Privacy Policy 99wim — Player Personal Data Protection

99wim ("we", "Platform", "company") is the data controller for all personal information collected through our online gaming platform. As a platform operating in Malaysia and serving Malaysian players, we take this responsibility seriously.

This Privacy Policy has been prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. We believe that privacy is a fundamental right of every individual, and we are committed to protecting that right in every aspect of our operations.

When you interact with the 99wim platform — whether by visiting our website, registering an account, making a transaction, or simply browsing the games we offer — you are trusting us to handle your information responsibly. That is exactly what we do, without compromise.

We only collect data that is genuinely necessary to provide you with the best service. Below are the categories of data we collect along with specific examples:

Data We Do Not Collect: We do not collect sensitive information such as biometric data, health information, political views, or religious beliefs unless required by law for compliance purposes.

Children's Data: The 99wim platform is strictly for users aged 18 and above. We do not knowingly collect data from minors. Should we discover that a minor's data has been collected inadvertently, it will be deleted immediately.

Every piece of data we collect has a clear and legitimate purpose. The following are the primary purposes for processing your personal data on the 99wim platform:

• Account Management: Creating, verifying, and maintaining your player account; ensuring only you can access that account.
• Transaction Processing: Processing deposits, withdrawals, and any other payments related to your gaming activity securely and accurately.
• Identity Verification (KYC): Complying with legal requirements related to anti-money laundering (AML) and counter-terrorism financing (CFT) through rigorous KYC processes.
• Customer Support: Providing accurate and efficient assistance when you contact our support team via live chat or other channels.
• Platform Security: Detecting and preventing fraud, account abuse, bot activity, and other security threats.
• Service Improvement: Analysing usage patterns in aggregate (not at an individual level) to improve the player experience and the quality of games offered.
• Marketing Communications: Sending promotional information and special offers — but only if you have given explicit consent. You may unsubscribe at any time.
• Legal Compliance: Fulfilling reporting and disclosure obligations required by law and relevant regulatory bodies.

We will not use your data for any other purpose without notifying you in advance and, where required, obtaining your consent again.

The security of your data is our absolute priority. We continuously invest in the latest security infrastructure to ensure your information is always protected against increasingly sophisticated cyber threats.

Our Security Infrastructure:

• 256-bit SSL Encryption: All data communications between your browser and our servers are encrypted using the latest TLS 1.3 protocol;
• Data-at-Rest Encryption: Sensitive data such as financial information and identification numbers are encrypted when stored in our database;
• Layered Access Control: Only authorised personnel with a legitimate business need may access players' personal data, and every access is logged and audited;
• Regular Penetration Testing: We conduct regular security audits through independent security experts to identify and address any vulnerabilities;
• Secure Data Centres: Data is stored in data centres protected by high-grade physical security, including biometric access controls and 24/7 CCTV monitoring;
• Data Backup: Data is automatically backed up and stored at separate locations to ensure availability and data integrity in the event of a system failure.

Retention Period: We retain your personal data for as long as your account is active and for a minimum of 7 years after account closure to meet legal and regulatory requirements. Data that is no longer needed will be securely deleted or anonymised.

99wim does not sell, rent, or trade your personal data to any party. However, there are limited situations where data sharing may be necessary:

• Payment Service Providers: Payment gateways and banks that process your transactions will receive the information necessary to complete the payment. They are bound by strict confidentiality agreements with us.
• Game Providers: Game developers providing content on our platform may receive non-personally identifiable game session data for technical purposes.
• KYC/AML Services: Third-party identity verification service providers who help us meet our KYC and AML obligations. All providers have been vetted and maintain security standards equal to or higher than our own.
• Authorities: We may be required to disclose data to law enforcement agencies, courts, or regulatory bodies when mandated by law or court order. In such situations, we will disclose only the minimum information necessary.
• Business Transfers: In the event of a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction. You will be notified in advance via email.

All third parties we work with are bound by data processing agreements requiring them to handle your data in accordance with the privacy standards we set. We conduct regular monitoring to ensure their compliance.

The 99wim platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions properly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, game sessions, and security settings. These cookies cannot be disabled.
• Preference Cookies: Saving your preferences such as language, display theme, and account settings so you do not need to reconfigure them each time.
• Analytics Cookies: Helping us understand how players use our platform through aggregated, anonymised data — for service improvement purposes only.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect the integrity of your account.

Cookie Controls: You can manage cookie settings through your browser settings. Please note that disabling certain cookies may affect platform functionality. Analytical cookies can be disabled without impacting your core gaming experience.

Third-Party Tracking: We do not allow third-party advertising networks to track your activity on the 99wim platform for targeted advertising purposes.

Under Malaysia's PDPA and international privacy standards, you have the following rights regarding your personal data held by 99wim:

To exercise any of the above rights, contact our support team. We will process your request within 14 working days. For complex requests, we may require up to 30 days and will notify you if this is the case.

99wim reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or industry developments. We are committed to remaining transparent about any changes made.

Amendment Notice Procedure:

• Minor amendments (such as clarifications or language corrections) will be updated directly without specific notice;
• Material changes that affect your rights or how we process your data will be communicated via your registered email at least 30 days before the amendment takes effect;
• The "Updated" date at the top of this page will always reflect the date of the latest amendment;
• Continued use of the platform after the effective date of any amendment constitutes acceptance of the updated terms.

We recommend reviewing this Privacy Policy periodically. If you disagree with any amendments, you have the right to close your account by contacting our support team before the amendment's effective date.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our dedicated privacy team is ready to assist.

You can reach us via:

• Live Chat: Available 24/7 via the chat icon at the bottom corner of our platform — the fastest way to get an immediate response;
• Email: [email protected] — we guarantee a response within 2 business days;
• Support Page: Submit structured enquiries through our support ticket system for issues that require more in-depth investigation.

When contacting us regarding privacy, please include:

• Your registered full name and account ID;
• A clear description of your request or concern;
• The type of right you wish to exercise (if applicable).

Your identity will be verified before we process any data-related request to ensure the security of your information.