Privacy Policy s99y — Your Personal Data Protection

1 Personal Data We Collect

We collect the information needed to allow you to use the s99y platform safely and smoothly. The type of data we collect depends on how you interact with our platform, and we always strive to collect only what is genuinely necessary.

Data You Provide Directly

• Registration information: full name, date of birth, identity card number, email address, and mobile phone number.
• Financial information: bank account number, account holder name, and e-wallet details used for deposits and withdrawals.
• Identity verification documents (KYC): copy of identity card, passport, or other official documents requested during the verification process.
• Support communications: records of conversations with our customer support team via live chat, email, or other channels.

Automatically Collected Data

• Technical data: IP address, browser type, operating system, screen resolution, and device language.
• Usage data: pages visited, time spent on the platform, games played, and wagering records.
• Location data: approximate location based on IP address for geographical compliance and fraud prevention purposes.
• Cookie and session data: session cookies, preference cookies, and device identifiers that help us recognize you during login.

2 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for any other purpose without informing you first. Below are the primary ways we use the information you provide.

• Account management: We use your registration information to create and manage your s99y account, including the login process, identity verification, and account recovery.
• Transaction processing: Your financial details are used to process deposits and withdrawals accurately and securely through our payment providers.
• Fraud prevention and security: Technical data and usage patterns help us detect suspicious activity, unauthorised login attempts and potential security threats to your account.
• Legal compliance: We are required to retain certain records and submit reports to the relevant authorities in accordance with anti-money laundering (AML) legislation and financial reporting obligations.
• Service communications: We send you important notifications regarding your account, transactions, security updates, and changes to terms via email or in-app messages.
• Platform improvement: Anonymised usage data is used to understand how users interact with our platform, allowing us to continuously improve the gaming experience.
• Marketing communications: With your consent, we send information about promotions, bonuses and the latest offers. You can opt out of marketing communications at any time through your account settings.

We will not use your data to make automated decisions that significantly affect you without human review. Any major decisions regarding your account will involve assessment by our team.

3 Information Sharing and Disclosure

S99y does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, there are certain situations where we need to share your information with others to enable the platform to operate properly.

Third Parties That May Receive Your Data

• Payment service providers: FPX, Touch 'n Go eWallet, GrabPay, Boost and credit card processors receive the transaction information required to process your deposits and withdrawals.
• Game providers: Third-party gaming software providers that supply slots, live casino, and fish shooting games receive your session identifier to enable gameplay, but do not receive your personal identification details directly.
• Identity verification services: Third-party KYC providers that help us verify your identity documents securely and efficiently.
• Analytics services: Analytics tools such as traffic tracking software help us understand platform usage patterns — this data does not contain any personally identifiable information.
• Legal authorities: When required by law or court order, we will disclose the necessary information to the relevant law enforcement agencies or regulatory bodies.

All third parties we engage are bound by strict data protection agreements and are only permitted to use your data for specified purposes. We select partners that comply with international data security standards.

4 Data Security and Encryption

Protecting your data is s99y's highest priority. We invest in the latest security infrastructure and follow strict procedures to ensure your information is always safe from unauthorized access, leaks, or misuse.

• 256-bit SSL/TLS encryption: All data transmitted between your device and s99y servers is protected by industry-grade encryption. The padlock icon in your browser confirms a secure connection at all times.
• Secure password storage: Your password is never stored in plain text. We use modern hashing algorithms with random salts to ensure your password cannot be recovered, even by our internal staff.
• Two-factor authentication (2FA): This additional security layer is available for all accounts and is strongly recommended. With 2FA, logging in requires verification through your device in addition to your password.
• Continuous threat monitoring: Our automated monitoring system runs 24 hours a day to detect suspicious access attempts and respond immediately.
• Regular security audits: Our platform undergoes regular penetration testing and security audits by independent cybersecurity experts to identify and address any vulnerabilities.
• Data segregation: User funds are held in accounts separate from the company's operational funds, and sensitive data is stored in an isolated environment with strict access controls.

5 Cookies and Tracking Technologies

S99y uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser that help us recognize you during return visits and ensure the platform functions correctly.

Types of Cookies We Use

• Essential cookies: Required for core platform functions such as login session management, account security and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collects anonymous information about how you use the platform — pages visited, time spent, and errors encountered — to help us improve our services.
• Functionality cookies: Saves your preferences such as display theme, preferred language, and game settings so you do not have to configure them again each time.
• Marketing cookies: Used with your consent to display relevant promotional content and measure campaign effectiveness. You may withdraw this consent at any time.

You can manage or block cookies through your browser settings. Please note that blocking all cookies may affect certain functions on the s99y platform. For more information on managing cookies, refer to your browser's help documentation.

6 Your Rights as a User

As a s99y user, you have certain rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights in a practical and timely manner.

• Right to access: You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of receiving your request.
• Right to rectification: If you find that any information we hold is inaccurate or outdated, you have the right to request a correction. Name, phone number, and email data can be updated directly through your account profile section.
• Right to deletion: You may request the deletion of your personal data, subject to legal requirements for financial record retention and AML compliance. Deletion requests will be processed once all legal obligations have been fulfilled.
• Right to restrict processing: In certain circumstances, you have the right to request that we restrict how we process your data while a dispute or investigation is ongoing.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time without providing a reason.
• Right to data portability: You have the right to receive your personal data in a machine-readable format and transfer it to another service provider of your choice.

To exercise any of the above rights, please contact our privacy team via the support email listed at the bottom of this page. We may need to verify your identity before processing your request in order to protect your privacy.

7 Data Retention and Deletion

S99y does not retain your data longer than necessary. Data retention periods are determined based on operational needs, legal obligations, and the platform's legitimate interests.

• Active account data: Retained for as long as your account is active and in use.
• Financial transaction records: Retained for a minimum of 7 years in accordance with applicable financial and AML legal requirements.
• Support communication logs: Retained for 3 years from the date of last interaction for dispute reference and service improvement.
• Usage and analytics data: Anonymised data is retained for 2 years; identifiable data is deleted or anonymised within 12 months after account closure.
• KYC Documents: Retained for 5 years after the business relationship ends in accordance with international AML requirements.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be personally linked to you. The deletion process follows methods that comply with data security standards to ensure data cannot be recovered.

8 Children's Privacy

S99y is an entertainment platform exclusively for individuals aged 18 and above. We do not intentionally collect, store, or process any personal data from children or individuals below the minimum age required by law.

All prospective members are required to verify their age during the registration process, and our identity verification (KYC) process is designed to detect and reject applications from individuals who do not meet the minimum age requirement.

If we discover that personal data of a child has been collected unintentionally, we will promptly take steps to delete that data and close the account involved. Parents or guardians who suspect their child has registered on our platform are asked to contact our support team immediately.

9 Changes to This Privacy Policy

S99y reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. When significant changes are made, we will notify you through one or more of the following ways:

• In-app or website notification upon your next login.
• Notification emails are sent to your registered address.
• Banners or notification messages on the platform's main page.

The "Updated" date at the top of this document will always reflect the latest version of the Privacy Policy. We encourage you to review this page periodically. Your continued use of the s99y platform after any Privacy Policy changes take effect will be considered your acceptance of the updated terms.

10 Contact Us About Privacy

If you have any questions, concerns, or complaints about how we handle your personal data, the s99y privacy team is here to help. We are committed to addressing every inquiry seriously and within a reasonable timeframe.

• Privacy email: [email protected]
• General support: [email protected]
• Response time: We aim to respond to all privacy-related inquiries within 5 business days.

For data rights requests such as access, correction, or deletion, please clearly state the type of request and include sufficient proof of identity so we can process your request securely and accurately.