Privacy Policy ada99

1Personal Information We Collect

Ada99 collects various types of personal information from members to ensure that the services provided run smoothly, securely, and in compliance with applicable legal requirements in Malaysia. The following are the categories of information we collect:

We only collect information that is strictly necessary for the stated purposes. The principle of data minimisation guides us throughout every data collection process.

2How We Collect Your Information

Ada99 collects personal information through several different channels. It is important that you understand each method of collection so you can make informed decisions about your data:

• Account Registration: Information you enter directly during the new account registration process at ada99, including name, email, phone number, and date of birth.
• KYC Process: Identity verification documents such as copies of your national ID, passport, or bank statements that you upload for account verification purposes.
• Platform Activity: Data collected automatically when you use the ada99 platform, including login activity, game activity, and financial transaction history.
• Devices and Browsers: Technical information about the device you use to access ada99, including IP address, browser type, operating system, and screen resolution.
• Cookies and Tracking Technologies: Session cookies, preference cookies, and similar technologies that help us recognize you on return visits and enhance your experience.
• Direct Communication: Information you voluntarily share when contacting the ada99 customer support team via live chat or email.
• Authorised Third Parties: In certain cases, we may receive information from identity verification providers, payment processors, or fraud prevention agencies that work with ada99.

3How We Use Your Personal Data

Ada99 uses collected personal data solely for legitimate, clearly stated purposes. We will not use your data for any other purpose without obtaining your consent beforehand. The following are the primary purposes for which data is used:

• Account Management: Registering new accounts, verifying identity, processing login requests, and managing your account profile overall.
• Financial Transaction Processing: Processing deposits, withdrawals, and bonus payments securely using verified bank information held in your name.
• Legal and Regulatory Compliance: Fulfilling legal obligations including KYC requirements, AML (anti-money laundering) compliance, and reporting to relevant regulatory authorities when required.
• Platform Security: Detecting and preventing fraud, hacking, multiple account usage, game manipulation, and any other security threats that could affect the platform or other members.
• Customer Support: Responding to inquiries, resolving complaints, and providing technical assistance to members through available support channels.
• Service Improvement: Analyzing usage patterns in aggregate to improve platform design, game selection, and the overall user experience.
• Marketing Communications: Sending you information about promotions, bonuses, and new offers – only if you have given consent to receive such communications.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and reaching out to members who may need assistance or support.

4Sharing Information with Third Parties

Ada99 does not sell, rent, or share members' personal data with third parties for their own marketing purposes. However, there are limited situations where data sharing is necessary to enable our services to function properly or to fulfil legal obligations:

• Payment Processors: Required transaction information is shared with approved payment gateway providers such as local banks and FPX processors to enable deposits and withdrawals to be processed securely.
• KYC and Verification Providers: Identity information may be shared with verified and approved third-party identity verification service providers to assist with our KYC process.
• Game Providers: Minimal game data may be shared with third-party game content providers to ensure games function correctly and winnings are processed accurately.
• Legal Authorities: ada99 will disclose information to the police, courts, or regulatory agencies when required by Malaysian law or a valid court order.
• Professional Advisors: Lawyers, accountants, and auditors bound by strict confidentiality obligations may need to access certain data in carrying out their professional duties for ada99.

All third parties working with ada99 are required to comply with strict data security standards and may only use shared data for the purposes specified in their contractual agreements with ada99.

5Data Security Measures

Your personal data security is ada99's highest priority. We continuously invest in cutting-edge security infrastructure to ensure your information is always protected from unauthorized access, modification, or disclosure.

The security measures we apply include:

• 256-bit SSL Encryption: All data transmitted between your browser and ada99's servers is encrypted using the latest TLS protocol, ensuring your data cannot be intercepted in transit.
• Data-at-Rest Encryption: Sensitive data stored in our databases is encrypted using industry-standard encryption algorithms, meaning even if our servers were physically accessed, your data remains protected.
• Strict Access Controls: Only ada99 staff who require access to your data to perform their duties are granted permission. All access is logged and monitored.
• Two-Factor Authentication (2FA): ada99 offers two-factor authentication for member accounts to add an extra layer of security during login.
• 24/7 Monitoring: Our automated monitoring system continuously watches for signs of suspicious activity, unauthorised access attempts, and any security anomalies.
• Regular Penetration Testing: ada99 conducts regular penetration testing carried out by independent security experts to identify and patch any vulnerabilities before they can be exploited.

6Cookies and Tracking Technologies

Ada99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

The types of cookies used by ada99 are:

• Essential Cookies: These cookies are required for the platform to function properly. Without them, core features such as login and session management will not work. These cookies cannot be disabled.
• Preference Cookies: Storing your preference settings such as language, region, and display preferences so you do not need to reconfigure them each time you visit.
• Analytics Cookies: Helping us understand how members interact with our platform in aggregate and anonymized form. This data is used to improve platform performance and design.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect member accounts from unauthorised access.

You can control and manage cookie settings through your browser preferences. Please note, however, that disabling certain cookies may affect the functionality of the ada99 platform and your overall user experience.

7Your Rights Under PDPA 2010

As an individual whose data is processed by ada99, you have rights protected under Malaysia's Personal Data Protection Act 2010 (PDPA). ada99 is committed to respecting and facilitating the exercise of these rights:

8Data Retention Period

Ada99 does not retain your personal data for longer than is necessary for the purposes stated in this policy. Retention periods depend on the type of data and applicable legal requirements:

• Active Account Data: For as long as your account remains active, we retain all data necessary to provide you with our full range of services.
• Financial Transaction Data: Transaction records are retained for a minimum of 7 years in compliance with Malaysia's financial and tax legal requirements.
• KYC and Identity Verification Data: Identity verification documents are retained for 5 years after account closure to fulfil AML compliance obligations.
• Security Logs: Access logs and security activity records are retained for 12 months for security incident investigation purposes when required.
• Marketing Data: Data collected for marketing purposes is retained until you withdraw your consent or request its deletion.
• Account Closed: When an account is closed at a member's request, personal data will be deleted or anonymised within 90 days, unless a longer retention period is required by law.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally.

9Changes to This Privacy Policy

Ada99 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, technological developments, or new legal requirements. We are committed to notifying you of any significant changes.

When significant changes are made to this policy:

• We will update the "Updated" date at the top of this page.
• A notification will be displayed prominently on the ada99 platform when you log in.
• For significant changes, we will send a notification directly to your registered email address.
• You are encouraged to review this page periodically to stay informed.

Continued use of the ada99 platform after a policy change takes effect will be considered your acceptance of the updated terms. If you disagree with any changes, please contact us or consider closing your account.

10Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how ada99 handles your personal data, our Data Protection Officer (DPO) team is ready to assist you.

You can reach us through the following channels:

• Privacy Email: [email protected] – Please include "Privacy Enquiry" in the subject line of your email.
• Live Chat: Available 24 hours a day, 7 days a week via the ada99 platform after login.
• Response Time: We aim to respond to all privacy-related enquiries within 14 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.