Privacy Policy Club 999 —
Member Personal Data Protection

Welcome to the club 999 Privacy Policy. This document is the official agreement between you as the user and club 999 as the provider of an online entertainment platform at club999.vin. By using our platform, you agree that your personal information will be collected and processed in accordance with the terms stated here.

Club 999 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We care deeply about every member's privacy and are committed to ensuring that the data we hold is managed with the highest standards of security and transparency. Your trust is our most valued asset, and we will never act in any way that could compromise it.

This Privacy Policy applies to all users of the Club 999 platform, including website visitors, registered members, and anyone who interacts with our services via mobile app, website, or any of our other official channels. If you do not agree with any part of this policy, please discontinue use of our platform immediately.

Club 999 collects various types of information to provide every member with a secure, seamless, and personalized experience. The information we collect falls into several main categories:

All information we collect is obtained directly from you during the registration process, while using the platform, or through your interactions with our support team. We do not purchase or acquire personal data from external sources without your knowledge.

Every piece of data we collect is used for a specific and legitimate purpose. club 999 will not use your data for purposes unrelated to the provision of our services without obtaining your separate consent. The following are the primary uses of the data we collect:

• Account management and verification: Processing registrations, verifying identity through the KYC process, and ensuring every account is legitimate and belongs to the correct individual.
• Financial transaction processing: Processing deposits, withdrawals, and all other financial transactions securely and promptly through trusted payment providers.
• Security and fraud prevention: Monitoring account activity to detect any suspicious behaviour, protecting the platform from unauthorised access, and ensuring the integrity of gameplay is consistently maintained.
• Service communications: Sending important account-related notifications, security updates, transaction alerts, and relevant promotional information (subject to your communication preferences).
• Platform improvement: Analysing usage patterns to improve the user experience, fix technical bugs, and develop better new features for our members.
• Legal compliance: Fulfilling reporting and compliance obligations required by Malaysia's regulatory bodies and laws, including Anti-Money Laundering (AML) requirements.

Club 999 does not sell, rent, or disclose your personal information to third parties for their own commercial purposes. However, there are limited situations where we need to share certain data with trusted parties to ensure the smooth and secure operation of our services:

• Payment service providers: Required financial data is shared with licensed and trusted payment providers such as FPX processors, TNG eWallet, and online banking platforms to securely process deposit and withdrawal transactions.
• Technology service providers: Companies that support our technical operations — including cloud computing services, digital identity verification, and customer support systems — may have limited access to the data necessary to carry out their tasks only.
• Regulatory bodies and law enforcement: Club 999 will disclose required information when mandated by Malaysian law, a valid court order, or a request from a competent authority.
• Game providers: Minimal technical information may be shared with game software providers for platform integration and game result verification purposes. These providers are bound by strict confidentiality agreements.

Protecting your personal data is a responsibility we take extremely seriously. club 999 continuously invests in the latest cybersecurity infrastructure to keep your information safe at all times — whether in transit or in storage.

• 256-bit SSL Encryption: All data transmitted between your device and club 999 servers is encrypted using industry-standard TLS/SSL protocols. This means no third party can intercept or eavesdrop on your data during transmission.
• Two-factor authentication (2FA): Members are encouraged to activate the 2FA feature, which adds an extra layer of protection to your account — even if your password is compromised, unauthorized access remains virtually impossible.
• 24/7 Monitoring: Our security team monitors platform activity continuously around the clock, using automated threat detection systems capable of identifying and responding to suspicious activity in real time.
• Limited data access: Only authorized personnel with a legitimate business need may access member personal data. All access is audited and recorded.
• Fund segregation: Member funds are held in accounts completely separate from the company's operating accounts, providing additional protection for your balance.

While we take all reasonable precautions, no security system can be guaranteed 100% safe. We therefore also encourage you to take personal measures such as using a strong password and never sharing your login credentials with anyone.

The club 999 website uses cookies and similar tracking technologies to enhance your experience while browsing our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: These cookies are required for the platform's core functions such as login, session management, and security. Without them, the platform cannot operate properly and they cannot be disabled.
• Preference Cookies: Allowing the platform to remember your preferences such as language, display settings, and other options so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Helping us understand how members use our platform — which pages are most popular, where users spend the most time, and where they encounter difficulties. This data is used solely to improve the user experience.
• Security Cookies: Used to identify trusted devices and detect suspicious login attempts to protect your account.

You may manage or delete cookies through your web browser settings at any time. Please note that deleting or blocking certain cookies may affect the functionality of some parts of our platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by Club 999. We are committed to respecting and facilitating the exercise of these rights:

Club 999 retains your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. Once data is no longer needed, it will be securely deleted or anonymized.

• Active account data: Retained for the duration your account is active and until you request account closure.
• Financial records and transactions: Retained for a minimum of 7 years after a transaction occurs to meet Malaysian tax and AML legal requirements.
• KYC documents: Retained for 5 years after the date of business relationship termination, in line with industry compliance requirements.
• Security and technical logs: Typically retained for 12 to 24 months for security investigation and technical troubleshooting purposes.
• Support communication data: Support chat records are retained for 2 years for reference and service quality improvement.

Club 999 maintains a strict zero-tolerance policy against the participation of minors in any gambling activity on our platform. Our platform is explicitly intended for individuals aged 18 and above only.

We do not intentionally collect any personal information from children or individuals under the age of 18. Should we discover that we have inadvertently collected information from a minor, the account in question will be closed immediately and all related data will be deleted without delay.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by Club 999, our team is ready to assist you. We are committed to responding to all privacy-related inquiries within 3 business days.

You may contact our Data Protection Officer via the 24/7 live chat available on the Club 999 platform, or by emailing us at [email protected] with the subject line "Privacy Inquiry" to expedite the response process.

If you are not satisfied with the response provided, you have the right to file a formal complaint with the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital. club 999 will cooperate fully with any investigation conducted by the relevant authorities.

This Privacy Policy may be updated from time to time to reflect changes in our practices, technology requirements, or legal changes. The latest version will always be available on our website and the effective date will be stated at the top of this document. Your continued use of our platform after any changes are published constitutes your acceptance of the updated terms.