Privacy Policy 999 Bar –
Your Data Security Is Our Priority

999 Bar ("we", "platform", or "999 Bar") is an online betting platform operating in Malaysia, committed to protecting the privacy of every member who uses our services. This Privacy Policy has been drafted in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia and international data protection standards.

This Privacy Policy applies to all information collected through the 999 Bar website, mobile app, and all communication channels between you and us, including email, live chat, and WhatsApp. It covers how we collect, use, store, disclose, and protect your personal data.

We believe transparency is the foundation of trust. That is why this Privacy Policy is written in plain, accessible language — so every Malaysian member can clearly understand their rights and how we manage their personal data.

999 Bar collects various types of personal data depending on how you interact with our platform. Below is a full breakdown of the data categories we collect:

999 Bar uses the personal data we collect solely for the following purposes. We will not use your data for any other purpose without first obtaining your consent:

• Account Management: Creating and managing your member account, including the registration process, login, and identity verification.
• Transaction Processing: Securely and accurately processing all deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX.
• Platform Security: Detecting and preventing fraud, unauthorised access, money laundering, and any activity that violates 999 Bar's terms of use.
• Customer Support: Providing effective assistance and resolving any complaints or enquiries you submit to our support team.
• Service Improvements: Analysing usage patterns to improve the interface, gameplay experience, and various features of the 999 Bar platform.
• Marketing Communications: Sending promotional information, bonus offers, and 999 Bar-related updates — only if you have opted in to receive them.
• Responsible Gaming: Monitoring betting patterns to identify members who may need assistance related to problem gambling.
• Legal Compliance: Fulfilling legal obligations under the PDPA 2010 and other applicable Malaysian laws.

We will only use your personal data where there is a valid legal basis to do so — whether that is your consent, a contractual obligation, a legal requirement, or the legitimate interests of 999 Bar.

999 Bar does not sell, rent, or trade members' personal data to any third party for their commercial purposes. However, there are limited circumstances in which we may need to share your information:

• Trusted Service Providers: We share necessary data with payment providers (such as FPX processors and e-wallet providers), gaming software suppliers, and cloud service providers who have signed confidentiality agreements with 999 Bar. They may only use your data for the purposes we specify.
• Legal Requirements: We may disclose your information to Malaysian government authorities when required by law, court order, or to assist in financial crime investigations.
• Rights Protection: In cases where we need to protect the legal rights, property, or safety of 999 Bar, our members, or the general public.
• Business Transfer: In the event of a merger, acquisition, or transfer of 999 Bar's assets, personal data may be transferred to the relevant entity, which will continue to be bound by this Privacy Policy.

999 Bar continually invests in technology and information security best practices to protect your personal data from unauthorised access, misuse, loss, or destruction. Key security measures we have in place include:

• 256-bit SSL Encryption: All communications between your browser and 999 Bar's servers are encrypted using the latest TLS/SSL protocols, ensuring that data in transit cannot be intercepted by any third party.
• Hashed Password Storage: Member passwords are never stored in plain text. We use a strong hashing algorithm (bcrypt) to keep your password secure.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of security to their account.
• 24/7 Security Monitoring: Our automated monitoring system operates around the clock to detect suspicious activity and intrusion attempts.
• Internal Access Controls: Only authorised 999 Bar personnel have access to members' personal data, and only to the extent required for their specific responsibilities.
• Regular Security Audits: 999 Bar conducts regular security audits and penetration testing to identify and address any system vulnerabilities.

While we take all reasonable precautions, no system is ever 100% secure. In the event of a data breach that affects you, 999 bar will notify you and the relevant authorities as required by law within the stipulated timeframe.

999 Bar uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can control and manage cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the 999 Bar platform. For optional cookies, you may give or withdraw your consent at any time via the cookie settings panel on our website.

As a 999 Bar member based in Malaysia, you have certain rights under the Personal Data Protection Act 2010 (PDPA) with respect to your personal data. 999 Bar respects and facilitates the exercise of these rights:

To exercise any of the above rights, please contact us by email at support@999bar.net by clearly stating your request. We will process it within 21 business days as required under the PDPA.

999 Bar will only retain your personal data for as long as necessary for the purposes it was collected, or as required under Malaysian law. Below are our data retention guidelines:

• Active Account Data: Retained for the duration of your active account plus 5 years after closure for legal compliance purposes.
• Financial Transaction Records: Retained for 7 years in accordance with Malaysia's accounting and taxation legal requirements.
• Communication Logs: Customer support conversations and emails are retained for 2 years for service quality purposes.
• Technical Data: Server logs and technical data are retained for a maximum of 12 months.
• KYC Documents: Retained for 6 years after account closure in accordance with anti-money laundering legal requirements.

Once the retention period has lapsed, 999 Bar will securely delete or anonymise your personal data using methods that ensure it cannot be recovered or reused.

The 999 Bar platform may contain links to third-party websites or services such as payment providers and game suppliers. This Privacy Policy applies solely to the 999 Bar platform.

999 Bar is not responsible for the privacy practices of any third-party websites you may access via links on our platform. We encourage you to read the privacy policy of every website you visit. Third-party service providers working with 999 Bar are required to comply with the data protection standards we set out in our contractual agreements.

The 999 Bar platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that we have unknowingly collected data from a minor, we will take immediate action to delete that data and close the relevant account. If you suspect that someone under the age of 18 has registered on our platform, please contact us immediately at support@999bar.net.

999 Bar reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other legitimate reasons. Any changes take effect as soon as the updated version is published on this page.

For significant changes, we will notify members via an in-platform notice or email at least 14 days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the date of the most current version of the Privacy Policy.

Your continued use of the 999 Bar platform after any changes are published will be considered your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account and stop using our platform.

If you have any questions, concerns, or requests regarding this Privacy Policy or how 999 Bar handles your personal data, please contact our Data Protection Officer through the following channels:

• Privacy Email: support@999bar.net – please include "Privacy Enquiry" in your email subject line.
• Live Chat: Available 24/7 via the chat icon on the 999 Bar platform.
• WhatsApp: Number available on the support page after logging in.

We are committed to responding to all privacy-related enquiries within 14 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia via their official website.