Privacy Policy GT99 — Member Personal Data Protection

1. Introduction and Scope of Privacy Policy

Welcome to the gt99 Privacy Policy. This document explains in detail how gt99 ("Company", "we", "Platform") collects, processes, stores, and protects your personal data as a member or visitor of gt99.gd.

We understand that privacy matters deeply to you, and we take this responsibility seriously. Every decision we make regarding data management is guided by the best interests and safety of our members.

This Privacy Policy applies to all personal data collected through:

• The official gt99 website at gt99.gd and all related subdomains.
• The gt99 mobile app for Android and iOS.
• Interactions with our customer support team via live chat or email.
• Any registration process, identity verification (KYC), or financial transaction on the platform.

2. Types of Data We Collect

Gt99 only collects data that is strictly necessary to provide members with a safe, transparent, and efficient service. Below are the categories of data we collect and the purposes for which they are collected:

Gt99 does not collect sensitive data such as medical information, political views, religious beliefs, or biometric data unless required by law or specifically necessary for identity verification purposes as stipulated by regulatory authorities.

3. How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. gt99 uses members' personal data solely for the following purposes and nothing beyond that:

1. Account Management: Creating, maintaining and managing member accounts, including secure login and two-factor authentication (2FA).
2. Transaction Processing: Processing deposits and withdrawals quickly and securely through the various payment methods supported by gt99.
3. Identity Verification (KYC): Ensuring every member is a real individual who meets the required age and location eligibility under regulatory requirements.
4. Fraud Prevention: Detecting and investigating suspicious activity, multiple account usage, or any fraudulent attempts that could compromise platform security.
5. Customer Support: Providing accurate and relevant assistance when members contact the gt99 support team via live chat or other channels.
6. Marketing Communications: Sending information about promotions, bonuses and platform updates — only to members who have given their consent.
7. Legal Compliance: Meeting reporting obligations to the relevant authorities when required under Malaysian law.

4. Data Sharing with Third Parties

Gt99 does not sell or rent your personal data to any third party for marketing or commercial purposes. However, under certain circumstances, we may need to share your data with the following parties:

• Payment Service Providers: Banks, e-wallet companies, and payment processors used to handle members' financial transactions. They receive only the data necessary to process payments.
• Game Providers: Third-party game software providers that supply gaming content on the gt99 platform. Minimum data required to run a game session may be shared.
• Identity Verification Services: Third-party KYC service providers that help us verify member identities securely and efficiently.
• Regulatory Authority: Government agencies, regulatory bodies, or law enforcement authorities when we are legally required to do so under Malaysian law.
• Analytics Services: An analytics platform that helps us understand how members use the platform for continuous improvement — this data is shared in aggregated or anonymised form.

All third parties receiving data from gt99 are bound by strict data protection agreements and are not permitted to use that data for any purpose other than those specified in the agreement.

5. Use of Cookies and Tracking Technologies

Gt99 uses cookies and similar tracking technologies to enhance the user experience and understand how our platform is used. Cookies are small text files stored on your device when you visit our website.

We use three main types of cookies:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled as the platform will not function without them.
• Functional Cookies: Saving your preferences such as language and display settings so you do not need to reset them on every visit.
• Analytics Cookies: Helping us understand platform usage patterns in aggregate without identifying individuals. This data is used to continuously improve the platform.

6. Data Retention Period

Gt99 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following are our data retention guidelines:

• Active Account Data: For as long as your account is active and in use on the gt99 platform.
• Data After Account Closure: Up to 7 years after account closure to meet Malaysia's regulatory and financial legal requirements.
• Transaction Records: Minimum 7 years in accordance with accounting and anti-money laundering (AML) legal requirements.
• Security Logs: Up to 2 years for security incident investigation purposes, where required.
• Marketing Data: Until you withdraw your consent to receive marketing communications from gt99.

Upon expiry of the designated retention period, your data will be securely deleted or converted into an anonymised format that cannot be linked to your identity.

7. Your Rights as a Data Subject

As a gt99 member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

8. Technical Security Measures

Gt99 continuously invests in technical security infrastructure to ensure members' personal data is always protected against unauthorised access, alteration, or loss. The following are the key technical measures we implement:

• End-to-End Encryption: All data communications between your app and gt99 servers are secured with TLS 1.3 protocol and 256-bit SSL encryption.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an additional layer of security on every login.
• 24/7 Monitoring: An automated security monitoring system operates around the clock to detect and respond to threats in real time.
• Regular Security Audits: gt99 conducts regular penetration testing and security audits by independent third parties to identify and address system vulnerabilities.
• Data Segregation: Sensitive financial data is stored in an isolated environment and encrypted separately from regular operational data.
• Staff Access Control: Only staff with a legitimate operational need are granted access to member data, and all access is logged and monitored.

9. Children's Privacy

The gt99 platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process personal data from individuals under the age of 18.

If we discover or are informed that we have collected personal data from someone under the age of 18, we will take immediate steps to delete that data and close the relevant account. If you believe we may hold information about a child, please contact us immediately.

10. Privacy Policy Amendments and Contact Us

Gt99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or new platform features. Members will be notified of any material changes via email or in-platform notification before the changes take effect.

The latest version of the Privacy Policy is always available on this page with a clear update date. Continued use of the gt99 platform following any amendments is considered acceptance of those changes.

If you have any questions, concerns, or wish to exercise your rights as a data subject, please contact the gt99 Data Protection Officer via:

• Email: [email protected]
• Live Chat: Available 24/7 on the gt99 web platform and mobile app.