King999 Privacy Policy — Malaysia Member Personal Data Protection

Welcome to the king999 Privacy Policy. This document is designed to provide clarity to all members and prospective members on how the king999 platform handles your personal information — from the moment you register through the duration of your membership with us.

King999 understands that your trust is an invaluable asset. In the online gaming industry, trust in a platform is built not only through quality gaming products, but also through how that platform handles its members' sensitive information. As such, we take a transparent, responsible and legally grounded approach to every aspect of personal data management.

This Privacy Policy applies to all users of the king999 platform, including those who access it via the official website at king999.st, mobile app, or any other digital channel operating under the king999 brand. This document should be read together with Terms and Conditions and page Responsible Gaming us.

King999 only collects information that is necessary for legitimate and specific purposes. We do not collect excessive or irrelevant information beyond the services we provide. The following are categories of information we may collect:

A. Information You Provide Directly:

• Full name as stated on your identity card or passport.
• Date of birth for age verification purposes (must be 18 years of age or older).
• Active email address for official platform communications.
• Phone number for two-factor authentication and customer support.
• Residential address for KYC compliance and anti-money laundering requirements.
• Identity documents such as a copy of your national ID, passport, or utility bill for the KYC process.
• Payment method information including bank account holder name, account number and e-wallet details.

B. Information Collected Automatically:

• IP address and general geographic location information.
• Device type, operating system, and web browser version in use.
• Session data including pages visited, time spent, and navigation patterns.
• Gaming activity logs including bets placed, games played and wins or losses.
• Cookie data and device identifiers for session recognition.

Every piece of information we collect is used for purposes that are clear, lawful, and relevant to king999's services. We do not process your personal data for any other purpose without obtaining additional consent from you. The following are the primary purposes for data use:

• Account Management: Creating, verifying and maintaining your member account, including the login process, two-factor authentication and password management.
• Transaction Processing: Processing deposits, withdrawals and any other financial transactions related to your account quickly and securely.
• Legal Compliance: Fulfilling legal obligations including KYC requirements, anti-money laundering reporting and compliance with directives from relevant authorities.
• Platform Security: Detecting, investigating and preventing fraud, duplicate account use, bonus abuse and any activity that threatens the integrity of the platform.
• Customer Support: Providing efficient technical assistance and support services whenever you need help.
• Service Communications: Sending important notifications related to your account, transactions, policy updates and security information.
• Platform Enhancements: Analysing usage patterns on an aggregated and anonymised basis to improve the user experience, technical performance and various gaming products.
• Responsible Gaming: Monitoring betting patterns to identify early signs of problem gambling and offering appropriate assistance in accordance with policy Responsible Gaming us.

King999 does not share your personal information with third parties except in limited and specific situations as described below. In all such situations, king999 ensures that the receiving party complies with data protection standards equal to or stricter than those we practise.

• Payment Service Provider: Information required to process transactions is shared with licensed payment gateways such as FPX, DuitNow and approved e-wallet providers. These providers are bound by strict confidentiality agreements.
• KYC Service Provider: King999 partners with licensed third-party identity verification services to support the KYC process. Information shared is strictly limited to what is required for verification purposes only.
• Legal Authority: King999 is required to disclose information to competent authorities when mandated by court order, regulatory directive or applicable law — including investigations into financial crime and money laundering.
• Technical Service Provider: Hosting, cybersecurity, and analytics service providers that support platform operations may have limited access to data in a technical capacity. All such parties are bound by data processing agreements.

King999 continually invests in the latest security infrastructure to ensure your personal data remains protected at all times. The following are the key security measures we practise:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and king999's servers are encrypted using the 256-bit SSL/TLS protocol, the same standard used by leading banking institutions worldwide.
• Two-Factor Authentication (2FA): King999 supports and encourages the use of 2FA on all accounts to add an extra layer of security during login.
• Data Encryption at Rest: Personal data stored in the king999 database is also encrypted at rest using AES-256, ensuring data remains unreadable even in the event of physical server intrusion.
• 24/7 Monitoring: king999's IT security team monitors all systems continuously using real-time threat detection tools capable of identifying and responding to threats within a very short timeframe.
• Regular Penetration Testing: King999 conducts regular security testing and independent audits to identify and address any vulnerabilities before they can be exploited.
• Internal Access Controls: Access to member personal data among king999 staff is strictly restricted on a need-to-know basis. All access is logged and auditable.

King999 uses cookies and similar tracking technologies to enhance the user experience, enable essential platform functions and help us understand how members interact with our platform.

Types of Cookies Used:

• Essential Cookies (Required): These cookies are required for core platform functions such as login session management, security and navigation. The platform will not function properly without them and they cannot be disabled.
• Performance Cookies: Collecting anonymised data about how pages are used — which pages are visited most, where users spend their time and similar insights. This data is used solely to improve the platform.
• Functional Cookies: Enables the platform to remember your preferences such as language, display settings and personal choices to deliver a more personalised experience.
• Security Cookies: Used to detect suspicious login activity, prevent CSRF attacks, and ensure every session is valid and secure.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect certain functions of the king999 platform. For more information on managing cookies, please refer to your web browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and king999's internal policies, you have the following rights regarding the personal data we hold:

King999 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law. The following are our data retention guidelines:

• Active Account Data: For as long as your account remains active, all related data will be retained to ensure uninterrupted service delivery.
• KYC and Transaction Data: Identity verification records and financial transaction history are retained for a minimum of 7 years following account closure, in accordance with Malaysia's anti-money laundering legal requirements.
• Security Logs: Security activity logs are retained for 12 months for digital forensic purposes in the event of a security incident.
• Post-Account Closure Data: Upon account closure, most personal information will be anonymised within 90 days, except for data that must be retained under legal obligations.

The king999 platform may contain links to third-party websites or services in certain contexts, such as payment providers or service partners. This Privacy Policy applies solely to the king999 platform and does not cover the privacy practices of those external websites.

King999 is not responsible for the content, privacy policies or security practices of any third-party websites. We recommend that you read and understand the privacy policy of every website you visit before providing any personal information to them.

The king999 platform is an exclusive service for individuals aged 18 and above. king999 does not knowingly collect or process any personal information from individuals under the age of 18.

All new member registrations are subject to a strict age verification process. If king999 determines that information has been collected from an underage individual, that data will be deleted immediately and the account in question will be terminated without further notice.

Parents and guardians who believe their child has registered an account on the king999 platform are advised to contact our customer support team immediately so that appropriate action can be taken without delay.

King999 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our service practices, new legal requirements or developments in the data protection industry. Each updated version will be published on this page with a clear effective date.

When material changes are made, king999 will notify members through one or more of the following methods:

• Pop-up notifications or warning banners upon logging in to the platform.
• Notification emails sent to your registered email address.
• Announcements in the news section or update notifications on the king999 platform.

Your continued use of the king999 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how your information is protected.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how king999 handles your personal data, our team is ready to assist at any time. We are committed to providing accurate and informed responses promptly.

We also encourage you to review the About Us to learn more about king999's commitment to integrity, transparency, and member protection at every level of our operations.