Momo99 Privacy Policy – Personal Data Protection for Malaysian Users

1. Introduction

Momo99 is an online betting and casino platform operating in Malaysia. We understand that user trust is our most valuable asset. Therefore, we take our responsibility to protect your privacy seriously and are committed to processing your personal data in a transparent, fair and secure manner.

This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices. It explains what data we collect, why we need it, how we use it, and what rights you have regarding that data.

If you have any questions about how we handle your data, our Data Protection Officer team is always ready to assist via email at [email protected].

2. Personal Data We Collect

Momo99 collects several categories of personal data depending on how you interact with our platform. Below is a summary table of the types of data collected:

We may also collect additional information you voluntarily provide when contacting our support team or participating in customer satisfaction surveys. All data collection is based on legitimate necessity and limited to what is required for the stated purposes.

3. How We Use Your Data

Momo99 uses collected personal data only for legitimate, stated purposes. We never use your data beyond the agreed scope without obtaining your consent first.

• Account Management: Creating, verifying, and maintaining your user account including KYC processes required by law.
• Transaction Processing: Processing all deposits, withdrawals, and other financial activities securely and efficiently.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorised access, and platform abuse.
• Regulatory Compliance: Fulfilling legal obligations including reporting to relevant authorities when required.
• Personalise Your Experience: Personalising content, game recommendations, and promotions based on your preferences and playing habits.
• Responsible Gaming: Monitoring wagering patterns to identify users who may need responsible gaming support.
• Service Communication: Sending important notifications related to your account, transactions, platform updates, and relevant promotions.
• Continuous Improvement: Analysing aggregated usage data to improve platform performance, usability, and features.

4. Data Sharing & Disclosure

Momo99 does not sell, rent or transfer your personal data to third parties for marketing purposes. However, there are limited situations where we may need to share your information with certain parties:

• Trusted Service Providers: We work with carefully selected third-party service providers such as payment processors, licensed game providers, and identity verification platforms. All parties are bound by strict confidentiality agreements.
• Legal Authorities: We will disclose information to government authorities, law enforcement, or regulatory bodies when required by law or court order.
• Fraud Prevention: Information may be shared with fraud prevention agencies or shared industry platforms to protect all users from illegal activity.
• Business Transfer: In the event of a merger, acquisition, or asset sale, user data may be transferred to the successor entity provided that an equivalent or higher level of privacy protection is maintained.

In all data sharing instances, we ensure that receiving parties adhere to data protection standards equivalent to this Privacy Policy and applicable laws.

5. Data Security

Momo99 implements multiple layers of technical and organisational security controls to protect your personal data from unauthorised access, loss, destruction or accidental disclosure.

• 256-bit SSL/TLS encryption for all data transmitted between users and our servers.
• Encryption of data stored in databases using the AES-256 algorithm.
• Role-based access control (RBAC) ensures only authorised personnel can access user data.
• Two-factor authentication (2FA) for all staff access to internal systems storing sensitive data.
• Continuous 24/7 security monitoring by our cybersecurity team.
• Regular penetration testing by independent third parties to identify and address system vulnerabilities.
• Privacy awareness and data security training is mandatory for all momo99 staff.

While we take all reasonable precautions, no security system can be guaranteed 100% safe. You also play an important role by using a strong password, not sharing your login credentials, and reporting any suspicious activity to us promptly.

6. Data Retention Period

Momo99 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by applicable law.

• Active Account Data: Retained for the duration your account remains active, plus any applicable legal retention period.
• Financial Transaction Records: Stored for a minimum of 7 years after transactions in accordance with financial reporting and anti-money laundering requirements.
• Support Communication Logs: Stored for 3 years after the resolution of the related issue.
• Technical Data & System Logs: Stored for 12 months for security and debugging purposes.
• After Account Closure: Personal data will be deleted or anonymised within 90 days of account closure, unless a legal obligation requires it to be retained for a longer period.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered.

7. Your Rights as a User

Under Malaysia's PDPA and the data protection principles we uphold, you have the following rights regarding your personal data:

• Right of AccessYou have the right to know what personal data we hold about you and to request a copy at any time.
• Right to RectificationIf any of your data is inaccurate or outdated, you have the right to request that we correct it promptly.
• Right to ErasureYou may request deletion of your personal data, subject to legal obligations that may require us to retain certain records.
• Right to ObjectYou have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Data PortabilityYou may request your data in a machine-readable format for transfer to another service provider.
• Right to Restriction of ProcessingIn certain situations, you may request that we restrict the processing of your data while a dispute is being resolved.

To exercise any of the above rights, contact us at [email protected]. We will process your request within 14 business days.

8. Cookies & Tracking Technologies

Momo99 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates at its best. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security validation. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymised information about how you use our platform to help us improve website performance.
• Functional Cookies: Saving your preferences such as language, display settings, and game preferences so you do not have to reconfigure them each time.
• Analytics Cookies: Helping us understand platform usage patterns in aggregate for service improvement purposes.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect platform functionality. Session cookies are automatically deleted when you close your browser, while persistent cookies expire according to a set schedule.

9. Children's Privacy

Momo99 is a platform intended exclusively for individuals aged 18 years and above. We do not knowingly collect or process personal data from minors.

Should we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete such data and close the relevant account. Parents or guardians who believe their child has registered on our platform should contact us immediately at [email protected].

10. Privacy Policy Amendments

Momo99 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements or technological developments. The "Updated" date at the top of this page will always indicate the latest version.

For material and significant changes, we will notify you via in-platform notifications or by email to the address registered in your account at least 7 days before the changes take effect. It is your responsibility to review this Privacy Policy periodically.

Continued use of the momo99 platform after changes to the Privacy Policy take effect will be considered acceptance of the updated terms.

11. Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how we handle your personal data, please contact our Data Protection Officer (DPO) through the following channels:

• Email: [email protected]
• Live Chat Support: Available 24/7 via the chat icon at the bottom right corner of the platform
• Response Time: We aim to respond to all privacy inquiries within 3 business days

If you are not satisfied with our response, you have the right to file a complaint with Malaysia's Department of Personal Data Protection (JPDP) or the relevant regulatory authority in your jurisdiction.