Privacy Policy

This Privacy Policy ("Policy") is issued by ppclub99 ("we", "us", "our", or "the Company"), the operator of the online casino and sports betting platform accessible at https://ppclub99.cam and its associated domains ("Platform").

This Policy describes how ppclub99 collects, uses, stores, shares, and protects the personal data of individuals who register an account, make a deposit, participate in games, access promotional offers, or otherwise interact with the Platform ("Players", "Users", or "you").

ppclub99 is committed to responsible data management. We treat your personal information with the same level of care that we apply to your financial security on the Platform. By registering an account or continuing to use the ppclub99 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Policy applies to all players accessing ppclub99 from any location, including players in Malaysia — in cities such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — as well as players accessing from other jurisdictions. Where data protection obligations differ by jurisdiction, ppclub99 adheres to the standards applicable under our international gaming licence framework.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information that directly or indirectly identifies a living individual, including but not limited to names, identity document numbers, contact details, financial information, and IP addresses.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, and destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, ppclub99.
• "Data Processor" means a third party that processes Personal Data on behalf of ppclub99 under a contractual data processing agreement.
• "KYC" means Know Your Customer — the identity and document verification process required prior to withdrawal processing.
• "AML" means Anti-Money Laundering compliance obligations applicable under ppclub99's international gaming licence.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, analytics, and personalisation.
• "Third-Party Payment Processors" refers to payment service providers including but not limited to Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, DuitNow, FPX, and USDT TRC20 gateway operators.

ppclub99 collects Personal Data in a variety of categories, depending on how you interact with the Platform. The categories of data we collect and their primary purposes are set out in the table below:

We collect only the minimum Personal Data necessary to deliver our services and comply with applicable legal obligations. We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, or health data) except where expressly required by AML or responsible gambling obligations.

ppclub99 collects Personal Data through the following channels and methods:

4.1 Directly From You

• During account registration, when you provide your name, date of birth, email address, phone number, and residential address.
• When you submit KYC verification documents, including your MyKad, passport, or proof of address.
• When you make a deposit using Malaysian payment methods such as Touch 'n Go eWallet, Maybank2u, CIMB Clicks, DuitNow, or FPX.
• When you contact our customer support team via live chat, WhatsApp, WeChat, or email — in any of our three supported languages (English, Bahasa Melayu, or Mandarin Chinese).
• When you participate in surveys, promotions, or competitions, or when you submit a complaint or feedback.

4.2 Automatically From Your Device

• Technical Data including your IP address, device identifier, browser type, and operating system is collected automatically when you access the Platform.
• Usage Data including your game session history, wager amounts, login and logout timestamps, and in-session navigation patterns is collected via server logs and analytics tools.
• Cookies and similar tracking technologies collect preference and session data — see Section 9 of this Policy for full details.

4.3 From Third Parties

• Identity verification service providers may share verification status data with us as part of the KYC process.
• Payment processors including Malaysian e-wallet providers and bank FPX gateways share transaction reference data to confirm deposit and withdrawal status.
• Fraud prevention and AML screening services may share risk signals and watchlist match data to assist our compliance obligations.

ppclub99 processes your Personal Data for the following specific purposes:

5.1 Account Management

We process Identity Data and Contact Data to create, maintain, and manage your ppclub99 Account, to verify your identity and age (21+), and to communicate account-related information including security alerts, balance notifications, and account status updates.

5.2 Payment Processing

We process Financial Data to facilitate deposits and withdrawals via your chosen Malaysian payment method — Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, DuitNow, FPX, or USDT TRC20. Transaction data is retained for financial record-keeping and audit purposes.

5.3 AML and Fraud Prevention

ppclub99 is required under its international gaming licence to conduct Anti-Money Laundering checks. We process Financial Data, Identity Data, Technical Data, and Usage Data to detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes. This is a legal obligation that we cannot waive at a player's request.

5.4 Responsible Gambling Monitoring

We analyse Usage Data — including session length, deposit frequency, and bet size patterns — to identify players who may be exhibiting signs of problem gambling behaviour. This processing is carried out to protect player welfare and is a condition of our responsible gambling programme obligations.

5.5 Platform Improvement

Aggregated and anonymised Usage Data is analysed to improve platform performance, game selection, payment system reliability, and user experience across all devices used by our Malaysian player base.

5.6 Marketing Communications

Where you have provided explicit consent, we may use Contact Data and Preference Data to send you promotional offers, bonus notifications, and platform updates by email or in-app notification. You may withdraw marketing consent at any time by contacting our support team or using the unsubscribe mechanism in any marketing email.

ppclub99 processes Personal Data on one or more of the following legal bases depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and ppclub99 — including account creation, deposit processing, game participation, and withdrawal fulfilment.
• Legal Obligation: Processing required to comply with applicable AML, KYC, and responsible gambling obligations under our international gaming licence framework.
• Legitimate Interests: Processing necessary for the legitimate interests of ppclub99, including fraud prevention, platform security, and analytical improvement of services, where these interests are not overridden by your data protection rights.
• Consent: Processing of your data for marketing communications, where you have provided freely given, specific, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ppclub99 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share your Personal Data with the following categories of recipients, strictly as necessary for the purposes described in this Policy:

7.1 Payment Service Providers

We share transaction-relevant data with Malaysian payment service providers including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and FPX gateway operators to process your deposits and withdrawals. These providers have their own privacy policies governing their data use.

7.2 Identity Verification Providers

We engage specialist third-party KYC verification services to validate your identity documents. These providers process your Identity Data and Verification Data under strict data processing agreements and are bound to use it only for the verification purpose.

7.3 Gaming Software Providers

Game providers supplying content to the ppclub99 Platform may receive limited anonymised session data necessary to operate and audit their game software. No personally identifiable information is shared with game providers beyond what is technically required for game session management.

7.4 Legal and Regulatory Authorities

ppclub99 will disclose Personal Data to law enforcement agencies, regulatory authorities, or courts where we are required to do so by applicable law, valid legal process, or our international gaming licence obligations. We will notify you of such disclosures where legally permitted to do so.

7.5 Corporate Transactions

In the event of a merger, acquisition, or sale of substantially all of ppclub99's business assets, Personal Data held on our Platform may be transferred to the acquiring entity as part of the transaction, subject to confidentiality obligations and the continued applicability of this Policy.

ppclub99 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our general retention schedule is as follows:

• Account Data (Identity & Contact Data): Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Financial Data (transaction records): Retained for a minimum of five (5) years from the date of the transaction.
• KYC Verification Documents: Retained for the duration of your account and for a minimum of five (5) years following account closure.
• Usage and Game History Data: Retained for a minimum of three (3) years from the date of the activity, for responsible gambling monitoring, dispute resolution, and audit purposes.
• Support Communications: Retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Retained until consent is withdrawn, plus one (1) year thereafter as an evidence record.

Where Personal Data is no longer required and no legal obligation compels its retention, ppclub99 securely deletes or anonymises the data in accordance with our data destruction procedures.

ppclub99 uses cookies and similar technologies to operate the Platform, enhance your experience, and gather analytical data. The categories of cookies we use are described below:

You can manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality. Most modern browsers allow you to view, manage, and delete cookies via the browser's privacy or settings menu.

ppclub99 implements a multi-layered security infrastructure designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the ppclub99 Platform is encrypted in transit using industry-standard SSL/TLS encryption.
• Data Encryption at Rest: Sensitive Personal Data — including identity verification documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Internal staff access is governed by role-based permissions, with all access events logged and audited.
• Two-Factor Authentication (2FA): Available to all Players and mandatory for staff with administrative access to Player data systems.
• Regular Security Audits: ppclub99 conducts periodic penetration testing, vulnerability assessments, and security audits to identify and remediate potential risks.
• Incident Response Plan: We maintain a documented data breach incident response procedure. In the event of a breach affecting your Personal Data, we will notify affected players and relevant authorities in accordance with applicable obligations.

Depending on your jurisdiction and the applicable data protection framework, you may have the following rights in relation to your Personal Data held by ppclub99. We endeavour to honour these rights in line with international best practice, even where not strictly mandated by local law:

To exercise any of the above rights, please contact our Data Protection team via the support channels listed in Section 15. We may need to verify your identity before processing any rights request. We will respond to all requests within 30 days. Complex requests may require an extension of up to an additional 60 days, in which case we will notify you of the extension and the reason.

The ppclub99 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Registration by any person under 21 is a breach of our Terms and Conditions and is strictly prohibited.

Our registration process requires date of birth disclosure and is subject to KYC verification that confirms minimum age compliance. If ppclub99 identifies or is notified that Personal Data has been collected from a person under 21, we will take immediate steps to close the account, void all associated balances and transactions, and permanently delete or anonymise all Personal Data associated with the account.

If you are a parent or guardian and believe that your child may have registered on ppclub99, please contact us immediately via our 24/7 Live Chat support or at the email address provided in Section 15 of this Policy.

The ppclub99 Platform may contain references to third-party payment service providers, game software providers, and support infrastructure. When you transact with a third-party payment provider — such as Touch 'n Go eWallet, Boost, GrabPay, or Maybank2u — you are directed to that provider's own platform and are subject to their separate privacy policy and data handling practices.

ppclub99 is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party service you use in connection with your ppclub99 Account. Our Data Processor agreements require third parties who handle data on our behalf to implement appropriate technical and organisational security measures, but ppclub99 cannot guarantee the data practices of independent third parties acting in their own capacity.

ppclub99 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. Material changes to this Policy will be communicated to registered players via the email address on file or by a prominent notice on the Platform before the changes take effect.

The date of the most recent revision is indicated at the top of this Policy under "Last Updated." Where legally required, material changes that affect your rights or our processing activities will be accompanied by a renewed consent request before the new terms apply to your data.

Your continued use of the ppclub99 Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any amended provisions, you may close your Account and request deletion of your Personal Data subject to the retention obligations described in Section 8.

If you have any questions, concerns, or complaints relating to this Privacy Policy or ppclub99's data processing practices, or if you wish to exercise any of your data rights as described in Section 11, please contact us through the following channels:

• Live Chat (24/7): Available inside your ppclub99 Account dashboard. Average response time under 5 minutes. Supported in English, Bahasa Melayu, and Mandarin Chinese.
• Email (plain text — not a clickable link): [email protected] — our team typically responds to email enquiries within 24 hours. Please mark your subject line as "Privacy Enquiry" for faster routing.
• Postal correspondence: For formal legal notices relating to data subject rights, please contact us by email at the address above clearly marked "Data Subject Rights Request" or "Formal Legal Notice." We will acknowledge receipt within 5 business days.

ppclub99 is committed to resolving all data privacy concerns promptly and transparently. If you remain dissatisfied with our response to a data privacy complaint, you may have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.