Privacy Policy ybet99 — Member Personal Data Protection

Welcome to the ybet99 Privacy Policy. This document is our written commitment to every member and user of the ybet99.vin platform that we take our responsibility to protect your personal information seriously. This Policy applies to all your interactions with the ybet99 platform, whether through the website, mobile app, or any of our official communication channels.

Ybet99 has been operating since 2018, and during that time we have served more than 500,000 active members across Malaysia. The trust every member places in us is something we never take lightly — which is why personal data protection has always been a cornerstone of how we run this platform's daily operations.

This Privacy Policy details the types of information we collect, the purposes for collection, how we use and share that information, and the rights you hold regarding your personal data. We encourage you to read this document carefully and to contact our support team if you have any questions.

Ybet99 collects various types of information for different purposes. We only collect information that is genuinely necessary to provide you with a high-quality and secure service. The following are the main categories of information we collect:

Account Registration Details:

• Full name as shown on official identification documents.
• Date of birth for age verification (18 years and above).
• Active email address for account communications and verification.
• Mobile phone number for two-factor authentication (2FA) and security communications.
• Passwords are stored in an irreversible hashed format.

Identity Verification (KYC) Information:

• A copy of your national identity card (MyKad), passport, or other official identification document.
• Proof of current address such as a utility bill or bank statement dated within the last three months.
• Bank account or digital wallet details for payment processing purposes.

Platform Usage Information:

• IP address, device type, operating system, and web browser used.
• Login history, including the date, time, and access location (based on IP).
• Records of betting activity, deposit and withdrawal transactions, and gameplay interactions.
• Cookie data and similar tracking technologies used to enhance the user experience.

Every piece of information we collect has a clear and legitimate purpose. ybet99 does not use your data for any purpose not stated here without first obtaining your additional consent. The following are the primary purposes for which your personal data is used:

Beyond the purposes stated above, ybet99 also uses de-identified aggregate data (data that cannot be used to identify any specific individual) for business analysis, market research, and internal reporting. This type of data is not subject to this Privacy Policy as it contains no personal information that can be linked to any individual.

Ybet99 does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, there are limited situations where we need to share your information with others to ensure the platform operates smoothly and securely:

• Payment Service Providers: Information required to process deposits and withdrawals is shared with approved payment gateways, including DuitNow, TNG eWallet, and local banking network service providers.
• Game Software Providers: Minimum required information is shared with licensed game providers for session verification and fraud prevention purposes.
• Cloud Service Providers: Data is stored in secure cloud infrastructure with providers bound by strict confidentiality agreements.
• Authorities and Regulatory Bodies: ybet99 will disclose required information to the relevant authorities when mandated by law, court order, or official investigation.
• Fraud Prevention Service Providers: Transaction information and activity logs are shared with third-party fraud detection systems to protect the platform ecosystem.

All third parties that receive personal data from ybet99 are bound by strict data protection agreements and are not permitted to use such data for any purpose other than those specified in the relevant agreement.

Ybet99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize you on subsequent visits and personalize your experience.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login sessions, account security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how users interact with the platform through aggregated and anonymised data, enabling us to improve functionality and content.
• Functional Cookies: Stores your preferences such as game selections, display settings, and more, to deliver a more personalised experience.
• Analytics Cookies: Used by ybet99's internal analytics tools to measure page performance and overall user behaviour.

You can manage and delete cookies through your web browser settings. Please note that disabling certain cookies may affect platform functionality. For more information on managing cookies, refer to your browser's help guide.

The security of your personal data is a responsibility we take very seriously. ybet99 implements a comprehensive range of technical and organisational measures to protect your information from unauthorised access, loss, destruction, or accidental alteration.

Our key security measures include 256-bit SSL encryption for all data transmissions, two-factor authentication (2FA) for account access, real-time security monitoring 24/7, and periodic security audits by independent experts. Member passwords are stored using the bcrypt hashing algorithm, which is irreversible — ensuring your password remains safe even in the event of a server breach.

In addition, ybet99 applies a minimum access rights principle, whereby only staff with a legitimate work requirement are permitted to access specific data. All staff access is logged and periodically reviewed by our internal security team.

While we make every effort to protect your data, no security system can be guaranteed 100% secure. Should a data breach occur that affects your personal information, we will notify you via your registered email within 72 hours of becoming aware of the incident.

Ybet99 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by applicable laws and regulations. Our data retention policy is as follows:

• Active Account Data: Retained for the duration that your account remains active on the ybet99 platform.
• Data After Account Closure: Basic account information and transaction records are retained for seven (7) years after account closure to meet financial record-keeping and legal requirements.
• KYC Documents: Retained for five (5) years after the business relationship ends, in accordance with anti-money laundering regulatory requirements.
• Security Logs: Retained for twelve (12) months for fraud detection and security incident investigation purposes.
• Support Communication Data: Communication records with the support team are retained for two (2) years for quality control purposes.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with ybet99's standard procedures. You may request early deletion of your data by contacting our support team, subject to any legal obligations that prevent early removal.

As a ybet99 member, you have certain rights regarding your personal data that we fully respect. These rights may be exercised by contacting our support team via live chat or official email:

• Right to Access: You have the right to request a copy of the personal data we hold about you at any time. Such requests will be processed within 30 business days.
• Right to Rectification: If your data is inaccurate or incomplete, you have the right to request that we update it. Simple updates can be made directly through your account settings.
• Right to Erasure: You may request the deletion of your personal data, subject to any legal obligations that may prevent full removal.
• Right to Object to Processing: You have the right to object to the use of your data for direct marketing purposes at any time.
• Right to Data Portability: You may request a copy of your data in a machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

In the course of its operations, ybet99 may transfer your personal data to servers or service providers operating outside Malaysia. Such transfers are carried out only when necessary and are subject to adequate safeguards.

Every cross-border data transfer carried out by ybet99 adheres to the following principles:

• The recipient country or region maintains data protection standards equivalent to or higher than those we provide.
• Recipient service providers are bound by comprehensive data processing agreements.
• Transfers involve only the minimum data required for the relevant service purpose.
• Technical security measures such as end-to-end encryption are applied during data transfers.

By using the ybet99 platform, you consent to such data transfers subject to the safeguards described in this Privacy Policy.

Ybet99 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data handling practices, legal requirements, or service improvements. Any material amendments will be communicated to you via:

• A prominent notice on the ybet99 platform homepage for at least 30 days prior to the changes taking effect.
• Email notification to all active members with a verified email address.
• Updating the "Last Updated" date at the top of this document.

Continued use of the platform after the effective date of any amendment constitutes your acceptance of the revised terms. If you do not agree with the changes, please discontinue use of the platform and contact us to close your account.

For any inquiries, concerns, or requests related to your privacy and personal data protection, the ybet99 Data Privacy Officer team is ready to assist you at any time.