M99m Privacy Policy — Protection of Your Personal Data

Introduction — m99m's Commitment to Privacy

M99m understands that your trust is our most valuable asset. As a leading online casino platform in Malaysia, we take the responsibility of protecting members' personal data extremely seriously. This Privacy Policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international standards in the iGaming industry.

By registering and using the m99m platform, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, you are required to cease using our platform immediately. We encourage you to read this document carefully and contact our support team if you have any questions.

This Privacy Policy applies to all information collected through the m99m website, our official mobile app, and any communications between you and m99m via email, live chat, or other communication channels we operate.

1 Personal Information We Collect

In operating our platform responsibly and securely, m99m collects several categories of personal information from our members. This collection is carried out transparently and solely for legitimate purposes.

Registration & Identity Information

During account registration, you are required to provide basic information including your full name as per a valid identification document, date of birth, active email address, mobile phone number, current residential address, and your preferred username. This information is necessary to create a valid account and to verify your identity.

KYC Verification Documents

To comply with Know Your Customer (KYC) requirements and anti-money laundering regulations, we require a copy of official identity documents such as Malaysia MyKad or a valid passport, along with proof of address documents such as a utility bill or recent bank statement dated within the last three months.

Financial Information

To enable secure processing of deposit and withdrawal transactions, we collect your bank account details, including the account holder's name, account number, and bank name. For e-wallet users, we store the phone number linked to the relevant e-wallet account.

Usage & Technical Data

Our system automatically logs technical information including your device IP address, web browser type, operating system, login date and time, game activity records, and transaction history. This data is used for security purposes, technical troubleshooting, and improving the user experience.

2 How We Use Your Information

Every piece of information you provide to m99m is used responsibly and limited to legitimate purposes. We never use your data for any purpose beyond the scope stated in this policy.

• Account management: Creating, maintaining, and protecting your member account.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions quickly and securely.
• Identity verification: Conducting the KYC process to ensure all members meet the minimum age requirement of 18 and other eligibility criteria.
• Fraud prevention: Detecting and preventing fraud, money laundering, or any form of platform abuse.
• Customer support: Providing effective technical support and customer service whenever you contact us.
• Service communications: Sending important account notifications, selected promotions, and platform updates.
• Legal compliance: Fulfilling regulatory obligations and reporting to relevant authorities as required by law.
• Platform improvements: Analysing usage patterns to improve game quality, site performance, and the overall member experience.

3 Information Protection & Security

Protecting your personal data from unauthorised access, loss, or accidental disclosure is one of m99m's greatest responsibilities. We consistently invest in high-grade security infrastructure to ensure your information remains protected at all times.

256-bit SSL Encryption

All data transmitted between your device and m99m's servers is protected by 256-bit SSL encryption — the same standard used by world-class banking institutions and government agencies. This means every piece of information you enter, including your password and bank account number, is fully encrypted before being transmitted over the internet.

Multi-Layer Access Control

Access to members' personal data within m99m's internal systems is strictly limited on a need-to-know basis. Only staff who require access to specific data in order to perform their duties are granted permission, and all access is logged for audit purposes.

Two-Factor Authentication (2FA)

M99m members are encouraged to enable two-factor authentication (2FA) on their accounts as an added layer of security. This feature ensures that even if your password is compromised, unauthorised parties will still be unable to access your account without the second verification code.

Continuous Monitoring & Security Audits

The m99m system is monitored 24 hours a day, 7 days a week by our IT security team. We also conduct regular penetration testing and independent security audits to identify and address any system vulnerabilities before they can be exploited.

4 Third-Party Data Sharing & Disclosure

M99m does not sell, rent, or trade members' personal information to any external party for commercial purposes. However, there are limited situations where we may need to share your data with specific parties, solely for legitimate operational purposes.

Trusted Service Providers

We work with carefully selected third-party service providers to help operate our platform, including licensed payment gateway providers, internationally certified gaming software suppliers, certified cloud service providers, and identity verification companies for KYC. All providers are bound by strict data confidentiality agreements and are only permitted to use your data for specified purposes.

Legal & Regulatory Requirements

M99m may disclose members' personal information to the relevant authorities when required by Malaysian law, court order, or directive from a legitimate regulatory body. This includes disclosure to the Financial Intelligence Unit in the context of AML/CFT compliance.

Business Transfers

In the event of a merger, acquisition, or business asset transfer, members' personal data may be transferred to the new entity. Members will be notified in advance before any such transfer takes place, and equivalent or higher data protection standards will be ensured.

5 Your Rights as a Data Subject

Under the Malaysia Personal Data Protection Act 2010, you as a data subject hold several important rights regarding the personal information m99m holds about you. We are committed to respecting and facilitating the exercise of these rights.

• Right of Access: You have the right to request and obtain a copy of the personal information we hold about you at any time.
• Right to Rectification: If you find that any information we hold about you is inaccurate or outdated, you have the right to request a correction without undue delay.
• Right to Erasure: Under certain circumstances, you have the right to request that we delete your personal data, subject to record-keeping obligations required by law.
• Right to Withdraw Consent: You may withdraw consent previously given for the processing of your data at any time. Such withdrawal does not affect the validity of any processing carried out prior to that point.
• Right to Object to Processing: In certain situations, you have the right to object to the processing of your personal data, particularly for direct marketing purposes.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another data controller.

To exercise any of the above rights, please contact our privacy team by email at [email protected], clearly stating your request. We will process your request within 14 business days.

6 Cookies & Tracking Technologies

The m99m website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site performance, and deliver more relevant content.

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They allow the site to remember your preferences, speed up login, and deliver a more personalised experience each session.

Types of Cookies We Use

• Essential Cookies: Required for core website functions such as login, game sessions, and security. Cannot be disabled.
• Performance Cookies: Helps us understand how visitors interact with the website for continuous improvement.
• Functional Cookies: Remembering your preferences such as language, currency, and display settings for future sessions.
• Analytics Cookies: Collecting anonymous statistical data on site usage for internal analytics purposes.

Managing Cookie Preferences

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality and user experience of the m99m website.

7 Data Retention Period

M99m retains members' personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable laws and regulations.

• Active account data: Retained for the duration that your account remains active on our platform.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysian accounting and AML/CFT legal requirements.
• KYC documents: Retained for a minimum of 5 years after account closure or the date of the last transaction, whichever is later.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Technical log data: Retained for 90 days for security and technical troubleshooting purposes.

Once the specified retention period expires, your data will be securely deleted using methods that ensure no recovery of the information is possible.

8 Changes to This Privacy Policy

M99m reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements to our data protection measures.

In the event of significant changes to this policy, we will notify members via in-platform notifications, their registered email address, or a prominent notice on our website at least 14 days before those changes take effect. The "Last Updated" date shown at the top of this document reflects the currently applicable version.

Your continued use of the m99m platform after any amendment takes effect constitutes your acceptance of the updated policy. It is your responsibility to review this page periodically to stay informed of the latest version of our Privacy Policy.

9 Contact Our Privacy Team

If you have any questions, concerns, or wish to exercise your data privacy rights, our team is ready to assist you through multiple communication channels.

For privacy and data protection matters specifically, you may contact our Data Protection Officer (DPO) at [email protected] with the subject line "Data Privacy Inquiry" to ensure your request is promptly handled by the right team.

Our customer support team is available 24 hours a day, 7 days a week via live chat within the platform for any general inquiries related to your account and privacy. For formal requests regarding data rights, a written response via email is the recommended method to facilitate tracking and documentation.