Privacy Policy kss99 — Malaysian Player Data Protection

01 Introduction

This Privacy Policy describes kss99's ("we", "Platform", "kss99") privacy practices regarding the collection, use, storage and protection of your personal information ("User", "Member", "you") when using our services at kss99.pro and the kss99 mobile app.

By registering for or using the kss99 platform, you agree to the collection and use of information as described in this Privacy Policy. This Policy should be read together with Terms and Conditions for a complete picture of your rights and responsibilities.

Kss99 is committed to complying with applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA). If you have any questions about how we handle your data, our support team is available 24/7.

02 Personal Data We Collect

Kss99 only collects information that is genuinely necessary to provide our services securely and effectively. Here are the types of data we collect:

Data you provide directly:

• Full name, date of birth and gender (for age and identity verification).
• Email address and mobile number (for account communications).
• Current residential address (for KYC verification).
• Identification document information such as identity card or passport (for KYC process).
• Bank account or digital wallet information (to process deposits and withdrawals).
• Username and password chosen during registration.

Data collected automatically:

• IP address and device information (device type, operating system, browser version).
• Access log data including dates, times and pages visited.
• Gaming session data — bets placed, games played, total wins and losses.
• Cookie data and similar tracking technologies (see Section 9).
• General geolocation information (state/city — not precise location) for compliance purposes.

Below is a summary of the data categories and the purposes for which they are collected:

03 How We Use Your Data

Kss99 uses your personal data for the following purposes, all of which are essential to our platform operations:

• Account management — Creating, verifying and managing your account on the kss99 platform.
• Transaction processing — Securely processing deposits, withdrawals, and all financial transactions.
• Identity verification (KYC) — Verifying your age and identity in line with compliance requirements.
• Platform security — Detecting and preventing fraud, money laundering, multiple account ownership, and other suspicious activities.
• Customer support — Helping you resolve issues and answer questions effectively.
• Service improvement — Analyzing usage patterns to improve platform functionality and user experience.
• Account-related communications — Sending security notifications, service updates, and promotional information (where you have given your consent).
• Responsible gaming — Monitoring gaming habits to identify signs of problem gambling and provide appropriate assistance.
• Legal compliance — Fulfilling reporting obligations and maintaining records in accordance with applicable laws.

04 Legal Basis for Data Processing

Kss99 processes your personal data based on lawful grounds under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Contract performance — Processing required to provide kss99 platform services to you in accordance with the Terms and Conditions you have accepted.
• Legitimate interest — Processing for the purposes of platform security, fraud prevention, and service improvement.
• Legal obligation — Processing required to comply with applicable laws and regulations, including anti-money laundering requirements.
• Consent — Processing for direct marketing purposes based on your explicitly provided consent.

05 Data Sharing with Third Parties

Kss99 does not sell, rent or trade your personal information. However, we share data with certain parties in limited circumstances and for legitimate purposes:

• Payment service providers — Payment gateways and banks that process your financial transactions. They only receive data necessary to process the relevant transaction.
• Identity verification service providers — Third parties that assist us in conducting KYC and AML (Anti-Money Laundering) checks.
• Technology service providers — Companies providing technical infrastructure, cloud services, and IT support for our platform operations. All such providers are bound by strict data protection agreements.
• Legal authorities — When required by law, court order or directive from competent authorities.
• Game providers — Game session data required to deliver games from third-party providers. This data is typically transmitted anonymously or with identifiers only.

06 Data Security

Kss99 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, loss, destruction or disclosure:

• 256-bit SSL encryption — All data transmitted between your device and kss99 servers is protected with military-grade encryption.
• Encryption of data at rest — Sensitive data such as passwords and financial information is stored in encrypted format.
• Multi-layered access control — Access to user data is restricted to staff who genuinely need it, with full audit logs.
• 24/7 security monitoring — Automated monitoring systems detect and alert on any suspicious activity in real time.
• Regular security testing — The kss99 platform undergoes regular penetration testing and security audits conducted by independent parties.
• Two-factor authentication (2FA) — Additional security layer available for all user accounts.

07 Data Retention Period

Kss99 only retains your personal data for as long as necessary to fulfill the purposes stated in this Privacy Policy or as required by law:

• Active account data — Retained while your account is active and for a specified period after account closure.
• Financial transaction records — Retained for at least 7 years in line with Malaysian financial and AML legal requirements.
• KYC Documents — Retained for the period required by law after the business relationship ends.
• Security logs — Retained for 12 months for security investigation purposes if required.
• Marketing data — Deleted or archived when you withdraw consent for marketing communications.

When data is no longer needed, kss99 will securely delete or anonymise it in accordance with our internal procedures.

08 Your Rights Regarding Personal Data

As a kss99 user and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

09 Cookies & Tracking Technologies

Kss99 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies — Required for basic platform operations, such as maintaining your login session. Cannot be disabled.
• Performance cookies — Collecting information on how you use the platform to help us improve our services. All data is collected anonymously.
• Functional cookies — Enabling the platform to remember your preferences such as language and game settings.
• Security cookies — Helping detect suspicious login attempts and protect your account.

You can manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some kss99 platform features.

10 International Data Transfer

In some cases, your personal data may be transferred to and processed in countries outside Malaysia — particularly in the context of cloud storage and international technology service providers.

When such transfers occur, kss99 ensures adequate safeguards are in place through:

• Internationally recognized standard data transfer agreements.
• Data protection assessment before transfer to third countries.
• Selection of service providers that comply with international data security standards.

11 Underage Users

The kss99 platform is exclusively for users aged 18 and above. We do not knowingly collect or process personal data of minors.

If we discover that a user under 18 has registered an account, that account will be closed immediately and all related data will be deleted in accordance with applicable legal requirements.

12 Amendments to Privacy Policy

Kss99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies or legal requirements.

When making material changes, we will:

• Updating the "Updated" date at the top of this document.
• Sending notifications to registered users via email or in-app notification at least 7 days before changes take effect.
• Displaying clear notices on the platform home page for a specified period.

Continued use of the kss99 platform after the effective date of amendments is deemed your acceptance of the updated Privacy Policy.