ppclub99 Privacy Policy

1. Introduction

1.1  ppclub99 ("ppclub99", "we", "us", "our") operates the online gaming platform accessible at ppclub99.co and any associated mobile interfaces or subdomains. This Privacy Policy ("Policy") describes how ppclub99 collects, uses, discloses, stores, and protects the personal data of individuals ("Members", "you", "your") who register an account with, access, or otherwise interact with the ppclub99 platform.

1.2  By registering a ppclub99 account or by continuing to use the ppclub99 platform after the publication of this Policy, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

1.3  This Policy is incorporated by reference into the ppclub99 Terms & Conditions. Defined terms used in this Policy that are not separately defined herein shall have the meanings ascribed to them in the ppclub99 Terms & Conditions.

2. Data Controller

2.1  For the purposes of this Policy, ppclub99 is the data controller in respect of the personal data collected and processed through the ppclub99 platform. As data controller, ppclub99 determines the purposes and means of processing your personal data.

2.2  ppclub99 operates under international online gaming licensing. The platform's data processing activities are subject to the data protection obligations imposed by the licensing framework under which ppclub99 operates, in addition to any applicable national data protection laws.

2.3  Enquiries regarding this Policy or ppclub99's data processing activities may be directed to the support contact details set out in Section 16 of this Policy.

3. Personal Data We Collect

3.1  ppclub99 collects the following categories of personal data from Members and prospective Members:

Identity Data

• Full legal name;
• Date of birth (for age verification — ppclub99 is strictly 21+);
• Gender;
• Government-issued identification document details (e.g., MyKad number, passport number) collected as part of Know Your Customer ("KYC") verification.

Contact Data

• Email address;
• Mobile telephone number;
• Residential address (city, state, postcode — e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru).

Financial Data

• Bank account details or e-wallet identifiers (e.g., Touch n Go eWallet, Boost) registered for deposits and withdrawals;
• Transaction history (deposits, withdrawals, bonus credits, wagering activity).

Technical Data

• IP address and geolocation data;
• Device type, operating system, browser type and version;
• Session activity logs, login timestamps, and in-platform navigation data.

Communications Data

• Records of support interactions (live chat transcripts, email correspondence);
• Voluntary survey responses or feedback submissions.

4. How We Collect Your Data

4.1  ppclub99 collects personal data through the following channels:

• Direct collection: Data you provide when registering your ppclub99 account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to surveys;
• Automated collection: Technical data collected automatically when you access the ppclub99 platform, including via cookies, server logs, and analytics tools (see Section 7);
• Third-party sources: Identity verification data from KYC and fraud prevention service providers; transaction data from payment processors including Touch n Go, Boost, Maybank, CIMB, Public Bank, Visa, and Mastercard; publicly available data for fraud and AML screening purposes.

5. Legal Basis for Processing

5.1  ppclub99 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to provide the ppclub99 service under the Terms & Conditions you have agreed to — including account management, deposit and withdrawal processing, game operation, and customer support;
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering ("AML") obligations, counter-terrorism financing ("CTF") requirements, tax reporting obligations, and regulatory instructions from licensing authorities;
• Legitimate interests: Processing necessary for ppclub99's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your rights and interests;
• Consent: Processing for marketing communications and optional analytics purposes, where we have obtained your explicit consent and which you may withdraw at any time.

6. How We Use Your Data

6.1  ppclub99 uses your personal data for the following purposes:

• To create, maintain, and administer your ppclub99 account;
• To process deposits, withdrawals, and in-platform financial transactions;
• To verify your identity and age (21+) as required by our licensing obligations and responsible gaming commitment;
• To detect, investigate, and prevent fraud, money laundering, and other financial crimes;
• To enforce the ppclub99 Terms & Conditions and this Privacy Policy;
• To provide customer support and respond to your enquiries;
• To monitor platform activity for responsible gaming purposes, including identifying patterns indicative of problem gambling and applying self-exclusion measures where appropriate;
• To comply with all applicable legal and regulatory obligations;
• To send transactional communications necessary for the operation of your account (e.g., deposit confirmations, withdrawal notifications, security alerts);
• To send promotional and marketing communications where you have consented to receive them — you may opt out at any time;
• To improve the ppclub99 platform through aggregated, anonymised analytics.

7. Cookies & Tracking Technologies

7.1  ppclub99 uses cookies and similar tracking technologies on the ppclub99 platform. Cookies are small data files placed on your device that help ppclub99 recognise returning visitors, maintain session integrity, and collect analytics data.

7.2  ppclub99 uses the following categories of cookies:

• Strictly necessary cookies: Required for the basic operation of the ppclub99 platform — including maintaining your logged-in session and processing transactions. These cannot be disabled without impairing platform functionality;
• Analytics cookies: Used to collect anonymised data on how Members interact with the ppclub99 platform, enabling us to improve performance and usability;
• Preference cookies: Used to remember your platform settings and preferences between sessions.

7.3  You may configure your browser to refuse or delete cookies; however, disabling strictly necessary cookies will impair your ability to use the ppclub99 platform, including the ppclub99 Login functionality. ppclub99 is not responsible for any loss of platform functionality resulting from browser-level cookie restrictions.

8. Sharing Your Personal Data

8.1  ppclub99 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes.

8.2  ppclub99 may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors: Touch n Go, Boost, Maybank, CIMB, Public Bank, Visa, Mastercard, and other payment service providers, for the purpose of processing deposits and withdrawals;
• KYC and fraud prevention providers: Third-party identity verification and fraud screening services engaged by ppclub99 to comply with AML/CTF and age verification obligations;
• Game providers and platform suppliers: Licensed game content providers whose games are integrated into the ppclub99 platform, where data sharing is necessary for game operation, fairness auditing, or dispute resolution;
• Regulatory and law enforcement authorities: ppclub99 may disclose personal data to competent authorities where required by applicable law, court order, or regulatory instruction — without prior notice to the Member where legally required;
• Professional advisers: Legal, accounting, and audit firms engaged by ppclub99 under obligations of professional confidentiality.

8.3  All third parties with whom ppclub99 shares personal data are required to process such data only for the specified purpose and in accordance with applicable data protection requirements.

9. International Data Transfers

9.1  Some of the third parties with whom ppclub99 shares personal data may be located outside Malaysia. Where personal data is transferred internationally, ppclub99 takes steps to ensure that such transfers are conducted in accordance with applicable data protection requirements, including by implementing appropriate contractual safeguards with the receiving party.

9.2  By registering a ppclub99 account and accepting this Policy, you consent to the international transfer of your personal data as described in this Section.

10. Data Retention

10.1  ppclub99 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any applicable legal, regulatory, accounting, or reporting requirements.

10.2  As a general guide to retention periods:

• Account data and KYC documentation: retained for a minimum of five years from account closure, in line with standard AML record-keeping obligations;
• Transaction records: retained for a minimum of five years from the date of each transaction;
• Support communications: retained for up to three years from the date of the communication;
• Technical and analytics data: retained in anonymised form for up to two years.

10.3  Following the expiry of applicable retention periods, ppclub99 will securely delete or anonymise your personal data.

11. Security Measures

11.1  ppclub99 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS 256-bit encryption for all data in transit between your device and ppclub99 servers;
• Encrypted storage for sensitive personal data, including hashed and salted password storage;
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate need;
• Regular security assessments and penetration testing of the ppclub99 platform infrastructure;
• Two-factor authentication available to all Members via account settings.

11.2  Notwithstanding the security measures implemented by ppclub99, no method of data transmission over the internet or electronic storage is completely secure. ppclub99 cannot guarantee the absolute security of your personal data and accepts no liability for unauthorised access arising from events beyond our reasonable control.

11.3  In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, ppclub99 will notify affected Members without undue delay, to the extent required by applicable law.

12. Your Data Rights

12.1  Subject to applicable law, you have the following rights in relation to your personal data held by ppclub99:

• Right of access: You may request a copy of the personal data ppclub99 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where ppclub99 has no legitimate grounds for continued retention — subject to ppclub99's legal and regulatory retention obligations;
• Right to restriction: You may request that ppclub99 restricts processing of your personal data in certain circumstances;
• Right to object: You may object to processing carried out on the basis of legitimate interests;
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

12.2  To exercise any of the above rights, please contact ppclub99 support using the details in Section 16. ppclub99 will respond to rights requests within a reasonable timeframe and in any event within 30 days of receipt. ppclub99 may request identity verification before processing a rights request.

12.3  Certain rights may be restricted where ppclub99 is required to retain or process data to comply with legal obligations, including AML and KYC requirements.

13. Children's Privacy

13.1  The ppclub99 platform is strictly intended for individuals aged 21 years and above. ppclub99 does not knowingly collect personal data from individuals under the age of 21. If ppclub99 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed and any funds will be handled in accordance with our Terms & Conditions and applicable law.

13.2  If you believe that a minor has registered a ppclub99 account or has provided personal data to ppclub99, please contact ppclub99 support immediately using the contact details in Section 16.

14. Third-Party Links

14.1  The ppclub99 platform may from time to time contain references or links to third-party websites or services (for example, payment provider interfaces). This Policy does not apply to those third-party platforms. ppclub99 is not responsible for the privacy practices or content of any third-party website, and we encourage you to review the privacy policy of any third-party service before providing personal data to them.

15. Changes to This Privacy Policy

15.1  ppclub99 reserves the right to update this Privacy Policy at any time. The revised Policy will be posted on the ppclub99 platform with an updated "Last Updated" date. Where changes are material, ppclub99 will use reasonable endeavours to notify active Members via email or in-platform notification before the changes take effect.

15.2  Your continued use of the ppclub99 platform after any amendment to this Policy constitutes your acceptance of the revised Policy. If you do not accept the amended Policy, you should cease using the platform and may close your account in accordance with the Terms & Conditions.

16. Contact Us

16.1  For any enquiries, requests, or complaints relating to this Privacy Policy or ppclub99's handling of your personal data, please contact the ppclub99 Data Support Team via:

16.2  ppclub99 aims to respond to all data-related enquiries within 5 business days. Complex rights requests (e.g., subject access requests) will be acknowledged within 5 business days and fully responded to within 30 days.