Ada99 Privacy Policy – Personal Data Protection for Malaysian Players

1. Introduction and Scope of the Privacy Policy

This Privacy Policy ("Policy") describes how ada99 ("we", "the ada99 Platform") collects, uses, discloses, stores, and protects your personal information when you access and use the ada99 Platform via ada99.xyz or any associated mobile application.

By registering an ada99 account, making a deposit, playing any game, or simply browsing our Platform, you consent to the privacy practices described in this Policy. If you do not agree with any part of this Policy, please discontinue your use of the ada99 Platform.

This Policy applies to all users of the ada99 Platform residing in Malaysia and covers all services we offer — Sports Betting including the Malaysia Super League and EPL, live baccarat, slots, virtual sports, and all related account features. ada99 operates as the data controller for your personal data in the context of Malaysia's Personal Data Protection Act 2010 (PDPA).

2. Information We Collect

Ada99 collects various types of information from users to operate the Platform effectively and deliver the best possible experience. The following are the categories of information we collect:

Information you provide directly:

• Registration information: Full name, identity card number (MyKad), date of birth, Malaysian mobile number, email address, and the username you chose when registering your ada99 account.
• KYC (Know Your Customer) Information: Copy of identity card, proof of address (utility bill or recent bank statement), and any other identity verification documents required to meet regulatory compliance.
• Financial information: Your bank account or e-wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, FPX) used for deposits and withdrawals. Please note that ada99 does not store full payment card details — this information is handled by third-party payment processors that comply with PCI DSS standards.
• Communication: Any information you provide when communicating with the ada99 customer support team via live chat, email, or other channels.

Automatically collected information:

• Log and technical data: IP address, browser type and version, device operating system, screen resolution, date and time of access, pages visited within the Platform, and time spent on each page.
• Gaming activity data: Betting history, total deposit and withdrawal amounts, games played, play sessions, and data related to your use of responsible gaming features.
• Cookie and tracker data: Information collected via cookies, web beacons, and similar tracking technologies that we use to improve Platform performance and the user experience.
• General location data: General location information derived from your IP address, used for geographic zone verification and regulatory compliance purposes.

3. How We Use Your Information

Ada99 uses the personal information it collects solely for lawful purposes necessary to operate our services. The purposes for which data is used are as follows:

Ada99 will not use your personal information for any purpose beyond those listed above without first obtaining your consent, unless required by law. If you wish to withdraw consent for any specific purpose such as marketing communications, you may do so at any time through your account settings or by contacting ada99 customer support.

4. Disclosure of Information to Third Parties

Ada99 does not sell, rent, or trade members' personal information to any third party. However, there are certain circumstances in which ada99 needs to share your information with specific parties for legitimate operational purposes:

• Payment service providers: E-wallet providers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) and banking services (DuitNow, FPX, Maybank2u, CIMB Clicks) receive the information required to process your financial transactions. These providers maintain their own privacy policies and comply with established financial security standards.
• Gaming software providers: Slots and Live Casino providers such as Pragmatic Play, PG Soft, NetEnt, Play'n GO, and others receive the game identifiers necessary to process rounds and gaming sessions. Your full personal information is not shared with game providers.
• Technology service providers: Companies that provide server infrastructure, email delivery, live chat support, and website analytics tools may process some of your data as part of the services they provide to ada99. All such providers are bound by data protection agreements requiring them to use your data only for agreed purposes.
• Authorities and law enforcement: ada99 may be required to disclose member information to Malaysian authorities, including the police, courts, Bank Negara Malaysia, or any other regulatory body with valid legal jurisdiction to request such information.
• Related corporate entities: In the context of a corporate restructuring, merger, acquisition, or asset sale, user information may be transferred to a successor entity — subject to user notification and compliance with an equivalent Privacy Policy.

In all instances of data sharing described above, ada99 ensures that the receiving party has adequate security measures in place and uses the data only for the stated purposes, consistent with this Privacy Policy and applicable Malaysian law.

5. Data Security and Protective Measures

Ada99 takes data security seriously to ensure the personal and financial information of our members remains protected at all times. The security measures we have in place include:

• Encryption in transit: All data transmitted between your device and ada99's servers is encrypted using TLS/SSL 256-bit, ensuring your information cannot be intercepted or read by any third party while in transit.
• Data-at-rest encryption: Sensitive data stored in ada99's databases — including passwords (stored in hashed form) and KYC information — is encrypted using robust current encryption standards.
• Internal access controls: Access to member data within ada99's internal systems is strictly limited to staff with a legitimate operational need. All access is logged and auditable. Staff undergo background checks and regular information security training.
• Continuous threat monitoring: Automated monitoring systems operate around the clock to detect suspicious activity, intrusion attempts, or anomalies that may indicate a security breach. ada99 also conducts regular penetration testing by independent third parties.
• Incident management: ada99 has a comprehensive security incident response procedure. In the event of a data breach that may affect members, we will notify the relevant parties in accordance with the requirements of Malaysia's PDPA.

6. Data Retention Period

Ada99 retains your personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law. General data retention guidelines are as follows:

• Active account data: For as long as your account remains active and you are using the ada99 Platform, we retain all account information necessary to provide our services.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date in accordance with Malaysian financial and tax legal requirements.
• KYC documents: Retained for a minimum of 5 years after account closure, in compliance with anti-money laundering (AML) requirements.
• Betting history: Retained for 2 years for dispute resolution and audit purposes, then anonymised or deleted.
• Customer support communication log: Retained for 1 year for service improvement and dispute resolution purposes.
• Closed account data: Following account closure, personal data not subject to any legal retention obligations will be deleted or anonymised within 90 days.

Once there is no longer a legitimate legal or business requirement to retain your data, ada99 will securely delete or anonymise that information in accordance with established procedures.

7. Cookie Policy and Tracking Technologies

Cookies are small text files stored on your device when you visit the ada99 Platform. We use cookies and similar tracking technologies to enhance the functionality, performance, and security of the Platform.

The types of cookies used by ada99 are as follows:

• Essential cookies (mandatory): These cookies are required for the Platform's core functionality — including login session management, security, and transaction processing. Without them, the Platform will not function properly. Essential cookies cannot be disabled.
• Performance and analytics cookies: These cookies collect information about how you use the ada99 Platform — the pages visited most frequently, time spent, and any errors encountered. This information is used in aggregated, anonymised form to improve the Platform. You may opt out of these cookies.
• Functional cookies: These cookies allow the Platform to remember your preferences — such as your selected language, display settings, and saved login information. Disabling these cookies may affect your user experience.

You can manage or delete cookies at any time through your web browser settings. Please note, however, that deleting or blocking all cookies may affect the overall functionality of the ada99 Platform.

8. Your Privacy Rights as an ada99 User

As an ada99 member and data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

Ada99 respects and will endeavour to fulfil all valid privacy rights in accordance with applicable Malaysian law. To exercise any of these rights, please contact the ada99 customer support team via live chat or email at support@ada99.xyz. We will respond to your request within 14 working days.

Please note that exceptions to these rights may apply in certain circumstances — for example, if fulfilling your request would interfere with ada99's legal obligations, or if the information requested relates to an ongoing fraud investigation. In such cases, ada99 will inform you of the reason the request cannot be fully fulfilled.

9. Children's Privacy

The ada99 Platform is strictly for users aged 18 and above. ada99 does not knowingly collect or process any personal information from individuals under the age of 18.

If ada99 becomes aware that personal information of a child (under 18 years of age) has been collected without proper age verification, ada99 will take immediate steps to delete that information and terminate the associated account. If you believe your child or any minor has an ada99 account, please contact us immediately at support@ada99.xyz so that appropriate action can be taken.

10. Changes to This Privacy Policy

Ada99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or relevant technological developments. You will be notified of any material changes through:

• In-platform notification on ada99 the next time you log in;
• An email to the address registered to your account, for significant changes;
• Update the "Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how ada99 protects your information. Continued use of the ada99 Platform after any changes are published will be considered acceptance of the updated Policy.

11. Contact ada99's Privacy Officer

If you have any questions, concerns, or complaints regarding how ada99 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

• Email: support@ada99.xyz – please mark the email subject as "Privacy Enquiry" for faster processing.
• Live Chat: Available 24 hours a day, 7 days a week on the ada99 Platform. Select the "Privacy & Data" category when starting a chat session.

Ada99 is committed to handling all privacy-related enquiries and complaints seriously and within a reasonable timeframe. We will endeavour to provide an initial response within 3 business days and full resolution within 14 business days for standard requests.