Privacy Policy — ptk99 Malaysia

1. About This Policy

This Privacy Policy ("Policy") is issued by ptk99 ("Company", "We", "Us", "Our") and applies to all personal data collected through the ptk99 website at ptk99.asia ("Platform") and any related services, communications, or interactions between you and ptk99.

ptk99 operates as a licensed online gaming platform serving Members in Malaysia and other permitted jurisdictions. As part of our licensing obligations, ptk99 is required to collect and retain certain categories of personal data. This Policy explains what data we collect, why we collect it, how we use it, and what rights you have in relation to your personal data.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

2. Personal Data We Collect

ptk99 collects the following categories of personal data from Members and Platform visitors:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification number (e.g., Malaysian MyKad number);
• Contact Data: Email address, Malaysian mobile telephone number, and residential address;
• Financial Data: Bank account details, e-wallet identifiers (e.g., Touch n Go eWallet, Boost), transaction history, deposit and withdrawal records;
• Identity Verification Documents: Copies of MyKad or passport, utility bills, and bank statements submitted for KYC purposes;
• Account Data: Username, encrypted password hash, account registration date, login history, session records, and account preferences;
• Gaming Activity Data: Betting history, game participation records, wager amounts, win/loss records, bonus usage, and responsible gaming settings;
• Technical Data: IP address, device identifiers, browser type and version, operating system, and session metadata collected automatically when you access the Platform;
• Communications Data: Records of your correspondence with ptk99 customer support, including emails sent to [email protected].

ptk99 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless specifically required by regulatory obligation and with your explicit consent.

3. How We Collect Your Data

ptk99 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or participating in promotions;
• Automated collection: Technical data collected automatically through cookies, web server logs, and analytics tools when you visit or interact with the ptk99 Platform;
• Third-party sources: Identity verification data from KYC service providers; fraud screening data from anti-money laundering compliance services; payment confirmation data from banking and e-wallet partners such as FPX, Touch n Go eWallet, and Boost.

4. Purpose of Processing Your Data

ptk99 processes your personal data for the following purposes:

• To create, verify, and manage your ptk99 Member account;
• To process deposits, withdrawals, and all financial transactions in MYR;
• To comply with Know Your Customer ("KYC") and Anti-Money Laundering ("AML") obligations required under our gaming licence;
• To verify that you meet the minimum age requirement of 21 years;
• To detect, investigate, and prevent fraud, cheating, collusion, and other prohibited conduct;
• To administer bonuses, promotions, and loyalty programmes;
• To provide customer support and respond to your enquiries;
• To enforce our Terms & Conditions and other Platform policies;
• To send transactional communications, including deposit confirmations, withdrawal notifications, and security alerts;
• To send marketing communications about ptk99 promotions and new features, where you have provided consent or where ptk99 has a legitimate interest — you may opt out of marketing communications at any time;
• To improve the Platform's functionality, security, and user experience through aggregated analytics;
• To comply with applicable laws, regulatory requirements, and requests from competent authorities.

5. Legal Basis for Processing

ptk99 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and ptk99 — including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with KYC/AML regulations, licensing conditions, and applicable law, including data retention obligations;
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and service improvement, where such interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

ptk99 does not sell, rent, or trade your personal data to any third party for their independent marketing purposes. ptk99 may share your personal data with the following categories of recipients only to the extent necessary:

• Payment processors: Malaysian banking partners, FPX, Touch n Go eWallet, Boost, and other payment service providers as required to process your transactions;
• Identity verification providers: Third-party KYC and AML compliance services used to verify your identity and screen for sanctions or prohibited persons lists;
• Game content providers: Live casino studio operators and slot game providers who may process limited gameplay session data for the purpose of game delivery and fair-play monitoring;
• IT service providers: Cloud hosting, cybersecurity, and technical infrastructure providers operating under strict data processing agreements;
• Regulatory authorities: Our gaming licensing authority and any competent law enforcement, regulatory, or government body where ptk99 is legally required to disclose information.

All third-party data processors engaged by ptk99 are contractually required to implement appropriate technical and organisational security measures and to process personal data only on ptk99's documented instructions.

7. Cookies & Tracking Technologies

ptk99 uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help the Platform function correctly and improve your experience.

ptk99 uses the following categories of cookies:

• Essential cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality;
• Functional cookies: Store your preferences such as language settings and remembered login state (the "Remember me" feature);
• Analytics cookies: Aggregate, anonymised data used to understand how Members navigate the Platform — helping ptk99 improve usability and performance;
• Marketing cookies: Used to deliver relevant promotional content. These are only activated with your consent.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform's core features.

8. Data Retention

ptk99 retains your personal data for as long as your account is active and for a period thereafter as required by our licensing obligations and applicable law. In practice:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• KYC identity documents are retained for a minimum of five (5) years after the end of the business relationship;
• Support correspondence is retained for three (3) years;
• Technical and session logs are retained for twelve (12) months.

Upon expiry of the applicable retention period, ptk99 will securely delete or anonymise your personal data.

9. Data Security

ptk99 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ptk99 servers;
• Bcrypt hashing for all stored account passwords — raw passwords are never stored;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular third-party security audits and penetration testing;
• Intrusion detection systems and continuous security monitoring;
• Multi-factor authentication for internal administrative systems.

While ptk99 takes every reasonable precaution, no data transmission over the internet can be guaranteed to be 100% secure. Members are responsible for maintaining the security of their own login credentials. If you suspect unauthorised access to your ptk99 account, contact [email protected] immediately.

10. Your Data Protection Rights

Subject to applicable law and our licensing obligations, you have the following rights in respect of your personal data held by ptk99:

• Right of access: Request a copy of the personal data ptk99 holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data, subject to our legal retention obligations;
• Right to restriction: Request that processing of your personal data be restricted in certain circumstances;
• Right to data portability: Receive a copy of certain personal data in a structured, machine-readable format;
• Right to object: Object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Withdraw consent for any processing based on consent, without affecting prior lawful processing.

To exercise any of these rights, submit a written request to [email protected] from your registered email address. ptk99 will respond within thirty (30) days. We may request additional verification of your identity before processing your request.

11. Children's Privacy

The ptk99 Platform is strictly intended for individuals who are 21 years of age or older. ptk99 does not knowingly collect personal data from any person under the age of 21. If ptk99 discovers that personal data has been collected from a person under 21, that data will be deleted and the associated account will be immediately closed.

If you believe a minor may have registered on the ptk99 Platform, please notify us immediately at [email protected].

12. Third-Party Links

The ptk99 Platform may contain references to third-party services such as game providers and payment processors. ptk99 is not responsible for the privacy practices of any third-party services. This Policy applies solely to data processed by ptk99. We encourage you to review the privacy policies of any third-party service you interact with.

13. Changes to This Policy

ptk99 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Members via email or an on-Platform notification at least fourteen (14) days before the changes take effect. The updated Policy will be posted on this page with a revised effective date. Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

14. Contact & Data Enquiries

For all privacy-related enquiries, data subject access requests, or concerns about how ptk99 handles your personal data, please contact us:

Please include "Privacy Request" in the subject line and send from your registered ptk99 email address to facilitate identity verification. ptk99 support staff will never ask for your account password in any correspondence.