Popy99 Privacy Policy – Member Personal Data Protection

1. Introduction

Welcome to popy99's Privacy Policy. This document transparently explains how popy99 ("we", "our platform") collects, processes, stores and protects your personal data when you use the popy99 platform, accessible at popy99.app.

We understand that privacy matters deeply to every user. In today's digital world, your trust in us to keep your personal information safe is something we take very seriously. That is why we have built a robust data protection system and practise the principle of data minimisation — we only collect information that is truly necessary to provide our services to you.

This Privacy Policy applies to all users of the popy99 platform, including website visitors, prospective members, and registered members. By using our services, you agree to the practices described in this document.

2. Personal Data We Collect

Popy99 collects several categories of personal data depending on how you interact with our platform. Below is a summary of the types of data collected:

We do not collect sensitive data such as health information, religious beliefs, political views, or biometric data except in specific cases where required by law.

3. How We Use Your Data

Personal data collected is used solely for the following purposes:

• Account Management: Creating and managing your member account, including the registration process, login and identity verification.
• Transaction Processing: Processing deposits, withdrawals and any financial transactions you make through the platform.
• KYC & AML Compliance: Fulfilling legal obligations related to Know Your Customer (KYC) and anti-money laundering (AML) in accordance with applicable regulations.
• Platform Security: Detecting and preventing fraud, unauthorised access, account abuse and other security threats.
• Customer Support: Providing support and answering your enquiries more effectively when you contact our support team.
• Personalisation: Personalising your gaming experience and offering more relevant promotions based on your usage habits — with your consent only.
• Platform Improvement: Analysing usage data in aggregate (not individually) to improve the features and performance of the popy99 platform.
• Legal Compliance: Complying with any court orders, regulatory directives or applicable legal requirements.

4. Data Sharing with Third Parties

Popy99 does not sell or disclose your personal data to third parties for profit. However, there are limited situations where data sharing is necessary:

• Service Providers: Companies that help us operate the platform, such as payment providers, game software providers and technical support services — all are bound by strict confidentiality agreements.
• Legal Compliance: When required by a court, regulatory authority, or Malaysian law enforcement agency through a valid legal process.
• Fraud Prevention: In certain circumstances, we may share information with industry bodies or other platforms to detect and prevent fraud that spans multiple platforms.
• Business Transfer: If popy99 undergoes any corporate restructuring, merger or acquisition, user data may be transferred — however, this Privacy Policy will continue to apply.

In all of the above situations, we ensure that the party receiving your data maintains a level of protection equal to or higher than our own.

5. Cookies & Tracking Technologies

Popy99 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Analytics Cookies: Helping us understand how users interact with the platform so we can improve it. Data is collected in aggregate and does not identify individuals.
• Preference Cookies: Saving your preferences such as language and display settings so you do not need to reconfigure them each time.
• Session Cookies: Temporary cookies that are automatically deleted when you close your browser.

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the popy99 platform.

6. Data Security

Protecting your personal data is popy99's top priority. We implement multiple layers of technical and organisational security to ensure your data is always protected:

• Data in Transit Encryption: All communications between your device and popy99's servers are protected with 256-bit TLS/SSL encryption.
• Stored Data Encryption: Sensitive data such as financial information and identity documents is stored in encrypted format within our database.
• Multi-Factor Access Control: Access to popy99's internal systems containing user data requires multi-factor authentication and is permitted only to authorised personnel.
• Continuous Monitoring: Our security systems monitor for suspicious activity around the clock, 24 hours a day, 7 days a week.
• Regular Penetration Testing: popy99 conducts regular security testing by independent parties to identify and address any system vulnerabilities before they can be exploited.
• Staff Training: All staff who handle user data undergo regular data protection training.

7. Data Retention & Deletion

Popy99 only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law.

• Active Account Data: Retained for the duration your account is active and for a specified period after account closure to meet audit and legal requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years in compliance with anti-money laundering regulatory requirements.
• Communication Logs: Records of interactions with our customer support team are retained for three (3) years.
• Aggregated Analytics Data: Anonymised usage data may be retained for a longer period for platform improvement purposes.

When data is no longer needed and there is no legal obligation to retain it, popy99 will securely delete or anonymise the data using industry-approved methods.

8. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by popy99:

To exercise any of the above rights, please contact our data protection team via email or live chat. We will process your request within the timeframe required by law.

9. Children's Privacy

Popy99 Platform not intended for individuals under the age of 18. We do not knowingly collect personal data from children or minors.

Should we discover that personal data of a minor has been collected without valid consent, we will take immediate steps to delete that data and terminate the account in question.

Parents or guardians who discover that their child has registered an account on popy99 are requested to contact our support team immediately so that appropriate action can be taken.

10. Changes to This Privacy Policy

Popy99 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments.

When any significant changes occur, we will:

• Displaying clear notices on the popy99 platform homepage.
• Updating the "Last Updated" date at the top of this document.
• Sending notifications to registered members via their registered email address for critically important changes.

Continued use of the popy99 platform after the effective date of such changes will be considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

11. Contact Us About Privacy

If you have any questions, concerns or wish to exercise your rights regarding your personal data, popy99's Data Protection Officer team is ready to assist you.

• Live Chat: The fastest method — available 24/7 directly on the popy99 platform.
• Email: [email protected] — for detailed and formal privacy enquiries.
• FAQ: Visit page FAQ us for answers to frequently asked privacy questions.

We are committed to responding to all privacy-related enquiries within three (3) business days. For official requests relating to data subject rights, processing may take up to 21 working days depending on the complexity of the request.