M99 Slot Privacy Policy – Your Personal Data Protection

1. Introduction & Scope of This Policy

M99 slot ("we", "our platform") takes user privacy very seriously. This Privacy Policy explains how we collect, process, store, and protect your personal data when you use the m99 slot platform.

This document is prepared in compliance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia and international best practices in personal data management. We are committed to ensuring that every piece of information you share with us is handled with full integrity and responsibility.

This policy applies to all individuals who register, browse, or use any M99 Slot service, regardless of their geographic location. If you disagree with any aspect of this Privacy Policy, please discontinue use of our platform.

2. Types of Personal Data We Collect

M99 slot collects personal data through several methods depending on your interaction with the platform. The following are the categories of data we process:

We only collect data that is genuinely necessary for the stated purposes. M99 Slot does not collect sensitive data such as medical information, religious beliefs, or political views.

3. How We Use Your Personal Data

The personal data you provide to M99 Slot is used responsibly for the following purposes only:

• Identity verification (KYC) — to verify that you meet the age eligibility requirements and to prevent fraud.
• Transaction processing — deposits, withdrawals, and all financial transactions on the m99 slot platform.
• Service provision — enables you to access all games and platform features seamlessly.
• Service communications — sends important notifications related to your account, security, and transactions.
• Platform improvement — analyses usage patterns to improve the overall player experience.
• Legal compliance — fulfils reporting obligations under applicable laws, including anti-money laundering regulations.
• Customer Support — resolves complaints and disputes efficiently and accurately.

We will not use your data for any purpose not stated above without first obtaining your consent.

4. Information Sharing & Disclosure

M99 Slot does not sell, does not rent and does not disclose your personal data to third parties except in the following limited circumstances:

• Payment service providers — information required to process your financial transactions, such as FPX, TNG eWallet, and recognised payment gateway providers.
• Technical service providers — third parties that assist with platform operations, such as cloud computing services, bound by strict confidentiality agreements.
• Regulatory bodies & law enforcement — when required by law or a valid court order.
• Fraud prevention — sharing necessary information with the responsible parties when there are indications of fraudulent activity or security threats.

All third parties who receive your data are bound by the same confidentiality obligations as m99 slot's internal standards. We regularly audit our partners to ensure their compliance with the established data protection standards.

5. Our Data Security Measures

M99 slot continuously invests in the latest security infrastructure to protect your personal data from unauthorized access, loss, or misuse. Key security measures we implement include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
• Password storage using irreversible one-way hashing functions.
• Database separation for financial data, identity information, and game logs.
• Round-the-clock security monitoring by m99 slot's internal cybersecurity team.
• Regular independent penetration testing to identify vulnerabilities.
• Strict role-based access control (RBAC) for internal staff.
• Automated encrypted data backups to geographically separate locations.

While no system can guarantee absolute security, we are committed to maintaining the highest practically achievable security standards to protect the interests of m99 slot players.

6. Data Retention Period

M99 slot retains your personal data only for as long as necessary for the stated purposes or as required by applicable law. The following are our general data retention guidelines:

• Active account data — retained for the duration your account remains active on the m99 slot platform.
• Financial transaction records — retained for a minimum of 7 years in compliance with Malaysia's financial legal requirements.
• Security & game logs — retained for 2 years for audit and dispute resolution purposes.
• KYC Data — retained for 5 years after account closure in line with anti-money laundering requirements.
• Support communication records — retained for 3 years.

Once the relevant retention period has ended, your data will be securely deleted or anonymised so it can no longer be linked back to you.

7. Your Rights as a Data Subject

Under the Malaysia Personal Data Protection Act and international standards, you have the following rights regarding your personal data held by M99 Slot:

To exercise any of the above rights, contact our data protection team through the official m99 slot support channels. We will process your request within 30 calendar days from the date of receipt.

8. Use of Cookies & Tracking Technologies

M99 slot uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you browse our website.

The types of cookies we use are as follows:

• Essential Cookies — required for core platform functions such as secure login and session management. These cookies cannot be disabled.
• Performance Cookies — collects information on how you use the platform to help us improve our services.
• Functional Cookies — remembers your preferences such as language and display settings for a more personalised experience.
• Security Cookies — helps detect and prevent fraudulent activity and protects your account.

You can manage or disable cookies through your web browser settings. Please note that disabling certain cookies may affect some features of the M99 Slot platform.

9. Cross-Border Data Transfers

In the course of its operations, M99 Slot may need to transfer your personal data to servers or service partners located outside Malaysia. Any such transfer will only occur when:

• The recipient country maintains data protection standards equivalent to or higher than Malaysia's PDPA.
• A legally binding data processing agreement is in place with the recipient.
• The transfer is necessary for the performance of a contract between you and m99 slot.
• You have given explicit consent for the transfer.

M99 slot uses internationally certified cloud computing infrastructure with ISO 27001 security certification to ensure your data is always protected regardless of its physical storage location.

10. Children's Privacy Protection

The m99 slot platform is strictly prohibited for individuals under the age of 18. We do not knowingly collect or process personal data from minors.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and terminate the associated account without prior notice.

11. Amendments to This Privacy Policy

M99 slot reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. Any significant changes will be communicated to registered users via:

• In-platform notification on m99 slot upon your next login.
• Email sent to the address registered in your account.
• Updates the "Updated" date at the top of this page.

Your continued use of the m99 slot platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

12. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by m99 slot, please contact our Data Protection Officer (DPO) through the following channels:

We are committed to responding to all privacy-related inquiries within 3 business days. For more complex requests such as data deletion or data export, processing may take up to 30 calendar days.