –
Personal Data Protection for Online Casino Members

This Privacy Policy applies to all 99ab users and members without exception — including visitors browsing the site without a registered account, prospective members in the process of registering, active members currently playing, and former members whose accounts have been closed.

By using the 99ab platform, you agree to the collection and use of information as described in this Privacy Policy. This policy should be read alongside the 99ab Terms and Conditions, which together form the complete agreement between you and our platform.

• This policy is subject to the applicable data protection laws in Malaysia.
• We only collect data that is strictly necessary to provide our services to you.
• Every data processing activity we carry out has a valid legal basis — whether grounded in your consent, contractual necessity, or a legal obligation.

We collect several categories of information depending on how you interact with the 99ab platform:

The personal data we collect is used solely for legitimate, pre-stated purposes. Below are the primary purposes for which your data is used:

• Account management: Creating and maintaining your member account, processing registration, and verifying your identity through the KYC process.
• Transaction processing: Processing all deposits, withdrawals, and other financial transactions associated with your account securely and accurately.
• Platform security: Detecting and preventing fraudulent activity, money laundering, unauthorized access, and any suspicious or terms-of-service-violating activity.
• Customer support: Responding to inquiries, resolving complaints, and providing the technical assistance members require.
• Legal compliance: Fulfilling applicable legal and regulatory obligations, including anti-money laundering (AML) reporting requirements.
• Personalize your experience: Personalizing the interface, game recommendations, and promotions based on your preferences and playing habits to deliver a more relevant experience.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and offering appropriate self-control tools.
• Marketing communications: Sending promotional information, bonuses, and exclusive offers — only if you have given consent to receive them, and you may unsubscribe at any time.

99ab does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Full stop. This is a commitment we have never broken since this platform first launched.

However, under certain circumstances, we may share necessary information with the following parties:

• Payment service providers: Transaction information is shared with certified payment processors (such as FPX, Touch 'n Go) solely to facilitate the processing of your transactions.
• Game providers: Minimum technical data is shared with game providers such as Pragmatic Play to ensure games run smoothly.
• Legal authority: We will disclose the required information to the relevant law enforcement authorities or regulatory bodies when required to do so by law or court order.
• Technical service providers: Companies that help us run platform operations — such as cloud services, cybersecurity, and analytics — are bound by strict confidentiality agreements and may only use your data for specified purposes.

All third parties with whom we share data are required to uphold data protection standards equal to or higher than those we practise ourselves.

Protecting your data from unauthorized access, loss, or misuse is our absolute priority. 99ab employs multiple layers of technical and operational security measures to ensure your data is always protected:

• 256-bit SSL Encryption: All data transmitted between your device and 99ab's servers is encrypted using TLS/SSL 256-bit protocols — the same standard used by international financial institutions.
• Two-factor authentication (2FA): An additional security layer is available for all member accounts to prevent unauthorized access even if your password has been compromised.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or suspicious activity in real time.
• Internal access controls: Only 99ab staff who require access to specific data to carry out their duties are permitted to do so. The principle of least privilege access is strictly enforced.
• Regular security audits: We conduct regular penetration testing and independent security audits to identify and address any vulnerabilities.

The 99ab platform uses cookies and similar tracking technologies to enhance your experience, secure your login sessions, and understand how members use our platform.

• Essential cookies: Required for core platform functions such as maintaining your login session and saving language preferences. These cookies cannot be disabled as they allow the platform to function properly.
• Performance cookies: Helping us understand how members interact with the platform — which pages are visited most frequently, how long they stay, and where they encounter issues. This data is used to improve the platform.
• Functional cookies: Saving your personal preferences such as language settings, display themes, and favorite game selections so you do not need to reset them each time you log in.
• Security cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the 99ab platform.

You have important rights regarding your personal data held by 99ab. Below is a full list of those rights:

• Right to Access
  You have the right to obtain a copy of all personal data we hold about you. Requests can be made via live chat and will be processed within 14 business days.
• Right to Rectification
  If your personal data is inaccurate or outdated, you have the right to request an update. Basic information such as phone numbers and email addresses can be updated directly through your account settings.
• Right to Erasure
  You may request that we delete your personal data under certain circumstances. However, we may be required to retain some data for a specific period to fulfil legal obligations.
• Right to Restriction of Processing
  Under certain circumstances, you may request that we restrict how we process your data while a dispute or inquiry is being resolved.
• Right to Data Portability
  You have the right to receive your personal data in a structured, machine-readable format for transfer to another party if desired.
• Right to Object
  You may object to the processing of your data for certain purposes, including direct marketing. If you object to marketing, we will stop immediately, no questions asked.

To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We will process your request within a reasonable timeframe and notify you of the action taken.

We do not retain your personal data longer than necessary. Retention periods depend on the type of data and the purpose for which it was collected:

• Active account data: Retained for as long as your account is active. If you close your account, basic data will be retained for the period required by law.
• Financial transaction records: Retained for a minimum of 7 years after a transaction is made, in line with Malaysia's financial and tax legal requirements.
• Security logs: Retained for 12 months for fraud detection and security investigation purposes if required.
• Game data: Game history is retained for a minimum of 5 years for dispute resolution and regulatory compliance purposes.
• Communication data: Support chat records and emails are retained for 2 years for service quality purposes and as a reference should any dispute arise later.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be personally linked to you.

99ab reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data. When material changes are made:

• We will send a notification to your registered email address at least 14 days before any changes take effect.
• The "Last Updated" date at the top of this document will be updated to reflect the most recent revision date.
• For highly material changes, we may require your renewed consent before you can continue using the platform.
• Continued use of the 99ab platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding how 99ab handles your personal data, we strongly encourage you to contact us directly. We are committed to resolving every concern promptly, transparently, and professionally.

• Live chat: The fastest way to get help — available 24 hours a day, 7 days a week. Our team speaks Bahasa Malaysia and responds in an average of under 3 minutes.
• Email: For more detailed enquiries or formal data requests, you may send an email to [email protected]. We respond to all emails within 1–2 business days.

We believe open communication is the foundation of trust. Every piece of feedback, inquiry, and complaint you share helps us better protect the privacy of all our members.