Viral99 Privacy Policy – Malaysia Personal Data Protection

Viral99 ("we", "our platform") takes our responsibility to protect the privacy and personal data of every member seriously. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applies to all information we collect through the viral99.my website, the Viral99 mobile app, and all related services.

As a Malaysian online betting platform offering baccarat, slots, sports such as the Malaysia Super League and EPL, BWF badminton, lottery, and more, Viral99 processes various categories of personal data to keep the platform running smoothly, securely, and fairly for all members.

We encourage you to read this Privacy Policy carefully. If you have any questions about how we handle your personal data, please contact our team using the details provided in Section 12.

Viral99 collects various types of personal data depending on how you interact with our platform. Below are the categories of data we collect and the purposes for which they are collected:

Viral99 only collects data that is strictly necessary to provide our services. We do not collect sensitive data such as medical information, political views or religious beliefs unless required by law.

Viral99 uses your personal data for lawful and transparent purposes. All data usage is grounded in a solid legal basis under Malaysia's PDPA:

• Account Management: To create, verify and manage your Viral99 account, including the required Know Your Customer (KYC) process;
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX, and securely managing your withdrawal requests;
• Platform Security: Detecting and preventing fraud, money laundering, multiple account usage, and any other unlawful activity on the Viral99 platform;
• Legal Compliance: To fulfil reporting and compliance obligations required under Malaysian law, including the PDPA 2010 and the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001;
• Service Communications: Sending important account notices, security updates, terms changes, and transaction information;
• Marketing (with consent): Keeping you informed about the latest promotions, bonus offers, tournaments, and special campaigns from Viral99 — only if you have consented to receive marketing communications;
• Platform Improvement: To analyse usage patterns, identify technical issues and develop new features that enhance your gaming experience on Viral99;
• Responsible Gaming: Monitoring betting patterns to identify members who may need support with their betting habits and providing appropriate assistance.

Viral99 will not use your personal data for any purpose not stated in this Privacy Policy without first obtaining your consent.

Viral99 values the privacy of your personal data. We do not sell or disclose your data to third parties for their own commercial purposes. However, there are limited circumstances in which Viral99 may need to share your data:

• Payment Service Providers: Touch 'n Go, GrabPay, DuitNow, FPX operators and other payment gateway providers that process your transactions — subject to strict confidentiality agreements;
• Game Software Providers: Game platform providers — including those offering Live Casino, slots, and fantasy sports — that form part of the Viral99 ecosystem, to the extent necessary to deliver our services;
• Malaysian Authorities: Law enforcement agencies, the Malaysian Anti-Corruption Commission (MACC), Bank Negara Malaysia, or courts where required by a court order or applicable law;
• Auditors & Professional Consultants: Independent auditors, lawyers and consultants bound by professional confidentiality obligations;
• Business Transfer: In the event of a merger, acquisition, or sale of Viral99's assets, your data may be transferred to the successor entity — you will be notified in advance.

Viral99 invests seriously in security infrastructure to ensure your personal data is protected at all times. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and Viral99's servers is encrypted using the latest SSL/TLS protocols, ensuring no third party can intercept your information in transit;
• Two-Factor Authentication (2FA): Viral99 provides and encourages the use of 2FA on all accounts to add an extra layer of security at login;
• 24/7 Monitoring: Viral99's security systems continuously monitor account activity to detect any unusual behaviour or unauthorised access attempts;
• Internal Access Controls: Only trained and authorised Viral99 staff may access your personal data, and only to the extent required to carry out their duties;
• Regular Security Audits: Viral99 conducts regular security audits and penetration testing to identify and address any system vulnerabilities;
• Secure Data Backup: Your data is securely backed up at separate data centres to ensure service continuity and data recovery in the event of any disruption.

While Viral99 takes all reasonable precautions, no security system can guarantee absolute protection. You are also responsible for keeping your Viral99 account password and login credentials secure.

Viral99 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you browse the Viral99 website.

Types of cookies used by Viral99:

• Essential Cookies: Required for core platform functions such as login, session authentication and security. These cookies cannot be disabled without affecting platform functionality;
• Performance Cookies: To collect information about how you use the Viral99 platform — such as the most frequently visited pages and error messages encountered — in order to help us improve platform performance;
• Functional Cookies: Saving your preferences such as language, display settings, and login information (if you choose to be remembered) to deliver a more personalised experience;
• Analytics Cookies: Helping Viral99 understand aggregate traffic patterns and user behaviour to improve platform content and services.

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality and user experience of the Viral99 platform.

Under Malaysia's PDPA, you as a data subject have the following rights regarding your personal data held by Viral99:

The Viral99 platform is strictly for individuals aged 18 years and above only. Viral99 does not knowingly collect, store, or process any personal data from children or minors under the age of 18.

If you are a parent or guardian and believe your child has provided personal data to Viral99 without your consent, please contact us immediately at privacy@viral99.my. We will act promptly to remove the relevant information from our systems.

The Viral99 platform may contain links or integrations with third-party services such as payment providers (Touch 'n Go, GrabPay, DuitNow) and gaming software providers. When you click these links or use those third-party services, their own privacy policies will apply.

Viral99 is not responsible for the privacy practices or content of third-party websites or services. We encourage you to read the Privacy Policy of each third-party platform you use alongside Viral99 to understand how they handle your personal data.

Viral99 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by Malaysian law. Our general data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account remains active, plus the minimum period required by law following account closure;
• Financial Transaction Records: Retained for 7 years in accordance with the requirements of the Malaysia Companies Act and anti-money laundering regulations;
• Support Communication Logs: Retained for 3 years for reference and dispute resolution purposes;
• Technical Data & System Logs: Retained for 12 months for security purposes and technical troubleshooting;
• Marketing Data (with consent): Retained until you withdraw consent or request removal from our marketing list.

Once the relevant retention period has lapsed, your data will be permanently deleted or anonymised so that it can no longer be linked to you as an individual.

Viral99 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, Malaysian legal requirements or technological developments. Any material amendments will be enforced as follows:

• An email notice will be sent to all registered Viral99 members at least 14 days before the amendments take effect;
• A prominent notice will be displayed within the Viral99 platform upon login;
• The "Last Updated" date at the top of this document will be revised;
• Previous versions of the Privacy Policy will be retained and can be requested by emailing privacy@viral99.my.

Your continued use of the Viral99 platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you have the right to close your account before the effective date.

If you have any questions, concerns or complaints regarding Viral99's Privacy Policy or how we handle your personal data, please contact our Data Protection Officer through the following channels:

• Privacy Email: privacy@viral99.my (response within 3 business days)
• General Support Email: support@viral99.my
• Live Chat: Available 24/7 on the Viral99 platform

Viral99 is committed to resolving all privacy-related complaints fairly and promptly. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital Malaysia.