Privacy Policy — K99C

kk99c (referred to herein as "we", "us", "our", or "the Platform"), operating through the website kk99c.cam, is committed to protecting the privacy and security of all personal data belonging to our registered players and website visitors. This Privacy Policy sets out, in clear and transparent terms, how we collect, process, store, and protect your personal data in the course of providing our online gaming and sports betting services.

This Policy applies to all users of kk99c, including visitors who browse the website without registering, users who complete the registration process, and active players who engage with any gaming or betting product on the Platform. It covers all personal data processed by kk99c whether collected online, via customer support interactions, or through payment processing systems.

Our data handling practices are designed to align with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection frameworks. By using kk99c, you acknowledge that you have read, understood, and agreed to the data practices described in this Policy.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, device identifiers, and behavioural data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means kk99c, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party engaged by kk99c to process personal data on our behalf under documented contractual instructions.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC" means Know Your Customer — the regulatory identity verification process applied during account registration and ongoing account management.
• "Cookies" means small text files placed on your device by the kk99c Platform to maintain session state, store preferences, and collect aggregate usage analytics.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia, which governs the processing of personal data in commercial transactions within Malaysia.

kk99c collects the following categories of personal data in the course of operating our Platform and delivering our services to Malaysian players:

kk99c collects personal data through the following channels and mechanisms:

• Direct Submission: Information you voluntarily provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technical Collection: Data collected automatically when you access or interact with the Platform, including IP address, device identifiers, browser data, and session analytics via server logs and first-party cookies.
• Payment Processing Partners: Transaction data received from our verified Malaysian payment service providers including FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, and GrabPay in the course of processing your deposits and withdrawals.
• Identity Verification Services: Data returned by third-party KYC and AML screening providers engaged to verify your identity and assess financial crime risk in compliance with our regulatory obligations.
• Third-Party Game Providers: Aggregate game performance and session data returned by our licensed game content providers, used solely for platform analytics and responsible gambling monitoring purposes.

kk99c processes your personal data exclusively for the following clearly defined purposes:

• Account Creation & Management: To register, verify, and maintain your player account, including identity authentication, password recovery, and account security monitoring.
• Service Delivery: To enable you to access and participate in all gaming and betting products offered on the Platform, including live casino, sports betting, slots, poker, and esports markets.
• Payment Processing: To facilitate deposits and withdrawals through Malaysian payment channels, verify transaction authenticity, and maintain accurate financial records.
• KYC & AML Compliance: To verify your identity, age, and source of funds as required under applicable anti-money laundering and counter-terrorism financing obligations.
• Responsible Gambling: To monitor gameplay patterns, enforce self-exclusion and deposit limits, identify potential problem gambling indicators, and deliver appropriate responsible gambling interventions.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of all support interactions for quality assurance purposes.
• Platform Security: To detect, prevent, and investigate fraud, cheating, multi-accounting, and other forms of prohibited conduct.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable laws, respond to lawful requests from regulatory authorities, and maintain records as required by law.
• Platform Improvement: To analyse aggregate usage data, identify technical issues, and improve the performance, design, and content of the Platform for Malaysian players.
• Marketing Communications: To send you promotional offers, bonuses, and relevant gaming updates where you have provided consent or where we have a legitimate interest to do so. You may opt out of marketing communications at any time.

kk99c processes personal data on the following legal bases, in alignment with applicable data protection legislation:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions agreement you enter into upon registration — including account management, payment processing, and service delivery.
• Legal Obligation: Processing necessary to comply with applicable laws and regulatory requirements, including KYC verification, AML record-keeping, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out for our legitimate business interests, including fraud prevention, platform security, and improving our services, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific consent — particularly for non-essential marketing communications and optional analytics features. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

kk99c does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment Service Providers: We share necessary transaction data with Malaysian payment processors (DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay) and cryptocurrency exchange partners solely to execute your requested financial transactions.
• KYC & Identity Verification Providers: We engage licensed third-party identity verification services to conduct the KYC and AML checks required for account registration and ongoing compliance monitoring.
• Game Content Providers: Certain technical data, including session identifiers and game outcomes, are shared with our licensed game software providers to facilitate game operation. These providers operate under strict data processing agreements and are prohibited from using your data for their own purposes.
• Legal Authorities: We may disclose personal data to governmental bodies, regulatory authorities, or law enforcement agencies where required by law, court order, or lawful regulatory demand. We will notify you of any such disclosure where legally permitted to do so.
• Professional Advisers: We may share personal data with our legal advisers, auditors, and insurers on a confidential basis where necessary for the conduct of our business.
• Business Transfers: In the event of a merger, acquisition, or asset sale involving kk99c, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

kk99c operates primarily in the context of the Malaysian market and endeavours to keep data processing within the jurisdiction where practicable. However, given the global nature of online gaming infrastructure, certain personal data — particularly technical and operational data — may be processed on servers located outside of Malaysia.

Where personal data is transferred to jurisdictions outside Malaysia, kk99c takes reasonable steps to ensure that adequate protections are in place, including:

• Executing data transfer agreements with receiving parties that incorporate appropriate data protection safeguards equivalent to those required by Malaysian law.
• Ensuring that all overseas data processors are contractually bound to process your personal data only for the purposes specified by kk99c and to maintain data security standards consistent with those applied on the Platform.
• Limiting the categories of data transferred internationally to the minimum necessary for the stated processing purpose.

kk99c retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and contractual obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active player account is retained for the full duration of the account's existence plus a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Financial Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of seven (7) years from the date of the transaction, as required under applicable financial regulations.
• KYC Verification Documents: Identity and address verification documents are retained for five (5) years following account closure or the date of the last transaction, whichever is later.
• Customer Support Communications: Live chat transcripts and email correspondence are retained for a period of three (3) years from the date of the interaction.
• Technical & Log Data: Server logs, IP records, and device fingerprint data are retained for a period of twelve (12) months, after which they are anonymised or deleted.
• Marketing Data: Data held solely for marketing communication purposes is retained until you withdraw consent or opt out of marketing, after which it is promptly removed from active marketing lists.

kk99c uses cookies and similar tracking technologies to operate the Platform, maintain your login session, personalise your experience, and analyse aggregate usage patterns. We do not use advertising networks or third-party behavioural profiling tools.

You may configure your browser settings to block or delete cookies at any time. Note that disabling strictly necessary cookies may prevent certain core Platform features from functioning correctly, including maintaining your login state and accessing your account balance.

As a data subject whose personal data is processed by kk99c, you hold the following rights under applicable data protection law. We are committed to honouring these rights promptly and without undue burden on you:

• Right of Access: You have the right to request a copy of all personal data we hold about you, along with information on how it is being processed, the categories of data held, and the parties with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Account-level corrections may be made directly via your Account settings for certain data fields.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn, or where it has been processed unlawfully — subject to our legal retention obligations.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, including profiling for marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

kk99c is an adult entertainment platform strictly intended for persons aged 21 years and above. We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 21.

All account registrations require age verification as a mandatory step, and we conduct ongoing KYC checks that include confirmation of date of birth against government-issued identification documents. Any account found to be registered by a person under the age of 21 will be immediately and permanently closed, all deposited funds will be returned to the originating payment method, and any gameplay or winnings will be voided.

kk99c implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption: All data in transit is protected by TLS 1.3 / 256-bit SSL encryption. All sensitive data at rest — including financial records and identity documents — is encrypted using AES-256.
• Access Controls: Access to personal data systems is restricted to authorised personnel on a strictly need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication for all internal systems.
• Security Testing: We conduct regular penetration testing, vulnerability assessments, and code reviews performed by qualified third-party security professionals.
• Incident Response: We maintain a documented data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and, where required, relevant regulatory authorities within the timeframes prescribed by applicable law.
• Staff Training: All kk99c personnel who handle personal data receive mandatory data protection training and are bound by confidentiality obligations in their employment agreements.
• Vendor Due Diligence: All third-party data processors engaged by kk99c are subject to security assessments prior to engagement and are required to maintain security standards equivalent to our own.

kk99c reserves the right to update or revise this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, business operations, or the services we provide. The most current version of this Policy will always be published on this page, identified by the "Last Updated" date shown at the top of the document.

Where amendments are material — meaning they significantly affect your rights or the way we process your personal data — we will notify registered players via email to the address on file and/or through an in-platform notification prior to the changes taking effect. For minor amendments that do not materially affect your rights, we may update this Policy without separate prior notification.

Your continued use of the kk99c Platform following the publication of an amended Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with the amendments, you must cease use of the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by kk99c, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the live chat feature on the kk99c Platform. This is the fastest channel for urgent privacy or data security concerns.
• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" to ensure your message is directed to the appropriate team. Responses will be provided within two business days.

For formal data subject rights requests — including access requests, rectification requests, or erasure requests — please email us with the subject line "Data Rights Request" and include your registered account username and the specific right you wish to exercise.

For responsible gambling concerns, self-exclusion requests, or questions about how your responsible gambling data is handled, please visit our dedicated Responsible Gambling page or contact our support team directly via live chat.