Pop999 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Members

This Privacy Policy outlines pop999's commitment to protecting the personal information of every registered member. pop999 operates as an online casino platform offering slots, Live Casino, roulette, blackjack, poker, Sports Betting, lottery, and virtual sports to players in Malaysia. In the course of these operations, we collect certain personal data necessary to deliver a safe, efficient, and responsible service.

This Policy applies to all members using the pop999 platform – whether via the website or mobile app – as well as all individuals who interact with our support team, access promotional content, or contact us through any communication channel. By using the pop999 platform, you agree to the data handling practices described in this Privacy Policy.

1. Data We Collect

Pop999 collects certain categories of personal data in the course of providing online casino services to Malaysian members. We only collect data that is genuinely necessary to operate our services properly and securely – not simply because we can.

Data provided directly by you:

• Active Malaysian mobile number (used as a unique account identifier)
• Account password (stored in hashed form – pop999 cannot read your original password)
• Full name as stated on your identification document (for verification and withdrawal purposes)
• Bank account number or Malaysian e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) for winnings withdrawal purposes
• Communication details you share when interacting with the pop999 support team

Data collected automatically during platform use:

• IP address of the device used to access pop999
• Device type, operating system and web browser version
• Game session records including games played, betting amounts and results
• Financial transaction history including deposits, withdrawals and bonus claims
• Access logs and platform activity data retained for security purposes
• Cookie and session tracking data (see Section 5)

The table below summarises the data categories, purposes of collection, and the legal basis permitting each type of processing:

2. How We Use Your Data

Pop999 uses collected data solely for the purposes outlined below. We will not use your data for any other purpose without first obtaining your consent.

Platform operations and member services:

• Creating and managing your pop999 member account
• Processing financial deposits and withdrawals securely
• Crediting your welcome bonus, weekly cashback, and other promotions to your account
• Maintaining a record of your game history and transactions for your reference
• Enabling access to all pop999 games – slots, Live Casino, roulette, blackjack, poker, football, badminton, e-sports, and lottery

Security and fraud prevention:

• Identifying and preventing unauthorised access to member accounts
• Detecting suspicious transaction patterns related to money laundering (AML)
• Detecting and preventing multiple account usage or bonus abuse
• Ensuring the platform is not accessed by underage individuals

Legal and regulatory compliance:

• Complying with anti-money laundering (AML) and know your customer (KYC) obligations
• Complying with directives from competent authorities as required by law
• Maintaining financial records as required by applicable regulations

Platform improvements and communications:

• Analysing usage patterns to improve the design and functionality of the pop999 platform
• Sending important notices regarding your account, security, or changes to the terms of service
• Sending promotional information and bonus offers (you may opt out at any time)
• Delivering more effective customer support based on your account context

3. Sharing Data with Third Parties

Pop999 does not sell, lease, exchange, or disclose members' personal data to third parties for marketing or commercial purposes. That said, certain operational activities may require us to share limited data with selected parties in strictly defined situations:

Contracted service providers:

Pop999 works with trusted third-party service providers to support our operations, including Malaysian payment processors (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX), gaming software providers, and cloud computing service providers. All such providers receive only the data necessary to perform their specific functions and are bound by strict confidentiality agreements with pop999. They are not permitted to use member data for their own purposes.

Legal obligations:

Pop999 may be required to disclose member information to Malaysian government authorities or law enforcement bodies when directed to do so by a court order or applicable law. This includes AML (anti-money laundering) reporting obligations as prescribed by Malaysian law. In such situations, pop999 will only disclose the minimum data necessary and will make reasonable efforts to notify the affected member where permitted by law.

4. Data Security

Member data security is pop999's highest technical and operational priority. We continuously invest in security infrastructure and procedures to ensure your data remains protected against an ever-evolving threat landscape.

Technical security measures we have in place:

• Data encryption in transit using TLS 1.3 protocol with 256-bit SSL certificates
• Data encryption at rest for all sensitive information including financial details
• Passwords are stored in hashed form using a strong algorithm – pop999 cannot read your original password
• Network segmentation and multi-layered firewalls to protect data servers
• 24/7 system monitoring to detect intrusion attempts or anomalies
• Regular penetration testing by independent security experts
• Automatic data backups with encryption to geographically separate locations

Operational security measures:

• Minimum access principle – each pop999 staff member only has access to the data necessary for their role
• Mandatory security training for all staff who handle member data
• Full audit logs for all access to member data
• Documented incident response procedures that are regularly tested

While we take every reasonable precaution, no digital security system can be guaranteed 100% secure against all threats. We encourage members to play their part in protecting their accounts by using strong, unique passwords, keeping login credentials private, and reporting any suspicious activity to the pop999 support team immediately.

5. Cookies & Tracking

Pop999 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the pop999 platform.

Types of cookies we use:

• Essential Cookies: Required for the platform to function correctly – including login session verification, account balance management, and transaction security. These cookies cannot be disabled without affecting core platform functionality.
• Preference Cookies: Saving your preferences such as language, favourite games and display settings so pop999 can personalise your experience.
• Analytics Cookies: Helping pop999 understand how members use the platform – which pages are visited most, where technical issues occur, and how we can improve the user interface. This data is collected in aggregated form without identifying individual users.
• Security Cookies: Used to detect and prevent fraudulent activity, including suspicious login attempts and unusual navigation patterns.

6. Your Privacy Rights as a pop999 Member

As a pop999 member, you have the following privacy rights, which you may exercise at any time free of charge:

• Right to Access: You have the right to request a copy of all personal data we hold about you. pop999 will provide this in a readable format within 30 days of your request.
• Right to Rectification: If any of your data held by pop999 is inaccurate or incomplete, you have the right to request a correction. Most information can be updated directly through your account settings.
• Right to Erasure: You may request the deletion of your personal data. Please note that certain data may need to be retained for legal compliance purposes or ongoing investigations.
• Right to Restrict Processing: You may request that we restrict how we process your data in certain situations — for example, while a dispute regarding data accuracy is under investigation.
• Right to Object: You have the right to object to the processing of your data for specific purposes, such as direct marketing. Once you object, we will stop using your data for that purpose.
• Data Portability Rights: You have the right to receive your data in a structured, machine-readable format for transfer to another service provider should you wish to do so.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the validity of any processing carried out prior to that point.

To exercise any of the rights above, please contact the pop999 privacy team by email at support@pop999.best with the subject line "Privacy Rights Request". We will verify your identity and process your request within 30 days. If your request is complex or there is a valid reason to extend the timeframe, we will notify you within that initial 30-day period.

7. Data Retention Period

Pop999 does not retain members' personal data for longer than necessary. Retention periods vary depending on the type of data and the applicable operational or legal requirements:

• Active account data: Retained for the duration of your active pop999 account plus 7 years after account closure, for legal compliance and audit purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial and AML regulatory requirements.
• Game records: Retained for 5 years from the date of gameplay for dispute resolution and audit purposes.
• Support communication logs: Retained for 2 years from the date of last communication.
• Security log data: Retained for 1 year for monitoring and investigation purposes.
• Marketing data (where consent has been given): Retained until you withdraw consent or request deletion.

Once the retention period expires, data will be securely deleted or anonymised using procedures that ensure it cannot be recovered. Anonymised data may be retained in aggregated statistical form for analytics purposes, with no personally identifiable information included.

8. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how pop999 handles your personal data, we strongly encourage you to get in touch. We take every privacy enquiry seriously and will endeavour to provide a clear and satisfactory response.

How to reach the pop999 privacy team:

• Email: support@pop999.best (Subject: "Privacy Inquiry")
• Live Chat: Available 24/7 on the pop999 platform – the fastest way to get answers to urgent queries

We are committed to responding to all written enquiries within 48 business hours. For more complex privacy rights requests such as data access or deletion requests, the processing period is up to 30 days as outlined in Section 6.

Pop999 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When material changes are made, members will be notified via an in-platform notice or an email to your registered address at least 7 days before the changes take effect. The date of the most recent update is always displayed at the top of this page.