Privacy Policy MB99 — Our Commitment Protecting Your Data Your Privacy

1 Information We Collect

Mb99 collects two main categories of information from members — information you provide directly during registration and platform use, and information collected automatically through permitted tracking technologies.

Information You Provide Directly:

• Full name, date of birth, gender, and nationality as stated in a valid identification document.
• Active email address and mobile phone number for communication and account verification purposes.
• Bank account or digital wallet details used for deposit and withdrawal processing.
• Identity verification documents such as a copy of your MyKad, passport, or other KYC documents requested by mb99.
• Any information you share while interacting with our customer support team.

Information Collected Automatically:

• IP address, device type, operating system, and browser type used to access the platform.
• Activity log data including pages visited, session duration, and usage patterns within the platform.
• Geolocation data at the country or region level for local regulatory compliance purposes.
• Cookie and device identifier information that helps us recognize your account and prevent fraud.

2 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. mb99 does not use your data for purposes unrelated to the delivery of platform services. Below is our primary data usage table:

Mb99 also uses your data to ensure compliance with Anti-Money Laundering (AML) and Counter-Financing of Terrorism (CFT) requirements in accordance with applicable financial regulations. These are legal obligations we cannot waive, as they safeguard the financial ecosystem of all members.

3 Data Storage & Security

Mb99 continually invests in the latest security infrastructure to ensure your personal data remains under the strongest protection at all times. Our servers are equipped with multiple layers of security that are highly resistant to breaches.

• 256-bit SSL Encryption — all data moving between your device and mb99's servers is encrypted using the latest TLS protocol, preventing any third party from intercepting or reading your data.
• Segmented Servers — financial data, identity data, and activity log data are stored in separate, isolated server segments to minimise risk in the event of a security incident.
• 24/7 Monitoring — our automated security monitoring system operates around the clock to detect any suspicious activity or unauthorised access attempts.
• Regular Data Backups — your data is regularly backed up to a secure location to ensure no data loss occurs due to technical failure or unforeseen disasters.
• Role-Based Access Control — mb99 staff may only access data necessary for their specific duties, with all access logged and audited on a regular basis.

While we make every effort to protect your data, no security system can guarantee 100% absolute protection at all times. We therefore encourage you to take your own precautions, such as using a strong password and never sharing your login credentials with anyone.

4 Data Sharing With Third Parties

Mb99 firmly upholds the principle that your personal data is not for sale. We do not share member data with external parties for third-party marketing purposes. However, there are limited situations where data sharing is necessary and legally permitted:

• Integrated Service Providers — mb99 works with payment providers, third-party gaming platforms, and technical support services that require limited access to certain data to carry out their functions. All such partners are bound by strict confidentiality agreements.
• Legal Compliance — mb99 is required to disclose data to regulatory authorities, law enforcement agencies, or courts when directed to do so by a lawful order.
• Fraud Prevention — in the interest of protecting the platform ecosystem as a whole, mb99 may share limited information with fraud prevention networks to detect and block unlawful activity.
• Business Transfers — in the event of a corporate restructuring, merger, or acquisition, member data may be transferred to the successor entity, provided that an equally strict or stricter privacy policy will be upheld.

5 Use of Cookies & Tracking Technologies

The mb99 platform uses cookies and similar tracking technologies to ensure a smooth, secure, and personalized user experience. Cookies are small text files stored in your browser when you visit our website.

Mb99 uses several categories of cookies, each serving a distinct purpose:

• Essential Cookies — required for core platform functions such as login session verification, security, and transaction integrity. These cookies cannot be disabled without affecting overall platform functionality.
• Performance Cookies — collects anonymous information about how you use the platform, such as the most frequently visited pages, to help us continuously improve the user experience.
• Functional Cookies — stores your preferences such as language, theme, and display settings so you do not need to reconfigure them each time you log in to the platform.
• Marketing Cookies — used to display more relevant promotions and offers based on your usage patterns within the mb99 platform only, not from external websites.

You can manage or disable cookies through your browser settings at any time. However, disabling certain cookies may affect some functions of the mb99 platform, such as automatic login and personalised content display.

6 Your Privacy Rights as an mb99 Member

As an mb99 member, you have the following rights regarding your personal data. mb99 is committed to facilitating the exercise of these rights in a prompt, straightforward, and transparent manner.

To exercise any of the above rights, contact the mb99 support team via 24/7 live chat or our official email. We will process your request within 30 calendar days of receipt.

7 Children's Data Protection

The mb99 platform is an adult entertainment service strictly limited to individuals aged 18 and above only. mb99 does not knowingly collect, store, or process any personal data from individuals under the age of 18.

If mb99 determines that a child's personal data has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect an account has been opened in the name of their minor child are encouraged to contact the mb99 support team immediately.

8 Links to Third-Party Platforms

The mb99 platform contains links to third-party gaming platforms and services integrated within the mb99 ecosystem. When you access games or services operated by third-party providers, that provider's privacy policy will apply to your interactions within their platform.

Mb99 is not responsible for the privacy practices of third-party game providers integrated within our platform. We encourage you to read each game provider's privacy policy to understand how they manage your data during gaming sessions.

9 Cross-Border Data Transfers

In the operation of our online platform, your personal data may be stored or processed on servers located outside Malaysia. mb99 ensures that all such cross-border data transfers are protected by safeguards that meet or exceed Malaysia's data protection standards.

• All cross-border data transfers are carried out using internationally recognised standard contractual clauses.
• Overseas partners receiving mb99 member data are required to comply with the data protection standards set out in their service agreements with mb99.
• Mb99 conducts regular audits of data storage partners to ensure ongoing compliance with established security standards.

10 Data Retention Period

Mb99 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or for the period required by applicable law. When data is no longer needed, it will be securely deleted or anonymized.

• Active Account Data — retained for the duration your account remains active on the mb99 platform, plus any additional period required for audit and compliance purposes.
• Financial Transaction Data — retained for a minimum of 7 years in accordance with applicable accounting and anti-money laundering legal requirements.
• KYC Data — retained for a minimum of 5 years after account closure or the date of the last transaction, whichever is later.
• Support Communication Logs — retained for 2 years for quality control purposes and the resolution of any disputes that may arise.
• Marketing Data — retained until you withdraw your marketing consent or close your account, whichever comes first.

11 Contact the mb99 Privacy Officer

Mb99 has appointed a Data Privacy Officer responsible for ensuring compliance with this privacy policy and handling all privacy-related inquiries and complaints from members.

If you have any questions, concerns, or wish to exercise any of your privacy rights, you can reach the mb99 privacy team via:

• Live Chat 24/7 — the fastest way to get immediate assistance with privacy matters. Our team is available every day around the clock.
• Official Email — [email protected] for privacy enquiries requiring a written and more detailed response.

Mb99 is committed to responding to all privacy inquiries within 5 business days and resolving more complex requests within 30 calendar days.

12 Privacy Policy Amendments

Mb99 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Members will be notified of any material amendments via in-platform notifications or email before the changes take effect.

The "Updated" date shown at the top of this document indicates when the latest version of this Privacy Policy takes effect. Your continued use of the mb99 platform after that date constitutes your acceptance of the latest version of our Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how mb99 protects your information. If you disagree with any amendments, you have the right to close your account and stop using the platform at any time.