Gaya99 Privacy Policy – Protection of Your Personal Data

01 Information We Collect

When you register an account and use the Gaya99 platform, we collect several categories of personal information to enable us to provide a safe, seamless, and enjoyable experience. The information we collect is divided into three main categories:

Information You Provide Directly:

• Full name as stated on your identity card or passport.
• An active and reachable mobile phone number.
• A valid and active email address.
• Date of birth for age verification of at least 18 years old.
• Bank account details including bank name, account number, and account holder name.
• A copy of your identity document (MyKad or passport) for the KYC process if required.

Automatically Collected Information:

• The IP address of the device you use to access the platform.
• Your browser type and version, as well as your device's operating system.
• Activity log data including login times, bets placed, and wins recorded.
• Cookie and session token information for an improved user experience.
• General geolocation data (not precise location) for the purpose of permitted region verification.

Information From Third-Party Sources:

• Identity verification data from trusted KYC service providers.
• Payment verification information from registered payment gateway providers.
• Fraud prevention data from third-party monitoring systems we use.

02 How We Use Your Information

Every piece of information we collect is used for a clear and legitimate purpose. gaya99 uses your personal data for the following purposes:

Beyond the purposes stated above, gaya99 uses aggregated, non-personally identifiable data to improve gaming products, enhance the user interface experience, and understand overall platform usage patterns. This aggregated data cannot be traced back to any specific individual.

03 Data Sharing With Third Parties

Gaya99 takes great care in managing the sharing of player personal data. We do not sell or disclose your information to third parties for commercial purposes. However, there are limited situations where data sharing is necessary for service operations:

• Payment service providers: Payment gateways and partner banks receive the transaction information required to process your deposits and withdrawals. They are bound by strict confidentiality agreements.
• Game software providers: Third-party gaming platforms (such as slot providers and Live Casino suppliers) receive player IDs and game data necessary to deliver the gaming experience. No personal financial information is shared.
• KYC and identity verification providers: When identity verification is required, relevant document information is shared with KYC providers that are certified and operate to the highest security standards.
• Regulatory authorities: In situations where law or regulatory authority requires the disclosure of information, Gaya99 will comply with such requirements while notifying you where permitted to do so.
• Platform analytics providers: Usage data that does not contain personally identifiable information is shared with analytics providers for product improvement and user experience purposes.

04 Cookies and Tracking Technologies

Gaya99 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how players interact with our platform. There are four types of cookies we use:

• Essential Cookies: These cookies are required for the platform to function properly. They allow you to stay logged in during a game session, save language settings, and ensure transactions are processed securely. These cookies cannot be disabled.
• Performance Cookies: Help us understand how players use the platform, such as which pages are visited most and how long game sessions last. This data is used to improve platform performance.
• Functional Cookies: Allow the platform to remember your preferences such as default bet size, account settings, and display interface preferences.
• Marketing Cookies: Used to deliver relevant promotional offers to you. You may decline these cookies without affecting the core functionality of the platform.

You can manage your cookie settings through your browser settings at any time. Please note that disabling essential cookies may affect certain features of the Gaya99 platform.

05 Personal Data Security

Gaya99 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, or misuse. The key security measures we employ include:

• End-to-end encryption: All communications between the platform and our servers use the latest TLS 1.3 protocol, ensuring your data remains unreadable even if intercepted.
• Two-factor authentication (2FA): Gaya99 supports two-factor authentication for all player accounts to add an extra layer of security during login and withdrawal.
• 24/7 threat monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or suspicious activity in real time.
• Regular security audits: We conduct regular penetration testing and independent security audits to identify and address any system vulnerabilities.
• Internal access control: Access to player data within Gaya99 is restricted using a role-based access control (RBAC) system operating on the principle of least privilege.

06 Your Rights Over Your Personal Data

As a registered gaya99 player, you have the following rights regarding your personal data, in accordance with the provisions of Malaysia's Personal Data Protection Act 2010:

To exercise any of the above rights, please contact the gaya99 customer support team via live chat within the platform. We will process your request within 30 business days in accordance with PDPA requirements.

07 Data Retention and Deletion

Gaya99 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or for as long as your account remains active. After account closure, your data will be retained according to the following schedule before being permanently deleted or anonymised:

• Financial transaction records: Retained for 7 years in accordance with accounting and anti-money laundering (AML) legal requirements.
• KYC documents and identity verification: Retained for 5 years after account closure or the date of the last transaction.
• Customer support communication records: Retained for 3 years for reference and dispute resolution purposes.
• Game activity log: Retained for 2 years for audit and wins verification purposes.
• Marketing and communications data: Deleted within 90 days after you withdraw your marketing consent.

08 Children's Privacy

Gaya99 is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we determine that personal data belonging to a minor has been collected, we will immediately take the following steps:

• Close the relevant account and terminate all access to the platform.
• Delete all related personal data from our systems.
• Return any deposited funds to the original source where applicable.
• Retain only the minimum records required for legal compliance purposes.

Parents and guardians who believe their child may have registered an account at gaya99 are welcome to contact our support team via live chat for immediate assistance.

09 Changes to This Privacy Policy

Gaya99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When changes are made:

• The "Last Updated" date at the top of this page will be updated to reflect the date of the latest revision.
• For significant changes, we will notify you via an in-platform notification or by email to your registered address.
• Continued use of the gaya99 platform after any Privacy Policy changes are published will be considered your acceptance of the updated terms.

We encourage you to review this Privacy Policy page periodically so you stay informed about how we protect your information. If you disagree with any changes, please stop using the platform and contact us to close your account.

10 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how gaya99 handles your personal data, we are here to help through the following channels:

• Live Chat: Our customer support team is available 24 hours a day, 7 days a week via live chat within the gaya99 platform.
• Email: [email protected] — we aim to respond to all privacy inquiries within 48 business hours.
• Official Complaints: If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia (JPDP).