Privacy Policy am99 —
Your Personal Data Protection

Policy Introduction & Scope

This Privacy Policy is published by am99 ("Company", "we") to describe our personal data processing practices to all users and members of the am99.pro platform ("you"). This document applies to all information we collect through the am99.pro website, the am99 mobile app, and any related interactions between you and our platform.

By registering as an am99 member or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

Types of Personal Data Collected

2.1 Data You Provide Directly

During registration and use of the am99 platform, we collect personal data that you provide directly. This data is required to enable us to deliver a secure service and comply with applicable legal requirements:

• Identity Information: Full name, date of birth, Malaysian identity card number (MyKad), identity card image
• Contact Information: Email address, mobile phone number, current residential address
• Financial Information: Bank account number, bank name, registered digital wallet details in your name
• Security Information: Password (stored in hashed form), security questions, two-factor authentication settings
• KYC Documents: Copies of identification documents, proof of address, and any supporting documents required for identity verification

2.2 Automatically Generated Data

While you use the am99 platform, our systems automatically record certain types of technical and behavioural data necessary for security, service improvement, and legal compliance purposes:

• IP address and geographic location information (country/state level)
• Device type, operating system and web browser version
• Game activity logs and transaction timestamps
• Pages visited, session duration, and navigation patterns within the platform
• Cookie data and similar tracking technologies
• Referrer information — the page that brought you to am99.pro

2.3 Data from Third Parties

In certain circumstances, we receive information from trusted third parties for verification and security purposes. This includes identity verification information from licensed KYC providers, transaction information from payment processors such as FPX and digital wallet providers, and blacklist screening information from financial fraud prevention bodies.

Personal Data Usage Purpose

Am99 uses your personal data solely for legitimate and reasonable purposes. We do not process your data for any other purpose without your prior consent. The following table outlines the primary purposes of our data processing:

Data Sharing & Disclosure

4.1 Core Principles

Am99 does not sell, rent, or disclose your personal data to any third party for marketing or commercial purposes. We only share data in limited situations and with parties necessary to deliver our services to you.

4.2 Parties That May Receive Your Data

In the course of operating am99, your data may be shared with the following parties, but only to the extent necessary for the stated purposes:

• Payment Processors: Banking institutions and digital wallet providers used to process your deposits and withdrawals. This disclosure is necessary to complete financial transactions.
• KYC Verification Providers: Licensed identity verification companies that assist us in validating the authenticity of documents and member identities in accordance with legal requirements.
• Game Providers: Third-party gaming software providers that supply game content may receive your unique account number (not your full personal data) for the purpose of game session management.
• Authority: Government agencies, regulatory bodies, or law enforcement authorities where disclosure is required by applicable law.
• Professional Advisors: Lawyers, accountants or auditors bound by professional confidentiality obligations in specific situations.

Cookies & Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit am99.pro. They allow our platform to remember your preferences, maintain your login session, and deliver a smoother, more secure experience. Without certain cookies, the am99 platform will not function properly.

5.2 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies: Collects information on how you use the platform to help us improve the user experience. All data is collected anonymously.
• Functional Cookies: Remembers your preferences such as language, display settings and login details for a more convenient experience.
• Analytics Cookies: Helps us understand overall platform usage patterns for continuous improvement.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality of the am99 platform.

Data Retention Period

Am99 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law. The following are general guidelines for our retention periods:

• Active Account Data: Throughout the period your account is active and for a reasonable period following account closure.
• Financial Transaction Records: Minimum seven (7) years after a transaction occurs, in line with Malaysian financial legal requirements.
• KYC Documents: Minimum five (5) years after account closure or as required by the relevant regulatory body.
• Support Communication Logs: Two (2) years from the date of last interaction.
• Analytics & Technical Data: Up to twelve (12) months, after which it is anonymised or deleted.

Once the retention period expires, am99 will securely delete or anonymise your data using methods that meet industry standards.

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and am99's internal policies, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete data.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to our legal obligations.
• Right to Object: You may object to the processing of your data for specific purposes such as direct marketing.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict how we process your data.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another service provider.

To exercise any of the above rights, please contact the am99 support team via live chat, available 24 hours a day, 7 days a week. We will process your request within 30 working days from the date of receipt.

Data Security

Am99 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure. Key security measures we practise include:

• 256-bit SSL/TLS encryption for all data transmissions
• Encryption of sensitive data stored in databases using industry-standard algorithms
• Two-factor authentication (2FA) for member account and internal system access
• Continuous 24/7 security monitoring and intrusion attempt detection
• Regular penetration testing by independent security experts
• Cybersecurity awareness training for all am99 staff
• Tested incident response procedures to ensure rapid action in the event of a data breach

Children's Privacy

The am99 platform is strictly for individuals aged 21 and above. We do not knowingly collect personal data from minors. Should we discover that a child's data has been collected without parental or guardian knowledge or consent, we will take immediate steps to delete that data and close the relevant account.

If you believe that your child or a minor has registered on our platform, please contact the am99 support team immediately.

Policy Amendments & Contact Us

Am99 reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, technology, or legal requirements. Any significant amendments will be communicated to members via their registered email or in-platform notification before the changes take effect.

The latest version of this Privacy Policy is always available on this page. The date of the last update is stated at the top of the document. Continued use of the am99 platform following any amendments constitutes your acceptance of the revised terms.

For any enquiries, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the am99 Data Privacy Officer through our support team, who are available at all times.