Privacy Policy — s99my Online Casino

1. Who We Are

s99my operates the online casino and sports betting platform accessible at s99my.asia. For the purposes of this Privacy Policy, s99my acts as the data controller in respect of personal data collected from players and visitors to the Platform. References to "s99my", "we", "us", and "our" in this Policy refer to the operator of the s99my Platform. References to "you" and "your" refer to any individual whose personal data s99my processes in connection with the use of the Platform, including registered players and unregistered visitors.

This Privacy Policy applies to all personal data collected through the s99my website, account registration process, payment transactions, customer support interactions, and any other touchpoint between s99my and its users.

2. Personal Data We Collect

s99my collects personal data in the following categories depending on the nature of your interaction with the Platform:

s99my does not collect full payment card numbers. Where card payments are facilitated, the full card number is processed exclusively by the relevant payment service provider and is not transmitted to or stored on s99my's systems.

3. How We Use Your Personal Data

s99my uses collected personal data for the following purposes:

• Account administration: Creating, maintaining, and managing your s99my account, including processing registrations, verifying identity, and communicating account-related information.
• Service delivery: Providing access to s99my's gaming products, processing deposits and withdrawals, crediting bonuses, and settling bets and game outcomes.
• Identity verification (KYC): Verifying player identity and age as required under s99my's compliance obligations, including anti-money laundering (AML) and responsible gaming requirements.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account takeovers, money laundering, and other prohibited conduct on the Platform.
• Regulatory compliance: Maintaining records required by applicable law, including transaction records and identity verification documentation, and cooperating with lawful requests from competent authorities.
• Responsible gaming monitoring: Identifying patterns of gaming behaviour that may indicate problem gambling, and applying responsible gaming tools or interventions where appropriate.
• Customer support: Responding to queries, complaints, and support requests submitted through s99my's live chat and other support channels.
• Platform improvement: Analysing aggregated and anonymised usage data to improve game selection, platform performance, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have not opted out of marketing communications. You may opt out at any time via your account settings or by contacting support.

4. Legal Basis for Processing

s99my processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between s99my and the player — including account management, payment processing, and game delivery — is carried out on the basis that it is necessary for the performance of that contract.
• Legal obligation: Processing required to comply with applicable laws and regulations — including KYC, AML record-keeping, and responses to lawful authority requests — is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is conducted on the basis of s99my's legitimate interests, balanced against players' privacy rights.
• Consent: Processing for marketing communications is carried out on the basis of consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Your Personal Data

5.1 s99my shares personal data with third parties only in the following circumstances:

• Payment service providers: Identity and financial data is shared with payment processors — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and banking partners — to the extent necessary to process deposits and withdrawals. These providers are bound by their own data protection obligations and applicable Malaysian financial services regulations.
• Game software providers: Technical data (such as device type and session identifiers) may be shared with game software providers (such as Pragmatic Play, Evolution Gaming, and others) to facilitate game delivery and RNG certification. No identity data is shared with game providers.
• KYC and identity verification services: Identity documents are shared with third-party identity verification services for the purpose of age and identity verification. These services process data under strict data processing agreements.
• Regulatory and law enforcement authorities: s99my will disclose personal data to competent authorities where required to do so by applicable law, court order, or lawful regulatory requirement. s99my will, where legally permissible, notify affected players of such disclosures.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of s99my's assets, player personal data may be transferred to the successor entity, subject to equivalent data protection obligations.

5.2 s99my does not sell, rent, or otherwise commercially exploit player personal data to unrelated third parties for their own marketing or commercial purposes.

6. Cookies & Tracking Technologies

6.1 s99my uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help the Platform function correctly, remember your preferences, and provide analytical insights into how the Platform is used.

6.2 The following categories of cookies are used on s99my:

• Strictly necessary cookies: Required for the Platform to function — including session management, login state persistence, and security tokens. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences such as language and display settings. These cookies improve your experience but are not essential to Platform operation.
• Analytics cookies: Used to collect aggregated information about how visitors use the Platform, including pages visited, session duration, and navigation paths. This data is used exclusively to improve the Platform.

6.3 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent certain features of the s99my Platform from functioning correctly.

7. Data Retention

7.1 s99my retains personal data for the following minimum periods:

• Account and identity data: For the duration of the account relationship and for a minimum of five (5) years following permanent account closure, in accordance with anti-money laundering record-keeping obligations.
• Transaction data: For a minimum of seven (7) years following the date of the transaction, as required for financial record-keeping compliance.
• KYC documentation: For a minimum of five (5) years following the date of verification or account closure, whichever is later.
• Customer support records: For a minimum of two (2) years following resolution of the relevant support interaction.
• Marketing preferences: Until you withdraw consent or close your account, whichever is earlier.

7.2 Upon expiry of the applicable retention period, s99my will securely delete or anonymise the relevant personal data unless a longer retention period is required by a specific legal obligation or ongoing legal proceedings.

8. Data Security

8.1 s99my implements technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and the s99my Platform;
• AES-256 encryption for sensitive personal data stored in s99my's systems;
• Role-based access controls ensuring personal data is accessible only to personnel with a legitimate operational need;
• Regular security assessments and penetration testing of the s99my Platform infrastructure;
• Incident response procedures for the identification, containment, and remediation of security breaches.

8.2 In the event of a personal data breach that poses a risk to affected individuals, s99my will notify affected players within a reasonable timeframe and will provide information about the nature of the breach, the data affected, and the steps taken in response.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to personal data that s99my holds about you:

• Right of access: You may request a copy of the personal data s99my holds about you, together with information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You may also update certain personal data directly from your account settings.
• Right to erasure: You may request deletion of your personal data where s99my no longer has a legitimate basis for retaining it. Note that erasure requests may be subject to overriding retention obligations under applicable law.
• Right to restrict processing: You may request that s99my restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to direct marketing, s99my will cease such processing without requiring justification.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, please contact s99my's support team via live chat on the Platform or at the email address listed in the footer. s99my will respond to valid data subject requests within 30 days.

10. Children's Privacy

10.1 The s99my Platform is strictly for individuals aged 21 and above. s99my does not knowingly collect personal data from individuals under the age of 21. If s99my becomes aware that personal data has been collected from an individual under 21, the account will be closed immediately, all funds returned to the originating payment method, and the personal data deleted from s99my's systems as promptly as is practicable, subject to any overriding legal obligation to retain the data.

10.2 If you believe a minor has registered an account on s99my, please notify s99my support immediately via live chat so that the matter can be investigated and resolved without delay.

11. Cross-Border Data Transfers

11.1 s99my's primary data infrastructure is located in the Asia-Pacific region. Some of s99my's third-party service providers — including game software providers, payment processors, and identity verification services — may process personal data in jurisdictions outside Malaysia.

11.2 Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to Malaysian standards, s99my ensures appropriate safeguards are in place, including standard contractual clauses or equivalent contractual protections binding the recipient to confidentiality and data security obligations comparable to those required under this Privacy Policy.

12. Changes to This Privacy Policy

12.1 s99my reserves the right to update or amend this Privacy Policy at any time. Material changes — meaning changes that affect the basis on which s99my collects or processes personal data, or that materially affect players' rights — will be communicated to registered players via email to the registered address, and by prominent notice on the Platform, at least 14 days before the change takes effect.

12.2 Non-material changes, such as clarifications or formatting updates, may be made without advance notice. The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision. Your continued use of the s99my Platform following any revision constitutes acceptance of the updated Privacy Policy.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or s99my's data processing practices, please contact s99my's support team via 24/7 live chat on the Platform. Alternatively, you may use the email address displayed in the footer of this page. s99my aims to acknowledge all privacy enquiries within 48 hours and to provide a substantive response within 30 days.

For formal written notices relating to data protection matters, please contact s99my's support team via live chat first to obtain the appropriate correspondence address for your jurisdiction.