Privacy Policy Club99 Slot —
Our Commitment to Protecting Your Data

Club99 Slot ("we", "Platform") is the operator of this online casino platform and is responsible for processing its members' personal data. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and widely adopted international data protection standards.

By registering an account with Club99 Slot, you consent to the processing of your personal data as described in this document. This consent may be withdrawn at any time, though doing so may affect your ability to use certain platform features.

We collect various types of information to enable you to use Club99 Slot's services safely and seamlessly. The data collected falls into several main categories:

We only collect data that is genuinely necessary to deliver our services. This data minimisation principle ensures we do not collect excessive information that is irrelevant to the platform's operations.

Every piece of data we collect is used for a clear and legitimate purpose. Below is a full list of how we use your personal information:

• Processing account registration and verifying your identity through the KYC process as required by authorities.
• Enabling you to make deposits and withdrawals securely using your preferred payment method.
• Sending important notifications related to your account, transactions, promotions, and platform updates via email or SMS.
• Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Personalising your user experience based on your gameplay patterns and preferences within the platform.
• Meeting the legal obligations and regulatory compliance requirements imposed on online gambling platforms.
• Implementing responsible gaming programmes, including monitoring of high-risk gameplay patterns.
• Resolving disputes and conducting investigations related to complaints received from players.

Club99 Slot does not sell, rent, or disclose your personal data to third parties without your consent, except in the following circumstances required for platform operations:

• Payment Providers: Required financial information is shared with licensed payment service providers such as FPX, TNG eWallet, and other payment platforms to process your transactions.
• Regulatory Authorities: We are legally required to disclose certain information to government authorities or regulatory bodies upon lawful request.
• Technical Service Providers: Companies that provide technical infrastructure, auditing services, and security support for our platform may require limited access to certain data, subject to strict confidentiality agreements.
• Fraud Prevention: Relevant information may be shared with fraud prevention companies to protect the integrity of the platform and player safety.

All third parties that receive your data are contractually obligated to maintain the confidentiality of that information and use it only for the specified purpose. They are not permitted to use your data for their own marketing purposes.

We implement multiple layers of technical and organisational safeguards to keep your personal data secure at all times. The security measures we employ include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols, representing the highest industry standard.
• Data encryption at rest using AES-256 algorithm for all sensitive information, including financial details.
• Strict role-based access control — only authorised staff are permitted to access user data.
• 24/7 system monitoring with an active Intrusion Detection System (IDS) to detect real-time threats.
• Periodic security audits by independent third parties to identify and address any vulnerabilities.
• Two-factor authentication (2FA) is available for all member accounts as an additional layer of protection.

While we take all reasonable steps to protect your data, no system can guarantee absolute security. In the event of any security incident involving your personal data, we will notify you within 72 hours as required by applicable data protection laws.

Club99 Slot uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates at its best. There are three categories of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as they affect the platform's fundamental operations.
• Performance Cookies: Collecting anonymous information about how players use the platform to help us improve the overall user experience.
• Preference Cookies: Saving your preference settings such as language, display theme, and game preferences so you do not need to reconfigure them each time you log in.

You can manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may affect your ability to use certain platform features fully.

Under Malaysia's PDPA and our privacy policy, you have the following rights regarding the personal data we hold:

Club99 Slot retains your personal data for as long as your account is active and for a specified period after account closure, depending on the type of data and legal requirements:

• Identity and KYC data is retained for a minimum of 5 years after account closure to meet anti-money laundering (AML) compliance requirements.
• Financial transaction records are retained for 7 years in accordance with Malaysia's accounting and tax legal requirements.
• Game activity logs are retained for 2 years for dispute resolution and auditing purposes.
• Customer support communications are retained for 3 years as a historical interaction record.
• Technical data such as access logs and IP addresses is retained for 90 days for cybersecurity purposes.

Once the retention period expires, your data will be securely deleted or permanently anonymised so that it can no longer be linked to your identity.

Club99 Slot reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements. Whenever this policy is updated, the "Updated" date at the top of this page will be revised accordingly.

For significant changes that affect how we use your personal data, we will send a notification to your registered email address at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make an informed decision.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we are always here to help. Our Data Protection Officer (DPO) team can be reached through the following channels:

• Live Chat within the club99 slot platform — available 24 hours a day, 7 days a week.
• Support email: [email protected] — response within 1 to 2 business days.
• For formal privacy complaints, please include "Privacy Complaint" in your message subject line so it can be handled by the appropriate team.

We are committed to resolving all privacy-related complaints within 30 working days. If you are not satisfied with our response, you have the right to escalate the complaint to Malaysia's Personal Data Protection Commissioner.