Club999 Privacy Policy – Your Personal Data Protection

Club999 is fully committed to protecting the privacy of every member who entrusts us with their personal data. Your trust is our most valuable asset, and we never take that responsibility lightly.

This Privacy Policy applies to:

• All visitors and users of the club999.fun website
• Registered members with an active club999 account
• Users of the official Club999 mobile app for iOS and Android
• Anyone who contacts our customer support via live chat or email
• Participants in Club999 promotions, contests, or loyalty programmes

By using the Club999 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please stop using our platform and contact us to close your account.

Club999 only collects information necessary to operate our services safely and effectively. The following are the categories of data we may collect:

We never collect sensitive information such as biometric data, medical records, or religious/political beliefs unless required by law. All data collection is conducted transparently and with your knowledge.

Club999 uses collected personal data solely for legitimate and necessary purposes in operating our services. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying, and managing your Club999 account securely.
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as winnings withdrawals in Malaysian Ringgit (RM).
• Identity Verification (KYC): Ensuring compliance with anti-money laundering (AML) regulations and verifying that members are 18 years of age or older.
• Customer Support: Responding to enquiries, resolving disputes, and providing technical assistance to members.
• Platform Security: Detecting and preventing fraud, unauthorised access, game manipulation, and other unlawful activities.
• Service Improvements: Analysing usage patterns to improve user experience, platform performance, and game variety.
• Marketing Communications: Sending information about promotions, bonuses, and the latest offers – only if you have consented to receive such communications.
• Responsible Gaming: Monitoring betting behaviour to identify members who may need responsible gaming support.
• Legal Compliance: Fulfilling legal obligations under PDPA 2010 and other applicable regulations in Malaysia.

Club999 does not sell, rent, or trade your personal data to any third party for marketing purposes. Information is only shared in the following limited circumstances:

• Trusted Service Providers: Technical partners such as game providers, payment gateways, and cloud services involved in the operation of the Club999 platform – all bound by strict confidentiality agreements.
• Legal Requirements: When required by Malaysian authorities, courts, or relevant regulatory bodies through a lawful order.
• Fraud Prevention: Sharing information with approved identity verification and fraud prevention providers to protect the Club999 ecosystem.
• Business Transfers: In the event of a merger, acquisition, or sale of company assets, your data may be transferred to the new entity subject to an equivalent privacy policy.

The security of your data is club999's top priority. We continually invest in the latest security infrastructure to ensure your personal data remains protected at all times.

Technical security measures we have in place:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data at rest using AES-256 algorithm.
• Two-factor authentication (2FA) is available for all member accounts.
• Round-the-clock security monitoring by our cybersecurity team.
• Regular security audits conducted by independent third parties.
• Strict access controls – only authorised personnel may access members' personal data.
• Regular secure, encrypted data backups.

Data retention period:

• Active account data: Retained for as long as the account remains active and for 7 years following account closure for legal compliance purposes.
• Financial transaction logs: 7 years, in accordance with Malaysian legal requirements.
• Customer support communication logs: 3 years from the date of interaction.
• Non-identifiable analytics data: May be retained for an extended period.

As a user protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by club999:

To exercise any of the rights above, please contact us by email at support@club999.fun with the subject line "PDPA Request – [Request Type]". We will process your request within 21 business days of receipt. Identity verification may be required before your request is processed.

Club999 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

You can manage your cookie settings through your browser options or via the cookie settings panel available at the bottom of the club999 website. Disabling certain cookies may affect the functionality of some platform features.

Club999 strictly prohibits the use of the platform by individuals under the age of 18. We do not knowingly collect or process the personal data of minors.

Steps we take to prevent underage access include:

• Age verification during the new account registration process.
• Identity document verification (MyKad or passport) during the KYC process.
• Ongoing monitoring to identify accounts that may belong to underage individuals.
• Cooperation with parents or guardians who report usage by a child under their care.

The Club999 platform uses a number of trusted third-party services to ensure smooth and secure operations. These services maintain their own privacy policies, separate from ours.

Categories of third parties that may process your data in a limited capacity:

• Payment Gateways: Payment service providers handling Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX transactions. They are bound by PCI-DSS security standards.
• Game Providers: Live casino game studios, slots, and table game providers that supply gaming content to the club999 platform.
• Analytics Services: A web analytics platform that helps us understand user behaviour in an aggregated and anonymous manner.
• Identity Verification Services: KYC providers who assist us in verifying member identities in accordance with legal requirements.

Club999 is not responsible for the privacy practices of third-party sites you may access via external links. We encourage you to read the privacy policy of every service you use.

Club999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operations, legal requirements, or industry best practices.

When material changes are made to this Privacy Policy, we will:

1. Updating the "Last Updated" date at the top of this page.
2. Displaying clear notifications on the club999 platform regarding such changes.
3. Sending notifications to your registered email address for any significant changes.
4. Providing at least 14 days' notice before changes take effect, unless the changes are required by law to be implemented immediately.

Your continued use of the club999 platform after any amendments take effect will be considered your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding how Club999 handles your personal data, please contact our Data Privacy Officer:

• Email: support@club999.fun (Subject: Privacy Enquiry)
• Live Chat: Available 24 hours a day, 7 days a week via the Club999 platform
• Target Response Time: 3 business days for general enquiries; 21 business days for formal requests under PDPA

For more information on your rights and responsibilities as a Club999 member, please also refer to Terms & Conditions and the Responsible Gaming us.