Privacy Policy me99 – Member Personal Data Protection

1Privacy Policy Introduction and Scope

This Privacy Policy describes me99's practices regarding the collection, use, disclosure, and protection of your personal information when you use our platform — whether through the me99.onl website, the iOS and Android mobile apps, or any other services we offer.

Me99 takes our responsibility to member privacy seriously. We believe that trust is the foundation of the relationship between a platform and its members, and that trust begins with transparency about how we handle your personal data.

By registering an account or using me99's services, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

2Personal Information We Collect

Me99 collects the personal information necessary to provide a safe, responsible, and high-quality service. We do not collect data beyond what is required for the stated purposes.

2.1 Information You Provide Directly

• Full name as stated on your identification document.
• Malaysian Identity Card number (MyKad) or Passport number.
• Date of birth for age verification (18 years and above).
• An active email address for account communication purposes.
• Mobile phone number registered in Malaysia.
• Bank account or e-wallet details for processing financial transactions.
• KYC documents including a selfie holding your identification document.

2.2 Information Collected Automatically

• IP address and estimated geographic location.
• Device type, operating system, and web browser version.
• Session activity logs including login time, logout time, and in-platform actions.
• Game data includes betting history and wins.
• Cookies and similar tracking technologies to enhance the user experience.

3How We Use Your Information

Me99 uses collected personal information solely for lawful and stated purposes. We will not use your data for any other purpose without notifying you in advance and obtaining consent where required by law.

• Account Management: Register, verify, and manage your me99 account.
• Transaction Processing: Securely processing deposits, withdrawals, and all financial transactions.
• Identity Verification: Conducting required KYC checks to comply with anti-money laundering regulations.
• Platform Security: Detecting and preventing fraud, money laundering, and unauthorised access.
• Customer Support: Processing your enquiries, complaints, and assistance requests.
• Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and offer assistance.
• Marketing Communications: Sending promotional information and exclusive offers — only if you have given your consent.
• Service Improvement: Analysing aggregated usage data to improve the platform and user experience.

4Information Sharing and Disclosure

Me99 does not sell or trade members' personal data to third parties. However, there are specific circumstances in which we may need to share your information with trusted parties:

4.1 Authorised Service Providers

We work with selected third-party service providers to support platform operations, including payment processors (DuitNow, FPX, TNG eWallet, Boost), identity verification service providers, and cloud computing service providers. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes.

4.2 Legal Requirements and Authorities

Me99 will disclose personal information when required by Malaysian law, a court order, or a legitimate request from relevant authorities such as Bank Negara Malaysia or the Royal Malaysia Police. In such situations, we will endeavour to notify you if permitted by law.

4.3 Game Providers

To resolve gaming-related disputes, me99 may need to share relevant gaming transaction information with licensed game providers. Information shared is strictly limited to what is necessary to resolve the dispute.

5Cookies and Tracking Technologies

Me99 uses cookies and similar technologies to enhance the user experience, maintain session security, and analyse platform usage. Cookies are small text files stored on your device when you visit our website.

You can manage and delete cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the me99 platform, including login capability and session security.

6Data Storage and Transfer

Me99 member personal data is stored on secure servers. We implement appropriate technical and organisational security controls to protect data from unauthorised access, loss, or destruction.

6.1 Data Retention Period

Me99 retains your personal data for as long as your account is active or for as long as required to fulfil legal obligations, resolve disputes, and enforce our agreements. The following are general data retention guidelines:

• Active account data: Retained for the duration of the active account plus 5 years after closure.
• Financial transaction records: Retained for 7 years in compliance with Malaysia's financial regulatory requirements.
• KYC documents: Retained for 5 years after the business relationship ends.
• Support communication logs: Retained for 2 years.
• Anonymised analytics data: May be retained indefinitely as it contains no personally identifiable information.

6.2 Storage Security

All stored personal data is protected with high-level encryption. Our databases are secured by a multi-layered firewall system, and access to production systems is granted only to authorized personnel through strict authentication mechanisms.

7Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by me99. We respect and facilitate the exercise of these rights:

To exercise any of the above rights, please contact the me99 data protection team via our support email. We will respond to your request within 21 business days in accordance with PDPA requirements.

8Technical Security Measures

Me99 continually invests in security infrastructure to ensure members' personal data remains protected at all times. Key security measures we have implemented include:

• 256-bit SSL/TLS encryption for all data communications between the server and user devices.
• Two-factor authentication (2FA) available for all member accounts.
• 24/7 security monitoring by an experienced cybersecurity team.
• Regular penetration testing conducted by independent security firms.
• Intrusion detection system (IDS) to detect and block threats in real time.
• Role-based access control (RBAC) for me99 internal systems.
• Encrypted data backups and a comprehensive disaster recovery plan.

While we take all reasonable precautions, no security system is entirely foolproof. We therefore encourage members to take responsibility for protecting their own accounts — use a strong password, enable 2FA, and never share your login credentials with anyone.

9Children's Privacy and Age Protection

Me99 services are exclusively available to individuals aged 18 and above. me99 does not knowingly collect or store personal data from individuals under the age of 18. Age verification is conducted during registration and through the KYC process.

If we discover that personal data belonging to someone under the age of 18 has been collected without our knowledge, we will promptly delete that data and close the associated account. If you are aware that a minor has registered a me99 account, please notify us immediately.

10Privacy Policy Amendments

Me99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements. Any amendments will be published on this page along with the effective date.

For material amendments — those that significantly change how we use your personal data — we will notify you via your registered email or in-platform notification at least 14 days before the changes take effect. Continued use of the me99 platform after that date constitutes acceptance of the amended Privacy Policy.

11Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how me99 handles your personal data, or if you wish to exercise any of your privacy rights, please contact the me99 Data Protection Officer (DPO) through the following channels:

• Email: [email protected] — We aim to respond within 2 business days.
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform.
• Support Operating Hours: 24 hours a day, 7 days a week including public holidays.

For complaints related to personal data processing that have not been satisfactorily resolved by me99, you also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the provisions of PDPA 2010.