Privacy Policy — iringgit99

iringgit99 ("Company", "Platform", "We", "Us", "Our") operates the online casino and sports betting website accessible at https://iringgit99.cam and all associated subdomains and mobile-optimised interfaces. This Privacy Policy ("Policy") sets out in clear, structured terms how iringgit99 collects, processes, stores shares, and protects the personal data of individuals ("Players", "Users", "You") who access or use the Platform.

This Policy applies to all personal data collected through the Platform, including data gathered during account registration, identity verification (KYC), financial transactions, customer support interactions, and general browsing of the site.

iringgit99 respects the privacy rights of all users, with particular consideration for Malaysian players. Our data practices take into account the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and any other applicable data protection frameworks.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — Any information that identifies or can be used to identify a living individual, including name, identification number, contact details, financial information, and online identifiers such as IP addresses and cookies.
• "Processing" — Any operation performed on personal data, including collection, storage, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — iringgit99, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — A third-party entity that processes personal data on behalf of iringgit99 under a written contractual agreement, such as payment processors, identity verification providers, or cloud hosting partners.
• "Consent" — A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC" — Know Your Customer: the identity and address verification process required to comply with anti-money laundering (AML) and regulatory obligations.
• "Cookies" — Small text files placed on your device by the Platform to store preference information and facilitate analytics.

iringgit99 collects the minimum amount of personal data necessary to provide our services, comply with legal obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect are set out below.

3.1 Registration Data

When you create an account, we collect your chosen username, email address, date of birth, mobile phone number, and the country and state of your residence (e.g., Kuala Lumpur, Penang, Selangor, Johor). This information is required to create and maintain your account.

3.2 Identity Verification (KYC) Data

To satisfy our regulatory and anti-money laundering obligations, we may collect copies of government-issued identification documents (Malaysian MyKad, Passport, or Driver's Licence), proof of address (utility bill or bank statement dated within three months), and a biometric selfie for document-matching purposes.

3.3 Financial Data

We collect payment method identifiers associated with your transactions — such as masked bank account numbers, FPX transaction reference numbers, DuitNow transfer identifiers, and e-wallet account references (Touch 'n Go, Boost, GrabPay). We do not store full card numbers or online banking credentials.

3.4 Transaction & Gaming Data

We maintain records of all deposit and withdrawal transactions, wagering history, game session data, and bonus redemption activity. This data is used for account management, dispute resolution, and responsible gambling monitoring.

3.5 Technical & Device Data

We automatically collect technical data when you access the Platform, including IP address, browser type and version, operating system, device identifiers, session timestamps, and pages visited. This data is used for security monitoring, fraud prevention, and platform optimisation.

3.6 Communications Data

When you contact our customer support team via live chat, WhatsApp, WeChat, or email, we retain records of those communications — including the content of messages and any attachments — for quality assurance, dispute resolution, and training purposes.

iringgit99 collects personal data through the following means:

• Directly from you — through account registration forms, KYC document uploads, deposit and withdrawal requests, support interactions, and voluntary participation in surveys or promotions;
• Automatically — through cookies, server logs, and tracking technologies when you access or navigate the Platform;
• From third-party service providers — such as payment processors (FPX, DuitNow network participants), identity verification services, and fraud screening providers who may share data with us as part of the verification process;
• From publicly available sources — such as public records, where required for compliance with anti-money laundering or sanctions screening obligations.

iringgit99 processes your personal data for the following specific, legitimate purposes:

• Account Management: Creating, maintaining, and administering your registered account on the Platform;
• Identity Verification: Conducting KYC checks to confirm your identity, age, and eligibility to use the Platform in compliance with our licensing and legal obligations;
• Payment Processing: Facilitating deposits and withdrawals via Malaysian payment channels including Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay;
• Service Delivery: Enabling you to access and enjoy the full range of iringgit99 services, including slots, live casino, sports betting, and customer support;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity money laundering, unauthorised account access, and other security threats;
• Responsible Gambling: Monitoring gaming behaviour to identify potential problem gambling patterns and implementing protective measures where appropriate;
• Legal Compliance: Meeting obligations imposed by applicable gaming licensing authorities, anti-money laundering legislation, tax reporting requirements, and the Malaysian PDPA;
• Marketing Communications: Sending promotional offers, bonus notifications, and newsletters — only where you have given explicit consent, and subject to your right to withdraw that consent at any time;
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the Platform's performance, user experience, and feature offerings.

iringgit99 processes personal data only where a lawful basis exists for doing so. The applicable legal bases are as follows:

• Contractual Necessity: Processing required to perform the contract between you and iringgit99 — including account creation, payment processing, and service delivery;
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML requirements and gaming licensing conditions;
• Legitimate Interests: Processing necessary for iringgit99's legitimate interests — such as fraud detection, platform security, and responsible gambling monitoring — provided those interests are not overridden by your rights;
• Consent: Processing for purposes where you have provided explicit, informed consent — primarily in relation to direct marketing communications. You may withdraw this consent at any time.

iringgit99 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment Processors: We share necessary transaction data with payment service providers — including FPX network participants (Maybank, CIMB, Public Bank, Hong Leong), DuitNow infrastructure providers, and e-wallet partners (Touch 'n Go, Boost, GrabPay) — solely to process deposits and withdrawals;
• Identity Verification Providers: We engage third-party KYC and document verification services to authenticate identity documents and screen against sanctions lists. These providers process data on our behalf under strict data processing agreements;
• Regulatory & Law Enforcement Authorities: We may disclose personal data to applicable regulatory bodies, gaming licensing authorities, financial intelligence units, or law enforcement agencies where required by law or where we have reasonable grounds to suspect money laundering, fraud, or other criminal activity;
• Technology & Hosting Partners: Our platform infrastructure relies on cloud hosting and software service providers who may process personal data as data processors on our behalf, subject to binding data processing agreements;
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of iringgit99's business assets, personal data may be transferred as part of that transaction. Affected players will be notified in advance where legally required.

Given the global nature of online gaming infrastructure, some personal data processed by iringgit99's third-party service providers may be stored or processed in jurisdictions outside Malaysia. Where such transfers occur, iringgit99 takes appropriate steps to ensure that your personal data receives an equivalent level of protection to that required under the Malaysian PDPA.

Safeguards for international transfers may include contractual clauses that impose PDPA-equivalent data protection obligations on the recipient, adequacy assessments of the recipient country's data protection framework, or other legally recognised transfer mechanisms appropriate to the circumstances.

iringgit99 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, comply with applicable legal and regulatory retention obligations, and resolve any disputes or enforce our agreements.

Specific retention periods include:

• Account data: Retained for the duration of your account membership, plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements;
• KYC documents: Retained for a minimum of five (5) years from the date of verification, as required by AML regulations;
• Transaction records: Retained for a minimum of six (6) years for financial audit and regulatory compliance purposes;
• Customer support communications: Retained for up to three (3) years for dispute resolution and quality assurance purposes;
• Marketing consent records: Retained until consent is withdrawn, plus an additional period of one (1) year to demonstrate compliance.

When personal data is no longer required for any legitimate purpose, it will be securely deleted or irreversibly anonymised in accordance with our data disposal procedures.

iringgit99 uses cookies and similar tracking technologies to improve your experience on the Platform, maintain session continuity, and gather anonymised analytics data.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and preferences cookies. They cannot be disabled without impairing your ability to use the Platform;
• Analytics Cookies: Used to collect anonymised information about how users interact with the Platform — such as pages visited, session duration, and navigation paths — to improve our services;
• Functional Cookies: Store your preferences such as language settings and display options to personalise your experience;
• Marketing Cookies: Used, where consent has been provided, to deliver relevant promotional content. These can be disabled via your account settings or browser preferences.

10.2 Managing Cookies

You can control cookie settings through your browser's privacy or settings menu. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled without impairing core Platform operations.

Subject to applicable law and certain limited exceptions, you have the following rights in relation to your personal data held by iringgit99. To exercise any of these rights, please contact our support team as described in Section 15.

iringgit99 will respond to all verified data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension within the initial response period.

The iringgit99 Platform is strictly intended for adults aged21 years and above. We do not knowingly collect personal data from individuals under 21 years of age. Account registration requires confirmation of minimum age, and we conduct age verification checks as part of our KYC process.

If iringgit99 becomes aware that personal data has been collected from a person under the age of 21 without verified parental consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has accessed the Platform, please notify us immediately via the contact details in Section 15.

iringgit99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers — the same standard applied by Maybank2u and CIMB Clicks;
• At-rest encryption for sensitive personal data and financial records stored in our databases;
• Strict access controls ensuring that personal data is accessible only to authorised iringgit99 personnel who require it for their job function;
• Multi-factor authentication for all administrative access to systems containing personal data;
• Regular penetration testing and security audits conducted by independent cybersecurity specialists;
• Intrusion detection and monitoring systems that alert our security team to suspicious access patterns in real time.

While iringgit99 takes every reasonable precaution to protect your data, no online system can guarantee absolute security. In the event of a data breach that poses a significant risk to affected individuals, iringgit99 will notify affected players and relevant authorities in accordance with applicable notification obligations.

iringgit99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The "Last Updated" date displayed at the top of this page indicates when the most recent substantive revision was made.

Where amendments are material — meaning they significantly affect how your personal data is processed or your rights in relation to it — iringgit99 will notify registered players via the email address associated with their account at least 14 days before the changes take effect. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how iringgit99 is protecting your personal information.

If you have questions, concerns, or requests relating to this Privacy Policy — including requests to exercise your data rights — please contact iringgit99 through any of the following channels:

We aim to acknowledge all privacy-related requests within 5 business days and resolve them in full within 30 calendar days. Complex requests may take up to 60 days; we will inform you if an extension is required.