Privacy Policy — maju99 Platform

01 Introduction

This Privacy Policy (hereinafter "Policy") describes how maju99 ("maju99", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at maju99.cam, collects, uses, stores, discloses, and otherwise processes personal data relating to its users ("you", "User", "Player", "Member").

Maju99 is committed to protecting the privacy and security of your personal information. This Policy is designed to be clear and straightforward — we want you to understand exactly what data we hold about you and why, without having to wade through impenetrable legal language.

By registering a maju99 account, accessing the Platform, or providing personal data to us in any form, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein.

02 Definitions

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably identify a living individual, whether directly or in combination with other data. This includes, but is not limited to, name, email address, phone number, payment details, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, erasure, or any combination thereof.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. Maju99 acts as the Data Controller for the personal data of its registered members.
• "Data Processor" — a third party that processes personal data on behalf of maju99 under a binding data processing agreement, such as payment service providers, KYC verification services, and cloud infrastructure providers.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement by a data subject to the processing of their personal data for a defined purpose.
• "KYC" — Know Your Customer procedures, referring to the identity verification and due diligence processes required for regulatory compliance.
• "Sensitive Personal Data" — a subset of personal data that warrants heightened protection, including financial account details, government-issued identity document numbers, and any data capable of revealing a person's financial or legal status.

03 Data Controller

Maju99 acts as the Data Controller in respect of the personal data of all registered members and platform visitors. As Data Controller, maju99 determines the purposes for which your personal data is collected and the manner in which it is processed.

Maju99 is responsible for ensuring that all personal data processing activities carried out on its behalf — whether directly by maju99 or through appointed Data Processors — are conducted in compliance with applicable data protection law and the principles described in this Policy.

For data protection queries, access requests, and complaints, please refer to Section 15 (Contact & Complaints) of this Policy.

04 Data We Collect

Maju99 collects personal data in the following categories, depending on how you interact with our platform:

4.1 Registration & Account Data

When you create a maju99 account, we collect:

• Full legal name
• Date of birth (to verify 21+ age eligibility)
• Email address
• Contact telephone number
• Residential address (city and country at minimum; full address for KYC purposes)
• Preferred username and encrypted password

4.2 KYC & Identity Verification Data

As part of mandatory KYC procedures, we may collect:

• Copies of government-issued photo identification (e.g., Malaysian MyKad, passport)
• Proof of address documentation (e.g., utility bills, bank statements)
• Proof of payment method ownership
• Source of funds documentation for higher-value accounts

4.3 Transaction & Payment Data

To facilitate deposits and withdrawals in MYR through methods including Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency, we collect:

• Transaction amounts, dates, and reference numbers
• Payment method identifiers (e.g., partial account numbers, e-wallet usernames)
• Cryptocurrency wallet addresses (where applicable)
• Deposit and withdrawal history

4.4 Usage & Technical Data

Automatically collected data when you access our Platform includes:

• IP address and approximate geolocation (country/city level)
• Device type, operating system, and browser version
• Pages visited, session duration, and clickstream data
• Game play records, betting history, and session logs

4.5 Communications Data

When you contact us via live chat, email, or any other support channel, we retain records of those communications — including their content — for quality assurance, training, and dispute resolution purposes.

05 Purposes & Legal Basis for Processing

Maju99 processes your personal data only where a lawful basis for processing exists. The primary bases we rely upon are: contract performance, legal obligation, legitimate interests, and consent. The following table sets out the key processing activities, their purposes, and the corresponding legal bases:

06 Data Sharing & Disclosure

Maju99 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share personal data only in the following limited circumstances:

6.1 Service Providers (Data Processors)

We engage third-party service providers who process personal data strictly on our behalf and under our instruction, including:

• Payment processors: To facilitate deposits and withdrawals through MYR payment methods including Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency gateways.
• KYC and identity verification providers: To perform automated identity verification and anti-money laundering screening.
• Cloud infrastructure and hosting providers: For secure data storage and platform operations.
• Customer support platforms: For live chat and ticketing functionality.
• Analytics providers: For aggregated, non-identifiable platform usage analytics.

All Data Processors engaged by maju99 are bound by contractual data processing agreements that prohibit them from using your data for any purpose beyond the services they provide to us.

6.2 Legal & Regulatory Disclosure

Maju99 may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where required to do so by applicable law, lawful order, or where disclosure is necessary to protect the rights and safety of our users or the general public.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of maju99's business or assets, personal data held about our users may be transferred to the acquiring entity as part of that transaction. We will notify affected users of any such transfer and the options available to them.

07 International Data Transfers

As an internationally operated online gaming platform, some of the Data Processors we engage may be located or operate infrastructure in jurisdictions outside Malaysia. Where personal data is transferred to countries that may not provide an equivalent level of data protection to that available in Malaysia, maju99 implements appropriate safeguards to ensure your data remains protected.

Such safeguards include:

• Entering into standard contractual clauses or equivalent data transfer agreements with Data Processors located in third countries.
• Transferring data only to processors operating under binding corporate rules or certified under recognised international data protection frameworks.
• Encrypting data in transit using industry-standard TLS/SSL protocols, regardless of the destination jurisdiction.

08 Cookies & Tracking Technologies

Maju99 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session state, and gather analytics that help us improve the Platform over time.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies and security tokens. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred lobby view, and account settings between sessions.
• Analytics Cookies: Collect anonymised data about how visitors use the Platform — pages visited, session length, and navigation paths. This data is used solely to improve Platform performance and user experience.
• Marketing Cookies: Used to deliver relevant promotional content within the Platform based on your activity. These are only placed with your explicit consent.

8.2 Cookie Management

You may manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a notification when a new cookie is set. Please note that disabling certain cookies may affect the functionality of the maju99 Platform.

09 Data Retention

Maju99 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulatory obligation. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data lifecycle procedures.

10 Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to the personal data we hold about you. All rights requests are handled free of charge and responded to within 30 days of receipt (extendable to 60 days for complex requests, with notice provided).

11 Security Measures

Maju99 implements a range of technical and organisational security measures proportionate to the risks associated with processing personal data in an online gaming environment. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our Platform.
• Encryption at rest for stored personal data, including KYC documents and payment information.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their role.
• Multi-factor authentication for administrative access to systems containing personal data.
• Regular security audits and penetration testing conducted by independent third-party specialists.
• Incident response procedures to detect, respond to, and notify affected users of any data breach in a timely manner.

While maju99 takes all reasonable technical steps to protect your personal data, no data transmission over the internet is entirely without risk. You are responsible for maintaining the security of your own account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

12 Minors & Age Policy

The maju99 Platform is strictly intended for use by individuals aged 21 years or above. We do not knowingly collect personal data from individuals under the age of 21. Registration and participation by persons under 21 is prohibited.

Where maju99 discovers or has reasonable grounds to believe that a registered account belongs to a person under the age of 21, we will immediately suspend the account, preserve evidence for investigation, and take appropriate steps to erase the personal data collected — subject to any mandatory legal retention obligations.

13 Third-Party Links

The maju99 Platform may contain references to third-party services — for example, responsible gambling support resources mentioned in our platform documentation. Where such references direct you to an external website or service, please be aware that maju99 has no control over the content, privacy practices, or data processing activities of those third parties.

This Privacy Policy applies solely to personal data collected and processed by maju99. We recommend that you review the privacy policies of any third-party services you access independently, before providing them with your personal data.

14 Policy Amendments

Maju99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing activities, applicable law, or regulatory guidance. When material changes are made, we will notify registered users by email and/or by a prominent notice on the Platform, with a minimum of 14 days' advance notice prior to the changes taking effect.

The "Last Updated" date at the top of this document indicates the date of the most recent revision. Your continued use of the maju99 Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.

If you object to any changes to this Policy, you should cease using the Platform and contact our support team to request account closure. Upon closure of your account, personal data will be handled in accordance with the retention periods described in Section 9.

15 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the personal data maju99 holds about you, please contact our support team through the following channels:

• Email: [email protected] — include "Privacy Policy" or "Data Rights Request" in the subject line for priority routing. Response within 4 hours.
• Live Chat: Available 24/7 via the Platform. Average response time under 90 seconds. Our agents can log and escalate formal data rights requests to the responsible team.

Our support team is staffed by English-speaking agents operating from GMT+8, serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all of Malaysia.

Maju99 is committed to resolving all data-related queries fairly and in a timely manner. If you are not satisfied with our response to a formal complaint, you may have the right to escalate the matter to an appropriate data protection supervisory authority in your jurisdiction. We encourage direct resolution in the first instance, and commit to acknowledging all formal complaints within 48 hours.