V99 Privacy Policy — How We Protect Your Personal Data

V99 is an online entertainment platform operating in Malaysia and serving members across the region. We understand that your trust is the most valuable asset entrusted to us, and that trust begins with transparency about how we handle your personal information.

This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of personal data you provide to us when using the v99 website, our mobile apps, and all related services. It applies to all registered members, non-member users browsing our platform, and anyone who interacts with any v99 service channel.

V99 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) in all our data processing activities. This means we only collect necessary data, store it securely, and do not use it beyond the agreed purposes.

We collect your personal data from various sources — directly from you during registration, automatically as you use our platform, or through trusted third parties. Below are the categories of data we collect:

We never collect sensitive information such as biometric data, political affiliations, or health information unless required by law. Full credit or debit card numbers are also not stored on our servers — transactions are processed directly through licensed payment providers.

V99 only uses your personal data for legitimate purposes directly related to the provision of platform services. We never use your data arbitrarily or beyond the limits communicated to you.

• Account management: To create, verify, and maintain your member account, including the KYC process required to process your first withdrawal.
• Transaction processing: To securely verify and process all deposits and withdrawals, ensuring your funds reach the correct destination.
• Platform security: To detect and prevent fraud, money laundering, unauthorised access, and other harmful activities that could compromise the platform and other members.
• Customer support: To understand the context of your issue and provide faster, more accurate assistance when you reach out to our support team.
• Service communications: To send important account notifications such as transaction confirmations, password changes, and policy updates.
• Legal compliance: To fulfil reporting obligations to the relevant authorities where required under Malaysian law.
• Platform improvement: To analyse usage patterns in aggregated, anonymised form in order to improve the overall gaming experience.
• Marketing (with consent): To send promotional information, bonuses, and exclusive offers if you have consented to receive marketing communications.

You may withdraw your marketing consent at any time by contacting our support team or through the notification settings in your account. Withdrawing marketing consent will not affect your core account services.

V99 does not sell, does not rent, and does not trade your personal data to any third party for their own marketing purposes. This is our unconditional commitment to every member.

However, there are limited situations where we need to share your data with certain parties to allow the platform to operate safely and smoothly:

• Licensed payment providers: Minimum required transaction data is shared with FPX, TnG eWallet, Boost, GrabPay, and partner banks to process your deposits and withdrawals.
• Game providers: Usernames and account IDs are shared with licensed game providers to enable access to their games. They do not receive your financial data or full identity.
• KYC service providers: Identity verification documents are submitted to licensed KYC partners for authenticity verification. All such partners are bound by strict confidentiality agreements.
• Legal authority: v99 will disclose personal data if required by court order, criminal investigation, or lawful direction from Malaysian authorities.
• Business transfers: In the event of a merger, acquisition, or asset sale, personal data may be transferred to the new entity, provided that the same or stricter privacy policy applies.

All third parties that receive your data from v99 are required to maintain its confidentiality and use it only for the specified purpose. We conduct regular audits of our partners' security practices.

Your data security is the highest technical priority in v99's operations. We continuously invest in security infrastructure to ensure your data is always protected against increasingly sophisticated cyber threats.

• 256-bit SSL/TLS Encryption: All communications between your device and v99 servers are encrypted using industry-standard security protocols. This means data in transit cannot be read even if intercepted.
• Hashed password storage: Your password is never stored in plain text. We use strong one-way hashing algorithms so that even we cannot read your password.
• Two-factor authentication (2FA): An additional security layer is available for all accounts via OTP verification to your registered phone number.
• 24/7 Monitoring: Our intrusion detection system monitors for suspicious activity around the clock and will automatically block abnormal access attempts.
• Internal access limits: Only authorized personnel with a legitimate business need may access your personal data. All access is logged and periodically audited.
• Secure backup: Your data is regularly backed up to encrypted locations to ensure service continuity in the event of a technical emergency.

While we take all reasonable measures, no security system can be guaranteed 100% foolproof. In the event of a data breach affecting your information, we will notify you in a timely manner as required under Malaysia's PDPA.

V99 uses cookies and similar tracking technologies to enhance user experience, maintain your login session, and analyse platform usage in aggregate. The following are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as maintaining your login session, processing transactions, and remembering language preferences. These cookies cannot be disabled.
• Performance Cookies: Helps us understand which pages are visited most frequently and where users encounter difficulties, so we can improve the platform. This data is collected anonymously.
• Functional Cookies: Remembers your preferences such as saved username, display settings, and game preferences to provide a more personalized experience.
• Analytics Cookies: Used to analyse overall traffic and usage patterns for internal product improvement purposes.

You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect certain features of the v99 platform, such as automatic login and preference saving.

Under the Malaysia Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data held by v99. We fully respect these rights:

To exercise any of the above rights, please contact the v99 support team via 24/7 live chat. We will process your request within 14 working days and notify you of the status of that request.

V99 does not retain your personal data indefinitely. We practise a data retention policy based on operational needs and legal obligations:

• Active account data: Retained for the duration your account is active and for an additional 5 years after account closure to meet financial reporting requirements.
• Transaction records: Retained for 7 years in accordance with Malaysia's anti-money laundering legal requirements.
• KYC Documents: Retained for the duration of the active account and 5 years after account closure.
• Support communication logs: Retained for 2 years for reference and service improvement purposes.
• Analytical cookie data: Deleted or anonymised after 13 months.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your personal identity.

V99 takes child protection very seriously. Our platform is exclusively for adults aged 18 and above. We do not knowingly collect personal data from minors.

• If we discover that personal data of children under 18 has been collected without proper age verification, we will immediately delete that data and close the associated account.
• Parents or guardians who believe their child has registered on the v99 platform should contact our support team immediately for data deletion.
• Our KYC process is designed to detect and prevent registration by underage individuals.

If you have any questions, concerns, or complaints about how v99 handles your personal data, our team is ready to help. We take every privacy inquiry seriously and are committed to providing clear, useful responses.

• Live Chat: The fastest way to reach us — available 24 hours a day, 7 days a week via the live chat button at the bottom of the platform.
• Email: You can reach us at [email protected] for privacy enquiries requiring more detailed clarification.

For formal complaints regarding personal data protection in Malaysia, you may also contact Department of Personal Data Protection (JPDP) Malaysia, which is the regulatory body under the Ministry of Communications.