Privacy Policy Dragon99 — Personal Data Protection for Malaysian Players

Dragon99 is an online casino platform serving Malaysian players, offering a wide range of games including Baccarat, Blackjack, Roulette, slots, live casino, and Sports Betting covering Malaysia Super League football, EPL, badminton, and e-sports. In providing these services, Dragon99 needs to collect and process certain personal data from our members.

This Dragon99 Privacy Policy provides a full and clear explanation of how we manage your personal data — covering the types of data collected, the purposes for collection, how it is stored, who may access it, and the rights you hold as the data owner.

Dragon99 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Our commitment to privacy goes beyond a legal obligation — it is a core value we uphold, because we believe your trust is Dragon99's most valuable asset.

Dragon99 collects your personal data through several methods — directly from you during registration and platform use, and automatically through tracking technologies as you browse Dragon99. Below is a full breakdown of the types of data we collect:

2.1 Data Dragon99 Does Not Collect

Dragon99 no collect your bank account PIN or password, full credit/debit card details, or any sensitive information unrelated to the provision of Dragon99's services. We also do not collect biometric data such as fingerprints or facial recognition.

Dragon99 uses your personal data only for legitimate purposes that are directly related to delivering the best possible service to you. Below is the complete list of purposes for which Dragon99 uses your data:

• Registration & Account Management: Creating and managing your Dragon99 account, processing logins, and verifying your identity each time you access the platform.
• Financial Transaction Processing: Processing your deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks), and handling your withdrawal of winnings securely and promptly.
• Identity Verification (KYC): Conducting mandatory age and identity verification to ensure all Dragon99 members are eligible adults.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, or any activity that violates Dragon99's Terms & Conditions.
• Customer Support: Providing responsive technical support and customer service in Bahasa Melayu to all Dragon99 members.
• Service Communications: Sending you important account notifications, relevant Dragon99 promotional updates, and security alerts when necessary.
• Platform Improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve the Dragon99 gaming experience and interface.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and reaching out to members who may need assistance or self-exclusion support.

Dragon99 does not sell or trade your personal data. However, under certain limited and controlled circumstances, Dragon99 may need to share some of your data with trusted third parties:

4.1 Payment Service Providers

To process your deposit and withdrawal transactions, Dragon99 shares only the minimum necessary payment information with authorised payment service providers, such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers. All such providers are bound by strict confidentiality agreements with Dragon99.

4.2 Game Providers

Dragon99 works with internationally licensed game software providers. Some technical data may be shared for the purpose of processing game results and ensuring game integrity. No personally identifiable information that can be linked to you as an individual is shared with game providers.

4.3 Legal Requirements

Dragon99 may be required to disclose your data to the relevant Malaysian authorities — such as the police, courts, or regulatory bodies — if mandated by law or a valid court order. Dragon99 will not disclose your data beyond what is strictly required by such legal obligations.

Dragon99 makes serious investments in cybersecurity infrastructure to protect the personal data of all our Malaysian members. Below are the key security measures we have in place:

• 256-bit SSL Encryption: All communications between your web browser and Dragon99's servers are encrypted using TLS 1.3 with 256-bit keys — making interception by unauthorised parties virtually impossible.
• Two-Factor Authentication (2FA): Dragon99 offers two-factor authentication for your account to provide an additional layer of security at login.
• 24/7 Monitoring: Dragon99's security systems are continuously monitored 24 hours a day, 7 days a week by our cybersecurity team to detect any suspicious activity.
• Internal Access Controls: Access to Dragon99 members' personal data is restricted to staff who require it to perform their duties, based on the principle of least privilege access.
• Regular Security Audits: Dragon99 conducts regular security audits and penetration testing to identify and address system vulnerabilities before they can be exploited.
• Encrypted Data Backup: All Dragon99 data backups are stored in encrypted format at separate, secure locations.

While Dragon99 takes all reasonable steps to protect your data, no security system is 100% foolproof. You also play an important role in keeping your Dragon99 account secure by using a strong password and not sharing your login credentials.

Dragon99 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies Dragon99 uses:

6.1 Essential Cookies (Required)

These cookies are essential for the basic functionality of the Dragon99 platform — including maintaining your login session, remembering your language preference, and securing your transactions. Disabling these cookies will impair the Dragon99 platform's functionality.

6.2 Analytical Cookies

Dragon99 uses analytics cookies to understand how our members interact with the platform — which pages are visited most frequently, how long play sessions last, and where players encounter difficulties. This information is used in aggregate, without identifying individuals, to improve Dragon99.

6.3 Functional Cookies

These cookies allow Dragon99 to remember your personal preferences — such as your preferred bet size, display theme, and notification settings — so your Dragon99 experience is always comfortable and personalised.

You may manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Dragon99 platform.

Dragon99 does not retain your personal data longer than necessary for the purposes outlined in this Privacy Policy. In general, Dragon99's data retention policy is as follows:

• Active Account Data: Retained for the duration that your Dragon99 account remains active and in use.
• Data After Account Closure: After a Dragon99 account is closed, we retain basic data for 7 years for legal compliance, tax, and audit purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in compliance with Malaysian financial regulations and the Anti-Money Laundering Act.
• Support Communication Logs: Records of interactions with the Dragon99 support team are retained for 3 years for quality control and dispute resolution purposes.
• Cookies Data: Session cookies are deleted when you close your browser. Persistent cookies are retained for a set period, up to a maximum of 2 years.

Once the relevant retention period has expired, Dragon99 will securely delete or anonymise your data using industry-recognised methods.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Dragon99:

To exercise any of the rights above, please contact the Dragon99 privacy team by email at privacy@dragon99.ws or via our platform's live chat. We will process your request within a reasonable timeframe and keep you informed of the action taken.

Dragon99 is a platform intended exclusively for adults aged 18 and above. Dragon99 does not knowingly collect, store, or process personal data from individuals under the age of 18.

If Dragon99 discovers that personal data belonging to someone under the age of 18 has been collected inadvertently, we will immediately delete all such data and close the account in question. If you are aware that a minor has registered a Dragon99 account, please notify us immediately at support@dragon99.ws.

Dragon99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, current Malaysian legal requirements, or improvements to Dragon99's services.

When significant changes are made to Dragon99's Privacy Policy, we will notify you via an in-platform notification, an email to the address registered on your Dragon99 account, or a prominent notice on the Dragon99 homepage. The "Updated" date at the top of this page will always reflect the currently effective version of the Privacy Policy.

We encourage you to review this Dragon99 Privacy Policy periodically to stay informed of how we protect your personal information. Continued use of the Dragon99 platform following any amendments will be considered acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding Dragon99's Privacy Policy or how we handle your personal data, please do not hesitate to contact us through the following channels:

Dragon99 is committed to addressing all privacy enquiries seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP).