ppclub99 Privacy Policy

1. Introduction

This Privacy Policy applies to all personal data collected and processed by ppclub99 ("ppclub99", "we", "us", "our") in connection with your use of the ppclub99 platform, accessible at ppclub99.club. ppclub99 acts as the data controller for the personal information you provide during registration, account use, and any interaction with our customer support team.

By registering an account on ppclub99 or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should not create an account or continue using ppclub99's services. This policy should be read alongside the ppclub99 Terms & Conditions, which governs the overall relationship between ppclub99 and its members.

ppclub99 is committed to handling the personal data of its Malaysian members with transparency and in accordance with applicable data protection obligations under our gaming licence and international best practices. We do not treat data privacy as a secondary compliance matter — it is a core component of how ppclub99 earns and maintains member trust.

2. Data We Collect

ppclub99 collects personal data from Members through several channels. The categories of data collected, and the circumstances of collection, are described below:

ppclub99 does not collect sensitive special category data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) except where strictly required by our licensing authority for responsible gaming compliance purposes.

3. How We Use Your Data

ppclub99 processes personal data for the following purposes:

• Account Administration: Creating and managing your ppclub99 member account, verifying identity for KYC compliance, processing deposits and withdrawals in MYR, and maintaining accurate transaction records.
• Service Delivery: Providing access to ppclub99's casino games, live dealer tables, slots library, and sportsbook. Personalising the platform interface based on your game history and preferences.
• Security & Fraud Prevention: Monitoring login patterns and transaction activity to detect and prevent unauthorised access, account fraud, money laundering, and bonus abuse. ppclub99 uses IP address and device data as part of this process.
• Regulatory Compliance: Fulfilling age verification, KYC, and anti-money laundering (AML) obligations required under ppclub99's gaming licence and applicable law. Responding to lawful requests from regulatory or law enforcement authorities.
• Responsible Gaming: Monitoring gaming behaviour patterns to identify members who may be exhibiting signs of problem gambling, enabling ppclub99 to proactively offer responsible gaming tools or escalate where required by licensing conditions.
• Communications: Sending transactional notifications (deposit confirmations, withdrawal status updates, security alerts) and, where you have opted in, promotional communications about ppclub99 offers and new features. You may withdraw promotional communication consent at any time via account settings.
• Platform Improvement: Using aggregated, anonymised analytics data to understand how members navigate the ppclub99 platform and to make product improvements. No individual member is identifiable in ppclub99's analytics reporting.

4. Legal Basis for Processing

ppclub99 processes Member personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the ppclub99 Member agreement, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with KYC, AML, and responsible gaming requirements mandated by ppclub99's gaming licence and applicable regulations.
• Legitimate Interests: Processing for fraud detection, platform security, and platform improvement, where these interests do not override Member rights and freedoms.
• Consent: Processing for promotional communications, where ppclub99 has obtained explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of processing conducted prior to withdrawal.

5. Data Sharing

ppclub99 does not sell, rent, or trade Member personal data to third parties for commercial purposes. ppclub99 shares personal data only in the following limited circumstances:

• Payment Processors: ppclub99 shares transaction data with authorised payment processors (e.g. the payment gateway operators supporting Touch n Go eWallet, Boost, Maybank, and CIMB integrations) solely for the purpose of processing deposits and withdrawals. These processors are contractually bound to handle data securely and are prohibited from using it for any other purpose.
• Identity Verification Providers: ppclub99 may use third-party KYC verification services to validate Member identity documents. These providers access only the data necessary for verification and are bound by strict data processing agreements.
• Game Software Providers: Game outcome and session data is shared with licensed game studios (e.g. Evolution Gaming, Pragmatic Play) to the extent required to operate the game correctly. These providers receive anonymised or pseudonymised data where full identification is not required.
• Regulatory Authorities: ppclub99 is legally required to share Member data with its licensing authority, financial intelligence units, and law enforcement agencies upon receipt of a lawful request. ppclub99 will notify Members of such disclosures where it is legally permissible to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of ppclub99's business or assets, Member data may be transferred to the acquiring entity. Members will be notified of any such transfer and their rights in that context.

6. Cookies & Tracking Technologies

ppclub99 uses cookies and similar technologies on the platform. The categories of cookies used are:

• Essential Cookies: Required for the ppclub99 platform to function. These include session authentication cookies (to keep you logged in), CSRF protection tokens, and load balancing cookies. These cannot be disabled without breaking core functionality.
• Performance Cookies: Used to measure platform response times, error rates, and server performance. Data is aggregated and anonymised — no individual member is identified in performance reports.
• Analytics Cookies: ppclub99 uses analytics cookies to understand aggregate user navigation patterns across the platform. This data informs UX improvements and game lobby optimisation. Analytics data is not linked to your ppclub99 identity profile.
• Preference Cookies: Store your language, display, and notification preferences so you do not need to reconfigure them on every visit.

ppclub99 does not use advertising or cross-site tracking cookies. You can manage cookie preferences through your browser settings, though disabling essential cookies will affect your ability to log in and use the platform.

7. Data Retention

ppclub99 retains Member personal data for as long as is necessary to fulfil the purposes described in this policy, subject to the following minimum retention periods required by our licensing obligations:

• Account and identity data: Retained for a minimum of 5 years from account closure, as required for AML compliance and regulatory audit purposes.
• Transaction and gaming records: Retained for a minimum of 5 years from the date of each transaction.
• KYC documents: Retained for a minimum of 5 years from submission date, or longer if required by a specific regulatory authority request.
• Support communication records: Retained for 3 years from the date of the interaction.
• Technical/session logs: Retained for 12 months, after which they are automatically purged from active systems.

Following the expiry of the applicable retention period, ppclub99 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

8. Data Security

ppclub99 implements a range of technical and organisational security measures to protect Member personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS 1.2 / 1.3 encryption for all data transmitted between Member devices and ppclub99 servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment reference data.
• Bcrypt password hashing — ppclub99 never stores plaintext passwords. Even in a hypothetical data breach, Member passwords cannot be recovered from stored hashes.
• Multi-factor authentication (MFA) options for Member accounts and mandatory MFA for all ppclub99 administrative staff with access to Member data.
• Regular penetration testing and vulnerability assessments conducted by independent security firms.
• Strict access controls ensuring ppclub99 staff can only access Member data to the minimum extent required for their specific job function (least-privilege principle).

In the event of a data breach that poses a risk to Member rights, ppclub99 will notify affected Members and the applicable regulatory authority within the timeframe required by our licensing obligations.

9. Your Data Rights

As a ppclub99 member, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data ppclub99 holds about you. ppclub99 will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data ppclub99 holds about you is inaccurate or incomplete, you have the right to request correction. You can update most profile data directly in account settings; for identity and KYC data, contact customer support.
• Right to Erasure: You may request deletion of your personal data where ppclub99 no longer has a legal basis for retaining it and where no mandatory regulatory retention period applies. Note that AML-related retention obligations may prevent immediate erasure of certain data categories.
• Right to Restrict Processing: You may request that ppclub99 restrict processing of your data in certain circumstances, such as while a data accuracy dispute is under review.
• Right to Data Portability: You may request a copy of your ppclub99 personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for responsible gaming purposes. ppclub99 will consider your objection and respond within 30 days.
• Right to Withdraw Consent: Where ppclub99 processes your data on the basis of consent (e.g. promotional communications), you may withdraw consent at any time via account settings without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact ppclub99 customer support. All data rights requests are handled by ppclub99's designated data protection contact and responded to within 30 calendar days.

10. Children's Privacy

ppclub99's services are strictly intended for individuals aged 21 and above. ppclub99 does not knowingly collect personal data from anyone under the age of 21. If ppclub99 discovers that a Member account belongs to a person under 21, the account will be immediately suspended, all personal data will be deleted, and any deposited funds will be returned via the original payment method after identity verification.

If you have reason to believe that a minor has registered a ppclub99 account, please contact ppclub99 customer support immediately. ppclub99 takes the protection of minors from gambling platforms extremely seriously and co-operates fully with responsible gaming authorities on this matter.

11. Third-Party Links

The ppclub99 platform may contain references to third-party service providers such as payment processors and game software studios. Where links to external resources exist, ppclub99 is not responsible for the privacy practices or content of those third-party websites or services. ppclub99 recommends that Members review the privacy policies of any third-party services they interact with independently of the ppclub99 platform.

12. International Data Transfers

ppclub99 may transfer Member personal data to third-party service providers whose servers are located outside Malaysia, including game studios, payment processors, and cloud infrastructure providers. Where such transfers occur, ppclub99 ensures that appropriate safeguards are in place — including contractual data protection clauses — to provide a level of protection equivalent to that required under applicable data protection standards. Members will be notified of significant changes to international transfer arrangements through updates to this Privacy Policy.

13. Changes to This Privacy Policy

ppclub99 reserves the right to update or amend this Privacy Policy at any time. Material changes — particularly those that affect how ppclub99 uses Member personal data or the rights available to Members — will be communicated to registered Members via their registered email address or through a prominent notice on the ppclub99 platform no less than 7 days before the changes take effect.

The date of the most recent update to this Privacy Policy is displayed at the top of this page. Continued use of the ppclub99 platform following the effective date of any change constitutes your acceptance of the revised policy. If you do not accept the revised policy, you should contact ppclub99 customer support to request account closure before the changes take effect.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or ppclub99's handling of your personal data, please contact ppclub99 through the following channels:

• Email: [email protected] — plain text address, not a clickable link
• Live Chat: Available 24/7 within the ppclub99 platform after login
• Data Rights Requests: Subject line "Data Rights Request – [Your Username]" for priority handling
• Response Commitment: All privacy-related queries are acknowledged within 3 business days and fully responded to within 30 calendar days

ppclub99 is committed to resolving privacy concerns in good faith. If you are not satisfied with ppclub99's handling of a data-related complaint, you may escalate the matter to the relevant data protection authority in the jurisdiction under which ppclub99 holds its gaming licence.