Privacy Policy vip99 – How We Protect Your Personal Information

Vip99 collects personal information from members through several channels — during account registration, during use of the platform and during interactions with our support team. Below are the types of information we collect and the purpose of each:

Vip99 only collects information that is genuinely necessary for the purposes stated above. We do not collect excessive or irrelevant data beyond what is needed to operate the platform. You have the right to know exactly what data we hold about you at any time — contact us at support@vip99.express for data access requests.

Vip99 uses the personal information collected solely for the following purposes. We do not use your data for any purpose not listed here without your prior consent:

• Account management — Creating and maintaining your account, processing registration, verifying identity, and managing login security.
• Transaction processing — Processes deposits in MYR via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and processes withdrawals of winnings to your account.
• Legal compliance — Meeting KYC (Know Your Customer), AML (Anti-Money Laundering), and reporting obligations required by applicable laws and relevant authorities.
• Platform security — Detecting and preventing fraud, multi-account activity, bonus abuse and any suspicious or unlawful activity on our platform.
• Service improvement — Analysing platform usage patterns on an aggregate basis (not individually) to improve vip99's features, performance, and overall user experience.
• Responsible gambling — Monitoring gameplay patterns to identify signs of problem gambling and taking appropriate supportive action when necessary.
• Customer support — Providing support and resolving issues reported by members via live chat, email, and Telegram in Bahasa Melayu.
• Essential Communications — Sending account notifications, security alerts, updates to our terms or policies, and other important information relevant to your account.

Vip99 not sell, rent, or share members' personal data with any party for their own marketing or business purposes. However, there are limited circumstances in which we need to share certain data with selected third parties in order to operate securely and remain legally compliant:

• Payment service providers — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers require minimal transaction information to process your payments. These providers are governed by their own privacy policies and industry payment security standards.
• Game providers — Companies such as Pragmatic Play, Evolution Gaming, and NetEnt may receive anonymised account identifiers for the purpose of game delivery. The information shared is kept to a minimum and does not include full personally identifiable information.
• KYC verification services — Third-party identity verification service providers we use to verify member KYC documents. All providers are bound by strict confidentiality agreements.
• Legal authorities — vip99 will disclose required data to the relevant authorities when mandated by law, court order, or during a legitimate criminal investigation. We will not disclose more than is legally required.
• Audit and compliance — Independent audit bodies listed by vip99 may access certain records for game fairness and compliance audit purposes — without directly accessing members' personal identifying information.

All third parties we work with are contractually bound to protect your data and use it solely for the specified purposes. vip99 is not responsible for the privacy practices of third parties beyond the scope of the agreements we have established with them.

Vip99 continuously invests in cutting-edge security infrastructure to safeguard every member's personal data. The security measures we have in place include:

• 256-bit SSL Encryption for all communications between your device and vip99 servers — no data travels in plain text.
• Encryption of data at rest — Data stored in our databases is also encrypted, meaning that even if someone were to gain physical access to the servers, the data would remain unreadable without the encryption key.
• Two-factor authentication (2FA) available to all vip99 member accounts as an additional security layer to protect access to your account.
• 24/7 security monitoring — Our systems monitor for any unusual or suspicious access activity in real time and will trigger automatic preventive action where necessary.
• Strict internal access controls — vip99 staff can only access the data required for their specific role. All access is logged and regularly audited by our internal security team.
• Regular penetration testing — Independent security experts conduct regular penetration testing on our systems to identify and address any vulnerabilities before they can be exploited.

While vip99 takes all reasonable security measures, no system can be guaranteed 100% secure against every threat. We encourage members to take their own precautions as well — use a strong, unique password, enable 2FA and never share your account login details with anyone.

Vip99 retains member personal data only for as long as it is needed for the purposes stated in this policy or as required by applicable law. Our data retention guidelines are as follows:

• Active account data — Retained for as long as your account remains active on vip99. This data is updated whenever you update your profile information.
• Financial transaction records — Retained for a minimum of 7 years after each transaction to meet Malaysia's financial regulatory and AML compliance requirements.
• KYC documents — Retained for a minimum of 5 years after account closure or last use, in accordance with legal compliance requirements.
• Support communication records — Retained for 2 years after the issue is resolved, for service quality reference and dispute resolution purposes.
• Technical and security logs — Retained for 12 months for fraud detection and security incident investigation purposes.
• After account closure — General account data will be deleted or anonymised within 90 days of account closure, except for data that must be retained by law, such as financial records and KYC documents.

Vip99 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage or disable cookies through your browser settings. However, disabling essential cookies will affect the core functionality of the vip99 platform and you may be unable to log in or use certain features properly. We do not use cookies to track your activity on other websites unrelated to vip99.

As a vip99 member and user of our platform, you have privacy rights that we fully respect. The following are rights you may exercise at any time:

• Right of Access — You may request a copy of all personal data we hold about you. We will provide it in a readily readable format within 14 business days.
• Right to Rectification — If your data is inaccurate or incomplete, you may request a correction. Corrections will be applied once identity verification is complete.
• Right to Erasure — You may request the deletion of your data when it is no longer needed for the original purpose for which it was collected, subject to any applicable legal retention obligations.
• Right to Restrict Processing — Under certain circumstances, you may request that we restrict how we process your data — for example, while you are disputing the accuracy of that data.
• Data Portability Rights — You have the right to receive the data you have provided to us in a structured, machine-readable format for transfer to another service provider where applicable.
• Right to Object — You may object to the processing of your data for direct marketing purposes at any time. This objection will be enforced immediately.

To exercise any of the rights above, contact the vip99 privacy team by emailing support@vip99.express, clearly stating the right you wish to exercise and your account details. We will respond within 14 business days from the date the request is received.

Vip99 is a platform designed exclusively for adults aged 18 years and above. We do not knowingly collect, store, or process any personal data belonging to individuals under the age of 18.

Should vip99 become aware of or have reason to believe that a child's personal data has been collected without proper consent — for example, through account registration using falsified information — we will take the following steps immediately:

• Suspending the account in question immediately.
• Delete or de-identify all data relating to the individual under 18 years of age as promptly as possible.
• Prohibits any financial transactions from or to the account in question while the investigation and deletion process is ongoing.

If you believe that someone under the age of 18 has successfully registered an account on vip99, please notify us immediately at support@vip99.express so we can take appropriate action without delay.

Vip99 may contact you from time to time about promotions, bonuses, new games, and special offers that may be of interest to you. All marketing communications are opt-in — we will only send marketing materials if you have given your consent.

The marketing communication channels we use are:

• Email — Promotional notifications, bonus offer updates, and platform news sent to your registered email address.
• In-platform notifications — Pop-ups and banners on vip99.express displaying current offers relevant to your gaming activity.
• SMS — Brief marketing communications sent to the phone number you registered, provided you have opted in to receive them.

You may unsubscribe marketing communications at any time in the following ways:

• Click the "Unsubscribe" link found at the bottom of any marketing email we send.
• Update your communication preferences in your vip99 account settings.
• Contact our support team via live chat or email and request removal from the marketing mailing list.

Please note that even if you opt out of marketing, we will still send operationally important communications — such as account security notices, transaction confirmations, terms updates, and critical system alerts. These communications cannot be stopped as they form part of the core service tied to your account.

Vip99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. The date of the most recent update will always be displayed at the top of this page.

For material amendments — that is, changes that significantly affect how we process your personal data — vip99 is committed to providing at least 14 days before the amendment takes effect. This notice will be sent to your registered email address and/or prominently displayed on the vip99 platform.

Your continued use of the vip99 platform after the effective date of any amendment will be considered your acceptance of the updated Privacy Policy. If you do not agree, please contact us to discuss your options, including account closure.

For any questions, concerns, or requests relating to your data privacy, please contact the vip99 privacy team at:

• Email: support@vip99.express (use subject: "Privacy Inquiry")
• Live Chat: Available at vip99.express, 24 hours a day, 7 days a week
• Telegram: Official vip99 support channel