Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how s99my ("s99my", "we", "us" or "our") collects, processes, stores, shares and protects personal data obtained from users ("you", "your") of the s99my website at https://s99my.cam/ and all associated pages and services.

s99my is committed to safeguarding the privacy of every individual who uses our platform. This Policy is framed in accordance with the Malaysian Personal Data Protection Act 2010 ("PDPA 2010") and applicable Malaysian data protection regulations. Where relevant, this Policy also reflects internationally recognised privacy standards appropriate to a platform serving Malaysian adults.

By accessing or using s99my, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not consent to the terms of this Policy, you should discontinue use of the platform.

Definitions

In this Policy, the following expressions bear the meanings assigned to them below:

• "Personal Data" means any information that relates directly or indirectly to an identified or identifiable natural person, as defined in Section 4 of the PDPA 2010.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, s99my.
• "Data Processor" means any third party that processes personal data on behalf of s99my pursuant to a lawful agreement and subject to appropriate safeguards.
• "Sensitive Personal Data" means personal data consisting of information about physical or mental health, financial condition, political opinions, religious beliefs or other categories specified under PDPA 2010.
• "KYC" means Know Your Customer verification procedures used to confirm the identity, age and eligibility of s99my users.
• "Cookie" means a small data file placed on a user's device by the s99my website for functional, analytical or preference purposes.

Data Controller

For the purposes of the PDPA 2010 and this Policy, the Data Controller for personal data processed through s99my is the entity operating the s99my platform at the domain https://s99my.cam/. As Data Controller, s99my determines the purposes for which personal data is collected and the means by which it is processed.

All enquiries relating to data protection, personal data access requests and privacy complaints should be directed to the s99my Data Protection contact using the details provided in Section 16 of this Policy.

Data We Collect

s99my may collect and process the following categories of personal data, depending on how you interact with the platform and the features you access:

How We Collect Data

s99my collects personal data through the following channels:

• Direct submission — information you provide when registering an account, completing KYC verification, contacting support or responding to s99my surveys and feedback requests.
• Automated collection — technical and usage data gathered automatically when you access the s99my platform, including through cookies, server logs and analytics tools as described in Section 9.
• Third-party sources — identity and fraud-screening data received from KYC verification service providers, payment processors and anti-money-laundering compliance platforms used in connection with account registration and transaction processing.
• Payment providers — transaction confirmation and account status data received from Malaysian payment service providers including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost and GrabPay, where applicable to your chosen payment method.

Data Processing

s99my processes personal data for the following stated purposes:

• Account management — creating, maintaining and managing registered user accounts, including password resets and profile updates.
• Identity and age verification — conducting KYC checks to confirm that users are aged 21 or above and are eligible to access s99my gaming information services.
• Payment processing — facilitating MYR deposits and withdrawals, verifying payment method ownership and processing transaction records through approved Malaysian payment channels.
• Legal and regulatory compliance — meeting obligations under PDPA 2010, anti-money-laundering regulations, responsible gambling requirements and any other applicable Malaysian legislation.
• Customer support — responding to account enquiries, resolving complaints and maintaining records of support interactions.
• Platform analytics and improvement — understanding how users interact with s99my in order to improve usability, content quality and technical performance.
• Fraud prevention and security — detecting and preventing fraudulent activity, bonus abuse, multi-accounting and other security risks.
• Marketing communications — sending promotional and bonus information where you have provided consent, and facilitating opt-out on request.

Legal Basis for Processing

s99my processes personal data under one or more of the following lawful bases as recognised under PDPA 2010 and applicable Malaysian data protection principles:

• Consent — where you have given explicit, informed and voluntary consent to a specific processing purpose, such as receiving marketing communications.
• Contract performance — where processing is necessary to fulfil our obligations under the Terms and Conditions that govern your use of s99my, including account operation and payment processing.
• Legal obligation — where processing is required to comply with PDPA 2010, anti-money-laundering legislation, age-verification obligations or any other applicable Malaysian legal requirement.
• Legitimate interests — where processing is necessary for s99my's legitimate interests, such as fraud detection, platform security and analytics, provided those interests are not overridden by your fundamental data protection rights.

Data Sharing

s99my does not sell your personal data to any third party. We may share personal data with third parties only in the following circumstances:

• Payment service providers — personal and financial data shared with Malaysian payment processors and banking partners (including DuitNow operators, FPX network participants, and eWallet providers such as Touch 'n Go eWallet, Boost and GrabPay) strictly for transaction processing purposes.
• KYC and compliance providers — identity document and verification data shared with authorised third-party KYC service providers to confirm user eligibility and meet regulatory obligations.
• Technology and hosting partners — technical data shared with cloud infrastructure providers and platform service suppliers under data-processing agreements that impose equivalent privacy obligations.
• Legal and regulatory authorities — personal data disclosed to Malaysian regulatory bodies, law enforcement agencies or courts where required by a lawful order, subpoena or legal obligation.
• Anti-fraud and AML platforms — data shared with fraud prevention and anti-money-laundering screening services to protect the integrity of the s99my platform.

All third-party data processors engaged by s99my are required to implement appropriate security measures and to process personal data solely in accordance with s99my's documented instructions.

Cookies and Tracking Technologies

s99my uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit a website. The following categories of cookies may be used:

• Strictly necessary cookies — required for the basic functioning of the s99my platform, including session management, security tokens and navigation state. These cannot be disabled without affecting platform functionality.
• Performance and analytics cookies — used to collect aggregated information about how users navigate s99my, including pages visited, session duration and error events. This data helps us improve the platform experience.
• Preference cookies — used to remember settings and choices you have made, such as language preference or display options, to provide a more consistent experience on return visits.

Most web browsers allow you to control cookie settings through the browser preferences menu. Disabling non-essential cookies may affect some features of s99my but will not prevent access to core information content.

KYC and Verification Processing

s99my conducts Know Your Customer verification to confirm the identity and age of users accessing account features. KYC is a legal and regulatory requirement and also protects users from unauthorised account access and identity misuse.

During KYC, s99my or its authorised verification partner may request and process the following:

• A photograph or scanned copy of a valid government-issued identity document, such as a Malaysian MyKad, passport or other accepted form of national identification.
• A selfie or live photograph to confirm that the identity document belongs to the account holder.
• Proof of residential address, such as a utility bill or bank statement dated within a recent period.
• Proof of payment method ownership, such as a partial bank statement or screenshot confirming that the payment account is held in the user's name.

KYC documents are processed in a secure environment and are retained only for as long as required by applicable regulatory obligations. s99my does not use KYC documents for any purpose other than identity verification, age confirmation and regulatory compliance.

Data Retention

s99my retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Malaysian law. The following general retention principles apply:

• Account data and associated transaction records are retained for a period sufficient to meet legal, regulatory and dispute-resolution obligations, typically a minimum of seven years following account closure in accordance with Malaysian financial record-keeping requirements.
• KYC documents and identity verification records are retained for the period prescribed by applicable anti-money-laundering regulations, which may exceed the period of active account use.
• Technical and usage data collected through cookies and analytics is retained for the period reasonably necessary to support platform improvement and security operations, typically not exceeding twenty-four months.
• Marketing communication consent records are retained for the period during which consent is active, plus a reasonable period thereafter to demonstrate consent history if required.

Upon expiry of the applicable retention period, personal data is deleted or anonymised in a secure manner consistent with PDPA 2010 requirements.

Your Rights

Under the PDPA 2010 and applicable Malaysian data protection principles, you have the following rights in relation to your personal data held by s99my:

To exercise any of the rights above, please submit a written request to s99my using the contact details provided in Section 16. We will acknowledge your request within five (5) business days and aim to resolve it within thirty (30) calendar days, subject to any legal exemptions that may apply.

Cross-border Data Transfers

s99my primarily processes personal data within Malaysia. Where personal data is transferred to a jurisdiction outside Malaysia — for example, in connection with cloud infrastructure or KYC verification service providers — s99my takes reasonable steps to ensure that the receiving jurisdiction provides a level of data protection substantially equivalent to that required by PDPA 2010.

Such steps may include the implementation of contractual clauses, data-processing agreements or other safeguards as appropriate to the nature of the data being transferred and the destination jurisdiction.

Children and Minors

s99my is an adult gaming information platform designed exclusively for individuals aged 21 and above. s99my does not knowingly collect, process or retain personal data belonging to any person below the age of 21.

If s99my discovers or is notified that personal data has been collected from a user who is under 21, we will take immediate steps to delete that data and close the associated account. Age verification through the KYC process described in Section 10 is the primary control mechanism to prevent underage access.

If you believe that a minor has created an account on s99my, please notify us immediately using the contact details provided in Section 16. We take all such reports seriously and will investigate and respond promptly.

Policy Amendments

s99my may amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Malaysian law, regulatory guidance or the features and services available through the platform.

Where a material change is made to this Policy, s99my will make reasonable efforts to notify registered users via the email address associated with their account, or by displaying a visible notice on the s99my platform for a minimum of fourteen (14) calendar days prior to the change taking effect.

Continued use of s99my after the effective date of a Policy amendment constitutes your acknowledgement of and consent to the updated terms. The date of the most recent review is displayed in the hero section of this page. Earlier versions of this Policy are archived and available upon reasonable written request.

Contact Us

For any enquiries, requests or complaints relating to this Privacy Policy or the processing of your personal data by s99my, please contact us at the following address. Our email is presented as plain text — please copy it into your email client to send a message. Do not include sensitive document details or complete payment credentials in unsolicited correspondence.

Email: [email protected]

Subject line for data requests: Personal Data Request — [your registered email address]

s99my aims to acknowledge all privacy-related enquiries within three (3) business days and to resolve substantive data access or correction requests within thirty (30) calendar days, subject to identity verification requirements.