Privacy Policy poppi99 –
Your Data, Our Responsibility

1Introduction

Welcome to the poppi99 Privacy Policy. We understand that your trust is our most valuable asset. That is why we take personal data protection so seriously — not merely to meet legal requirements, but because we genuinely care about the security of every member's information.

This Privacy Policy describes our data collection and management practices in an honest and transparent manner. It applies to all information you provide to us when registering, using the platform, communicating with our support team, or accessing the poppi99 mobile app.

By using the poppi99 platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

2Information We Collect

We only collect data that is strictly necessary to operate the platform securely and deliver the best experience to you. The categories of data we collect are as follows:

Registration & Identity Information

• Full name as it appears on official documents.
• Date of birth for age verification.
• Email address and phone number.
• Current residential address.
• National identity card number (MyKad) or passport for the KYC process.

Financial Information

• Bank account or e-wallet details registered for deposits and withdrawals.
• Transaction history including deposits, withdrawals and wagering.
• Payment method used.

Technical & Usage Information

• IP address and general geographic location.
• Device type, operating system, and web browser used.
• In-platform activity logs including games played and session duration.
• Cookie data and similar tracking technologies.

Communications

• Records of conversations with the customer support team.
• Feedback and complaints submitted to us.
• Responses to customer satisfaction surveys or polls.

3How We Use Your Data

Every piece of data we collect has a clear purpose. We do not collect data purely for storage. Here is how your data is used:

For marketing communications, you may withdraw your consent at any time via your account settings or by contacting our support team. Withdrawing marketing consent will not affect the core services we provide to you.

4Legal Basis for Data Processing

Every data processing activity we carry out is supported by a valid legal basis. We rely on the following bases depending on the processing context:

• Contract Performance: Processing required to deliver the services you have requested, such as processing transactions and managing your account.
• Legal Obligations: Processing required to comply with legal obligations such as anti-money laundering laws and KYC requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, and business analytics purposes, where our interests do not override your privacy rights.
• Consent: For marketing communications and non-essential cookie usage, where we obtain your explicit consent in advance.

5Data Sharing with Third Parties

Poppi99 does not share your data indiscriminately. Data sharing only occurs in the following limited circumstances:

Trusted Service Providers

We work with carefully selected third-party service providers to help operate the platform. These include payment processors, cloud services, game providers, and analytics platforms. All providers are bound by strict data processing agreements and may only use your data for purposes we specify.

Legal Requirements

Where we are required by law, court order, or direction from a competent authority to disclose information, we will do so. We will endeavor to notify you in advance where legally permitted.

Fraud Prevention

We may share certain information with industry fraud prevention platforms to protect all members from malicious activity.

6Data Encryption & Security

We invest seriously in security infrastructure to ensure your data is always protected. Key security measures we employ include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and our servers is protected by military-grade encryption.
• Secure Password Storage: Account passwords are stored in hashed form that cannot be decrypted, even by our own team members.
• Two-Factor Authentication (2FA): An additional security layer is available and strongly recommended for all member accounts.
• 24/7 Monitoring: Our systems are continuously monitored to detect and respond to any security threats.
• Regular Penetration Testing: Independent security audits are conducted regularly to identify and patch vulnerabilities before they can be exploited.
• Strict Access Controls: Access to user data within our internal systems is restricted to staff who genuinely need it to carry out their duties.

While we take all reasonable measures, no security system is 100% impenetrable. In the event of a data breach that materially affects your information, we will notify you within the timeframe required by applicable law.

7Data Retention Period

We do not retain your data indefinitely. Retention periods are determined based on operational needs and legal obligations:

• Active Account Data: Retained for as long as your account is active and for the required period following account closure.
• Financial Records & Transactions: Retained for a minimum of 7 years to meet financial compliance and tax law requirements.
• KYC & Identity Verification Logs: Retained for 5 years after the account closure date in line with anti-money laundering legal requirements.
• Support Communication Records: Retained for 2 years for quality assurance and dispute resolution purposes.
• Anonymized Analytics Data: Anonymized data may be retained for a longer period for platform analytics purposes.

When data reaches the end of its retention period and there is no legitimate reason to hold it longer, it will be securely deleted or anonymized.

8Your Rights Over Personal Data

You have clear rights regarding your personal data. poppi99 respects and facilitates the exercise of these rights:

• Right of Access: You may request a copy of the personal data we hold about you at any time.
• Right to Rectification: If any of your data is inaccurate or outdated, you may request a correction and we will update it promptly.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your data, subject to our legal obligations to retain certain records.
• Right to Restriction of Processing: In certain circumstances, you may request that we limit how we process your data.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another service.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, contact our privacy team by email at [email protected] or via 24/7 live chat within the platform.

9Cookies & Tracking Technologies

Poppi99 uses cookies and similar technologies to enhance your experience and ensure the platform functions correctly. There are several types of cookies we use:

Essential Cookies

These cookies are required for the platform's core functionality — including maintaining your login session and ensuring security features run correctly. They cannot be disabled without affecting platform functionality.

Performance & Analytics Cookies

These cookies help us understand how members use the platform so we can make meaningful improvements. Data collected is in aggregate form and does not identify you personally.

Functional Cookies

These cookies remember your preferences and settings, such as your preferred language and display theme, so you don't have to reconfigure them each time.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect platform functionality. For non-essential cookies, you can grant or withdraw consent via the cookie settings within the platform.

10Cross-Border Data Transfers

In the course of global operations, your data may be processed or stored on servers located in other countries. When this occurs, poppi99 ensures that protections equal to or greater than those outlined in this Privacy Policy are always in place through:

• Data processing agreements that comply with international standards.
• Use of internationally recognised standard contract clauses.
• Ensuring data recipients in other countries are subject to equivalent data protection laws.

11Children's Privacy

Poppi99 is a platform exclusively for adults aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18. Should we discover that a minor's data has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.

If you believe a minor may have registered or used our platform, please contact us immediately at [email protected].

12Amendments to the Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will:

• Updating the "Effective Date" at the top of this document.
• Displaying a prominent notice on the platform at your next login.
• Sending email notifications to all active members.

We encourage you to review this Privacy Policy periodically. Continued use of the platform after changes take effect means you accept the updated version.

13Contact Our Privacy Officer

If you have any questions, concerns or wish to exercise your privacy rights, our team is here to help:

• Privacy Email: [email protected]
• General Support: [email protected]
• 24/7 Live Chat: Available directly within the poppi99 platform or app.
• FAQ: Visit the page FAQ for a prompt response.