Privacy Policy 99 Dragon – Your Personal Data Protection in Malaysia

This Privacy Policy is published by 99 Dragon ("we", "platform", or "99 Dragon") and applies to all users who access or use our platform, including the website 99dragon.xyz and all related services. This document outlines our data collection and processing practices in accordance with the provisions of Malaysia's Personal Data Protection Act (PDPA) 2010.

99 Dragon operates as an online entertainment platform offering slots, live casino, poker, table games, badminton, virtual sports, and a variety of other games for Malaysian users. In the course of providing these services, we collect certain personal information necessary to ensure the platform runs smoothly and securely.

We are committed to protecting your privacy and ensuring that all information you provide is handled with complete integrity and transparency. If you have any questions after reading this policy, do not hesitate to reach out to us through the channels listed in Section 11.

99 Dragon only collects information that is genuinely necessary to deliver a safe, fair, and fully functional service. No excess data is collected without a clear and legitimate purpose.

Information you provide directly:

• Registration information: Your full name, active phone number, email address, and the password you set when registering your 99 Dragon account;
• Identity verification (KYC) information: A copy of your identity card (MyKad), your identity card number, and a verification selfie — collected only when required for withdrawals above a certain threshold or for account verification;
• Payment information: Digital wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) and bank account numbers for FPX or DuitNow — stored securely to process deposits and withdrawals;
• Support information: The content of any messages, complaints, or enquiries you submit to the 99 Dragon customer support team.

Automatically collected information:

• Usage data: Games played, bet amounts, transaction history, session duration, and general gameplay patterns;
• Technical data: IP address, device type, operating system, web browser and version, screen resolution;
• Cookie data: Session data, language preferences, last-used settings, and platform usage analytics — see Section 7 for more details.

Every piece of data we collect has a specific and legitimate purpose. 99 Dragon does not use your data for purposes unrelated to the services we provide. Below is a complete list of how we use your information:

• Account management: Creating and maintaining your account, verifying your identity, processing logins, and keeping your account secure at all times;
• Transaction processing: Processes all deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks and FPX, and handles all withdrawal requests promptly and accurately;
• Gaming services: Providing access to all games on the 99 Dragon platform including slots, live casino, poker, roulette, and table games, as well as storing your game history and statistics;
• Customer support: Responding to enquiries, resolving complaints, and providing technical assistance via live chat, WhatsApp, and email;
• Promotions and bonuses: Managing eligibility and payouts for bonuses, cashback, competition prizes, and other special offers you qualify for;
• Security and fraud prevention: Detect and prevent suspicious activity, duplicate accounts, bonus abuse, and any activity that violates our Terms & Conditions;
• Legal compliance: Fulfil applicable legal obligations, including reporting requirements to relevant authorities where necessary;
• Platform improvements: Analyses usage patterns on an aggregate basis (not at an individual level) to improve the design, performance and content of the 99 Dragon platform.

99 Dragon does not sell, rent or trade your personal information to any third party for marketing or commercial purposes. Full stop. This is our fundamental commitment to your privacy.

However, in the course of running the platform, there are limited situations in which your data may be shared with specific parties:

• Gaming service providers: Partners such as Evolution Gaming, Pragmatic Play, PG Soft and other game providers receive only the minimum game data necessary to deliver games to you — they are bound by strict confidentiality agreements;
• Payment processors: Payment gateways used to process transactions via Touch 'n Go eWallet, GrabPay, DuitNow, and FPX receive the necessary transaction information — all these processors comply with international financial security standards;
• Authorities: In cases required by Malaysian law, such as a court order or official request from an enforcement agency, 99 Dragon will disclose the necessary information;
• Independent audit: Third-party auditors conducting security reviews and RNG audits may access limited system data within the scope of their work — all subject to comprehensive confidentiality agreements.

In all of the sharing situations described above, 99 Dragon ensures that the receiving parties are bound by confidentiality and security obligations equal to or stricter than those we apply ourselves.

99 Dragon continually invests in the latest security infrastructure to ensure your data is always protected against unauthorised access, loss, alteration, or accidental disclosure.

Technical security measures we have implemented:

• 256-bit SSL Encryption: All communications between your web browser or app and 99 Dragon's servers are protected by 256-bit SSL/TLS encryption — the same standard used by Malaysia's leading banks;
• Stored data encryption: Your password is never stored in plain text — we use one-way hashing with a unique salt for every account;
• Multi-layered access controls: Only designated staff who require access to your data in order to perform their authorised duties are permitted to do so — all access is logged and monitored;
• 24/7 security monitoring: Automated monitoring systems run around the clock to detect anomalies, intrusion attempts, and suspicious activity;
• Regular security audits: The 99 Dragon platform undergoes regular third-party security audits to identify and address any potential vulnerabilities;
• Data backup: Critical data is securely and regularly backed up to ensure service continuity and protect against accidental data loss.

That said, no security system is 100% foolproof. You also play an important role in protecting your account by using a strong password, keeping your login credentials private, and logging out after each session — especially on shared devices.

The Personal Data Protection Act (PDPA) Malaysia 2010 grants you certain rights regarding the personal information held by 99 Dragon. We respect and facilitate the exercise of all these rights.

To exercise any of the rights above, please contact the 99 Dragon Data Privacy Officer by email at support@99dragon.xyz specifying the right you wish to exercise. We will process your request within 21 working days.

The 99 Dragon platform uses cookies and similar tracking technologies to ensure the platform functions correctly, remember your preferences, and help us understand how users interact with our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled — without them, the platform cannot function properly;
• Preference Cookies: Remembering your preferences such as language, display settings, and last login details so you don't have to reconfigure them every time;
• Analytics Cookies: Helps us understand which pages are visited most frequently, how long users spend in each section and how they navigate — all data is aggregated and does not identify individuals;
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect the integrity of your session.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the 99 Dragon platform. For guidance on managing cookies in your browser, refer to your browser's help section.

99 Dragon does not retain your personal data indefinitely. Each category of data has a retention period appropriate to the purpose for which it was collected and the applicable legal requirements.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to any individual. The deletion process follows established procedures to ensure the data is permanently unrecoverable.

The 99 Dragon platform is strictly for adult users aged 18 and above. We do not knowingly collect, process, or store any personal information from individuals under the age of 18.

Protective measures we have in place:

• The registration process requires age verification — users are required to confirm that they are 18 years of age or older;
• All 99 Dragon marketing communications do not target individuals under the legal age;
• Should we find that an individual under the age of 18 has successfully registered, the account will be closed immediately and all associated data will be deleted;
• We encourage parents and guardians to use appropriate parental control software to prevent children from accessing online gambling platforms.

99 Dragon reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to our services. The latest version of the Privacy Policy will always be available on this page, along with the exact "Last Updated" date.

How we notify you of significant amendments:

• A prominent notice within the 99 Dragon platform upon your first login after an amendment is published;
• Email notification to the address registered to your account for amendments that materially affect your privacy rights;
• Update the "Last Updated" date at the top of this document.

Your continued use of the 99 Dragon platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your data in accordance with the procedure set out in Section 6.

If you have any enquiries, concerns, or complaints regarding how 99 Dragon handles your personal data, we encourage you to reach out to us directly. We are committed to addressing every enquiry seriously and within a reasonable timeframe.

You can reach the 99 Dragon Data Privacy Officer through the following channels: