ng999 Privacy Policy

1 Data Controller

1.1 For the purposes of this Privacy Policy, the data controller — the entity that determines the purposes and means of processing your personal data — is the ng999 operating entity responsible for the ng999 online gaming platform accessible at ng999.win.

1.2 By registering for an ng999 account or using any Service on the platform, you acknowledge that ng999 processes your personal data in accordance with this Privacy Policy. If you have questions or concerns about how your data is handled, please contact ng999 using the details in Section 14.

2 Personal Data We Collect

2.1 Registration Data. When you create an ng999 account, we collect the personal information you provide during registration, which may include your full legal name, date of birth, nationality, residential address, email address, and mobile phone number.

2.2 Identity Verification Data. To comply with applicable age verification and anti-money laundering obligations, ng999 may request and collect copies of government-issued identification documents (such as a MyKad, passport, or driving licence) and proof of address documents (such as a recent utility bill or bank statement).

2.3 Financial Data. ng999 collects information related to your financial transactions on the platform, including deposit amounts, withdrawal requests, payment method identifiers (such as masked bank account numbers or e-wallet identifiers for Touch n Go eWallet or Boost), and transaction timestamps. Full payment card or full bank account numbers are not stored by ng999 — they are processed directly by certified payment processors.

2.4 Gaming Activity Data. ng999 records your betting and gaming activity, including game titles played, wager amounts, bet outcomes, session durations, and platform navigation patterns. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical Data. ng999 automatically collects certain technical data when you access the platform, including your IP address, device type and operating system, browser type and version, and the pages or sections of the platform you visit. This data is used for security monitoring, fraud prevention, and platform optimisation.

2.6 Communications Data. ng999 retains records of communications between you and our support team, including live chat transcripts, email correspondence, and records of any formal complaints submitted. These records are retained for quality assurance and dispute resolution purposes.

3 How We Collect Your Data

ng999 collects personal data through the following means:

• Directly from you — when you register for an account, complete identity verification, make a deposit or withdrawal, contact our support team, or update your account settings;
• Automatically — when you access or use the ng999 platform, through server logs, session tracking technologies, and device fingerprinting used for security and fraud prevention purposes;
• From third-party service providers — including payment processors who provide transaction confirmation data, and identity verification services who confirm the authenticity of documents submitted during the KYC process;
• From publicly available sources — where required for regulatory compliance purposes, including sanctions screening databases and publicly available government records.

4 Purpose & Legal Basis for Processing

ng999 processes your personal data for the following purposes and on the following legal bases:

• Account management and Service provision — processing is necessary for the performance of the contract between you and ng999 (i.e., providing the gambling and gaming services you have registered for);
• Identity and age verification — processing is necessary to comply with ng999's legal obligations under applicable gaming authority requirements and anti-money laundering regulations;
• Payment processing — processing is necessary for the performance of the contract and for compliance with financial crime prevention obligations;
• Fraud and security monitoring — processing is necessary for ng999's legitimate interests in protecting the integrity of its platform and the security of member accounts;
• Responsible gaming monitoring — processing is necessary for compliance with gaming authority obligations and for ng999's legitimate interests in identifying and supporting members who may be experiencing problem gambling behaviours;
• Customer support — processing is necessary for the performance of the contract and for ng999's legitimate interests in maintaining service quality records;
• Marketing communications — where you have provided explicit consent to receive promotional communications from ng999. You may withdraw this consent at any time via your account settings or by contacting support.

5 Cookies & Tracking Technologies

5.1 ng999 uses cookies and similar tracking technologies on the platform for the following purposes: session management (to keep you logged in during a platform session), security monitoring (to detect and prevent fraudulent access attempts), and platform performance analytics (to understand how members navigate the platform and identify areas for improvement).

5.2 Essential Cookies. Certain cookies are strictly necessary for the operation of the ng999 platform — for example, cookies that maintain your authenticated session. These cookies cannot be disabled without affecting your ability to use the platform.

5.3 Analytics Cookies. ng999 may use analytics cookies to collect aggregated, anonymised data about platform usage patterns. This data does not identify individual members and is used solely to improve platform performance and user experience.

5.4 Managing Cookies. You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the ng999 platform. For full details of how to manage cookies in major browsers, refer to your browser's help documentation.

6 Sharing Your Data with Third Parties

6.1 ng999 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Personal data is shared with third parties only in the following limited circumstances:

• Payment processors — to facilitate deposits and withdrawals via Touch n Go eWallet, Boost, FPX bank transfers, and cryptocurrency networks. These providers receive only the transaction data necessary to process the payment;
• Identity verification providers — to validate identity documents submitted during the KYC process, as required by applicable regulations;
• Game studio providers — certain technical identifiers may be shared with ng999's certified game providers to enable gameplay, resolve game disputes, and comply with provider audit requirements;
• Regulatory and law enforcement authorities — where ng999 is legally required to disclose information to a competent authority, such as in connection with an anti-money laundering investigation, a court order, or a request from a gaming regulatory body;
• Professional advisers — including legal advisers, auditors, and insurers, subject to confidentiality obligations, where necessary for legitimate business purposes.

6.2 All third-party service providers who process personal data on ng999's behalf are required to do so under a data processing agreement that imposes appropriate data protection obligations consistent with this Privacy Policy.

7 Data Security

7.1 ng999 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to, 256-bit SSL encryption for all data in transit, access controls limiting data access to authorised personnel on a need-to-know basis, and regular security assessments of platform infrastructure.

7.2 Where ng999 uses third-party processors to handle personal data, ng999 conducts appropriate due diligence on those processors and requires them to implement security standards consistent with ng999's own obligations.

7.3 Notwithstanding the above, no data transmission over the internet or data storage system can be guaranteed as completely secure. Members are also responsible for maintaining the security of their own account credentials — see Section 5 of the Terms & Conditions for account security obligations.

8 Data Retention

8.1 ng999 retains your personal data for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law. In practice, this means:

• Active account data is retained for the duration of the account's active status plus a period thereafter to allow for regulatory compliance, dispute resolution, and fraud investigation;
• Transaction records including deposit, withdrawal, and betting history are retained for a minimum of five years following each transaction in compliance with anti-money laundering record-keeping requirements;
• Identity verification documents are retained for a minimum period as prescribed by applicable gaming authority and AML regulations from the date of verification;
• Support communications are retained for a minimum of two years from the date of the communication for quality assurance and dispute resolution purposes.

8.2 When personal data is no longer required for the purposes for which it was collected and retention is not required by law, ng999 will securely delete or anonymise the data.

9 Your Data Protection Rights

9.1 Subject to applicable data protection law, you have the following rights in respect of your personal data held by ng999:

• Right of Access — you may request a copy of the personal data ng999 holds about you;
• Right to Rectification — you may request that inaccurate or incomplete personal data be corrected;
• Right to Erasure — in certain circumstances, you may request the deletion of your personal data where its retention is no longer justified by applicable legal basis;
• Right to Restrict Processing — you may request that ng999 restrict the processing of your data in certain circumstances, such as while the accuracy of data is being contested;
• Right to Data Portability — where processing is based on consent or contract and carried out by automated means, you may request that ng999 provide your data in a structured, commonly used, machine-readable format;
• Right to Object — you may object to processing based on ng999's legitimate interests, including for direct marketing purposes;
• Right to Withdraw Consent — where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

9.2 To exercise any of the above rights, please contact ng999 using the details in Section 14. ng999 will respond to verified requests within 30 days. We may request proof of identity before processing certain requests to protect against unauthorised access to personal data.

10 Children's Privacy

10.1 ng999's Services are strictly prohibited for individuals under the age of 21. ng999 does not knowingly collect personal data from anyone under 21 years of age. If ng999 becomes aware that personal data has been collected from an individual who is under 21, that account will be immediately suspended and the data will be deleted in accordance with applicable law.

10.2 If you believe that ng999 may have inadvertently collected personal data from an individual under 21, please contact us immediately using the details in Section 14.

11 International Data Transfers

11.1 In providing its Services, ng999 may transfer personal data to third-party service providers whose systems are located in jurisdictions outside Malaysia. Where such transfers occur, ng999 takes appropriate steps to ensure that your personal data receives an adequate level of protection, including by requiring recipients to comply with contractual data protection obligations consistent with this Privacy Policy.

11.2 By using ng999's Services, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia in connection with the operation of the platform.

12 Marketing Communications

12.1 ng999 may send you promotional communications about bonuses, new games, sportsbook offers, and platform updates if you have opted in to receive such communications during registration or via your account settings.

12.2 You may unsubscribe from marketing communications at any time by updating your preferences in your ng999 account settings or by contacting the ng999 support team. Opting out of marketing communications does not affect your receipt of transactional communications, such as deposit confirmations, withdrawal notifications, and security alerts, which are sent as part of the ng999 Service.

12.3 ng999 does not share member contact details with third parties for the purpose of third-party direct marketing.

13 Amendments to This Policy

13.1 ng999 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or the way ng999 operates its Services. Material changes will be notified to members via the email address registered to their account, or via a prominent notice on the ng999 platform, prior to the change taking effect.

13.2 Continued use of the ng999 platform following notification of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not accept any amendment, you should close your account and withdraw your balance before the effective date of the change.

14 Contact Us

14.1 For any questions, concerns, or requests relating to this Privacy Policy or the personal data ng999 holds about you, please contact the ng999 support team via the following channels:

14.2 ng999 takes all privacy enquiries seriously. If you are not satisfied with ng999's response to your enquiry, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.