Privacy Policy

Section 01

Introduction

This Privacy Policy (hereinafter referred to as the "Policy") is issued by myan99 (hereinafter referred to as "myan99", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at https://myan99.buzz (hereinafter referred to as the "Platform"). This Policy applies to all persons who access, register on, or otherwise interact with the Platform, including registered players, visitors, and prospective users (collectively referred to as "Users", "you", or "your").

myan99 is committed to handling your personal data with care, transparency, and integrity. We collect and process personal data only for lawful, specified, and legitimate purposes — primarily to operate and improve the Platform, verify your identity, process your transactions, and fulfil our obligations under applicable law.

This Policy should be read in conjunction with our Terms & Conditions. By registering an Account on myan99 or by continuing to use the Platform, you confirm that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein.

Section 02

Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that relates to an identified or identifiable natural person, including but not limited to name, email address, date of birth, payment details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" — myan99, as the entity that determines the purposes and means of Processing Personal Data collected via the Platform.
• "Data Processor" — any third party that processes Personal Data on behalf of myan99 under a written agreement and in accordance with myan99's instructions.
• "Cookies" — small text files placed on your Device by the Platform to store session information, preferences, and analytical data.
• "KYC" — Know Your Customer, the identity and payment method verification process required before withdrawal processing.
• "MYR / RM" — Malaysian Ringgit, the primary account currency on the Platform.

Section 03

Data We Collect

myan99 collects the following categories of Personal Data from Users, depending on how you interact with the Platform:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (to verify you are aged 21 or above)
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Email address and contact number
• Username and encrypted password
• Government-issued identification (MyKad, passport) — collected during KYC verification

3.2 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and methods
• Payment method identifiers (e.g., masked bank account numbers, e-wallet account names registered to Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, or Public Bank)
• Transaction history and account balance records
• Currency data (MYR / RM denominated records)

3.3 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session duration, login timestamps, and pages visited
• Game and betting activity logs
• Referral source and marketing attribution data (where applicable)

3.4 Communications Data

• Records of live chat sessions with our support team
• Email correspondence sent to or received from [email protected]
• Survey responses and feedback submissions

3.5 Responsible Gambling Data

• Deposit limits, session reminders, and self-exclusion settings you have configured
• Responsible gambling tool interaction history

Section 04

How We Collect Data

myan99 collects Personal Data through the following channels:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey.
• Automatically — through Cookies, web beacons, server logs, and similar tracking technologies when you access or navigate the Platform.
• From third-party payment providers — confirmation and status data from payment processors (e.g., DuitNow, FPX, Touch 'n Go eWallet) when you initiate a transaction through their systems.
• From identity verification services — where myan99 engages a third-party KYC or fraud-screening provider, data may be cross-referenced to verify identity documents or screen for sanctions or politically exposed persons (PEP) status.

Section 05

Purpose & Legal Basis for Processing

The table below sets out the primary purposes for which myan99 processes your Personal Data and the corresponding legal basis for each purpose:

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing communications, update your preferences in your Account settings or contact our support team.

Section 06

Data Processing

myan99 processes your Personal Data in a manner that is consistent with the purposes described in this Policy. We apply the following principles to all data processing activities:

• Lawfulness, fairness, and transparency: We process data on a clearly identified legal basis and inform you of how your data is used.
• Purpose limitation: Data collected for a specific purpose is not subsequently used for a materially different, incompatible purpose without your consent or a new legal basis.
• Data minimisation: We collect only the minimum Personal Data necessary to fulfil the stated purpose. We do not collect data "just in case".
• Accuracy: We take reasonable steps to ensure the Personal Data we hold is accurate and up to date. You are encouraged to notify us promptly if your registered details change.
• Storage limitation: We retain Personal Data only for as long as is necessary for the purposes set out in this Policy or as required by applicable law. See Section 09 for specific retention periods.
• Integrity and confidentiality: We implement appropriate technical and organisational security measures to protect Personal Data against unauthorised access, loss, or destruction.

Section 07

Data Sharing & Third-Party Disclosure

myan99 does not sell your Personal Data to any third party. We do not share your data with advertisers or data brokers. Personal Data is shared with third parties only in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers to assist in operating the Platform. These may include payment gateway operators (including those facilitating FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and bank transfers), identity verification platforms, cloud hosting providers, customer support software vendors, and analytics tools. Each Data Processor is bound by a written data processing agreement and is prohibited from using your data for any purpose other than providing the contracted service.

7.2 Legal and Regulatory Obligations

myan99 may be required to disclose Personal Data to competent authorities, law enforcement bodies, or regulatory agencies where such disclosure is mandated by applicable law, court order, or lawful regulatory request. myan99 will, where legally permissible, notify you of such a request before complying.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving myan99, your Personal Data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection obligations being imposed on the recipient.

Section 08

International Data Transfers

myan99 operates globally and may process or store your Personal Data on servers located outside Malaysia. Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection, myan99 will implement appropriate safeguards to protect your data, including contractual clauses and data processing agreements that impose data protection obligations on the receiving party.

By using the myan99 Platform and providing your Personal Data, you acknowledge that your data may be transferred to, stored, and processed in jurisdictions outside Malaysia. We will always take steps to ensure that such transfers are handled securely and in compliance with this Policy.

Section 09

Data Retention

myan99 retains your Personal Data for as long as is necessary to fulfil the purposes outlined in this Policy, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in order to satisfy anti-money laundering (AML) and record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five (5) years following the date of the transaction, consistent with standard financial record-keeping requirements.
• KYC documentation: Retained for five (5) years from the date of submission or Account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained until consent is withdrawn, plus an additional twelve (12) months for audit purposes.
• Technical and usage data (logs): Retained for up to twelve (12) months, unless extended by a specific security or fraud investigation.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents re-identification. Anonymised data may be retained indefinitely for analytical purposes.

Section 10

Cookies & Tracking Technologies

myan99 uses Cookies and similar tracking technologies (including web beacons and session storage) to operate and improve the Platform. The following categories of Cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences (e.g., preferred language, last-used payment method, display settings). These enhance your experience but are not critical to Platform operation.
• Analytical Cookies: Used to collect aggregated, anonymised data about how Users navigate the Platform — including pages visited, session duration, and device types. This data is used to improve Platform design and performance.
• Marketing Cookies: Used only where you have given explicit consent, to track interactions with promotional campaigns and optimise offer relevance.

You may manage your Cookie preferences via your browser settings. Please note that disabling certain categories of Cookies may affect your ability to use some features of the Platform. Most modern browsers allow you to block or delete Cookies through the browser's privacy settings.

Section 11

User Rights

Subject to applicable law, you hold the following rights with respect to your Personal Data held by myan99. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all verified requests within thirty (30) days of receipt.

• Right of Access: You have the right to request a copy of the Personal Data myan99 holds about you, together with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. You may also update certain information directly via your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to myan99's legal obligations to retain certain data (see Section 09).
• Right to Restrict Processing: You may request that myan99 restrict the processing of your Personal Data in certain circumstances — for example, where you contest the accuracy of the data or object to processing.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your Personal Data carried out on the basis of myan99's legitimate interests, including for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Section 12

Security Measures

myan99 implements a range of technical and organisational security measures designed to protect your Personal Data from unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS/SSL): All data transmitted between your Device and our servers is encrypted using industry-standard TLS encryption.
• Data Encryption at Rest: Sensitive Personal Data, including identity documents and payment information, is encrypted when stored on our servers.
• Access Controls: Access to Personal Data within myan99 is restricted on a strict need-to-know basis. Staff with access to Personal Data receive appropriate data protection training.
• Two-Factor Authentication (2FA): myan99 offers 2FA to all registered Users as an additional layer of Account security. We strongly recommend enabling this feature.
• Intrusion Detection & Monitoring: Our infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and anomalous data flows.
• Incident Response: In the event of a confirmed data breach that is likely to result in a risk to your rights and freedoms, myan99 will notify affected Users promptly and take immediate steps to contain and remediate the incident.

While myan99 takes all reasonable steps to protect your Personal Data, no system or transmission over the internet can be guaranteed to be 100% secure. You are responsible for maintaining the security of your own Account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your Account.

Section 13

Children's Privacy

The myan99 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect Personal Data from any person under the age of 21. If myan99 becomes aware that Personal Data has been collected from a person under 21 years of age, that Account will be immediately suspended, the data deleted, and any deposited funds returned subject to verification requirements.

If you are a parent or guardian and believe that a minor has registered on the myan99 Platform, please contact us immediately at [email protected] so we can investigate and take appropriate action.

Section 14

Policy Amendments

myan99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. When material changes are made, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered Users via email or in-platform notification.

Your continued use of the Platform following the publication of any revised Policy constitutes your acknowledgement of the changes and your agreement to the updated terms. We encourage you to review this Policy periodically. The most current version will always be available at https://myan99.buzz/privacy-policy.

Section 15

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy — or if you wish to exercise any of your data rights set out in Section 11 — please contact the myan99 team through the following channels:

• Live Chat: Available via the Platform dashboard, 10:00 AM – 2:00 AM MYT daily.
• Email: [email protected] (plain text — not a clickable link). Subject line: "Privacy Request – [Your Username]".

We aim to acknowledge all privacy-related requests within five (5) business days and to resolve them within thirty (30) calendar days. Complex requests may take longer, in which case we will keep you informed of progress.