Privacy Policy Payong99 – Member Personal Data Protection in Malaysia

Payong99 collects your personal information only when it is necessary to provide platform services safely and effectively. We do not collect excessive or irrelevant information beyond what is needed to operate the platform. Below are the categories of information we collect and how they are obtained.

1.1 Information You Provide Directly

When you register and use the platform Payong99, you provide us with the following information:

• Identity Information: Full name, date of birth, national identification number (MyKad) or passport number, gender, and nationality.
• Contact Information: Email address, mobile phone number, and residential address in Malaysia.
• Account Information: Username, encrypted password, security questions and personal account settings.
• Financial Information: Payment method details you use — such as your Touch 'n Go e-wallet account number, GrabPay ID, bank account number for FPX (Maybank2u, CIMB Clicks), and other supported local Malaysian payment methods. We do not store credit or debit card numbers directly.
• Verification Documents: A copy of your MyKad or passport and proof of address submitted during the KYC (Know Your Customer) process.

1.2 Automatically Collected Information

When you use the platform Payong99, our systems automatically record certain technical information required for security and service improvement:

• Device & Network Data: IP address, device type, operating system, web browser type, screen resolution, and network information.
• Session & Activity Data: Login and logout times, pages visited, features used, session duration and navigation patterns within the platform.
• Transaction Data: A complete record of all deposits (including payment method — Touch 'n Go, DuitNow, Boost and others), withdrawals, bets placed, matches wagered on and transaction outcomes.
• General Location Data: General geographic location information based on your IP address — this is used to verify that you are accessing from Malaysia and not from a restricted region.

1.3 Information from Third-Party Sources

In certain circumstances, Payong99 may receive information about you from legitimate third-party sources — for example, from identity verification service providers we use to process KYC, or from betting data providers that confirm match results for the Malaysia Super League, MPL e-sports, and other tournaments you bet on. This information is used solely for the stated purposes and is protected to the same security standards.

Payong99 uses your personal information only for legitimate, necessary purposes as stated in this privacy policy. We do not use your data for purposes unrelated to the provision of platform services without first obtaining your explicit consent.

2.1 Primary Purposes of Data Use

• Account Management: Processing registrations, verifying member identities through KYC, maintaining accurate account records, and enabling secure logins to the platform Payong99.
• Financial Transaction Processing: Processing deposits via Touch 'n Go, DuitNow, GrabPay, FPX, and other Malaysian payment methods; processing withdrawals to member accounts; maintaining accurate financial records and fulfilling financial reporting obligations.
• Provision of Betting Services: Processing bets on Malaysia Super League and EPL football, badminton, MPL e-sports, Live Casino, and all other products available at Payong99; calculating and paying out winnings accurately.
• Security & Fraud Detection: Identifying and preventing fraud, money laundering, unauthorised access, account abuse, and activities that violate the platform's terms of use.
• Regulatory Compliance: To fulfil our legal obligations under Malaysia's Personal Data Protection Act (PDPA), anti-money laundering (AML) requirements, and our operating licence conditions.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical support to members across all Payong99 support channels, including live chat and email.

2.2 Secondary Purposes (With Your Consent)

With your consent, Payong99 may use your information for the following purposes, which you may opt out of at any time:

• Sending promotional notices, bonus offers, and new product updates via email or in-platform notifications.
• Conducting customer satisfaction surveys to improve Payong99's services.
• Personalising your in-platform experience based on your usage patterns and preferences.

Payong99 does not sell, rent or trade members' personal data to any third party. This is an absolute commitment with no exceptions based on commercial interest. Your data may be shared only in the limited situations below, and only to the extent necessary for the specified purpose.

3.1 Trusted Service Providers

Payong99 works with carefully selected third-party service providers to handle technical aspects of the platform. These providers are bound by strict data protection agreements and are only permitted to use your data for purposes we have specified:

• Technical Infrastructure Providers: Cloud service providers that host the payong99 platform in accordance with ISO 27001 security standards.
• Payment Service Providers: Payment processors that facilitate transactions via Touch 'n Go, DuitNow, GrabPay, FPX and other Malaysian local payment methods available on the platform.
• KYC Service Providers: Identity verification companies that assist us in verifying member identities and complying with anti-money laundering (AML) requirements.
• Game Providers & Sports Data: Live casino software providers (baccarat, roulette), sports betting data providers (Malaysia Super League, EPL, MPL e-sports) and slot software providers that supply content within the Payong99 platform.

3.2 Legal Requirements & Regulatory Authorities

Payong99 may be required to disclose member information to government authorities or regulatory bodies in the following situations:

• When required by a court order, legal summons, or a valid official request from a Malaysian regulatory authority.
• In criminal investigations involving the use of the platform — including cases of money laundering, financial fraud, or other serious offences.
• To fulfil financial and tax reporting obligations as required by applicable law.

Payong99 makes serious investments in security infrastructure to protect every member's personal and financial data. Security is not an add-on feature for us — it has been the foundation of how our platform is built and operated from day one.

4.1 Technical Security Measures

• AES-256 Data Encryption: All personal and financial data is stored with Advanced Encryption Standard (AES) 256-bit encryption — the same standard used by leading financial institutions worldwide.
• SSL/TLS Transmission Encryption: All communication between your browser and Payong99's servers is secured with the latest SSL/TLS protocols, ensuring your data cannot be intercepted in transit.
• Two-Factor Authentication (2FA): Payong99 offers two-factor authentication for account login — an extra layer of protection that is strongly recommended for all members.
• 24/7 Security Monitoring: An automated monitoring system operates around the clock to detect suspicious activity, unauthorised access attempts and transaction anomalies within the Payong99 platform.
• Regular Security Testing: We carry out regular penetration testing and independent security audits by qualified third parties to identify and address any vulnerabilities.

4.2 Operational Security Measures

In addition to technical measures, Payong99 also enforces strict operational policies:

• Access to member data is restricted to Payong99 staff who require it to perform their duties — the "minimum privilege access" principle.
• All staff with access to member data undergo information security training and background checks.
• Access logs to member data are recorded and closely monitored to detect any unauthorised use.

4.3 In the Event of a Data Breach

While Payong99 takes all reasonable steps to protect your data, no system can guarantee absolute 100% security. In the event of a data security breach affecting members' personal information, Payong99 is committed to notifying affected members within a reasonable timeframe and taking the necessary remedial steps in accordance with applicable legal requirements.

The Payong99 platform uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and help us understand how members use our services. This section explains the types of cookies we use and how you can manage them.

5.1 Types of Cookies Used

5.2 Cookie Controls

You can control or block cookies through your web browser settings. Please note, however, that blocking essential cookies will affect the functionality of the platform Payong99 — you may be unable to log in or use certain features properly. Cookies used by Payong99 do not contain directly identifiable personal information — they use random session identifiers linked to your account within our system.

Under Malaysia's Personal Data Protection Act (PDPA) and international privacy principles, you as a member Payong99 have the following rights regarding your personal data. We respect these rights and will handle all related requests carefully and in a timely manner.

• Right of Access: You have the right to request a copy of the personal data we hold about you. Data access requests will be processed within 30 business days.
• Right to Rectification: If you find that any personal information we hold about you is inaccurate or out of date, you have the right to request a correction. Basic details such as your phone number and email address can be updated directly in your payong99 account settings.
• Right to Restriction of Processing: In certain circumstances provided for by law, you may request that we restrict the processing of your data while awaiting the resolution of an issue.
• Right to Object: You have the right to object to the use of your data for direct marketing purposes at any time. Your objection will be processed immediately with no penalty to your account.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data. However, Payong99 may be required to retain certain data for periods mandated by law (such as financial transaction records) even after an account is closed.
• Data Portability Right: You have the right to request your personal data in a machine-readable format for transfer to another service, to the extent provided for under applicable law.

To submit any request relating to the rights above, please contact the Payong99 Data Privacy Officer by email at support@payong99.com stating the type of request and your account details. We will verify your identity before processing any request relating to personal data.

Payong99 retains members' personal data only for as long as necessary for the stated purposes and to fulfil legal obligations. We do not keep your data longer than required. The following are retention guidelines for key data categories:

• Active Account Data: Retained for as long as your account remains active on the Payong99 platform. This data is required for the continued provision of services.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in accordance with applicable Malaysian financial and tax regulations. This includes deposit records via Touch 'n Go, DuitNow, FPX, and all other payment methods.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with applicable anti-money laundering (AML) requirements.
• Betting Activity Data: Betting records for football, e-sports, live casino, and other products are retained for a minimum of 5 years for dispute resolution and audit purposes.
• Security Logs: Technical logs used for fraud detection and platform security are retained for 2 years.
• Closed Accounts: Upon account closure, Payong99 will retain the minimum information required by law for the prescribed period, after which the data will be securely deleted or anonymised.

8.1 Contact the Data Privacy Officer

If you have any questions, concerns, or requests regarding the Payong99 Privacy Policy or how we handle your personal data, please reach us through the following channels:

• Email: support@payong99.com (please state "Privacy Inquiry" in the subject line)
• Live Chat: Available 24/7 directly within the Payong99 platform after logging in

We are committed to responding to all privacy-related enquiries within 2 working days. For requests that require further investigation or identity verification, the full response may take up to 30 working days.

8.2 Privacy Policy Amendments

Payong99 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Any material amendments will be communicated to members via their registered email or an in-platform notice at least 14 days before taking effect.

The "Updated" date at the top of this document will be revised whenever changes are made. You are encouraged to review this Privacy Policy periodically. Continued use of the platform Payong99 after the amended version is published and takes effect will be considered acceptance of the revised policy.