Privacy Policy won999 —
Protection of Your Personal Data

1 Introduction & Our Commitment

Won999 ("we", "Platform") values the privacy of every member who uses our services. We understand that personal data is a valuable asset and that your trust in us is a responsibility we take seriously.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. It clearly outlines what types of information we collect, why we need it, how we use it, and the measures we take to keep it safe in our care.

We believe transparency is the foundation of trust. That is why we strive to use clear, plain language in this document — not confusing legal jargon — so you truly understand your rights and how we handle your data.

2 Information We Collect

Won999 collects the information necessary to provide a secure, legally compliant, and high-quality service. The types of information we collect are as follows:

We only collect information that is strictly necessary for the stated purposes. We do not collect sensitive data such as your medical information, political views, or religious beliefs unless you voluntarily provide it in a specific context.

When you use the won999 mobile app, we may request access to your camera (for KYC verification), push notifications (for account updates), and network data (for normal app operation). All these permissions are optional and can be managed through your device settings.

3 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. We use your information for the following purposes:

• Identity Verification (KYC): To verify that you are a real and eligible individual, prevent fraud, and comply with regulatory requirements.
• Transaction Processing: To process deposits and withdrawals quickly and securely to the account you registered.
• Account Security: To identify and prevent unauthorised access, suspicious activity, and fraud on your account.
• Customer Support: To help you resolve issues, answer enquiries, and handle complaints effectively.
• Legal Compliance: To fulfil legal obligations including anti-money laundering (AML) compliance and regulatory reporting requirements.
• Service Improvement: To understand usage patterns, improve platform features, and personalise your experience.
• Responsible Gaming: To monitor gaming habits and provide timely support to members who may need assistance.
• Marketing Communications: To keep you informed about the latest promotions and offers — only if you have consented to receive such communications.

4 Information Sharing & Disclosure

Won999 does not share your personal data with external parties except in the following limited situations required for platform operations or mandated by law:

1. Payment Service Providers: Required financial data is shared with licensed payment processors (such as FPX, Touch 'n Go, DuitNow) solely for the purpose of processing your transactions. These providers are bound by strict confidentiality agreements.
2. Third-Party Service Providers: Companies we engage to provide support services such as platform analytics, cybersecurity, and customer support. They receive only the minimum data necessary and are not permitted to use it for any other purpose.
3. Authorities & Regulators: We will disclose information to the police, courts, or government authorities when required by a court order, warrant, or valid legal requirement.
4. Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred. In such situations, we will notify you in advance and ensure that equivalent data protection standards are maintained.

5 Cookies & Tracking Technologies

Won999 uses cookies and similar tracking technologies to enhance user experience, maintain login sessions, and analyse platform usage patterns. The types of cookies we use are as follows:

Essential Cookies are cookies required for basic platform operations such as login session authentication, security, and core website functionality. These cookies cannot be disabled as they are critical to platform functionality.

Analytics Cookies helps us understand how members use the platform — which pages are visited most frequently, how long gaming sessions last, and where users encounter difficulties. This information is used in aggregate and without individual identification to improve the platform.

Preference Cookies stores your preferences such as preferred language, time zone, and display settings so you do not need to reconfigure them each time you use the platform.

You can manage or block cookies through your web browser settings. However, blocking essential cookies may affect platform functionality and your overall user experience.

6 Security & Data Protection

Won999 continually invests in high-grade security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and won999's servers is encrypted using industry-standard security protocols.
• Two-Factor Authentication (2FA): We support and encourage the use of 2FA on all accounts as an added layer of security.
• 24/7 Monitoring: An automated monitoring system operates around the clock to detect and respond to any security threats in real time.
• Internal Access Control: Access to user data among staff is governed by a "need-to-know" principle — only personnel who require access to carry out their duties are permitted.
• Regular Security Audits: We conduct regular penetration testing and independent security audits to identify and address system vulnerabilities.
• Data Segregation: Personal data is stored separately from gaming data and financial data using an integrated database architecture.

7 Your Rights Under PDPA

As a data subject, you have the following rights under Malaysia's Personal Data Protection Act (PDPA) 2010, which won999 is fully committed to upholding:

To exercise any of the above rights, contact the won999 customer support team via Live Chat or email at [email protected]. We will process your request within 30 business days in accordance with legal requirements.

8 International Data Transfers

In some cases, your personal data may be processed or stored outside Malaysia — for example, by cloud infrastructure providers or international payment processors we work with. When this occurs, won999 ensures that:

• Transfers occur only to countries or entities that provide a level of data protection equivalent to or greater than Malaysia's PDPA.
• A comprehensive Data Processing Agreement is signed with all parties involved in such transfers.
• Technical protection measures such as end-to-end encryption are applied during data transfer processes.

9 Children's Data Protection

Won999 is an entertainment platform strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data of a child has been collected without our knowledge, we will take immediate steps to delete that information and close the associated account. If you believe your child or any minor has accessed our platform, please contact us immediately so we can respond promptly.

10 Data Retention Period

Won999 only retains your personal data for as long as necessary to fulfil the original purpose of collection or as required by law. Our general data retention guidelines are as follows:

After the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. The deletion process follows standard procedures that ensure data cannot be recovered.

11 Amendments to This Privacy Policy

Won999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements. When significant changes are made, we will:

• Publishing the latest version with a new effective date at the top of this page.
• Sending email notifications to all registered members outlining the key changes.
• Displaying a notice on the platform for at least 14 days before the changes take effect.

Continued use of the won999 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request data deletion in accordance with your rights under the PDPA.

12 Contact Our Data Protection Officer

Won999 has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this Privacy Policy and handling all privacy-related enquiries. For any questions, concerns, or to exercise your rights, you may contact us through:

• Privacy Email: [email protected] — for formal personal data-related requests.
• Live Chat: Available 24/7 on the won999 platform for immediate assistance.
• FAQ Page: Visit FAQ page for answers to frequently asked questions about privacy and account security.

We commit to providing an initial response within 48 business hours and resolving all requests within 30 business days in accordance with PDPA requirements. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.