Privacy Policy —
How m99myr Protects Your Data

1. Introduction

This Privacy Policy ("Policy") describes how m99myr ("we", "us", "our", "the Operator") collects, processes, stores, and protects personal data submitted by users ("you", "your", "the Player") in connection with your use of the m99myr platform at https://m99myr.cam ("the Platform").

m99myr is committed to handling personal data responsibly and in compliance with applicable data protection legislation. By registering an account on the Platform or by continuing to use our services, you acknowledge that you have read and understood the terms of this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall contractual framework governing your use of the Platform.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can identify a living individual, directly or indirectly — including name, email address, date of birth, device identifiers, and financial account references.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, transmission, alteration, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, m99myr is the Data Controller.
• "Data Processor" means any third party that processes personal data on behalf of the Data Controller under a contractual arrangement.
• "KYC Data" means identity verification documentation submitted by a player as part of the Know Your Customer verification process, including government-issued identification and proof of address.
• "Cookies" means small text files stored on a user's device by a web browser at the instruction of a website, used to remember preferences, session states, and usage patterns.

3. Data We Collect

m99myr collects personal data through several means: directly from you during account registration and KYC verification, automatically through your use of the Platform, and in limited cases from authorised third-party sources. The categories of personal data we collect include the following:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless directly relevant to a responsible gambling assessment and provided with your explicit consent.

4. Data Processing

m99myr processes your personal data for the following specific and legitimate purposes:

5. Legal Basis for Processing

m99myr processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil our obligations under the account agreement, including identity verification, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable law, including AML regulations, KYC requirements, and age verification duties.
• Legitimate Interests: Processing carried out in pursuit of our legitimate business interests — including fraud prevention, platform security, and service improvement — where such interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent — applicable to optional marketing communications and certain analytics activities. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing

m99myr does not sell your personal data to any third party. We share personal data only in the following limited circumstances and always subject to appropriate data protection safeguards:

• Payment Processors: Financial transaction data is shared with authorised payment processors (including the operators of Maybank2u, CIMB Clicks, FPX, DuitNow, Touch 'n Go eWallet, Boost, and GrabPay) solely for the purpose of completing your requested transactions.
• KYC and Identity Verification Providers: Identity documents submitted during KYC may be processed by authorised third-party verification service providers acting under contractual data processing agreements with m99myr.
• Game and Platform Technology Providers: Technical data may be shared with licensed game studios and platform software providers to facilitate gameplay, detect cheating, and maintain platform integrity.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory directive, m99myr may disclose personal data to the relevant competent authority.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by m99myr under strict confidentiality obligations may have limited access to relevant personal data.

All third-party processors engaged by m99myr are required to process personal data only in accordance with our instructions and to maintain appropriate technical and organisational security measures.

7. Cookies & Tracking Technologies

m99myr uses cookies and similar tracking technologies to operate the Platform efficiently and to improve the player experience. The categories of cookies we use are as follows:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair Platform functionality. Disabling analytics or functional cookies will not prevent access to core services.

8. Data Retention

m99myr retains personal data only for as long as necessary to fulfil the purposes set out in this Policy or as required by applicable legal obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your account relationship with m99myr.
• Closed Account Data: Identity and KYC records are retained for a minimum of five (5) years following account closure, in compliance with AML obligations.
• Transaction Records: Financial transaction logs are retained for a minimum of seven (7) years from the date of the transaction.
• Support Communications: Customer support records are retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Records of consent and opt-out requests are retained for as long as reasonably necessary to evidence your consent choices.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Data Security

m99myr implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• AES-256 encryption for sensitive personal data stored on our servers.
• Multi-factor authentication options for player accounts.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular third-party penetration testing and vulnerability assessments of our infrastructure.
• Automated intrusion detection and real-time anomaly monitoring systems.
• Formal incident response procedures with defined escalation paths and player notification obligations.

While m99myr takes all reasonable precautions to protect your data, no transmission over the internet or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorised access to your account.

10. User Rights

Subject to applicable law and certain limitations related to our legal and regulatory obligations, you hold the following rights in relation to your personal data held by m99myr:

To exercise any of the rights listed above, please contact our Data Privacy team at [email protected] with the subject line "Data Rights Request". We may require identity verification before processing your request.

11. Minors

The m99myr Platform is strictly for persons aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of our standard KYC process for all new registrations.

If m99myr discovers or is notified that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete all personal data attributable to that individual, and void any associated balances. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

12. Third-Party Services

The Platform may contain references to third-party services such as payment gateways (Maybank2u, CIMB Clicks, Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX) and game providers. When you interact with these services, their respective privacy policies will govern the processing of any personal data you submit directly to them. m99myr is not responsible for the data practices of independent third-party services.

Any personal data shared with third-party processors as described in Clause 6 of this Policy remains subject to the contractual protections set out in our data processing agreements with those parties.

13. Policy Amendments

m99myr reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform operations. Where material changes are made, we will notify registered players through a Platform notice or by email at least 7 days before the changes take effect.

Your continued use of the Platform following the publication of any amended Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

14. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by m99myr, you may reach our team through the following channel:

For responsible gambling concerns or self-exclusion requests, please visit our dedicated Responsible Gambling page.