Privacy Policy iringgit99 — We Take Care of Your Data

Welcome to the iringgit99 Privacy Policy. This document is published by iringgit99, an online gaming and betting platform operating under the domain iringgit99.win, and covers all services we provide through our website, Android and iOS mobile apps, and any other relevant digital channels.

This policy details the types of personal information we collect from users, the purposes of such collection, how we store and protect that information, and your rights as a data subject under Malaysian law. This Privacy Policy applies to all iringgit99 users, regardless of whether you register a full account, use the platform as a guest, or simply browse our website.

Iringgit99 acts as the data controller for all personal information collected through our platform. This means we are fully responsible for determining the purpose and manner in which your data is processed, and for ensuring that data is processed in accordance with the provisions of Malaysia's Personal Data Protection Act (PDPA) 2010.

Iringgit99 collects your personal information through several channels — directly from you during the registration and platform usage process, automatically through tracking technologies, and from legitimate third-party sources in certain situations. Below is a full breakdown of the data categories we collect:

2.1 Information You Provide Directly

2.2 Information Collected Automatically

When you use the iringgit99 platform — whether via web browser or mobile app — our systems automatically record certain technical information necessary to ensure the platform operates correctly and securely:

• IP address and geographic location information (city/state level only)
• Type and version of web browser or app used
• Operating system and device type (computer, phone, tablet)
• Activity history on the platform (games played, bets placed)
• Login session time and duration
• Cookie data and session identifiers
• Links you click and pages you visit within the platform

2.3 Information from Third-Party Sources

In certain circumstances, iringgit99 may receive information about you from legitimate third-party sources, including identity verification service providers, payment solution providers (such as FPX, Touch 'n Go, GrabPay), and anti-money laundering (AML) compliance databases recognised by the relevant authorities.

Iringgit99 uses your personal data on a valid legal basis under PDPA 2010 — whether on the grounds of contractual necessity, legal obligation, the platform's legitimate interests, or your explicit consent. We do not use your data for purposes beyond what is stated here.

3.1 Service Provision and Management

The primary purpose of collecting your data is to enable iringgit99 to provide you with a complete and secure gaming service. This includes processing account registration, identity verification (KYC), processing deposits and fund withdrawals, and managing all gaming activity within your account.

3.2 Security and Fraud Prevention

Your data is used to detect and prevent suspicious activity, including fraud attempts, money laundering, bonus abuse, and unauthorised account access. This is a legal requirement we are obligated to comply with under Malaysian AML regulations.

3.3 Communication and Customer Support

We use your contact information to send important account notifications (such as transaction confirmations, security alerts, and policy updates), and to provide effective customer support when you reach out via live chat or email.

3.4 Marketing and Promotions (With Consent)

If you have given your consent, we may use your information to send promotional offers, the latest bonus information, and relevant marketing content via email or in-app notifications. You may withdraw this consent at any time through your account settings.

3.5 Platform Improvement

Aggregated usage data (without personal identifiers) is used to understand usage patterns, identify areas of the platform that need improvement, and develop new features that better meet the needs of Malaysian users.

Iringgit99 maintains a strict policy: we do not sell your personal data. However, in the course of operating the platform, there are certain situations where your data may be shared with specific parties for legitimate and limited reasons.

4.1 Third-Party Service Providers

We share only the minimum necessary data with service providers who help us operate the platform, including:

• Payment Solutions Provider — FPX, Touch 'n Go eWallet, GrabPay, and bank payment processors to facilitate deposit and withdrawal transactions
• KYC Service Provider — third-party identity verification companies that help us comply with AML requirements
• Game Service Provider — casino and sports game providers that are iringgit99's partners in delivering gaming content
• Cloud Infrastructure & Security — cloud and cybersecurity service providers that help us store and protect data

All third-party service providers are required to sign strict data processing agreements, and they are only permitted to use your data for the specific purposes defined in those agreements.

4.2 Legal Requirements and Authorities

Iringgit99 may disclose your personal information to relevant authorities — including police, courts, or regulatory bodies — when we are required to do so by Malaysian law, or when such disclosure is necessary to protect the rights, property, or safety of iringgit99, its users, or the public.

4.3 Business Transfers

In the event of a business merger, acquisition, or asset sale, user data may be transferred as part of the business assets involved. In such situations, you will be notified in advance and the same Privacy Policy will continue to apply to your data.

Iringgit99 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and ensure the security of your session. The following explains the types of cookies we use:

5.1 Required Cookies (Mandatory)

This type of cookie is essential for the basic functionality of the iringgit99 platform and cannot be disabled. It includes login session management cookies, security cookies to prevent CSRF (Cross-Site Request Forgery), and cookies that store your language preferences and display settings.

5.2 Analytics Cookies

Analytics cookies help us understand how users interact with the platform — which pages are visited most frequently, how long users stay on the platform, and where users commonly encounter issues. This information helps us make better decisions in platform development.

5.3 Managing Your Cookies

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the iringgit99 platform. Cookie management instructions for popular browsers can be found in each browser's help section.

Iringgit99 invests seriously in security infrastructure to ensure your personal data is always protected from unauthorised access, disclosure, alteration, or destruction. We employ a defence-in-depth approach that includes:

• 256-bit SSL/TLS Encryption for all data transmitted between your browser/app and the iringgit99 servers
• Data encryption at rest (at-rest encryption) for all sensitive data stored in our databases
• Two-Factor Authentication (2FA) available for all user accounts to add an extra layer of protection
• Role-based access control (RBAC) ensuring only authorised personnel can access specific data categories
• 24/7 security monitoring with automated intrusion detection systems (IDS/IPS)
• Regular security audits by independent third parties to identify and patch any vulnerabilities
• Data backup procedures performed regularly to ensure service continuity in emergency situations

While we take all reasonable steps to protect your data, it is important to understand that no digital security system can guarantee 100% protection at all times. Therefore, you also play an important role in protecting your account by using a strong password and not sharing it with anyone.

Iringgit99 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for the period required by Malaysian law. Our principle is to retain data to the minimum extent possible and no longer than necessary.

7.1 Active Accounts

For as long as your iringgit99 account remains active, we will retain all relevant personal information to enable us to provide continuous service and meet ongoing KYC requirements.

7.2 After Account Closure

When your account is closed — whether at your request or by iringgit99 — we will retain your personal data for a minimum of 7 years after account closure. This period is required to comply with anti-money laundering (AML) compliance obligations and to facilitate the resolution of any disputes that may arise following account closure.

7.3 Financial Transaction Records

All financial transaction records are retained for a minimum period of 7 years in accordance with Malaysia's financial and tax legal requirements. These records may be required for audit, investigation, or dispute resolution purposes.

7.4 Marketing Data

If you withdraw consent for marketing communications, marketing-related data will be deleted within 30 business days of the request being received. However, basic account information and transaction records will continue to be retained for the periods stated above.

As an iringgit99 user and as an individual protected under Malaysia's Personal Data Protection Act 2010, you have several important rights regarding your personal data. iringgit99 fully respects these rights and provides straightforward mechanisms for you to exercise them:

To exercise any of the above rights, please contact our privacy team via email or live chat. We will process your request within 21 calendar days. Please note that certain requests may be subject to limitations if they conflict with our legal obligations, particularly record-keeping obligations under AML regulations.

Iringgit99 is a platform exclusively for adults aged 18 and above. We do not intentionally collect, store, or process any personal information from individuals under the age of 18.

Should we discover that personal information of a child or minor has been collected without iringgit99's knowledge, we will take immediate action to delete that information and close the relevant account. The identity verification (KYC) process we conduct is one of our primary mechanisms to ensure no underage user successfully registers an account on the iringgit99 platform.

Iringgit99 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or developments in the services we offer. Whenever this Privacy Policy is updated, the "Updated" date at the top of this document will be revised to reflect the latest update date.

For material or significant changes — such as changes to how we use your personal data or to your rights — iringgit99 will notify you via your registered email or through a prominent in-platform notification at least 14 days before the changes take effect. Your continued use of the platform after that notification period will be considered acceptance of the changes made.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Previous versions of this Privacy Policy are available upon request from our support team for reference purposes.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the iringgit99 privacy team is here to help. We are committed to providing accurate, clear, and helpful responses in the shortest time possible.

For any matters relating to data privacy, please contact us through the following channels:

We aim to respond to all privacy-related inquiries within 3 business days. For more complex personal data rights requests, processing may take up to 21 calendar days. If you are dissatisfied with our response, you have the right to file a complaint with Malaysia's Department of Personal Data Protection (JPDP).