Privacy Policy GW99 – Personal Data Protection for Malaysian Members

GW99 ("we," "us," "the Company," or "the platform") respects the privacy of all users and members who use our services at gw99.top. This Privacy Policy explains in detail how GW99 collects, processes, stores, protects, and in certain circumstances shares your personal information when you use our platform.

This Privacy Policy applies to all services provided by GW99, including the online casino platform, Sports Betting, poker, lottery, progressive jackpots, roulette, and all other features available on the platform. It also covers data collected through any communications between you and the GW99 customer support team.

This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy GW99, all of which together form the complete contractual framework between you and GW99.

GW99 collects various types of personal information depending on how you interact with our platform. The following outlines the categories of data we collect and their sources:

2.1 Registration & Identity Data

When registering for a GW99 account, you are required to provide the following information:

• Full name as stated on official identification documents.
• An active, reachable email address.
• A Malaysian-registered mobile phone number.
• Date of birth for minimum age verification (18 years and above).
• The account password you create yourself (stored in a non-readable hashed format).

2.2 Identity Verification Data (KYC)

To meet legal compliance requirements and Anti-Money Laundering (AML) policy obligations, GW99 may request additional verification documents — particularly for accounts making high-value withdrawals or displaying certain transaction patterns:

• Copy of Malaysian identity card (MyKad) — front and back.
• Proof of current residential address — a utility bill or bank statement no more than three months old.
• Bank statement or account details for payment method verification purposes.
• In certain cases, a selfie with your identification document for live identity verification.

2.3 Financial Transaction Data

GW99 records all financial activity that takes place within your account, including:

• All deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and other FPX payment methods.
• All withdrawal requests and records.
• Detailed betting and gaming history, including game type, wager amounts, and outcomes.
• Records of claimed bonuses and rollover status.

2.4 Technical & Usage Data

GW99 automatically collects certain technical information when you use our platform, including your IP address, device type and operating system, browser type and version, login and logout session data, pages visited and time spent, as well as platform technical performance data.

The personal data we collect is used solely for legitimate purposes directly related to the provision of GW99's services. The following outlines the specific purposes for which your data is used:

GW99 will not use your personal data for any purpose beyond those stated above without first obtaining your consent. Any changes to the purpose of data use will be communicated to members via email or in-platform notification.

GW99 does not sell, rent, or disclose members' personal data to any third party for marketing purposes. However, there are a limited number of circumstances in which GW99 may need to share data with certain parties to enable the platform to operate properly and to comply with applicable laws:

4.1 Technical Service Providers

GW99 works with third-party technical service providers that help operate our platform, including server hosting providers, database management systems, email delivery platforms, and analytics service providers. All such providers are bound by strict confidentiality agreements and are only permitted to access the data necessary for their specific service purposes.

4.2 Payment Gateways

To process deposits and withdrawals, GW99 is required to share certain transaction details with licensed payment gateway providers. This includes service providers for Touch 'n Go eWallet, GrabPay, DuitNow, and FPX processors. Such sharing is necessary and strictly limited to the information needed to complete each transaction.

4.3 Legal Requirements

GW99 may be required to disclose a member's personal data to the relevant authorities where mandated by Malaysian law, court order, or direction from a regulatory body. In such circumstances, GW99 will disclose only the minimum information required by law and will endeavour to notify the member concerned, unless doing so is prohibited by law.

GW99 consistently invests in cybersecurity infrastructure to ensure members' personal data is always protected against unauthorised access, data breaches, and misuse. Our key security measures include:

• 256-Bit SSL Encryption — All communications between your browser and GW99's servers are encrypted using the latest TLS 1.3 protocol, ensuring that data in transit cannot be intercepted by third parties.
• One-Way Password Encryption — Your account password is stored in an irreversible bcrypt hash format. Even GW99 staff are unable to read your password.
• Two-Factor Authentication (2FA) — Members can enable 2FA for an added layer of login security, requiring verification via an OTP code sent to their registered phone number.
• 24/7 Monitoring — The GW99 security team continuously monitors our systems to detect any suspicious activity, intrusion attempts, or anomalies in access patterns.
• Data Segregation — Member personal data is stored in an environment isolated from the platform's core operating systems, with strictly controlled and fully logged access.
• Regular Penetration Testing — GW99 conducts regular security testing and vulnerability assessments through independent cybersecurity firms to identify and address any weaknesses before they can be exploited.

While GW99 takes reasonable measures to protect your data, no digital security system can be guaranteed 100% secure. In the unlikely event of a data breach affecting our members, GW99 is committed to notifying affected members within 72 hours of the breach being identified, in line with industry best practices.

GW99 retains members' personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required under Malaysian law. The general data retention periods applied by GW99 are as follows:

• Active account data — Retained for as long as your account remains active and for the required period after account closure, typically up to 7 years to meet AML and tax compliance requirements.
• Financial transaction records — Retained for a minimum of 7 years in accordance with financial compliance requirements and Malaysian tax law.
• Support communication logs — Retained for up to 2 years after case resolution for reference and service quality assurance purposes.
• Technical data and access logs — Retained for a maximum of 12 months for security and technical debugging purposes.
• KYC document data — Retained for up to 5 years after the termination of the business relationship, in accordance with AML requirements.

Once the applicable retention period has expired, GW99 will securely delete or anonymise the data using methods that ensure it cannot be recovered.

GW99 uses cookies and similar web tracking technologies to enhance the user experience, ensure the platform functions correctly, and collect anonymised analytics data. The types of cookies we use are as follows:

You can control and manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the GW99 platform and impact your gaming experience. GW99 does not use third-party cookies for targeted advertising.

As a GW99 member, you have certain rights regarding your personal data that we respect and uphold. GW99 is committed to processing all requests relating to these rights within 14 business days:

To exercise any of the rights above, please contact the GW99 support team by email at support@gw99.top with the subject line "Data Privacy Rights Request", along with your full name, account email address, and details of your request. We may require identity verification before processing your request to ensure your data is not disclosed to unauthorised parties.

The GW99 platform is designed and intended exclusively for adults aged 18 and above. GW99 does not knowingly collect, process, or store any personal data of individuals under the age of 18. This is an absolute policy with no exceptions.

All account registrations require a minimum age verification, and GW99 employs multiple mechanisms to detect registration attempts by minors, including KYC document checks and data pattern analysis. Should GW99 discover that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will delete that data immediately and close the account in question.

If you believe your child or any minor you know has registered a GW99 account, please contact our support team immediately at support@gw99.top. We will take appropriate action promptly.

GW99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements to the services we offer. All amendments will be published on this page with a clear effective date.

For significant amendments that affect how we use or share your personal data, GW99 will notify members via their registered email address or through an in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make a fully informed decision.

Continued use of the GW99 platform after any amendment to this Privacy Policy takes effect will be deemed your acceptance of the revised terms. You are encouraged to review this page periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or how GW99 handles your personal data, we encourage you to reach out to us through the following channels:

• Privacy Email — support@gw99.top with the subject line "Privacy Policy Enquiry". Responded to within 2–6 business hours.
• Live Chat — Available 24/7 on the GW99 platform. Response times are typically under 2 minutes for urgent issues.
• GW99 WhatsApp Business — For privacy enquiries requiring an immediate response.

The GW99 support team is fluent in Bahasa Melayu, English, and Mandarin, operating 24/7 including public holidays. We are committed to providing an initial response within 24 hours and resolving all privacy-related enquiries within 14 working days.

For information about your rights as a player and how to manage your gaming habits, please refer to our Responsible Gaming us. For the full terms governing use of the platform, please refer to Terms & Conditions GW99.