This Privacy Policy outlines xx999's personal data protection practices and applies to all users accessing the platform via the website, mobile app, or any other official channel. Your privacy is not merely a legal obligation to us — it is the foundation of the trust we uphold with full responsibility.
Six Pillars of xx999 Personal Data Protection
High-Level Encryption
All personal data and financial transactions on xx999 are protected using 256-bit SSL encryption. Your sensitive information is never stored in plain text — every piece of data is encrypted before being stored in our database.
PDPA 2010 Compliance
Xx999 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We only collect data that is strictly necessary, ensuring it is processed lawfully, fairly, and transparently in accordance with current legal requirements.
No Data Sales
Xx999 never sells, rents, or trades users' personal data to any third party for marketing purposes. Your data belongs entirely to you and we will not monetize it without your consent.
Full Transparency
We believe users have the right to know what happens with their data. That is why this Privacy Policy is written in plain, easy-to-understand language — not confusing legal jargon — so every xx999 player understands their rights.
24/7 Security Monitoring
The xx999 cybersecurity team monitors our systems around the clock to detect any suspicious activity or unauthorised access attempts. All threats are identified and addressed before they can compromise user data.
Data Control in Your Hands
Xx999 users have full rights to access, correct, request a copy of, or request the deletion of their personal data. We provide a straightforward and responsive process to help you manage your own data.
1. Introduction and Scope of Privacy Policy
Xx999 is an online entertainment platform offering a wide range of game categories including slots, live casino, fish shooting, sports betting, and more to players in Malaysia. We understand that your trust is the most valuable asset we hold, and one of the best ways to maintain that trust is by managing your personal data with full integrity and transparency.
This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. It applies to all personal information we collect through the official xx999 website, mobile app, customer support services, and any other official communication channels associated with our platform.
By using the xx999 platform, you consent to the collection and use of your personal information as described in this Privacy Policy. If you do not agree, please discontinue use of the platform. We encourage you to read this document thoroughly so you fully understand the rights available to you.
2. Types of Information We Collect
Xx999 only collects information necessary to provide a safe, seamless, and responsible service. Below are the categories of information we collect along with the purpose of collection:
| Data Category | Data Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, identification card number, passport | Identity verification (KYC), legal compliance |
| Contact Data | Phone number, email address, residential address | Account communications, security verification |
| Financial Data | Bank account number, transaction details, deposit and withdrawal history | Payment processing, fraud prevention |
| Technical Data | IP address, device type, operating system, web browser | Account security, platform improvement |
| Usage Data | Gaming history, wagering habits, active session duration | Responsible gaming, personalised recommendations |
| Communication Data | Live chat transcripts, support emails, user feedback | Customer service improvement, dispute resolution |
Xx999 does not collect sensitive information such as biometric data, political views, religious beliefs, or medical history except in very limited circumstances and with your explicit consent. We consistently apply the principle of "minimum collection" — we only take data that is strictly necessary.
3. How We Use Your Personal Data
Every piece of data we collect has a clear and legitimate purpose. xx999 uses your personal information for the following purposes:
3.1 Account Management and Operations
Your data is used to create and manage your xx999 account, process registration, verify your identity through KYC, and ensure you can access all platform features seamlessly. Without this basic information, we are unable to provide a safe and responsible service.
3.2 Financial Transaction Processing
Your financial information is used solely to process deposits, manage withdrawal requests, and maintain accurate transaction records. All financial transactions are protected by strict layers of encryption to ensure your funds remain secure at all times.
3.3 Security and Fraud Prevention
Technical and usage data are continuously analysed to detect suspicious activity patterns, prevent unauthorised access, and protect the platform's integrity from misuse. This includes monitoring multiple logins, detecting unusual IP addresses, and analysing abnormal betting patterns.
3.4 Responsible Gaming
Xx999 uses gaming activity data to identify players who may need assistance related to their playing habits. This allows us to offer timely support and provide effective self-exclusion tools to ensure this platform remains a responsible entertainment destination.
3.5 Communication and Support
We use your contact information to send important account notifications, security updates, policy change notices, and responses to customer service inquiries. You can manage your communication preferences through your account profile settings.
4. Information Sharing and Disclosure
Xx999 enforces a strict policy — we does not sell, does not rent, and does not trade users' personal data to third parties for commercial purposes. However, there are limited situations where data sharing is necessary and lawful:
- Trusted Service Providers: We work with selected service providers such as payment processors, identity verification providers, and cybersecurity firms. They are granted only the minimum data access required to perform their specific functions, and are bound by strict confidentiality agreements.
- Legal Requirement: xx999 will disclose information to the relevant authorities when required to do so by law, court order, or direction from a legitimate enforcement agency.
- Fraud Prevention: In cases involving fraud, money laundering, or other illegal activities, we reserve the right to share relevant information with the appropriate law enforcement authorities.
- Corporate Structure Changes: In the event of a company merger, acquisition, or asset sale, user data may be transferred to the new entity. Users will be notified in advance and your rights will continue to be protected.
In all data sharing arrangements, xx999 ensures that recipients maintain data protection standards equivalent to or higher than our own. Every data sharing agreement is enforced in writing with clear protection clauses.
5. Data Security and Protection Measures
The security of your personal data is an absolute priority for xx999. We continuously invest in the latest security technologies and procedures to ensure your data remains protected against increasingly sophisticated cyber threats.
5.1 Data Encryption
All data transmitted between your device and xx999 servers is protected using TLS 1.3 protocol with AES 256-bit encryption. Data stored in our database is also encrypted using military-grade encryption. User passwords are never stored in plain text — they are processed using an irreversible hashing algorithm.
5.2 Internal Access Controls
Access to user data within xx999 is restricted on a need-to-know basis. Only staff with legitimate operational requirements may access user information, and all access is automatically logged and monitored.
5.3 Security Incident Response
In the event of a data breach that may affect users' personal information, xx999 is committed to notifying affected users within the stipulated timeframe and taking appropriate remedial action. We will also report relevant incidents to the Department of Personal Data Protection Malaysia as required by law.
6. Cookies, Trackers and Related Technologies
Xx999 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how our platform is used. Below are the types of cookies we use:
- Essential Cookies: Required for core platform functions such as login authentication and session management. These cookies cannot be disabled.
- Performance Cookies: Collects anonymous data on how users interact with the platform to help us identify areas for improvement.
- Functional Cookies: Stores user preferences such as language, display settings, and personal preferences to deliver a more personalised experience.
- Security Cookies: Used to detect and prevent fraudulent activity and to ensure the integrity of user sessions.
You can manage cookie settings through your web browser. However, disabling certain cookies may affect platform functionality. xx999 does not use third-party cookies for advertising or cross-site tracking purposes.
7. Your Rights as a User
Under Malaysia's Personal Data Protection Act 2010 and xx999's internal policies, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide the information in a readable format within a reasonable timeframe.
Right to Rectification
If your personal data is inaccurate or outdated, you have the right to request that we correct or update it promptly.
Right to Erasure
You may request the deletion of your personal data, subject to legal obligations that require us to retain certain records for a specified period.
Right to Object
You have the right to object to the processing of your personal data for specific purposes, particularly processing for direct marketing.
Right to Data Portability
You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.
Right to Withdraw Consent
Where data processing is based on your consent, you may withdraw that consent at any time without affecting the validity of processing that has already taken place.
To exercise any of the rights above, contact the xx999 data protection team via Live Chat on the platform or by email at [email protected]. We will process your request within 30 business days and may require identity verification before acting on the request.
8. Data Retention and Deletion
Xx999 retains your personal data for as long as necessary for the purposes stated in this Privacy Policy, or for as long as required by law. Below are our general data retention guidelines:
- Active Account Data: Retained for as long as your account remains active on the xx999 platform.
- Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysian financial legal requirements.
- KYC and Identity Verification Records: Retained for 5 years after account closure to meet anti-money laundering (AML) compliance requirements.
- Communication Logs: Retained for 2 years for dispute resolution and service quality improvement purposes.
- Closed Account Data: Once the account is closed and the mandatory retention period has ended, your data will be securely deleted from our systems.
Once the retention period has expired, personal data will be permanently deleted or anonymised using methods that ensure the data cannot be recovered or re-identified.
9. Children's Privacy and Age Restrictions
The xx999 platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process any personal information from individuals under the age of 18. This age restriction policy is strictly enforced as part of our commitment to responsible gaming.
All new players are required to complete an age verification process during registration. xx999 reserves the right to request age verification documents at any time to ensure compliance with this policy. If we determine that a user under the age of 18 has registered an account — whether intentionally or unintentionally — the account will be closed immediately and all related data will be deleted in accordance with strict child protection procedures.
If you suspect that a minor has accessed the xx999 platform, please contact our customer service team immediately so that appropriate action can be taken without delay.
Xx999 fully supports efforts to protect minors from the harms of gambling. We encourage parents and guardians to use parental control software to block children's access to online gambling websites, including the xx999 platform.
10. Contact Us & Policy Amendments
10.1 Amendments to the Privacy Policy
Xx999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements in how we protect your data. Any significant changes will be communicated to users via an in-platform notice or email. The date of the latest amendment is always displayed at the top of this document. Continued use of the xx999 platform after the amendment's effective date constitutes acceptance of those changes.
10.2 How to Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way we handle your personal data, the xx999 data protection team is ready to assist you through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week on the xx999 platform.
- Email: [email protected] — for specific enquiries related to privacy and data protection.
- General Support Email: [email protected] — for general enquiries related to your account and services.
We are committed to responding to all privacy-related inquiries within 5 business days. For formal requests to exercise rights under the PDPA, the response period is within 30 business days from the date of receipt of a complete request.
Xx999 will continue to update our data protection practices in line with technological advancements and changes in the data protection legal landscape. Our goal remains the same — to be the most trusted online entertainment platform in Malaysia, with user privacy at the core of everything we do.