B2w99 Privacy Policy – Data Protection for Malaysian Members

B2w99 collects various categories of personal data during the registration process, platform use, and interactions with our services. We collect only what is necessary for the purposes clearly stated below.

Every piece of data we collect is used for a clear and legitimate purpose. Below is a full list of how your personal data is used at b2w99 and the legal basis for each use.

• Service provision: To process account registration, deposits and withdrawals, and to grant access to games on b2w99. This is a contractual requirement — without this data we are unable to provide the service.
• Identity verification (KYC): To meet legal requirements relating to customer identity verification, anti-money laundering (AML), and counter-terrorism financing. These are statutory obligations we are required to fulfil.
• Financial transaction processing: We process deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX Maybank2u, CIMB Clicks, and withdrawals to your bank account in Malaysian Ringgit (RM).
• Security and fraud prevention: Detecting and preventing fraudulent activity, bot usage, multiple accounts, and attempts to exploit the platform.
• Customer support: Handling enquiries, complaints, and support requests you submit to the b2w99 support team.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and ensure that responsible gambling tools function effectively to protect your wellbeing.
• Marketing (with consent): Sending you information about promotions, new bonuses, and platform updates — only only if you have given explicit consent to receive them. You may opt out of marketing communications at any time.
• Analytics and improvement: Analysing aggregate (non-individual) usage patterns to improve the performance, stability, and overall experience of the b2w99 platform.

Under Malaysia's PDPA, b2w99 has a valid legal basis for every instance of personal data processing we carry out. We do not process data without a clear legal basis.

• Contract: Processing required to fulfil the service agreement between you and b2w99 — this covers nearly all core platform functions.
• Legal Obligations: Processing required to comply with Malaysian law, including the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA) and KYC requirements set by the relevant authorities.
• Legitimate interests: Processing required for b2w99's legitimate interests — such as platform security, fraud prevention, and business analytics — provided these interests do not override your fundamental right to privacy.
• Consent: For optional processing such as marketing communications, we obtain your explicit consent beforehand. You may withdraw this consent at any time with no negative impact on your account or services.

B2w99 does not sell or share your personal data for third-party marketing purposes. However, there are limited situations where we need to share data with certain parties to keep the platform running and to comply with the law.

• Payment providers: DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX providers (Maybank2u, CIMB Clicks) receive the transaction data necessary to process your deposits and withdrawals. These providers are governed by their own privacy policies and Bank Negara Malaysia compliance requirements.
• Game providers: Game providers such as Pragmatic Play, PG Soft, and Habanero may receive the session IDs required to make games function. They do not receive your personally identifiable information directly.
• Legal authorities: b2w99 will disclose data to Malaysian authorities (such as the police, courts, or law enforcement agencies) when required to do so by a valid court order or applicable legal obligation.
• Auditors and professional advisors: External auditors, legal counsel, and consultants bound by strict confidentiality obligations may access data in their professional capacity for compliance and audit purposes.

B2w99 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure. Our security infrastructure is designed to meet banking-industry standards.

• Encryption in transit: All communications between your browser and b2w99's servers are encrypted using TLS 1.3 with 256-bit SSL keys. Every connection is authenticated using a digital certificate issued by a recognised Certificate Authority (CA).
• Encryption at rest: Sensitive information such as passwords (stored as one-way hashes that cannot be decrypted), identification numbers, and banking details are encrypted at rest within our database.
• Access controls: Access to member data is restricted to b2w99 staff who require it to perform their job responsibilities. Every access requires two-factor authentication and is automatically logged for audit purposes.
• Continuous monitoring: b2w99's security systems operate 24/7 to detect and respond to security threats in real time.
• Regular security testing: b2w99 conducts regular penetration testing and security audits by independent third parties to identify and address vulnerabilities before they can be exploited.
• Disaster recovery: Member data is automatically backed up to geographically separate locations to ensure service continuity and data recovery in the event of an unexpected system failure.

B2w99 does not retain your personal data for longer than is necessary for the purposes it was collected, or as required by law. The retention schedule below outlines how long each category of data is kept.

• Financial transaction records (deposits and withdrawals in MYR): Retained for a minimum of 7 years in accordance with Malaysia's AMLA and Income Tax Act requirements. This is a legal obligation that cannot be shortened.
• Identity and KYC information: Retained for the duration of the active account period plus 5 years after account closure, in accordance with AML compliance requirements.
• Gaming history records: Retained for 3 years for dispute resolution and game fairness audit purposes. After this period, the data is anonymised.
• Customer support communication logs: Retained for 2 years for training, quality improvement, and dispute resolution purposes.
• Cookie and analytics data: Session cookie data is deleted when you close your browser or after 30 days, whichever comes first. Aggregated analytics data that has already been anonymised is retained indefinitely.
• Privacy request records: Records of any data access, correction, or deletion requests you submit are retained for 3 years as evidence of compliance.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have specific rights regarding the personal data held by b2w99. We respect and facilitate the exercise of these rights.

• Right of access: You have the right to know what personal data we hold about you and to obtain a copy of it. Access requests will be processed within 21 business days.
• Right to rectification: If any data we hold about you is inaccurate or incomplete, you have the right to request a correction. Corrections will be made within 14 business days.
• Right to object to marketing processing: You may object to the use of your data for direct marketing purposes at any time. Once such a request is received, we will cease marketing processing immediately.
• Right to withdraw consent: Where data processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing that took place prior to the withdrawal.
• Right to be informed: You have the right to be informed of any material changes to how we process your data, with adequate advance notice.

To exercise any of the rights above, please submit a written request to support@b2w99.click with the subject line "PRIVACY REQUEST", along with your full name and registered phone number. We will verify your identity before processing any request to ensure the security of your data.

B2w99 uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance the user experience, and understand aggregate platform usage patterns.

• Essential cookies (required): These cookies are required for core platform functions such as login authentication, session management, and security. Without them, the platform cannot operate. These cookies cannot be disabled.
• User preference cookies: Stores your preferences such as display language, betting odds format, and display settings, allowing the platform to remember your choices between sessions.
• Analytics cookies (with consent): Collects anonymised data on how users interact with the platform — most frequently visited pages, time spent in each section, and general navigation flows. This data is used solely for platform improvement.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of some parts of the platform. To opt out of analytics cookies, you may also use the privacy settings within your b2w99 account panel.

B2w99 is an entertainment platform exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store the personal data of anyone under the age of 18.

Should we become aware that personal data of a child under the age of 18 has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question. If you believe a child has registered on b2w99, please contact us at support@b2w99.click promptly.

Parents and guardians are reminded to monitor their children's online activity and use appropriate parental control software to prevent access to adult entertainment platforms.

B2w99 reserves the right to update this Privacy Policy from time to time to reflect changes in our data handling practices, legal requirements, or service improvements. All members will be notified of any material changes via email and in-platform notifications at least 14 days before the changes take effect.

The "updated" date at the top of this document always reflects when the current version came into effect. We recommend checking this page periodically. Previous versions of this Privacy Policy are archived and available upon request through customer support for reference purposes.

Continued use of the b2w99 platform after any changes take effect will be considered acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your account before the effective date, and all eligible balances will be returned in accordance with the applicable Terms & Conditions.

For any enquiries, concerns, or requests relating to this Privacy Policy or b2w99's handling of your personal data, please contact us through the following channels:

• Privacy email: support@b2w99.click (subject: "PRIVACY ENQUIRY" or "DATA REQUEST")
• Live chat: Available 24/7 directly within the b2w99 platform — Malay-speaking human agents are ready to assist you
• Response time: General enquiries will be responded to within 24 hours; formal data rights requests will be processed within 21 business days

If you are not satisfied with how b2w99 has handled your data after contacting us, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) through their official channels, in accordance with the procedures set out under PDPA 2010.