Privacy Policy S99 – Your Data Protection

1 Introduction

Welcome to the official Privacy Policy of S99. This document outlines the data protection practices of S99 – an online entertainment platform operating under the official domain s99.bz. This policy applies to all users who access our platform via web browser, iOS and Android mobile apps, or any other compatible device.

S99 cares about your privacy. We understand that user trust is the foundation of this platform, and one of the best ways to maintain that trust is to be completely transparent about how we handle your personal data. Every word in this document is written with the intent to give you a clear understanding — not merely to satisfy legal requirements.

By using the S99 platform, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us regarding further action on your account.

2 Personal Data We Collect

S99 collects various types of information depending on how you interact with our platform. The following are the main categories of data we collect:

A. Registration & Identity Information

• Full name: As stated on your official identification document.
• Date of birth: For minimum age verification of 18 years.
• National identity card (MyKad) or passport number: Collected during the KYC process.
• Residential address: Permanent or valid mailing address.
• Phone number: An active Malaysian number for OTP verification.
• Email address: For account communications and important notifications.

B. Financial Information

• Bank account number and bank name for deposit and withdrawal processing.
• E-wallet details (Touch 'n Go, GrabPay, Boost) if used as a payment method.
• Records of all deposit and withdrawal transaction history on the platform.
• Cryptocurrency wallet information where transactions are conducted via USDT or Bitcoin.

C. Usage & Technical Data

• IP address, browser type, and device operating system.
• Activity log data: login times, pages visited, games played, and session duration.
• Mobile device information including device model and operating system version for app users.
• General location data (country/state level) based on your IP address.

3 How We Use Your Data

Every piece of data collected is used for specific and legitimate purposes. S99 does not use your data for any purpose other than those stated below without obtaining additional consent from you:

S99 does not use your personal data for automated profiling that materially affects your rights without human involvement in the decision-making process.

4 Data Sharing With Third Parties

S99 does not share users' personal data with external parties arbitrarily. Data sharing only occurs in the following situations and with appropriate safeguards in place:

• Payment service providers: Information required to process deposits and withdrawals is shared with licensed payment providers bound by strict data protection agreements.
• Game software providers: Basic game session data is shared with game software providers for technical integration and game fairness auditing purposes.
• KYC service providers: Identity documents are shared with licensed identity verification platforms to meet anti-money laundering (AML) compliance requirements.
• Relevant authorities: S99 will disclose the necessary information to law enforcement agencies or regulatory bodies when required by court order or applicable law.
• Independent auditors: De-identified or aggregated data may be shared with auditors for security and compliance audit purposes.

5 Data Storage & Security Measures

S99 invests seriously in security infrastructure to ensure user data remains protected at all times. The following are the key technical and organisational measures we implement:

• Data encryption in transit: All communications between your device and S99 servers are protected by TLS 1.3, the latest industry-recognised encryption protocol.
• Data encryption at rest: Databases storing user information are protected with AES-256 encryption — the same standard used by global banking institutions.
• Strict access control: Only S99 staff with specific authorisation and who have undergone background checks may access user data, and every access is automatically logged.
• Two-factor authentication (2FA): All S99 internal systems require 2FA for access, and users are strongly encouraged to enable 2FA on their accounts.
• Regular security audits: S99 conducts regular penetration testing and independent security audits to identify and address any vulnerabilities.
• 24/7 monitoring: An automated threat detection system monitors suspicious activity around the clock and will trigger immediate alerts to our security team.

Data Retention Period:

• Active account data: Retained for the duration of the active account and 5 years after account closure (in accordance with Malaysia's AML legal requirements).
• Financial transaction records: Retained for a minimum of 7 years for tax audit and financial compliance purposes.
• Technical activity logs: Retained for 90 days then automatically deleted.
• Support communication records: Retained for 2 years after case resolution.

6 Cookies & Tracking Technologies

S99 uses cookies and similar tracking technologies to enhance the user experience, ensure session security, and understand how users interact with our platform.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session management. Cannot be disabled.
• Performance Cookies: Collects anonymous data on how pages are used to help us improve the platform. This data is aggregated and cannot be traced to any individual.
• Functional Cookies: Stores user preferences such as language, display settings and saved login information (if enabled).
• Security Cookies: Helps detect and prevent fraudulent activity, CSRF attacks and unauthorised access.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the S99 platform. For more information on managing cookies, refer to your browser's help guide.

7 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles, you have the following rights regarding your personal data held by S99:

To exercise any of the above rights, contact the S99 data protection team via our support email. We will process your request within 14 business days. For complex requests, this period may be extended to up to 30 days with prior notice to you.

8 Children's Privacy

The s99 platform is exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we determine that we have collected data from an individual under the age of 18, we will take immediate steps to delete all such data and close the associated account. Parents or guardians who believe their child has registered on S99 are urged to contact our support team immediately.

9 Cross-Border Data Transfers

In the course of platform operations, certain user data may be transferred to servers located outside Malaysia. This may occur in the following contexts:

• Use of internationally certified cloud services for platform hosting and data backup.
• Integration with international game software providers that requires session data exchange.
• Use of global-standard KYC and anti-fraud platforms for identity verification.

All cross-border data transfers are conducted with protections equivalent to Malaysia's PDPA standards. We ensure that every data transfer destination maintains an adequate level of data protection through legally binding data transfer agreements.

10 Privacy Policy Amendments

S99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform improvements. Any material amendments will be communicated to users through the following means:

• In-platform notification upon your next login after the amendment takes effect.
• An email will be sent to your registered address at least 7 days before the effective date of any material amendments.
• Prominent notice on the s99.bz website homepage for a minimum period of 14 days.

The last updated date is always displayed at the top of this document. Continued use of the S99 platform after the effective date of any amendment constitutes acceptance of the updated terms.

11 Contact Us

For any enquiries, concerns, or requests relating to this Privacy Policy or your personal data, please contact the S99 Data Protection Officer (DPO) through the following channels:

• Data Protection Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 directly from the S99 platform — the fastest way to get an immediate response.
• Official Telegram: Follow S99's official channels for the latest announcements and updates.

The standard response time for privacy-related enquiries is within 3 business days. For formal data rights requests, please state the type of request and your s99 account number in your message to expedite the process.