Faw99 Privacy Policy – Personal Data Protection for Malaysian Players

Faw99 ("we", "platform", "faw99") operates an online casino platform accessible at https://faw99-play.com. We understand that your trust in us depends not only on the quality of the games we offer, but also on how we protect the personal information you entrust to us.

This Privacy Policy sets out in detail how faw99 collects, uses, discloses, transfers, and stores your personal information. It applies to all users of the faw99 platform, including website visitors, registered members, and any individual who interacts with our services in any capacity.

This policy is prepared in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection principles. Continued use of the faw99 platform following any changes to this Privacy Policy constitutes acceptance of the updated terms.

Faw99 only collects data that is strictly necessary to provide our players with a safe, efficient, and high-quality service. The following are the categories of data we collect:

We do not collect sensitive data such as medical information, religious beliefs, political views, or sexual orientation. Should you choose to provide additional information that is not required, it will be handled with the same high level of protection.

Faw99 collects personal data through several different methods, depending on the context of your interaction with our platform:

• Account Registration: You provide information directly when completing the faw99 new account registration form, including your name, email, phone number, and date of birth.
• KYC Verification: During the identity verification process, you will be asked to submit documents such as a copy of your MyKad, bank statement or utility bill, and a verification selfie.
• Financial Transactions: Payment information is collected when you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks).
• Platform Usage: Technical and usage data is collected automatically when you browse the faw99 website or use the faw99 app via cookies and similar tracking technologies.
• Communications: When you contact customer support via live chat or email, those communication records are retained for reference and service improvement purposes.
• Third-Party Sources: In certain cases, we may receive information from payment partners or identity verification bodies solely for KYC verification purposes.

Faw99 uses collected personal data solely for the legitimate and stated purposes below. We will not use your data for any other purpose without your prior consent:

• Creating and managing your faw99 member account, and verifying your identity through the required KYC process.
• Processing your deposits and withdrawals via secure and efficient local Malaysian payment methods.
• Providing responsive and effective customer support whenever you need assistance.
• Sending you important account-related information such as transaction confirmations, security notices, and policy updates.
• Monitoring and preventing fraud, money laundering, and other illegal activities that could compromise the security of the platform and its members.
• Complying with applicable legal and regulatory requirements in Malaysia, including reporting obligations to relevant authorities.
• Analyzing usage patterns to improve the player experience and develop better new features.
• To send relevant promotional offers and bonuses if you have consented to receive marketing communications.

Faw99 does not sell, rent, or trade members' personal data to third parties for marketing or any other commercial purposes. However, we may share your personal data in the following limited circumstances only:

• Payment Service Provider: We share necessary transaction information with payment processors such as DuitNow, FPX, Touch 'n Go eWallet, and GrabPay providers solely to complete your transactions.
• Identity Verification Providers: KYC information may be shared with authorised third-party identity verification bodies to fulfil legal compliance requirements.
• Legal Requirements: We may be required to disclose data to Malaysian authorities such as the police, courts, or regulatory bodies when mandated by law or court order.
• Fraud Prevention: Data may be shared with fraud prevention partners to protect the platform and all members from unlawful activity.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the successor entity, subject to member notification and equivalent protections.

All third parties we work with are required to uphold data protection standards no less stringent than our own. We conduct due diligence on all partners before any data sharing takes place.

Faw99 invests seriously in cybersecurity infrastructure to safeguard the personal data of all members. The following are the layers of protection we have in place:

• Data Encryption: All transmitted data is protected with TLS 1.3 and 256-bit SSL encryption. Data stored in our databases is also encrypted using AES-256-level encryption.
• Access Controls: A role-based access control (RBAC) system ensures that only authorised personnel can access member personal data, and every access is automatically logged.
• Two-Factor Authentication: faw99 staff accounts with access to member data are protected by two-factor authentication (2FA), without exception.
• Security Audits: faw99 undergoes regular independent security audits by certified cybersecurity firms to identify and address any potential vulnerabilities.
• 24/7 Monitoring: Our continuous threat monitoring system detects and responds to any suspicious activity in real time, around the clock.
• Data Backup: Critical data is regularly backed up to a secure, separate location to ensure service continuity in the event of an unexpected disruption.

Faw99 retains your personal data for as long as necessary to fulfil the original purpose of collection and to meet applicable legal requirements. The following are our data retention guidelines:

• Active Account Data: For as long as your account remains active, and for a minimum of 5 years following account closure, in accordance with Malaysian financial regulatory requirements.
• Transaction Records: Retained for a minimum of 7 years for tax compliance and financial audit requirements.
• KYC Records: Retained for 5 years following the termination of the business relationship, in accordance with anti-money laundering (AML) requirements.
• Communication Logs: Customer support records are retained for 2 years for reference and service improvement purposes.
• Technical Data: Access logs and technical data are retained for 12 months for security and technical troubleshooting purposes.

When data is no longer needed and there is no legal requirement to retain it, faw99 will delete or anonymise the data using secure, irreversible methods.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by faw99. We fully respect all of these rights and facilitate their exercise:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information within 21 days of receiving your request.
• Right to Rectification: If your personal data is inaccurate or out of date, you have the right to request a correction. We encourage members to update their information directly through their account settings.
• Right to Object to Processing: You have the right to object to the processing of your data for direct marketing purposes at any time, without having to provide any justification.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time. This will not affect the validity of any processing carried out prior to the withdrawal.
• Right to Lodge a Complaint: If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the rights above, please contact our privacy team by email at support@faw99-play.com, clearly stating your request. We may need to verify your identity before processing the request in order to protect the security of your data.

Faw99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as secure login, session management, and security. These cookies cannot be disabled without affecting the platform's basic functionality.
• Performance Cookies: Helps us understand how players use our platform by collecting anonymised usage data for improvement purposes.
• Functional Cookies: Remembering your preferences and settings — such as language and display options — to deliver a more personalised experience.
• Analytics Cookies: Helping us analyse website traffic and usage patterns in order to develop more useful new features.

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality and user experience of the faw99 platform. Please refer to your web browser's documentation for more information on managing cookies.

Faw99 strictly does not accept or process the personal data of individuals under the age of 18. Our platform is intended exclusively for adults who meet the minimum age requirement set by Malaysian law.

Should we discover that personal data belonging to someone under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the relevant account. If you believe your underage child has registered a faw99 account, please contact us immediately at support@faw99-play.com.

Faw99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other operational reasons. The "Updated" date at the top of this document will always reflect the date of the most recent amendment.

For material amendments that significantly affect how we use your personal data, we will provide clear notice via your registered email or a prominent notice on the faw99 platform at least 14 days before the changes take effect. This gives you sufficient time to review the updates and make an informed decision.

Continued use of the faw99 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account, and we will promptly process any legitimate fund withdrawals.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to reach out. Our privacy team is ready to assist you in Bahasa Malaysia:

• Email: support@faw99-play.com — response within 1–2 business days
• Live Chat: Available 24 hours a day, 7 days a week via the live chat button on the faw99 platform
• Contact Form: Available in the customer support section of our platform

For formal complaints relating to personal data protection that cannot be resolved directly with us, you may contact the Department of Personal Data Protection (JPDP) Malaysia through their official website. The current version of this Privacy Policy is effective from January 2026.