Privacy Policy u99 —
Malaysia Player Data Protection

Welcome to the u99 Privacy Policy. This document outlines our commitment to protecting your personal information as a registered player or visitor of the u99 website at https://u99.ad.

This privacy policy applies to all information collected through the u99 website, the u99 mobile app, customer support services, and all other interaction channels between you and our platform. By registering or continuing to use u99 services, you consent to the collection and use of data as described in this document.

U99 collects your personal data through two main methods: directly when you provide information to us, and automatically while you use our platform.

We do not collect sensitive data such as medical information, religious beliefs, or political views unless required by law. All data collected is limited to what is strictly necessary for the stated purposes.

U99 uses your personal data for legitimate and transparent purposes. The following are the primary purposes for which that data is used:

• Account Management: Create, verify and manage your player account, including the required KYC process.
• Transaction Processing: Process deposits, withdrawals and all financial activity in your account securely and accurately.
• Service Delivery: Gives you access to all games, promotions and platform features on u99 that you are eligible for.
• Security and Fraud Prevention: Detect and prevent fraudulent activity, money laundering and platform abuse.
• Legal Compliance: Meet regulatory obligations including mandatory AML (Anti-Money Laundering) and KYC requirements.
• Service Improvement: Analyse usage patterns to improve the user experience and develop relevant new features.
• Service Communications: Send important notices related to your account, transactions, security updates and policy changes.
• Targeted Marketing: Send promotional offers and bonuses tailored to your interests — only if you have opted in to receive them.

U99 does not sell or trade player personal data. However, there are limited situations where we need to share certain information with trusted third parties:

• Payment Service Providers: Required transaction details are shared with licensed payment processors to handle your deposits and withdrawals.
• Game Software Providers: Minimal game data is shared with third-party game providers to ensure games function correctly.
• Regulatory Authority: u99 will disclose information to the relevant authorities when required by law or court order.
• Identity Verification Services: KYC data is shared with recognised identity verification service providers for verification purposes only.
• Analytics Partners: Aggregated and anonymised data is shared with analytics providers to help us understand platform usage patterns.

All third parties receiving u99 player data are bound by strict confidentiality agreements and are required to handle that data in accordance with security standards equivalent to or exceeding those of u99.

The u99 website and app use cookies and similar tracking technologies to enhance your experience and ensure the platform runs smoothly.

• Essential Cookies: Required for core platform functions such as session login, security, and game stability. These cookies cannot be disabled.
• Performance Cookies: Collect data on how you use the website to help us identify and resolve technical issues.
• Functional Cookies: Remember your preferences such as language, time zone and display settings to deliver a more personalised experience.
• Analytics Cookies: Helps us understand which pages are visited most and how users navigate the platform, so we can make improvements.

You can manage or block cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the u99 platform. For the best gaming experience, we recommend keeping cookies enabled.

Protecting your personal data is u99's highest priority. We implement multiple layers of technical and organisational safeguards to keep your information secure:

• 256-bit SSL Encryption for all data transmissions between your device and u99 servers.
• Role-Based Access Control (RBAC) — only staff with a legitimate business need may access player data.
• 24/7 Security Monitoring by a dedicated cybersecurity team that monitors for any suspicious activity.
• Regular Security Audits by independent third parties to identify and address any system vulnerabilities.
• Two-Factor Authentication (2FA) available for all player accounts as an additional layer of protection.
• Encrypted Data Backups stored across multiple locations to ensure service continuity.

While we take all reasonable precautions, no security system can guarantee 100% protection. We encourage players to play an active role in keeping their accounts secure by using strong passwords and not sharing login credentials.

As a u99 player, you have the following rights regarding your personal data. We are committed to fulfilling every valid request within a reasonable timeframe:

To submit any request regarding your data rights, please contact the u99 privacy team via live chat within the platform or our support email. Requests will be processed within 30 calendar days.

U99 retains your personal data only for as long as necessary to fulfil the stated purposes or as required by applicable law.

• Active Account Data: Retained for the duration your account is active, plus the mandatory period following account closure.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysian financial and tax regulatory requirements.
• KYC Records: Retained for a minimum of five (5) years after the business relationship ends, in accordance with AML requirements.
• Support Communication Logs: Retained for three (3) years for reference and dispute resolution purposes.
• Anonymous Analytics Data: Can be stored indefinitely as it contains no personally identifiable information.

Once the retention period expires, data will be securely deleted or permanently anonymised using industry-recognised methods.

As a global online platform, your personal data may be processed or stored on servers located outside Malaysia. u99 ensures that all international data transfers are carried out with adequate safeguards.

All cross-border data transfers are protected through the following mechanisms:

• Standard contractual clauses approved by the relevant regulatory authority.
• Data protection assessment of the recipient country before any transfer is made.
• Binding data processing agreements with all cloud service and infrastructure providers.

U99 services are exclusively for individuals aged 18 and above. u99 does not knowingly collect, process or store any personal data from individuals under the age of 18.

Should we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect their child has registered on the u99 platform are advised to contact our support team immediately.

U99 reserves the right to update or amend this privacy policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements to our services.

When significant changes are made to this policy, we will notify registered players via email or a prominent notice on the platform at least 14 days before the changes take effect. Continued use of the u99 platform after the effective date of such changes constitutes your acceptance of the updated privacy policy.

If you have any questions, concerns, or complaints regarding how u99 handles your personal data, our privacy team is ready to assist. We are committed to responding within two (2) business days for general enquiries and 30 calendar days for formal data rights requests.

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the u99 platform.
• Support Email: Contact us at [email protected] for privacy enquiries that require a written response.
• Formal Written Request: For formal data rights requests, please include your account number and a copy of your identification document with your request.

U99 takes every privacy complaint seriously. If you are not satisfied with our response, you have the right to refer your complaint to the relevant data protection authority in your jurisdiction.