Privacy Policy mykad99

1 Introduction

Mykad99 ("we", "Platform") values the privacy of every member who uses our services. This Privacy Policy has been established to provide full transparency on how your personal information is collected, processed, stored, and protected while you use the mykad99 platform.

We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and are committed to keeping your information secure at all times. Every policy we uphold is designed to respect your privacy rights as a Malaysian user.

This Privacy Policy applies to all mykad99 services, including the official website, mobile app, and any related platforms operated by us. If you do not agree with any part of this policy, please stop using the platform and contact us to close your account.

2 Information We Collect

Mykad99 collects personal information from you through several means to ensure the services we offer run smoothly and securely. The types of information collected include:

We only collect information that is strictly necessary for the stated purposes. We do not collect sensitive data such as health information or religious beliefs unless specifically required to comply with relevant legal obligations.

3 How We Use Your Information

The information we collect is used responsibly for the following purposes only:

• Account Management: To create, verify, and maintain your member account on the mykad99 platform.
• Transaction Processing: To process deposits, withdrawals, and all financial transactions securely and accurately.
• KYC Verification: To fulfil Know Your Customer (KYC) identification requirements mandated by Malaysian law.
• Platform Security: To detect and prevent fraudulent activity, account abuse, and cybersecurity threats.
• Customer Support: To process member enquiries, complaints, and support requests.
• Service Communications: To send important notifications relating to your account, transactions, and security updates.
• Legal Compliance: To fulfil reporting and compliance obligations to the relevant authorities.
• Service Improvement: To analyse usage patterns in aggregate in order to improve platform quality and user experience.

We will not use your personal information for purposes other than those stated above without your prior consent, unless required by law.

4 Sharing Information with Third Parties

Mykad99 does not sell or rent your personal information to any third party. However, we share information under the following limited circumstances:

• Payment Processors: Required transaction information is shared with payment service providers such as FPX, Touch 'n Go eWallet, GrabPay, and partner banks solely for transaction processing purposes.
• Technical Service Providers: Technical partners who assist in operating our platform infrastructure are bound by strict confidentiality agreements and may only access data necessary for their designated tasks.
• Game Providers: Minimal game session data is shared with licensed game providers solely for game operation and dispute resolution purposes.
• Regulatory Body: Compliance reports and audits required by law are shared with the relevant regulatory bodies as legally required.

5 Data Security

We implement a range of technical and operational security measures to protect your personal information from unauthorised access, loss, or misuse:

• Data Encryption: All communications between the platform and our servers use TLS 1.3 encryption protocol with 256-bit SSL certificates.
• Access Controls: Access to members' personal data is restricted to staff who require it to perform their duties, subject to strict monitoring.
• Two-Factor Authentication: Two-factor authentication (2FA) is available and strongly encouraged for all member accounts to add an extra layer of security.
• Regular Security Audits: Security assessments and penetration testing are conducted periodically by independent experts.
• 24/7 Monitoring: A real-time threat detection system monitors the platform around the clock to identify any suspicious activity.
• Passwords Are Encrypted: Member passwords are stored in hashed form using a secure algorithm — we never store passwords in plain text.

6 Cookies & Tracking Technologies

Mykad99 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: To save your preferences such as language, theme, and display settings for a more personalised experience.
• Analytics Cookies: Helps us understand how members use our platform in aggregate, enabling us to make continuous improvements. This data is not linked to your personal identity.
• Security Cookies: Used to detect suspicious login activity and protect your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the mykad99 platform.

7 Data Retention & Deletion Period

Mykad99 retains your personal information for the period necessary to fulfill the purposes of data collection and to comply with legal obligations:

• Active Account Data: Retained for the duration your account remains active and for a defined period after account closure for audit and compliance purposes.
• Financial Transaction Records: Retained for seven (7) years in accordance with Malaysian financial legal requirements.
• Security Logs: Retained for 90 days for threat detection and security incident investigation purposes.
• KYC Documents: Retained in accordance with minimum requirements set by the relevant authorities.

When data is no longer needed and there is no legal obligation to retain it, mykad99 will delete or anonymise that data securely and irreversibly.

8 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal information:

To exercise any of the above rights, please contact our support team via Live Chat or the email available on the platform. We will process your request within a reasonable timeframe and provide a written response.

9 Disclosure to Authorities

Mykad99 may be required to disclose your personal information to authorities under the following circumstances:

• Valid court orders or writs issued by Malaysian judicial authorities.
• Official requests from law enforcement authorities in the course of a valid criminal investigation.
• Reporting requirements under anti-money laundering laws (AMLA) and AML/CFT obligations.
• Supervisory requirements from relevant regulatory bodies within their jurisdictional scope.

In all of the above cases, mykad99 will disclose only the minimum necessary information and will endeavour to notify you of such disclosure where permitted by law.

10 Changes to the Privacy Policy

Mykad99 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When significant changes are made:

• The "Updated" date at the top of this page will be revised to reflect the date of the most recent update.
• We will notify members of significant changes via in-account notifications or their registered email.
• For highly significant changes that affect your rights, we will request your reconfirmation before those changes take effect.

We encourage you to review this page periodically. Continued use of the mykad99 platform after changes are published constitutes your acceptance of the revised policy.

11 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly through the mykad99 platform or app — the fastest way to get an immediate response.
• Privacy Email: [email protected] (displayed as text only)
• FAQ: Visit page FAQ us for answers to frequently asked questions about privacy and data security.

We are committed to responding to all privacy-related enquiries within 14 business days. For formal complaints under the PDPA, you may also refer to the Department of Personal Data Protection Malaysia (JPDP) if you believe your privacy rights have been violated.