Privacy Policy my9988 – Malaysian Personal Data Protection

1 Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") describes how my9988 ("we", "Platform") collects, uses, stores and protects your personal information when you use our website and services under the domain my9988.best. This Policy is drafted in accordance with the provisions of the Personal Data Protection Act 2010 (PDPA 2010) of Malaysia and forms part of the platform's terms of use. my9988 as a whole.

By registering an account or using any of our services my9988, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle your personal data as described here, please discontinue use of the platform and contact us to close your account.

This policy applies to all members my9988 registered from across Malaysia, including those accessing the platform via smartphone, tablet, or personal computer. This Policy does not apply to third-party websites or services that may be linked to our platform.

2 Types of Personal Data We Collect

my9988 collects the following categories of personal data from our members, depending on the stage of use and compliance requirements:

my9988 does not collect or process special categories of sensitive data such as health information, religious beliefs, political affiliations, or biometric data, unless specifically required by Malaysian law for certain compliance purposes.

3 How Personal Data Is Collected

my9988 collects personal data through a number of different channels:

• Account Registration: When you complete the my9988 account registration form, you provide basic information such as your name, Malaysian phone number, and email address.
• Identity Verification (KYC): When you submit verification documents such as a copy of your MyKad for the KYC process required prior to your first withdrawal.
• Financial Transactions: When you make a deposit via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX, or other Malaysian payment methods, transaction details are recorded automatically.
• Platform Usage: Gaming history, game preferences and usage patterns are collected automatically when you use the platform.
• Cookies and Web Technologies: Technical information such as IP addresses and device types is collected via cookies and standard web technologies when you browse the platform.
• Communications with Us: When you contact customer support via Live Chat or email, the content of that communication may be retained for reference and training purposes.
• Referral Programme: If you refer a friend through my9988's referral programme, the basic information you provide about the referred person will be processed solely for the purposes of that programme.

my9988 does not purchase or obtain your personal data from third-party data brokers or external sources unrelated to your direct use of our platform.

4 Purpose of Personal Data Use

my9988 uses the personal data collected solely for the following legitimate and necessary purposes:

• Account Management: Creating, managing and maintaining your member account, including registration processing, login and password resets.
• Transaction Processing: Processes deposits via Touch 'n Go, DuitNow, GrabPay, and other Malaysian payment methods, as well as withdrawal requests to your account.
• Identity Verification: Carrying out KYC (Know Your Customer) procedures to comply with anti-money laundering (AML) requirements and other applicable Malaysian legal obligations.
• Service Provision: Providing access to slots, Live Casino, football betting (Malaysia Super League, EPL), e-sports and all other services on the platform.
• Security & Anti-Fraud: Detecting and preventing fraudulent activity, money laundering, multi-accounting and any suspicious activity or violations of the terms of use.
• Customer Support: Enables the my9988 support team to address enquiries, resolve technical issues, and handle member complaints effectively.
• Legal Compliance: Meeting the reporting and record-keeping obligations required under Malaysian law.
• Platform Improvement: Analyzing usage patterns on an aggregate (not individual) basis to improve platform design, technical performance and the overall user experience.
• Service Communications: Sending important notifications regarding your account, changes to terms, or security updates that require your attention.
• Marketing (with consent): Sends information about my9988's latest promotions, bonuses, and offers exclusively to members who have opted in to receive marketing communications.

my9988 will not use your personal data for any purpose other than those listed above without obtaining your consent first, or unless required by law.

5 Third-Party Data Sharing & Disclosure

my9988 does not sell, rent or disclose members' personal data to third parties for marketing or commercial purposes. Data disclosure only occurs in the following limited circumstances:

• Payment Service Providers: Required transaction data is shared with payment providers such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX member banks (Maybank, CIMB, Hong Leong and others) solely for the purpose of processing your deposits and withdrawals.
• Game Software Providers: Minimum technical information may be shared with game providers such as Evolution Gaming, Pragmatic Play, SA Gaming, and other partners to ensure smooth game delivery and compliance with their game fairness standards.
• Technical Infrastructure Providers: Cloud and hosting service providers that store my9988 platform data are bound by strict confidentiality agreements and only access data within the scope of their technical responsibilities.
• Legal Requirements: my9988 may disclose personal data to Malaysian authorities such as the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or relevant regulatory bodies when required by a court order, writ, or valid legal obligation.
• Business Transfer: If my9988 is involved in a merger, acquisition or sale of related assets, members' personal data may be transferred to the receiving entity, and you will be notified in advance of any changes to how your data is managed.

All third parties that receive data from my9988 required to comply with security and privacy standards at least equivalent to our own, and they are not permitted to use that data for any purpose other than what is specified in their agreement with us.

6 Data Security Measures

my9988 implements comprehensive technical and organisational security measures to protect members' personal data from unauthorised access, accidental disclosure, alteration, or destruction. Key measures we employ include:

• Data Encryption in Transit: All communications between your device and my9988 servers are encrypted using TLS 1.3 protocol with 256-bit SSL encryption — no data can be intercepted in transit.
• Encryption of Stored Data: Sensitive data including identification card numbers, financial information and passwords are stored in encrypted or hashed form in our database.
• Access Controls: Access to members' personal data within my9988's internal systems is restricted to staff who require it to perform their duties, based on the principle of minimum privilege.
• 24/7 Security Monitoring: my9988's cybersecurity team monitors the platform around the clock to detect any suspicious activity, attempted security breaches or unauthorised access.
• Regular Audits: my9988's security systems and data management practices are subject to regular internal audits and independent security assessments.
• Incident Management: my9988 has established incident response procedures to address any data security breaches promptly and effectively.

Although my9988 takes reasonable steps to protect your data, no security system is completely foolproof or impenetrable. You also have a responsibility to keep your account secure by using a strong password and not sharing your login credentials with anyone.

7 Cookies & Tracking Technologies

my9988 uses cookies and similar web tracking technologies to enhance the user experience and platform functionality. The following are the types of cookies we use:

• Session Cookies: Required to maintain your login session while using the platform. This cookie is automatically deleted when you close your web browser.
• Preference Cookies: Saving your platform preferences such as language selection and display settings to make subsequent visits more convenient.
• Analytics Cookies: Collects aggregated information on how members use the platform to help us understand usage patterns and improve the performance and design of my9988.
• Security Cookies: Helps identify and prevent fraudulent activity and ensures the integrity of user sessions.

Most modern web browsers let you control and manage cookies through your browser settings. You may choose to decline or delete cookies, though please note that disabling certain cookies may affect the functionality of the platform. my9988 and your user experience. Cookies required for session security cannot be disabled without affecting your ability to log in to your account.

my9988 does not use third-party tracking technologies for targeted advertising. We do not share tracking data with advertising networks or social media platforms.

8 Data Retention & Deletion

my9988 only retains your personal data for as long as necessary for the purposes stated in this Privacy Policy, or as required under Malaysian law. Our data retention policy is as follows:

• Active Account Data: Personal data of members with active accounts is retained for the duration of the active account and updated on an ongoing basis.
• Data After Account Closure: Upon account closure, my9988 retains account and transaction records for a minimum of 7 years after closure, in line with Malaysian legal requirements on financial record-keeping and anti-money laundering.
• Financial Transaction Data: All deposit and withdrawal transaction records are retained for a minimum of 7 years for Malaysian tax compliance and financial law purposes.
• Communication Logs: Customer support conversation records are retained for 3 years for reference and service improvement purposes.
• Technical Data & Logs: System logs and technical information collected automatically are retained for 12 months for security and technical troubleshooting purposes.

Once the retention period has expired or the data is no longer required, my9988 will securely delete or anonymise that data using methods that ensure it cannot be recovered or re-linked to the individual concerned.

9 Your Rights Under Malaysia's PDPA 2010

As a member my9988 who are Malaysian citizens or residents, you have the following rights under the Personal Data Protection Act 2010:

• Right of Access: You have the right to request access to the personal data my9988 holds about you. We will provide a copy of that data within 14 business days of receiving a valid request.
• Right to Rectification: If you find that any personal data held by my9988 is inaccurate, outdated or incomplete, you have the right to request an immediate correction. Some corrections can be made directly through your account settings.
• Right to Withdraw Consent: You may withdraw consent previously given for certain data processing, particularly for marketing communications. Withdrawing consent does not affect the validity of any processing carried out prior to the withdrawal.
• Right to Restrict Processing: Under certain circumstances provided for by law, you may request that my9988 restrict the way it processes your data.
• Right to Lodge a Complaint: If you believe my9988 has violated your privacy rights, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the rights above, please contact the privacy team my9988 via email at support@my9988.best, clearly stating the right you wish to exercise and providing the information needed to verify your identity. We will handle all privacy rights requests seriously and within the stipulated timeframe.

10 Links to Third-Party Websites

Platform my9988 may contain links or integrations with third-party services such as game providers, payment gateways and communication channels. Once you leave the my9988 platform and access any third-party website or service, this Privacy Policy no longer applies.

my9988 is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of each website you visit separately. The presence of links to third-party websites on our platform does not constitute an endorsement of or guarantee regarding their privacy practices.

Payment providers such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX member banks maintain their own privacy policies governing the processing of transaction data on their end. my9988 only shares information necessary to process your transaction and does not control how those providers handle data once the transaction is completed.

11 Privacy Policy Changes & Updates

my9988 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. The date of the latest update will always be displayed at the top of this document.

When significant changes are made to how we handle your personal data, my9988 will endeavour to notify you via email or in-platform notification at least 14 days before any changes take effect. For minor changes, notification may be provided solely through an update to this page.

Continued use of the platform my9988 after the effective date of any policy change will be considered as your acceptance of the updated policy. If you do not agree with the changes made, you should discontinue use of the platform and contact us to request account closure and appropriate data deletion.

12 Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how my9988 manage your personal data, please contact us through the following channels:

• Privacy Email: support@my9988.best – mark the email subject as "Privacy Inquiry" to ensure it is handled by the relevant team.
• Live Chat: Available directly within the my9988 platform, 24 hours a day, 7 days a week in Bahasa Melayu.
• Response Time: We aim to respond to privacy inquiries within 3 business days and to resolve more complex requests within 14 business days.

For formal complaints regarding personal data protection that cannot be resolved internally, you may contact the Department of Personal Data Protection Malaysia (JPDP), which is responsible for enforcing the Personal Data Protection Act 2010 in Malaysia.

my9988 committed to providing accurate, fair and transparent responses to all privacy-related inquiries. We value the trust you place in us by sharing your personal data, and we take that responsibility seriously across every aspect of our platform's operations.