Privacy Policy Gaya99 — Personal Information Protection

01Introduction

Gaya99 ("we", "Platform", "Gaya99") operates as an online entertainment platform offering a wide range of game categories to users in Malaysia. We take privacy protection very seriously and are committed to managing all personal information you provide with the highest standards of security and transparency.

This Privacy Policy explains the types of data we collect when you use Gaya99, the reasons for collecting it, how it is used, and the steps we take to ensure your information is not misused.

We encourage you to read this Privacy Policy together with Terms and Conditions Gaya99 for a comprehensive understanding of your rights and responsibilities as a member of our platform. If you have any questions after reading this Privacy Policy, our support team is available via 24/7 live chat.

02Data We Collect

To provide a secure, seamless and personalised experience, gaya99 collects several categories of information from users. The following are the types of data we collect:

a) Account Registration Information

• Full name as it appears on your identity document.
• Date of birth for age verification (minimum age requirement: 21 years).
• Active email address and mobile phone number.
• Account password (stored in hashed form — we cannot read your password).
• Username chosen during registration.

b) Identity Verification Information (KYC)

• A valid copy of your national identity card (MyKad) or passport.
• Proof of current address such as a utility bill or bank statement.
• A selfie holding your identity document if requested by our compliance team.

c) Financial Information

• Bank account number for deposit and withdrawal processing.
• Transaction history including deposits, withdrawals and claimed bonuses.
• Payment methods used (e-wallet, bank transfer, etc.).

d) Usage & Technical Data

• IP address and device information (device type, operating system, browser).
• Session logs including login time, logout time, and session duration.
• Game history and wagering activity on the platform.
• Cookie and tracking data as described in the Cookies section.

03How We Use Your Data

The information we collect is used for specific and lawful purposes. Gaya99 does not use your data for any purpose outside the following scope without first obtaining your consent:

You may withdraw consent to receive marketing communications at any time via your account settings or by contacting our support team. Withdrawing consent will not affect the core Gaya99 services you use.

04Data Sharing With Third Parties

Gaya99 does not sell your personal information to any third party. However, in certain situations, we share some data with trusted operational partners solely to enable us to provide services to you:

• Payment Providers: Information required to process deposits and withdrawals is shared with the licensed payment providers we use. They are subject to strict security and confidentiality obligations.
• KYC Service Providers: Identity verification data is submitted to a certified KYC verification platform to authenticate your documents.
• Game Providers: Game session information is shared with game studios and software providers that supply game content on our platform for game integrity purposes.
• Regulatory Authority: We will disclose required information to legal authorities where mandated by court order, statutory provision, or official investigation.

All third parties working with gaya99 are required to sign a data confidentiality agreement and comply with our privacy policy. We do not permit any third party to use your data for their own marketing or analytics purposes.

05Data Security Measures

The security of your personal information is Gaya99's top priority. We implement a range of technical and organisational measures to protect your data from unauthorised access, disclosure, alteration, or destruction:

• Transmission encryption: All data transmitted between your device and our servers is protected with TLS 1.3 protocol and AES-256 encryption.
• Storage encryption: Sensitive data such as banking information and KYC documents are stored in encrypted form using the latest cryptographic algorithms.
• Internal access controls: Access to user data within the Gaya99 system is restricted based on the principle of least privilege — only staff who require access for their specific duties are permitted.
• Continuous threat monitoring: Our systems are continuously monitored by our cybersecurity team to detect and respond to any threats or suspicious activity.
• Regular security audits: Gaya99 conducts regular security audits and penetration testing by independent parties to ensure our systems remain up to date and free from vulnerabilities.
• Two-factor authentication (2FA): You are encouraged to enable two-factor authentication to add an extra layer of security to your account.

06Cookies & Tracking Technologies

Gaya99 uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and maintain the security of your login session. Cookies are small text files stored in your browser when you visit our platform.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects statistical information about how users interact with our platform to help us improve the overall user experience.
• Functional Cookies: Allows the platform to remember your preferences such as language, display settings, and game preferences for future sessions.
• Analytics Cookies: Used to understand usage patterns and improve platform content and design. This data is collected in aggregate and does not personally identify you.

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience on the Gaya99 platform.

07Your Rights as a User

As a gaya99 member, you have the following rights regarding your personal information held by us. We will process each request within 30 business days:

• Right of Access: You have the right to request a copy of the personal information we hold about you at any time.
• Right to Rectification: If any information we hold is inaccurate or out of date, you have the right to request its immediate correction.
• Right to Erasure: You may request that we delete your personal information, subject to legal obligations requiring us to retain certain records.
• Right to Restriction of Processing: You may request that we restrict how we process your information in certain circumstances.
• Right to Data Portability: You have the right to receive a copy of your data in a machine-readable format for transfer to another platform if required.
• Right to Object: You may object to the processing of your data for direct marketing or analytics purposes at any time.

To exercise any of the above rights, please contact the gaya99 support team via live chat or our support email. We may need to verify your identity before processing the request to ensure the security of your account.

08Data Retention Period

Gaya99 retains your personal information only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by law. The following are general guidelines for data retention periods:

• Active account data: Retained for the duration your account is active and for a reasonable period after account closure.
• Financial records & transactions: Retained for a minimum of 5 years from the transaction date in accordance with applicable legal requirements.
• KYC documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with anti-money laundering compliance requirements.
• Security & activity logs: Retained for 12 months for security investigation and fraud prevention purposes.
• Support communication data: Retained for 3 years for reference and service improvement purposes.

When data is no longer needed and there is no legal obligation to retain it, we will securely delete it using methods that ensure it cannot be recovered.

09Third-Party Links & Services

The gaya99 platform may contain links or integrations with third-party services such as payment providers and game providers. When you interact with these third-party services, you will be subject to their own privacy policies.

Gaya99 is not responsible for the privacy practices or content of any third-party websites or services. We encourage you to read the privacy policies of those third-party services before providing them with any personal information.

All third-party service providers integrated with gaya99 have undergone a security assessment process and are required to comply with data protection standards equivalent to our own.

10Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal information, please contact the Gaya99 Privacy & Compliance team through the following channels:

We aim to respond to all privacy-related inquiries within 3 business days. For formal complaints, we target resolution within 30 days. This Privacy Policy may be updated from time to time; notification will be provided via registered email and in-platform notice whenever material changes occur.