Privacy Policy myan99 — Our Commitment to Protecting Your Information

01 Introduction and Scope of This Policy

Welcome to the myan99 Privacy Policy. This document is the official agreement between you as a user and myan99 as the platform operator regarding how we handle your personal information. We respect the privacy of every member and are committed to managing your personal data transparently, responsibly and in compliance with applicable laws in Malaysia.

This policy applies to all users of the myan99 platform, including those accessing the website at myan99.bar, the myan99 mobile app, and any other digital channels operated by myan99. By registering or using our platform, you acknowledge that you have read, understood, and agreed to the terms set out in this Privacy Policy.

02 Types of Personal Data We Collect

Myan99 only collects data that is strictly necessary to provide a safe, fair and effective service. We do not collect excessive or irrelevant information beyond the scope of our service. The following are the categories of data we collect:

We do not collect sensitive data categories such as health information, religious beliefs, political views, or sexual orientation. Should any additional information be required for a specific purpose, we will obtain your explicit consent beforehand.

03 Purpose of Data Collection and Use

Every piece of data we collect has a clear and legitimate purpose. myan99 ensures your data is not used beyond the stated purposes without first obtaining your renewed consent.

• Identity Verification and KYC: Verifying that you are an eligible user of the platform and preventing identity fraud and unauthorised access.
• Transaction processing: Enabling deposits, withdrawals, and wagering activity to be processed accurately and securely in real time.
• Account Management: Managing your profile information, security settings, language preferences, and platform preferences.
• Service communications: Sending transaction notifications, account security updates, promotional alerts, and important service-related information.
• Fraud prevention and AML: Detecting and investigating suspicious activity, complying with anti-money laundering (AML) requirements, and combating the financing of terrorism.
• Service improvement: Analysing platform usage patterns to improve the user experience, system stability, and overall service quality.
• Legal compliance: Meeting reporting obligations to regulatory authorities and law enforcement agencies as required by law.

04 Lawful Basis for Data Processing

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), myan99 only processes your personal data on lawful and legally recognised grounds. There are four main bases we rely on, depending on the type of processing involved:

• Consent: You provide explicit consent during account registration and when we request data for specific purposes such as marketing communications. You may withdraw this consent at any time.
• Contract Performance: Processing necessary to fulfil our contractual obligations to you as a platform member, including financial transaction processing and account management.
• Legal obligation: Processing required under Malaysian law, including KYC requirements, AML reporting, and cooperation with legitimate law enforcement agencies.
• Legitimate interest: Processing required for myan99's legitimate interests, such as fraud prevention, network security, and service improvement, provided these interests do not override your fundamental privacy rights.

05 Data Sharing and Disclosure

Myan99 does not sell or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where we need to share your data with certain parties to ensure the platform operates properly and remains compliant with the law:

• Payment service provider: FPX, DuitNow, Touch 'n Go eWallet, Boost, and GrabPay receive the transaction data necessary to process your deposits and withdrawals. They are bound by strict confidentiality agreements.
• KYC Service Providers: Third-party identity verification partners who help us verify your identity documents securely and efficiently.
• Cloud infrastructure provider: The servers and cloud services we use to operate the platform, all of which comply with international security standards.
• Legal Authorities: Law enforcement agencies, courts, or regulatory bodies when required by a valid court order or Malaysian law.
• Auditors and professional advisors: Independent audit firms and legal advisors bound by strict professional confidentiality obligations.

06 Data Retention Period

Myan99 does not store your data indefinitely. We determine retention periods based on operational needs, legal obligations and the risk level associated with the type of data in question. Our general principle is to retain data only for as long as necessary for the original purpose of collection.

• Active account data: Retained for the duration of your active account plus 7 years after account closure for legal compliance and audit purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial records and AML.
• Access and security logs: Retained for 2 years for the purposes of security incident investigation and fraud detection.
• Support communication data: Records of conversations with our customer support team are retained for 3 years for service quality and dispute resolution purposes.
• Marketing data: Retained until you withdraw consent or request deletion, whichever occurs first.

Once the retention period expires, your data will be securely deleted or anonymised in a manner that ensures it can no longer be linked back to you. Our deletion process uses data erasure methods compliant with NIST 800-88 standards.

07 Your Rights Regarding Personal Data

As a myan99 member and data subject under Malaysia's PDPA, you have the following rights, which you may exercise at any time by contacting our data protection team:

• Right to access: You have the right to request and receive a copy of the personal data we hold about you. Requests will be processed within 14 business days.
• Right to rectification: If any data we hold is inaccurate or outdated, you have the right to request that we correct it without undue delay.
• Right to erasure: Under certain circumstances, you have the right to request that we delete your personal data. This request is subject to our legal retention obligations.
• Right to object: You may object to the processing of your data for direct marketing purposes or in situations where we rely on legitimate interests as the basis for processing.
• Right to data portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

08 Cookies, Pixels and Tracking Technologies

Myan99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you during subsequent sessions and remember your preferences.

• Essential cookies: Required for core platform functions such as login authentication, session management, and security. Cannot be disabled.
• Performance cookies: Collecting information on how you use the platform to help us identify technical issues and improve performance.
• Functionality cookies: Storing your preferences such as preferred language, display settings, and platform preferences for a smoother experience.
• Analytics cookies: Used to understand platform usage patterns in aggregate and anonymised form for the purpose of continuous improvement.

You can control and delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the myan99 platform. Please refer to your browser's documentation for guidance on managing cookies.

09 Data Security Measures

The security of your data is myan99's top priority. We implement multiple layers of technical and organisational protection to ensure your data remains safe from unauthorised access, loss, or damage:

• 256-bit SSL/TLS Encryption: All data in transit between your device and our servers is fully encrypted using the highest industry standards.
• Two-factor authentication (2FA): Members are encouraged to enable 2FA for an added layer of security during login.
• 24/7 monitoring: Our security monitoring systems operate around the clock to detect and respond to any threats in real time.
• Regular penetration testing: We conduct regular security testing by independent experts to identify and patch vulnerabilities before they can be exploited.
• Role-based access control: Internal staff can only access the data they need for their specific duties, based on the principle of least privilege.
• Secure data backups: Your data is regularly backed up to a separate, secure location to ensure rapid recovery in the event of a technical incident.

While we take all reasonable precautions, no system can guarantee 100% absolute security. We therefore strongly encourage you to take your own security measures, such as using a strong password, not sharing your login credentials, and keeping your device updated with the latest security patches.

10 Amendments to This Privacy Policy

Myan99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or improvements in how we handle data. Whenever a material amendment is made, we will notify you via:

• In-platform or myan99 mobile app notification during your next login session.
• Emailed to the address registered on your account at least 14 days before the changes take effect.
• A prominent notice displayed on the myan99.bar homepage.

The effective date of the latest version is always displayed at the top of this document. Continued use of the myan99 platform after the effective date of any amendment constitutes acceptance of the updated terms. If you do not agree with the amendments, you have the right to close your account by contacting our support team.

11 Contact Our Data Protection Officer

If you have any questions, concerns or complaints about how myan99 handles your personal data, we encourage you to contact us directly. Our Data Protection Team is always ready to assist you.

• Data Protection Email: [email protected] (use subject: "Privacy Policy Inquiry")
• Live Chat: Available 24/7 on the myan99 platform for immediate response
• Target response time: All privacy inquiries are responded to within 3 business days

If you believe your complaint has not been resolved satisfactorily by myan99, you have the right to refer the matter to the Malaysia Personal Data Protection Department or the relevant regulatory authority in your jurisdiction.