Privacy Policy 999myr — Our Commitment Data Protection You

This Privacy Policy describes how 999myr — operating through the 999myr.asia domain — collects, uses, stores, discloses, and protects your personal information when you use our platform, services, and products.

We take this responsibility seriously. The trust you place in 999myr when registering and providing your personal information — something we do not take lightly. Every decision regarding how your data is managed is made with your interests and privacy as a member at the forefront.

This Policy applies to:

• All registered members with an active account at 999myr.
• Website visitors browsing the platform without registering an account.
• Individuals who interact with our customer support channels, including live chat and email.
• Any party using the services or products provided by 999myr.

999myr only collects data that is strictly necessary to provide a secure, seamless service in compliance with legal requirements. The following are the categories of data we may collect:

Identity & Account Information:

Financial & Payment Information:

Usage & Technical Information:

Your personal data is collected by 999myr through several different methods depending on the type of interaction you have with the platform:

• Directly from you — When you register a new account, fill in personal information forms, upload KYC documents, contact customer support, or submit a feedback form.
• Automatically during use — Technical data such as IP address, device type, web browser, and activity logs are automatically collected by the platform's systems whenever you browse or use 999myr's services.
• Through financial transactions — When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks), transaction information is recorded for verification and audit purposes.
• Through cookies and tracking technologies — The platform uses cookies and similar technologies to identify your session, save your preferences, and enhance your overall user experience.
• Via authorised third parties — In certain cases, identity verification information may be validated through approved third-party KYC service providers bound by strict confidentiality agreements.

999myr uses your personal data solely for legitimate purposes directly related to the provision of our services. The following are the primary purposes for which your data is used:

• Account management — Creating, verifying, and managing your member account, including login, account security, and personal settings.
• Transaction processing — Securely and accurately processing deposits, withdrawals, and other financial transactions via supported Malaysian payment methods.
• Legal compliance & KYC — Meeting KYC (Know Your Customer) requirements and applicable legal compliance obligations that require member identity verification before large transactions are processed.
• Fraud prevention — Detecting and preventing fraudulent activity, multi-account usage, promotional abuse, and any unlawful activity that could harm the platform or other members.
• Account-related communications — Sending important account-related notifications such as transaction confirmations, security alerts, and policy updates that require your attention.
• Service improvement — Analysing aggregated, anonymised usage patterns to better understand member needs and continuously improve the platform experience.
• Promotional communications (with consent) — Sending information about the latest promotions, bonuses, and offers 999myr to members who have given consent to receive such communications.
• Dispute resolution — Retains records necessary to resolve any disputes or queries relating to transactions or account activity that may arise.

999myr does not sell, rent, or trade members' personal data to any third party. However, in the following limited circumstances, data may be shared with parties bound by strict confidentiality agreements:

• Payment service providers — To process your deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, and CIMB Clicks, the required transaction information will be shared with the respective providers in accordance with established security protocols.
• Licensed game providers — Game providers such as Pragmatic Play, PG Soft and others may receive session IDs and game data necessary to operate the games correctly. Full identity information is not shared.
• Third-party KYC services — For identity verification, required data may be shared with licensed KYC service providers bound by strict confidentiality agreements and compliant with PDPA.
• Relevant regulatory authorities — 999myr will comply with court orders, legal warrants, or lawful requests from Malaysian authorities requiring data disclosure for the purposes of legal investigations.
• In the event of a business transfer — In the event of a merger, acquisition, or asset transfer, member data may be transferred to the new entity, provided that an equivalent or stricter privacy policy will be observed and members will be notified in advance.

999myr invests seriously in security infrastructure to ensure your personal data is protected at every stage — from collection through to storage and processing:

• 256-bit SSL Encryption — All communications between your browser or app and our servers 999myr encrypted using the same TLS 1.3 standard used by Malaysian banking institutions.
• One-way password encryption — Your account password is never stored in its original form. It is stored as a bcrypt hash that cannot be decrypted, even by our internal team. 999myr.
• Internal access controls — Only staff with a legitimate business need are permitted to access member data, and all such access is logged and audited regularly.
• Two-factor authentication (2FA) — All internal accounts with access to member data are protected by mandatory two-factor authentication.
• Regular security scans — Servers and infrastructure 999myr undergoes regular penetration testing and vulnerability scanning by independent security experts.
• Real-time threat monitoring — An intrusion detection system (IDS) operates 24/7 to identify and respond to any security threats promptly.

While we take all reasonable steps to protect your data, no security system is one hundred percent foolproof. You also play an important role in safeguarding your account by using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to us.

Platform 999myr uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how the platform is used. The following are the types of cookies we use:

You can manage your cookie settings through your web browser. However, blocking essential cookies may affect the functionality of the platform 999myr and prevent you from logging in or using certain features properly.

As a member 999myr and as an individual under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

999myr retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy. The following outlines our data retention guidelines:

• Active account data — Retained for as long as your account remains active and for the period required after account closure in accordance with legal obligations.
• Financial transaction records — Retained for a minimum of 7 years from the transaction date in accordance with financial audit requirements and applicable legal compliance obligations.
• KYC records and identity verification — Retained for 5 years after account closure in accordance with anti-money laundering legal requirements.
• Customer support communication logs — Retained for 2 years for quality control, training, and the resolution of any disputes that may arise at a later stage.
• Technical & security log data — Retained for 12 months for security and fraud detection purposes, after which it is deleted or anonymised.
• Analytics cookie data — Automatically expires after 90 days and is not stored permanently.

Once data is no longer needed and the mandatory retention period has expired, 999myr will securely delete or anonymise that data using methods that ensure it cannot be recovered.

Platform 999myr is intended strictly for individuals aged 18 and above. We do not knowingly collect, store, or process any personal information from individuals under the age of 18.

During the registration process, all applicants are required to confirm that they are at least 18 years of age. If 999myr finds that a child's personal data has been collected inadvertently, we will take immediate action to:

• Immediately closing the account in question.
• Deleting all personal data associated with that individual.
• Returning any remaining account balance to the individual.

If you are a parent or guardian who believes your child has registered an account at 999myr, please contact us immediately at support@999myr.asia with the relevant details so that prompt action can be taken.

999myr reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to how we protect your data. All amendments will take effect in accordance with the following procedure:

• Significant amendments that affect your privacy rights will be communicated via in-platform notifications or email at least 14 days before they take effect.
• Minor amendments such as spelling corrections or clarifications that do not alter your substantive rights will be updated without prior notice.
• The "Updated" date at the top of this page will always reflect the date of the most recent revision.
• Continued use of the platform 999myr after the amendments take effect will be considered as your acceptance of the updated policy.

We encourage you to review this Privacy Policy page periodically, especially before providing us with any new personal data. The latest version of this policy will always be available on this page.

If you have any questions, concerns, or requests regarding this Privacy Policy or how 999myr managing your personal data, we encourage you to reach out to us through the following channels:

• Live Chat — The fastest way to get a response. Live chat is available directly within the platform 999myr and operates 24 hours a day, 7 days a week, including public holidays.
• Email — Send any privacy-related inquiries to support@999myr.asia. Please include "Privacy Inquiry" in the subject line for faster processing. We will respond within 2 business days.

For data rights requests (access, correction, deletion), please include the following in your message:

• Registered username or phone number.
• The type of right you wish to exercise.
• Additional relevant information to facilitate the processing of your request.