FA99 Privacy Policy — Personal Data Protection Every One of Our Members

This Privacy Policy ("Policy") explains how FA99 ("we", "Platform" or "FA99") collects, processes, stores and protects your personal information when you use the fa99.st website, the FA99 mobile app, or any other services provided by FA99.

This Policy has been drafted in accordance with the provisions of the Personal Data Protection Act 2010 (PDPA) Malaysia and internationally recognised data protection principles. We fully comply with the legal obligations applicable to data operators within Malaysia's jurisdiction.

By registering a FA99 account, using our platform, or by continuing to browse this website, you agree to the data collection and usage practices described in this Privacy Policy. If you do not agree, please stop using the FA99 platform.

FA99 collects various types of information from our users for platform operation, security, and service improvement purposes. The information we collect can be divided into two main categories:

A. Information You Provide Directly

• Full name and identity card number (MyKad) or passport used during account registration.
• Registered email address and mobile phone number.
• Date of birth for age verification purposes (you must be 18 years of age or older).
• Bank account details, account number and bank name for deposit and withdrawal purposes.
• Copies of identity documents (KYC) such as national ID, passport, or driving licence when required.
• A selfie or facial photo for identity verification during the liveness check process.
• Any additional information you provide to our customer support team during assistance sessions.

B. Information Collected Automatically

• Your IP address, web browser type, operating system, and device information.
• Access log data including the dates, times, and pages visited during your sessions on FA99.
• General geolocation data based on IP address for compliance and security purposes.
• App usage information, navigation patterns and setting preferences within the FA99 platform.
• Cookie data and similar tracking technologies as described in Section 6.
• Records of all financial transactions including deposits, withdrawals, and wagering activity.

Every piece of data we collect is used for a specific, legitimate purpose. fa99 will not process your data for any purpose beyond those stated below unless with your explicit consent or as permitted by law.

For marketing communications — including promotional emails, offer notifications, and bonus messages — you may withdraw your consent at any time via your fa99 account settings or by contacting our support team. Withdrawing consent will not affect your overall use of the platform.

FA99 does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, in certain limited and lawful situations, FA99 may share your data with the following parties:

• Payment Service Providers: Payment gateway providers, banks and e-wallet providers that process your deposits and withdrawals. They are bound by strict confidentiality agreements.
• KYC Service Providers: Trusted third-party companies that assist fa99 in conducting automated identity verification and AML checks.
• Game Software Providers: Casino and sports software providers that require minimal information to ensure a seamless gaming experience.
• Analytics & Technology Providers: Analytics tools that help FA99 understand platform usage patterns in aggregate and anonymised form for improvement purposes.
• Authorities and Regulatory Bodies: When required by Malaysian law, court order, or directive from a competent authority.

FA99 continuously invests in industry-grade security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The key security measures we employ include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and fa99's servers is encrypted using the same 256-bit SSL protocol used by banking institutions.
• Data-at-Rest Encryption: Sensitive data stored in FA99's databases, including financial information and KYC documents, is encrypted using AES-256.
• Two-Factor Authentication (2FA): FA99 offers 2FA for all member accounts as a strongly recommended additional layer of security.
• Internal Access Controls: Only specifically authorised FA99 staff may access member personal data, and every access is recorded in an audit log.
• Security Audits: FA99 conducts regular penetration testing and security audits by independent cybersecurity firms.
• 24/7 Monitoring: A real-time threat monitoring system operates around the clock to detect and respond to any suspicious activity.

While fa99 takes all reasonable steps to protect your data, no digital security system is entirely perfect. In the event of any data breach that materially affects your information, fa99 will notify you within the timeframe required by applicable law.

FA99 uses cookies and similar tracking technologies to enhance the user experience, ensure session security, and understand how our platform is used. The types of cookies we use are as follows:

• Essential Cookies (Required): These cookies are required for core platform functions such as login verification, session security and platform stability. They cannot be disabled.
• Performance/Analytics Cookies: Enables FA99 to understand how users interact with the platform — most visited pages, time spent and navigation patterns. This data is collected anonymously.
• Functional Cookies: Saves your preferences such as language, display settings and platform options to ensure a more personalised experience.
• Security Cookies: Helps FA99 detect suspicious login activity, unauthorised access attempts and other cybersecurity threats.

You can manage cookie settings through your web browser. Disabling certain cookies may affect the functionality of some FA99 platform features. For more information on managing cookies in your browser, please refer to your web browser's support documentation.

As a fa99 user protected under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal data we hold:

• Access Rights: You have the right to request a copy of the personal data FA99 holds about you in a readily readable format.
• Right to Rectification: If your data is inaccurate or out of date, you have the right to request fa99 to correct that information.
• Right to Withdraw Consent: For data processing based on your consent (such as marketing communications), you may withdraw that consent at any time.
• Right to Restrict Processing: In certain circumstances, you may request FA99 to restrict the way your data is processed.
• Right to Request Erasure: You may request the deletion of your personal data, subject to FA99's legal obligations that require the retention of certain records.

To exercise any of the above rights, please contact fa99's data protection team at [email protected]. We will process your request within 21 business days in accordance with Malaysia's PDPA requirements.

FA99 does not retain your personal data longer than is necessary for the purposes stated in this Policy or as required by Malaysian law. The following are our data retention period guidelines:

• Active Account Data: Retained for the duration your account remains active on FA99 and for any additional period required after account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax legal requirements.
• KYC Documents: Retained for a minimum of 5 years following the end of the business relationship in accordance with Malaysia's AML/CTF requirements.
• Security & Access Logs: Retained for 12 months for security investigation and fraud prevention purposes.
• Marketing Data: Deleted or anonymised within 30 days after you withdraw your marketing consent.
• Customer Support Records: Retained for 3 years to ensure the continuity and quality of support services.

When the retention period expires or after a valid deletion request is fulfilled, FA99 will securely delete or anonymise your data using industry-certified data deletion methods.

FA99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in data practices, legal requirements, or new platform features. When significant changes are made, FA99 will:

• Updating the "Last Updated" date shown at the top of this page.
• Displaying a clear update notice on the FA99 platform homepage for a set period.
• Sending email notifications to all registered members for amendments deemed significant.
• In the case of highly material amendments, FA99 may request your active re-consent before you can continue using the platform.

It is your responsibility to review this page periodically. Your continued use of the FA99 platform after any amendment to the Privacy Policy is published will be deemed your acceptance of the updated version of the Policy.

If you have any questions, concerns, or complaints regarding fa99's Privacy Policy or how we handle your personal data, please contact fa99's Data Protection Officer (DPO) through the following channels:

• Privacy Email: [email protected] (state "Privacy Inquiry" in the subject line)
• Live Chat: Available 24/7 directly within the fa99 platform — select the "Privacy & Security" category
• Telegram: Contact a FA99 support agent via our official Telegram channel

We are committed to responding to all privacy-related enquiries within 5 business days. For formal complaints under Malaysia's PDPA that cannot be resolved directly with FA99, you have the right to refer the matter to the Malaysia Personal Data Protection Department or the relevant regulatory authority.