M99 Privacy Policy – Data Protection You Are Our Priority

1. Information We Collect

To provide all members with a safe, seamless, and satisfying experience, m99 collects several categories of personal information. This is done transparently and only for legitimate purposes. Below are the types of information we collect:

We may also collect additional information during the KYC process, such as copies of official identification documents or proof of address, to meet applicable legal compliance requirements in Malaysia.

2. How We Use Your Data

Every piece of information we collect has a clear and defined purpose. m99 uses your personal data for the following purposes:

• Create and manage your member account, including the registration process and identity verification.
• Process deposits, withdrawals, and all financial transactions accurately and securely.
• Detect and prevent fraud, money laundering, and any suspicious or unlawful activity.
• Comply with applicable legal and regulatory obligations, including reporting requirements to relevant authorities.
• Send account-related communications such as security notices, transaction confirmations, and important platform updates.
• Provide effective customer support and resolve any technical issues or enquiries you raise.
• Improve and refine the user experience based on usage patterns and member feedback.
• Send relevant promotional offers and campaign information, subject to your communication preferences.

3. Information Sharing

M99 does not sell or rent your personal data to any third party. However, there are limited situations where we need to share your information with certain parties:

• Trusted Service Providers: Third-party companies that assist us in platform operations, such as payment providers, identity verification firms, and technical infrastructure providers. All such parties are bound by strict confidentiality agreements.
• Legal Obligations: We may be required to disclose information to government authorities, regulatory bodies, or law enforcement agencies when mandated by law or court order.
• Rights Protection: In cases involving fraud, misconduct, or legal action, relevant information may be shared to protect the rights of M99 and its users.
• Business Restructuring: In the event of any merger, acquisition, or asset sale, user data may be transferred as part of the business assets, subject to the same or stricter privacy policy.

In all of the above situations, M99 ensures that only the minimum necessary information is shared, and recipients are required to handle that data to the same security standards we uphold.

4. Cookies and Tracking Technologies

The m99 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates optimally. Cookies are small text files stored on your device when you browse our website.

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Performance Cookies: Collect anonymised data on how visitors use our website to help us understand and improve platform performance.
• Functional Cookies: Remember your preferences such as language, display settings, and login information for your convenience.
• Analytics Cookies: Help us understand overall usage patterns and user behaviour for continuous improvement purposes.

You can manage your cookie preferences through your web browser. However, disabling certain cookies may affect the functionality of some features on the M99 platform.

5. Data Security

M99 continuously invests in the latest security infrastructure to ensure your personal data remains protected at all times. The security measures we implement encompass multiple layers of technical and organisational protection.

• Data encryption during transmission using SSL/TLS protocols with 256-bit key length.
• Data encryption at rest for all sensitive information such as passwords and financial details.
• Role-based access control — only staff with a legitimate business need may access user data.
• Continuous system monitoring 24 hours a day, 7 days a week to detect any suspicious activity.
• Regular security audits conducted by independent, certified third parties.
• A comprehensive incident response plan to manage any data breaches swiftly and effectively.

6. Data Retention and Deletion

M99 only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Retention periods vary by data type:

• Active account data is retained for the duration your account remains active, plus any additional period required by applicable legal and compliance obligations.
• Financial transaction records are retained for a minimum of seven (7) years in line with Malaysia's financial reporting requirements.
• Customer support communication logs are retained for three (3) years for reference and dispute resolution purposes.
• Data collected for fraud prevention purposes may be retained for a longer period where an ongoing investigation is in progress.

When your data is no longer needed, M99 will securely delete or dispose of it using methods that ensure it cannot be recovered.

7. Your Rights as a User

As an m99 user, you have certain rights regarding your personal data. m99 respects and facilitates the exercise of these rights in accordance with the Personal Data Protection Act 2010 of Malaysia.

To exercise any of the above rights, please contact the m99 support team. We will process your request within a reasonable timeframe and inform you of the action taken.

8. Children's Privacy

The m99 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors. Should we discover that information has been collected from a minor without our knowledge, we will take immediate steps to delete that data and close the relevant account.

If you believe that your child or any minor has registered an account with m99, please contact us immediately so that appropriate action can be taken without delay.

9. Links to External Sites

The m99 platform may contain links to third-party websites or services for informational convenience. This Privacy Policy applies solely to the m99 platform and does not cover the privacy practices of any external websites you may visit through those links.

M99 is not responsible for the content, privacy policies, or practices of any third-party websites. We encourage you to read the privacy policy of every website you visit before providing any personal information to them.

10. Changes to This Policy

M99 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our operational practices, legal requirements, or new technologies we adopt. Whenever there are material changes, we will notify you via:

• Notices prominently displayed on the m99 platform homepage.
• Notification emails to the address registered to your account.
• Update the "Last Updated" date at the top of this document.

Continued use of the m99 platform after any changes to this policy means you accept the updated version. We encourage you to revisit this page from time to time to stay informed about how we protect your information.

11. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we manage your personal data, the m99 support team is ready to assist. You may reach us through the following channels:

• Live chat support available directly within the m99 platform.
• Support email: [email protected]
• FAQ section at FAQ page us for answers to frequently asked questions.

We are committed to responding to all privacy-related enquiries within a reasonable timeframe and ensuring every concern is handled with care and professionalism.