Fly99 Privacy Policy – Personal Data Protection for Malaysian Members

Fly99 collects your personal data through several means as you use our platform. As a fly99 member, you have the right to understand what data is collected, and we are committed to being fully transparent about this.

Data you provide directly to fly99:

• Full name as shown on a valid Malaysian identity document.
• An active Malaysian phone number, used for OTP verification and account communications.
• Email address for official fly99 communications and account recovery.
• Your account password is stored in encrypted form — fly99 cannot read your password in plain text.
• KYC (Know Your Customer) information when required — including copies of a valid Malaysian MyKad or passport.
• Payment method details such as your Touch 'n Go e-wallet account number, DuitNow ID, or Maybank/CIMB bank account number for withdrawal purposes.

Data collected automatically when you use fly99:

• The IP address of your device at each login session.
• The type of device, operating system, and web browser you use.
• Activity log data — pages visited, session duration, games played and in-platform actions.
• Complete transaction records including the date, time, deposit and withdrawal amounts, and payment method used.
• Cookie data and similar tracking technologies — as detailed in Section 5 below.

Fly99 uses your personal data solely for legitimate purposes directly tied to the operation of our digital entertainment platform. The specific purposes are as follows:

• Account Management: Creating, verifying, and maintaining your fly99 account. This includes phone number verification via OTP during registration and login.
• Transaction Processing: Processing all your deposits and withdrawals accurately and securely through supported Malaysian payment methods — Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX.
• Identity Verification (KYC): Verifying that you meet the minimum age requirement of 18 and confirming your identity in accordance with applicable legal compliance requirements.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and misuse of the fly99 platform, including the use of multiple accounts.
• Customer Support: Providing effective assistance when you reach out to the fly99 support team via Live Chat or email.
• Experience Personalisation: Tailoring game recommendations, promotions, and communications based on your playing activity — solely to enhance your experience on fly99.
• Administrative Communications: Sending important notifications relating to your account, security, policy updates, and fly99 promotional information.
• Legal Compliance: Meeting reporting obligations to the relevant Malaysian authorities when required by law.

Fly99 will not use your data for any purpose beyond those listed above without first obtaining your explicit consent.

Fly99 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

Technical security measures we employ:

• 256-bit SSL encryption for all communications between your device and fly99's servers — the same standard used by Malaysian banking institutions.
• Sensitive data is encrypted within the database — passwords, payment information, and KYC details are stored in a form that cannot be read directly, even by fly99 staff.
• Tiered access controls — only staff with a legitimate work need may access members' personal data, and all access is recorded.
• Continuous 24/7 security monitoring to detect any intrusion attempts or anomalous activity.
• Regular security audits by accredited independent parties to assess and strengthen fly99's data protection systems.
• Encrypted data backups are stored at separate locations to ensure data recovery in the event of a technical disaster.

While fly99 takes all reasonable steps to protect your data, no digital security system can be guaranteed 100% secure. You also play an important role in keeping your account safe — please use a strong, unique password for your fly99 account and never share your login credentials with anyone.

Fly99 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is our absolute commitment to all fly99 members.

However, fly99 may share your personal data with a limited category of third parties in the following situations only:

• Game Providers: Pragmatic Play, PG Soft, Playtech, Evolution Gaming, and other providers receive only the minimum data necessary to run games and verify your play session. These providers are bound by strict confidentiality agreements with fly99.
• Payment Service Providers: The operators of Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX receive the transaction information necessary to process your deposits and withdrawals. All these providers comply with Malaysian data protection requirements.
• Regulatory Authority: Required information may be shared with Malaysian government agencies or law enforcement bodies when required by Malaysian law or a valid court order.
• Technical Infrastructure Providers: Companies providing cloud computing, security monitoring, and other technical infrastructure services to fly99 may have limited access to data strictly within the scope of their assigned duties.

In all of the data sharing cases above, fly99 ensures that recipient parties are bound by data protection obligations equivalent to those we hold ourselves to. No data sharing occurs outside the listed categories without your explicit consent.

Fly99 uses cookies and similar tracking technologies to enhance your experience on our platform and ensure technical functions work correctly. Cookies are small text files stored on your device when you visit a website.

Types of cookies used by fly99:

• Essential Cookies: Required for the core functions of the fly99 platform — including login authentication, play session management and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how you use fly99 — the most visited pages, response times and any errors encountered. This helps us improve platform performance.
• Functional Cookies: Saves your preferences such as language, display settings and game preferences to deliver a more personalised experience during your fly99 sessions.
• Analytics Cookies: Helps fly99 understand aggregate usage patterns to make better-informed product development decisions. Analytics data is anonymised and does not identify you personally.

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may cause certain fly99 features to stop working properly, including the ability to stay logged in. Refer to your browser's help documentation for instructions on managing cookies.

As a data subject under the Malaysian Personal Data Protection Act 2010 (PDPA), you have the following rights with respect to your personal data held by fly99:

To exercise any of the rights above, contact fly99 by email at support@fly99-jit.com with the subject line "Data Privacy Rights Request", along with your fly99 account username to facilitate the identity verification process.

Fly99 is an entertainment platform intended exclusively for individuals aged 18 and above. We do not permit minors or underage individuals to register for or use the fly99 platform in any capacity.

Fly99 does not knowingly collect personal data from individuals under the age of 18. Should we discover that personal data belonging to a minor has been collected without our knowledge — potentially as a result of false information provided during registration — we will take the following steps immediately:

• Closing the account in question immediately.
• Deleting all personal data associated with the account.
• Placing a hold on all account balances until the verification procedure is completed.

Parents or guardians who believe a minor under their care may have registered an account with fly99 are urged to contact us immediately at support@fly99-jit.com so we can take swift action.

In the course of operating the fly99 platform, some of your personal data may be transferred to, stored in, or processed outside of Malaysia — particularly in connection with services provided by international game providers such as Pragmatic Play, PG Soft, and Evolution Gaming, which maintain infrastructure across multiple global locations.

In all cases of cross-border data transfers, fly99 ensures that:

• Data is only transferred to parties that maintain data protection standards equivalent to or higher than Malaysia's PDPA requirements.
• Legally binding data processing agreements have been executed with all data recipients outside Malaysia.
• Only the minimum necessary data is transferred — fly99 does not pass full personal data to game providers, only the session identifiers required for technical authentication.

Sensitive financial information such as your bank account and e-wallet details is not transferred to any party outside Malaysia. All payment processing takes place through platforms operating within Malaysia and in compliance with local financial standards.

Fly99 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable Malaysian law. Our data retention policy is as follows:

• Active Account Data: Retained for the duration of your active fly99 account and for a reasonable period after account closure to allow for the resolution of any disputes that may arise.
• Financial Transaction Records: Stored for a minimum of seven years from the transaction date, in line with Malaysian financial compliance requirements.
• Activity Log Data: Technical and activity logs are retained for a maximum of 12 months, after which they are automatically deleted or anonymised.
• KYC Records: Copies of identity documents submitted for KYC are retained for the period required under Malaysia's anti-money laundering laws.
• Support Communication Data: Live chat session records and customer support emails are retained for two years for quality control and dispute resolution purposes.

Once the retention period expires, fly99 will securely delete or anonymise your data using industry-standard data disposal procedures. Anonymised data can no longer be linked back to you personally.

Fly99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements. Any material amendments will take effect upon being published on this page with a clearly indicated update date.

For significant amendments — particularly those affecting how your data is used — fly99 will endeavour to notify you via email or in-platform notification at least 14 days before the changes take effect. Continued use of the fly99 platform after the amendment's effective date will be considered acceptance of the updated policy.

If you have any questions or concerns, or wish to exercise your privacy rights regarding personal data held by fly99, please contact fly99's Data Protection Officer (DPO) via:

• Email: support@fly99-jit.com (subject: Privacy Policy Enquiry)
• Live Chat: Available 24 hours a day within the fly99 platform

Fly99 is committed to responding to all privacy-related enquiries within three business days from the date the request is received. For more complex data access requests, we will notify you within three days with an estimated processing timeframe.