King999 Privacy Policy – Your Data Protection in Malaysia

This Privacy Policy is issued by king999 and applies to all members, registered users, and visitors of the king999 platform in Malaysia. This document outlines our privacy practices regarding the collection, use, storage, disclosure, and protection of your personal data in the context of your use of our Sports Betting, Live Casino, slots, lottery, and e-sports platform.

By registering a king999 account or using any of our services, you acknowledge that you have read and understood this Privacy Policy. Continued use of the king999 platform after any policy update is published will be considered acceptance of the updated terms.

King999 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and takes the protection of our members' personal data seriously. If you have any questions about how we handle your data, you may contact us at any time through the channels listed at the end of this document.

King999 collects only the personal data necessary to provide our members with a secure, responsible, and high-quality service. Below are the categories of data we collect and how they are collected:

King999 does not collect sensitive data categories such as health information, political opinions, religious beliefs, or biometric data, except in specific circumstances required by law and with your explicit consent.

Automatically collected data — such as IP addresses, device information, and on-platform activity logs — is used primarily for security purposes, fraud detection, and improving the user experience. This data is not used to build marketing profiles or sold to advertisers.

Every use of personal data by king999 has a clear and lawful purpose. We do not use your data beyond what is necessary to provide our services. The following are the primary purposes for which your personal data is used:

• Account management: To create, verify, maintain, and protect your king999 account, including secure login processes and identity verification.
• Transaction processing: To securely and accurately process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to your Malaysian bank account or e-wallet.
• Gaming service provision: To give you full access to all games available on king999 — slots, Live Casino, Sports Betting covering the Malaysia Super League and EPL, lottery, and e-sports.
• Security and fraud prevention: To monitor and detect any suspicious activity, collusion, or fraud attempts on the platform in order to protect all members.
• Legal compliance: To fulfil legal obligations, including anti-money laundering (AML) monitoring requirements and identity verification mandated by regulatory authorities.
• Customer support: To provide prompt and accurate assistance whenever you contact the king999 support team via live chat or email.
• Platform improvements: To analyse usage patterns in aggregate (not at the individual level) in order to improve the user experience, refine the interface, and develop useful new features.
• Service communications: To send you important notifications about your account, changes to our terms, or security information you need to be aware of.

King999 does not sell or rent members' personal data to any third party. However, there are limited situations where king999 needs to share your data with specific parties for legitimate purposes. All such sharing is strictly governed by binding data protection agreements:

• Technology service providers: Game providers such as Evolution Gaming, Pragmatic Play, PGSoft, and NetEnt receive only the minimum data required to run your gaming session. All such providers are bound by strict data protection agreements and may not use your data for any other purpose.
• Payment processors: Payment gateways handling transactions for Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other e-wallets receive the transaction information necessary to process your deposits and withdrawals securely.
• Regulatory and law enforcement authorities: King999 will disclose personal data to the relevant authorities when required by Malaysian law, a court order, or a lawful directive from the applicable regulatory body.
• Identity verification service: To meet KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements, king999 may share identity information with authorised third-party verification services.

In all instances of data sharing described above, king999 ensures that the receiving party has adequate data protection measures in place and uses the data only for the stated purpose. King999 remains accountable for the security of your data even when shared with approved third parties.

Protecting member personal data is an operational priority at king999. We continuously invest in cybersecurity infrastructure to keep your data safe at all times. Key security measures we have implemented include:

• 256-bit SSL encryption: All communications between your device and king999's servers are encrypted using TLS 1.3 protocol with 256-bit encryption — the highest industry standard used by leading financial institutions worldwide.
• Encrypted data storage: All personal and financial data stored in king999's systems is encrypted at rest using AES-256 standard, meaning the data remains unreadable even to unauthorised staff.
• Structured access controls: Access to members' personal data is restricted to staff with a legitimate business need who have completed data protection training, and all access is logged and audited on a regular basis.
• 24/7 security monitoring: The king999 system is continuously monitored for intrusion attempts, unauthorised access, and security anomalies that could compromise member data.
• Regular security testing: King999 conducts regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities before they can be exploited.
• Two-factor authentication: Two-factor authentication (2FA) is available to all king999 members and is strongly recommended to protect your account from unauthorised access.

King999 does not retain your personal data longer than is necessary for the purpose it was collected, or as required under Malaysian law. Our data retention policy is as follows:

• Active account data: For as long as your king999 account remains active, we retain all data necessary to deliver our services to you, including identity information, transaction records, and gaming history.
• Data following account closure: After your account is closed, king999 retains transaction records and minimum identity data for 7 years as required under Malaysia's anti-money laundering laws and financial regulations.
• Support communication logs: Records of interactions with the king999 support team are retained for 3 years for dispute reference and service improvement purposes.
• Marketing data: If you withdraw consent for marketing communications, king999 will update your preferences within 30 days and stop sending you promotional communications.
• Technical log data: Access logs and technical activity records are retained for a maximum of 12 months for security and fraud detection purposes, after which it is automatically deleted or anonymised.

Once the designated retention period expires, king999 will delete or anonymise your personal data in a secure and irreversible manner. This deletion process runs automatically according to the schedule set within our data management system.

King999 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored in your web browser when you visit the king999 site. Below are the types of cookies we use and their purposes:

• Essential cookies: These cookies are required for the core functionality of the king999 platform, including maintaining your login session and ensuring account security. The platform will not function properly without them and they cannot be disabled.
• Performance cookies: Used to gather information on how members use the king999 platform — most visited pages, time spent, and any errors encountered. This data is collected in aggregate form and does not identify individuals.
• Functional cookies: Allows the platform to remember your preferences such as display language, colour theme, and game settings to enhance your experience in future sessions.
• Security cookies: Helps king999 detect suspicious activity, prevent unauthorised access, and ensure every gaming session is secure for members.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the king999 platform. For the best and most secure experience, we recommend keeping essential and security cookies enabled while using our platform.

As a data subject under Malaysia's PDPA 2010, you have important rights regarding your personal data held by king999. King999 is committed to respecting and facilitating the exercise of these rights:

King999 takes child protection extremely seriously. The king999 platform is exclusively for users aged 21 and above and we do not knowingly collect personal data from minors.

All king999 account registrations involve strict age verification. If we detect or are informed that a minor has registered an account, we will take immediate action to:

• Suspending and terminating the account in question immediately.
• Deleting all personal data associated with the account.
• Returning any remaining balance, where applicable, to the original payment method.
• Report the incident to the relevant authorities where required by law.

If you are a parent or guardian and suspect that your child has accessed the king999 platform without your knowledge, please contact our support team immediately via live chat or email for prompt action.

In the course of its operations, king999 may need to transfer members' personal data to servers or systems located outside Malaysia — particularly in connection with the use of international game provider services such as Evolution Gaming, Pragmatic Play, and PGSoft, which operate on global server infrastructure.

All cross-border data transfers are carried out in accordance with Malaysia's PDPA requirements and with adequate safeguards in place, including:

• Binding Data Processing Agreements with all third-party providers that receive king999 member data.
• Standard contractual clauses that ensure a level of data protection equivalent to or higher than Malaysian standards.
• Regular assessments of the data protection practices of all partners to ensure ongoing compliance.

King999 works only with international providers that operate under strict data controls and have a proven privacy compliance track record within the regulated online gaming industry.

King999 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or feedback from our member community. We are committed to notifying you of any significant changes in a clear and timely manner.

• Material changes to this Privacy Policy will be communicated via in-platform notifications on king999 and/or by email to the address registered on your account.
• The effective date of the latest version of this Privacy Policy will always be clearly stated at the top of this document.
• For more significant changes that materially affect your rights, king999 will provide at least 30 days before those changes take effect, giving you sufficient time to review them and decide whether to continue using the platform.
• Continued use of the king999 platform after the effective date of any changes will be considered acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically. If you disagree with any changes, you have the right to close your king999 account and request deletion of your data in accordance with the procedure described in the your rights section above.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way king999 handles your personal data, please contact us through the following channels:

• Live Chat 24/7: The fastest way — click the live chat icon within the king999 platform. Our team speaks Bahasa Malaysia and is typically available within minutes.
• Email: support@king999-bangla.com — for privacy enquiries that require documentation or further detail. We aim to respond within 48 hours.

We will verify your identity before processing any request relating to personal data, to ensure the full security and privacy of your account. All requests will be handled diligently and within the timeframe prescribed by Malaysia's PDPA.

If you are not satisfied with king999's response to your privacy enquiry, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory body for personal data protection in Malaysia.