mykad99 Privacy Policy

1 Who We Are

mykad99 operates the online gaming platform accessible at mykad99.one, offering casino games, sports betting, and related services to registered players. For the purposes of this Privacy Policy, mykad99 acts as the data controller in respect of all personal data collected through the platform and associated mobile applications.

This Privacy Policy applies to all individuals who register an account with mykad99, visit the mykad99 website, use the mykad99 mobile app, or otherwise interact with any mykad99 service. By using any mykad99 service, you acknowledge that you have read and understood this Privacy Policy.

2 Personal Data We Collect

mykad99 collects the following categories of personal data:

3 How We Collect Your Data

mykad99 collects personal data through the following means:

• Direct submission: Information you provide when registering a mykad99 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technical collection: Data collected automatically when you access the mykad99 platform, including IP address, device identifiers, session cookies, and navigation logs.
• Third-party payment providers: Transaction confirmation data received from payment processors including FPX partner banks (Maybank2u, CIMB Clicks, Public Bank), Touch 'n Go, Boost, GrabPay, DuitNow, and cryptocurrency processors for USDT TRC20 transactions.
• Identity verification providers: Where third-party identity verification services are used to fulfil KYC obligations, relevant verification outcome data may be received by mykad99.

4 How mykad99 Uses Your Data

mykad99 uses collected personal data for the following purposes:

• Creating, managing, and maintaining your mykad99 player account.
• Processing deposits and withdrawals in MYR via your chosen payment method.
• Verifying your identity and age (21+) in compliance with KYC and AML obligations under our gaming licence.
• Providing customer support and resolving disputes.
• Detecting and preventing fraud, money laundering, unauthorised access, and other prohibited activities on the platform.
• Sending transactional communications including account confirmations, withdrawal notifications, and security alerts.
• Sending promotional communications regarding mykad99 bonuses, new games, and platform updates — only where you have opted in to receive such communications.
• Monitoring gameplay and betting patterns for responsible gaming purposes, including identifying players who may be exhibiting signs of problem gambling.
• Improving the mykad99 platform through analysis of aggregated, anonymised usage data.
• Complying with applicable legal and regulatory obligations under our international gaming authority licence.

5 Legal Basis for Processing

mykad99 processes personal data on the following legal bases:

• Contractual necessity: Processing necessary to perform our obligations under the mykad99 Terms & Conditions, including account management and payment processing.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including AML/KYC obligations under our gaming licence.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, where you have provided explicit opt-in consent. You may withdraw consent for marketing communications at any time by contacting mykad99 support.

6 Data Sharing & Disclosure

mykad99 does not sell, rent, or trade your personal data to third-party advertisers or data brokers. mykad99 may share your personal data in the following limited circumstances:

• Payment processors: Sharing of necessary transaction data with payment providers (e.g., FPX gateway, Touch 'n Go, DuitNow) to process your deposits and withdrawals.
• Identity verification providers: Sharing of identity documents with accredited KYC verification services to fulfil regulatory compliance obligations.
• Game providers: Limited technical data (e.g., session tokens, game round IDs) shared with licensed game providers (e.g., Evolution Gaming, Pragmatic Play, PG Soft) to facilitate gameplay and resolve technical disputes.
• Regulatory and law enforcement authorities: Disclosure of data as required by applicable law, court order, or gaming regulatory authority request.
• Group companies: Sharing within the mykad99 corporate group for operational purposes, subject to the same privacy protections described in this policy.

All third parties with whom mykad99 shares personal data are contractually required to implement appropriate data security measures and to process data only for the specific purposes for which it was shared.

7 Data Retention

mykad99 retains personal data for the following periods:

• Active accounts: Personal and transaction data is retained for the duration of your active mykad99 account relationship.
• Closed accounts: Following account closure, mykad99 retains identity, financial transaction, and KYC records for a minimum of five (5) years to comply with AML regulatory obligations under our gaming licence.
• Marketing data: Retained only while you remain opted in. Removed within 30 days of opt-out confirmation.
• Technical/log data: Retained for up to 24 months for security and fraud investigation purposes, then deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in accordance with mykad99's data destruction procedures.

8 Security Measures

mykad99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption for all data in transit between your device and mykad99 servers.
• Encryption of sensitive data fields (including payment details and identity documents) at rest in mykad99's database infrastructure.
• Role-based access controls ensuring that mykad99 staff access only the data necessary for their specific job function.
• Multi-factor authentication required for all mykad99 administrative system access.
• Regular independent security audits and penetration testing of the mykad99 platform.
• Real-time fraud detection and anomaly monitoring systems that flag suspicious login attempts and unusual transaction patterns.

While mykad99 takes all reasonable measures to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for keeping your mykad99 login credentials confidential.

9 Cookies & Tracking Technologies

mykad99 uses the following categories of cookies on the platform:

• Strictly necessary cookies: Required for core platform functionality including session management, mykad99 login authentication, and payment flow continuity. These cannot be disabled.
• Analytics cookies: Used to collect anonymised data about how players navigate and use the mykad99 platform, enabling us to improve performance and user experience. No personally identifiable information is included in analytics data.
• Preference cookies: Remember your platform settings such as language preference and responsible gaming limit reminders between sessions.

mykad99 does not deploy third-party advertising cookies or cross-site tracking technologies. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair platform functionality.

10 Your Data Rights

Subject to applicable law and regulatory retention obligations, mykad99 players have the following rights in relation to their personal data:

• Right of access: Request a copy of the personal data mykad99 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to overriding legal or regulatory retention requirements.
• Right to restriction: Request restriction of processing of your data in certain circumstances.
• Right to data portability: Request transfer of your personal data to another service provider in a structured, machine-readable format, where technically feasible.
• Right to withdraw consent: Withdraw any consent-based processing (e.g., marketing communications) at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact mykad99 via live chat or email at [email protected] (plain text — not a clickable link). mykad99 will respond to data rights requests within 30 days of receipt.

11 Children's Privacy

The mykad99 platform is strictly intended for adults aged 21 and above. mykad99 does not knowingly collect personal data from individuals under the age of 21. If mykad99 becomes aware that personal data has been submitted by a person under this age threshold, the relevant account will be immediately closed, all associated funds will be handled in accordance with applicable regulatory guidance, and the data will be deleted as soon as permissible.

If you believe a minor has registered a mykad99 account, please notify us immediately via live chat so that we can take prompt action.

12 International Data Transfers

mykad99's primary data infrastructure is hosted in data centres operating under appropriate data security frameworks. Where personal data is transferred to or processed by third parties operating outside Malaysia (for example, certain game providers or payment processors), mykad99 ensures that such transfers are subject to contractual protections equivalent to those described in this Privacy Policy, including data processing agreements incorporating appropriate security and confidentiality obligations.

13 Updates to This Privacy Policy

mykad99 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or platform practices. Material changes will be communicated to registered players via email or in-platform notification prior to taking effect. The version of this Privacy Policy bearing the most recent "Last Updated" date constitutes the current binding version. Continued use of the mykad99 platform following notification of changes constitutes acceptance of the updated Privacy Policy.

14 Contact Us

For any privacy-related queries, data rights requests, or concerns about how mykad99 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 within the mykad99 platform after completing the mykad99 login process.
• Email: [email protected] (displayed as plain text only — not a clickable link)

mykad99 targets a response time of within 24 hours for all privacy-related email enquiries and within 2 minutes via live chat during normal operating conditions.