Privacy Policy — Your Data, Your Rights

KS99 (hereinafter "KS99", "the Platform", "we", "us", or "our") operates the online casino and sports betting platform accessible at ks99.cam. In the course of providing our services to registered players, KS99 necessarily collects, processes, and stores certain categories of personal data. We take this responsibility seriously and are committed to handling your personal information with the highest standards of care, transparency, and security.

This Privacy Policy (hereinafter "Policy") describes in detail what personal data KS99 collects from you, the purposes for which that data is used, the legal basis upon which processing is conducted, how long we retain your data, who we share it with, and the rights you hold with respect to your personal information.

This Policy applies to all individuals who access or use the KS99 Platform, including registered account holders, prospective players who visit ks99.cam without registering, and individuals who contact our customer support team. It applies to all personal data collected through the Platform, our support channels, and any communications between you and KS99.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, location data, IP address, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, KS99.
• "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement.
• "Data Subject" means the individual to whom the Personal Data relates — in this context, you, the User or Player.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data.
• "Cookies" means small text files placed on your device by a website to store session and preference information.
• "KYC" means Know Your Customer — the identity and payment verification procedures required by KS99 under its licensing obligations.
• "Eligible Payment Methods" means the Malaysian payment channels accepted on the Platform, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, and Hong Leong Connect.

KS99 is the Data Controller responsible for the personal data collected through ks99.cam and all associated communication channels. As Data Controller, KS99 determines the purposes for which your personal data is collected and the means by which it is processed. KS99 operates under a valid international gaming licence and is subject to the data protection and privacy obligations imposed by that licensing regime.

In situations where KS99 engages third-party service providers (such as payment processors, game studios, or identity verification services) to process data on its behalf, those parties act in the capacity of Data Processors under binding data processing agreements that restrict their use of your data to the specific purposes defined by KS99.

For all data protection enquiries, requests, or complaints, please use the contact details provided in Section 16 of this Policy.

KS99 collects the following categories of personal data, depending on how you interact with the Platform:

KS99 does not collect special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, or biometric data) except where strictly required by our regulatory obligations.

KS99 collects personal data through the following methods:

5.1 Direct Collection

You directly provide personal data to KS99 when you:

• Complete the account registration form on ks99.cam;
• Submit KYC verification documents (MyKad, passport, proof of address);
• Make a deposit or request a withdrawal via any Eligible Payment Method;
• Contact our customer support team via live chat, email, or other channels;
• Respond to surveys, enter competitions, or participate in promotional activities;
• Update your account settings or communication preferences.

5.2 Automated Collection

When you access ks99.cam, our systems automatically collect certain technical and usage data including your IP address, browser fingerprint, session timestamps, pages visited, and game interaction data. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 9 of this Policy.

5.3 Third-Party Sources

KS99 may receive personal data about you from the following third-party sources in specific circumstances:

• Identity verification providers: During KYC processing, our verification partners may return verified identity data matching the documents you submitted;
• Payment processors: Transaction confirmation data from Malaysian payment providers (DuitNow, FPX, e-wallet operators) to verify deposit and withdrawal completion;
• Fraud detection services: Risk signals and fraud indicators from anti-fraud partners to protect the Platform and its users.

KS99 processes your personal data only where a lawful basis exists under applicable data protection law. The primary legal bases upon which KS99 relies are set out in the table below alongside the corresponding processing purposes.

KS99 processes personal data in accordance with the principles of data minimisation, purpose limitation, accuracy, and storage limitation. We collect only the data strictly necessary for the purposes described in this Policy and do not use your personal data for purposes incompatible with those for which it was originally collected.

7.1 Automated Decision Making

KS99 may use automated systems to make certain decisions that affect your Account, including but not limited to: real-time fraud and suspicious activity detection; responsible gambling threshold monitoring; and KYC document verification scoring. Where an automated decision produces a significant effect on your Account (such as a temporary suspension), you retain the right to request human review of that decision by contacting our support team.

7.2 Profiling

KS99 may process usage and behavioural data to build a profile of your gaming activity for the purposes of: personalising your Platform experience; identifying responsible gambling risk indicators; detecting bonus abuse or fraudulent patterns; and delivering relevant promotional content where you have consented to receive it. This profiling is carried out in accordance with applicable data protection law and does not result in unlawful discrimination.

KS99 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

8.1 Service Providers (Data Processors)

KS99 engages carefully vetted third-party service providers to perform specific operational functions on our behalf. These providers are contractually bound to process your data only as directed by KS99 and in accordance with applicable data protection law. Categories of service providers include:

• Payment processors: Malaysian payment infrastructure operators facilitating transactions via Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect;
• KYC and identity verification providers: Third-party services that verify the authenticity of identity documents and confirm age eligibility;
• Fraud prevention and anti-money laundering partners: Services that analyse transaction and behavioural data for risk signals;
• Cloud infrastructure providers: Secure data hosting services that store Platform data under contractual security obligations;
• Customer support technology providers: Live chat and help desk software used to facilitate support interactions;
• Game studios: Licensed game providers whose software is integrated into the Platform may receive anonymised technical session data.

8.2 Regulatory & Legal Disclosure

KS99 may be required to disclose personal data to regulatory authorities, law enforcement agencies, courts, or other governmental bodies where such disclosure is required or authorised by applicable law. This includes our gaming licence regulator, financial intelligence units, and competent courts. KS99 will notify you of such disclosure where legally permitted to do so.

8.3 Business Transfers

In the event that KS99 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of that transaction. We will provide notice prior to any such transfer becoming effective and will ensure that the acquiring entity agrees to be bound by privacy protections no less stringent than those set out in this Policy.

KS99 uses cookies and similar tracking technologies to operate and improve the Platform, personalise your experience, and analyse usage patterns. By continuing to use ks99.cam, you consent to our use of cookies as described in this section.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without severely impairing Platform functionality.
• Functional Cookies: Remember your preferences and settings, such as your preferred language, currency display (MYR), and whether you have acknowledged certain notices.
• Analytical Cookies: Collect anonymised data about how users interact with the Platform, including pages visited, session durations, and feature usage. This helps KS99 improve the user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, including unusual login patterns and account takeover attempts.

9.2 Cookie Management

You may control and manage cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or receive a notification when a new cookie is set. Please be aware that disabling strictly necessary cookies may prevent certain Platform features from working correctly. Instructions for managing cookies are available in your browser's help documentation.

KS99 retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, to meet our legal and regulatory obligations, and to resolve disputes or enforce our agreements.

10.1 Retention Periods

• Active Account Data: Retained for the full duration of your Account, plus a minimum of five (5) years after Account closure, to satisfy our anti-money laundering and gaming licence record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later, in compliance with our licensing requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years to meet financial record-keeping and audit obligations.
• Support Communications: Retained for up to three (3) years from the date of the interaction for quality assurance, dispute resolution, and training purposes.
• Marketing Preference Data: Retained for as long as you hold an active Account, plus sufficient time to honour opt-out requests, or until you withdraw consent.
• Technical Logs: Retained for up to twelve (12) months for security monitoring and fraud detection purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

KS99 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and KS99 servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Data at Rest Encryption: Sensitive personal data stored in KS99 databases — including identity documents and financial information — is encrypted at rest.
• Access Controls: Strict role-based access controls ensure that only authorised KS99 personnel with a legitimate operational need can access personal data categories.
• Two-Factor Authentication: Available for all KS99 accounts and mandatory for administrative systems that access personal data.
• Regular Security Audits: KS99 conducts periodic internal and third-party security assessments, penetration testing, and vulnerability scanning.
• Incident Response: KS99 maintains a documented data breach response plan. In the event of a security incident that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities within the timeframes required by applicable law.

Subject to applicable data protection law and certain legal exemptions, you hold the following rights with respect to the personal data KS99 holds about you. To exercise any of these rights, please contact our support team as described in Section 16.

12.1 Right of Access

You have the right to request a copy of the personal data KS99 holds about you, together with information about how it is processed. KS99 will respond to verified access requests within thirty (30) days.

12.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Many data fields can be updated directly via your account settings; others require contact with our support team and may be subject to re-verification.

12.3 Right to Erasure ("Right to be Forgotten")

You may request the deletion of your personal data where: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and no other legal basis exists; or (c) it has been unlawfully processed. Please note that KS99 is required by law to retain certain categories of data (such as KYC documents and transaction records) for defined periods, which may limit the scope of erasure requests.

12.4 Right to Restriction of Processing

You may request that KS99 restrict the processing of your personal data in certain circumstances, for example while a dispute regarding accuracy is being resolved or where you have objected to processing pending verification of legitimate grounds.

12.5 Right to Data Portability

Where processing is based on your consent or the performance of a contract, and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

12.6 Right to Object

You have the right to object to processing of your personal data where KS99 relies on legitimate interests as the legal basis, including profiling carried out for direct marketing purposes. Upon receipt of a valid objection, KS99 will cease processing unless compelling legitimate grounds can be demonstrated.

12.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal. Opt-out from marketing can be completed via account settings or by contacting support.

The KS99 Platform is strictly intended for adults aged 21 years and above. KS99 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration and KYC process to enforce this requirement.

If KS99 discovers or is informed that personal data has been collected from a person under the age of 21, that data will be immediately and permanently deleted, the associated Account will be closed, and any deposited funds will be returned to the originating payment method where technically feasible.

If you believe that a minor has registered on KS99 or that KS99 has inadvertently collected data from an individual under 21, please contact us immediately using the details in Section 16.

KS99 operates on a global infrastructure. In the course of providing our services, your personal data may be transferred to and processed in countries other than Malaysia. This may include countries where the data protection laws differ from those applicable in Malaysia.

Where such transfers occur, KS99 ensures appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable data protection law. Such safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities;
• Contractual provisions requiring the recipient to implement equivalent data protection standards;
• Transfer to jurisdictions that have been recognised as providing an adequate level of data protection.

You may request further information about the safeguards applicable to any specific cross-border transfer by contacting our Data Protection team as described in Section 16.

KS99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or the services we offer. When material changes are made, we will notify registered Users via email to the address held on file, or via a prominent in-Platform notification, at least seven (7) days before the changes take effect.

Non-material changes (such as corrections of typographical errors or clarifications that do not alter the substance of the Policy) may be made without advance notice. The "Last Reviewed" date at the top of this page will be updated to reflect any revision.

Continued use of the KS99 Platform following any published update to this Policy constitutes your acknowledgement of, and agreement to, the revised Policy. If you do not agree to the updated Policy, you should cease using the Platform and request Account closure.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way KS99 handles your personal data, please contact us through the following channels. All data protection enquiries are handled by our dedicated support team.

• Live Chat: Available 24 hours a day, 7 days a week on ks99.cam — average response time 3–5 minutes. Support is available in Bahasa Melayu, Mandarin Chinese, and English.
• Email: [email protected] — please include "Privacy Enquiry" in the subject line for faster routing. This email address is displayed as plain text and is not a clickable link.

For formal data rights requests (access, erasure, rectification, portability), please contact our support team via live chat or email with your full name, registered email address, and a description of the request. KS99 may need to verify your identity before processing a rights request.

Our support team serves players across Malaysia, including those based in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, Ipoh, Kota Kinabalu, and all other regions. All enquiries will be handled with full confidentiality.