Payung 99 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Members

This Privacy Policy is published by Payung 99, which operates an online entertainment platform in payung99.biz. This document explains how we collect, process, store, share, and protect your personal data when you use any of our services.

This Policy applies to all users of the Payung 99 – whether you are browsing our website without registering, in the process of registering, or an active member using slots, Live Casino, Sports Betting, lottery, or any other services we offer.

By using the platform Payung 99, you acknowledge that you have read, understood, and agree to the terms set out in this Privacy Policy. This Policy should be read together with Terms & Conditions which forms part of the agreement between you and Payung 99.

Payung 99 collects your personal data through several means. Below is a detailed explanation of the types of data collected:

Data we do not collect: Payung 99 does not collect your full credit card numbers, bank PINs, or banking passwords. All financial transactions are processed directly through secure payment gateways (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks) without any such sensitive information passing through our servers.

Payung 99 uses collected personal data solely for legitimate and stated purposes. We never use your data in ways you would not expect. The following outlines our data use purposes in detail:

• Account Management: Creating, managing, and maintaining your member account on the Payung 99 platform.
• Identity Verification (KYC): Verifying that you meet the minimum age requirement (18 years and above) and other eligibility criteria in accordance with Malaysian legal requirements.
• Transaction Processing: Securely and accurately processes all deposits and withdrawals in MYR via local Malaysian payment methods.
• Security & Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, and platform abuse.
• Customer Support: Providing technical support and responsive customer service in Bahasa Malaysia.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offering assistance to members who need it.
• Marketing (with consent): Sending offers, promotions, and updates about new games at Payung 99 – only where you have given explicit consent.
• Platform Improvement: Analysing usage data in aggregate (without individual identification) to improve user experience and platform performance.

Payung 99 expressly affirm that we does not sell, rent, or trade members' personal data with any third party. However, in the context of legitimate service operations, your data may be shared in the following limited scenarios:

• Licensed Payment Providers: Required transaction data is shared with licensed Malaysian payment gateways (Touch 'n Go eWallet, GrabPay, DuitNow, FPX) to process your deposits and withdrawals.
• Game Providers: Minimum session data required to be shared with licensed game providers (Pragmatic Play, PG Soft, Evolution Gaming) to ensure games function correctly.
• Malaysian Authorities: When required by law, court order, or directive from Malaysian enforcement agencies such as Bank Negara Malaysia, PDRM, or SPRM.
• Auditors & Professional Advisors: Lawyers, accountants, and auditors bound by strict professional confidentiality obligations.
• Technical Service Providers: Cloud hosting companies and analytics services that process data solely on Payung 99's instructions and are subject to strict data processing agreements.

All third parties who receive your data from Payung 99 are required to sign strict data confidentiality agreements and adhere to security standards equivalent to or higher than our own.

Payung 99 continually invests in cybersecurity infrastructure to keep your data protected at all times. Our key security measures include:

• End-to-End Encryption: All data in transit is protected by TLS 1.3 with 256-bit SSL certificates. Data stored on our servers is also encrypted using AES-256.
• Two-Factor Authentication (2FA): We encourage (and for certain transactions, require) two-factor authentication to protect your account from unauthorised access.
• 24/7 Monitoring: A real-time threat monitoring system operates around the clock to detect and block any intrusion attempts or unauthorised access.
• Periodic Penetration Testing: Independent security auditors conduct penetration testing every quarter to identify and address any vulnerabilities.
• Staff Training: All staff Payung 99 undergo comprehensive data security training and are required to sign confidentiality agreements.
• Incident Response Plan: We have clear procedures in place to respond to any data breach, including an obligation to notify affected members within 72 hours.

While we take all reasonable precautions, no security system is entirely risk-free. You also play an important role in protecting your account by using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to us.

Payung 99 uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. The following are the types of cookies we use:

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the platform. Payung 99. We do not use third-party cookies for advertising purposes.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data at Payung 99:

Payung 99 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required under Malaysian law. Our retention guidelines are as follows:

• Active Account Data: Retained for the duration of the active account and for 7 years after account closure to comply with Malaysian legal requirements (including anti-money laundering obligations).
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with the Financial Services Act 2013 and Malaysia's LHDN requirements.
• Security Logs: System logs and security logs are retained for 1 year for incident investigation purposes.
• Support Communication Data: Customer support interaction records are retained for 3 years.
• Analytics Data: Anonymised usage data may be retained indefinitely for long-term analytics purposes.

When data is no longer needed, Payung 99 will securely delete or destroy that data using methods that ensure it cannot be recovered.

Payung 99 reserves the right to review and update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data.

When material changes are made to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this document.
• Displaying a clear notice on the platform's homepage Payung 99 for a minimum of 14 days.
• Sending email notifications to all registered members if the changes are significant.

Continued use of the platform Payung 99 after the changes take effect means you accept the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or complaints about how Payung 99 handles your personal data, or if you wish to exercise any of the rights set out in this Privacy Policy, please contact us through the following channels:

We are committed to addressing all privacy-related enquiries seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.