Privacy Policy coy99 — Personal Data Protection for Malaysian Members

This Privacy Policy ("Policy") is published by coy99 and applies to all individuals who access, register for, or use coy99's online betting and gaming platform in Malaysia. It describes our privacy practices regarding the collection, use, disclosure, transfer, and storage of your personal data.

Coy99 operates as a responsible data controller under Malaysia's Personal Data Protection Act 2010 (PDPA). We take this responsibility seriously and have implemented comprehensive technical and organisational measures to ensure your personal data is handled in a secure, transparent, and legally compliant manner.

By registering an account or using coy99's services, you agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact the support team to close your account.

Coy99 collects your personal data through three main channels: information you provide directly during registration, data generated automatically when you use the platform, and in limited cases, information from approved third-party sources.

Coy99 does not collect sensitive data such as health information, religious beliefs, or political views unless it is directly relevant to account verification requirements or legal compliance.

Coy99 uses the personal data it collects for the following purposes, each of which has a valid legal basis under PDPA 2010:

• Account management: Creating, verifying, and maintaining your member account, including the identity verification (KYC) process required under Malaysian law.
• Service provision: Processing deposits and withdrawals via DuitNow, Touch 'n Go eWallet, FPX, and other Malaysian payment methods; providing access to all games and Sports Betting.
• Platform security: Detecting and preventing fraud, money laundering, unauthorised access, and other illegal activities that violate Malaysian law.
• Legal compliance: Fulfilling obligations under PDPA 2010, the Anti-Money Laundering Act 2001, and other applicable Malaysian financial regulations.
• Service communications: Sending important notifications relating to your account, transactions, security updates, and changes to terms that require your attention.
• Platform improvements: Analysing aggregated and anonymised usage patterns to improve user experience, platform performance, and content relevance.
• Marketing (with consent): Sending information about relevant coy99 promotions, bonuses, and offers — only where you have given explicit consent to receive marketing communications.
• Responsible gaming: Monitoring gaming patterns to identify members who may require assistance related to responsible gaming in accordance with our policy Responsible Gaming .

Protecting our members' personal data is coy99's single largest investment in our technology infrastructure. We take a layered "defence in depth" approach, combining multiple levels of technical safeguards and organisational procedures:

• Encryption of data in transit: All communications between your browser/app and coy99's servers are secured with TLS 1.3 and 256-bit SSL encryption — ensuring no data can be intercepted in transit.
• Encryption of data at rest: Sensitive personal data is stored in encrypted form within our databases using AES-256 encryption, ensuring it remains unreadable even if physical servers are accessed without authorisation.
• Strict access controls: Only coy99 staff with a legitimate business need are granted access to members' personal data — and this is limited to the minimum data required for their specific role.
• Two-factor authentication (2FA): All coy99 internal systems containing member data are secured with mandatory two-factor authentication for all staff.
• Continuous threat monitoring: Our security monitoring system operates 24/7 to detect any suspicious activity or unauthorised access attempts.
• Regular security audits: coy99 conducts regular penetration testing and independent third-party security audits to ensure our systems remain current against the latest threats.

Coy99 does not sell, rent, or transfer members' personal data to third parties for commercial purposes. However, in limited circumstances, we may share your data with the following parties:

• Payment service providers: Required transaction information is shared with Malaysian payment service providers — including DuitNow, Touch 'n Go, FPX, GrabPay, Boost, and ShopeePay processors — strictly for the purpose of processing transactions.
• Technology service providers: Cloud infrastructure providers, email delivery services, and customer support systems contracted by coy99 may process certain portions of your data. All such providers are bound by strict data protection agreements.
• Legal authorities: coy99 will disclose personal data to Malaysian authorities (such as PDRM, SPRM, or Bank Negara Malaysia) when required by law, court order, or a legitimate related investigation.
• Independent auditors: Audit firms and third-party verification bodies required by law or operating licence conditions may access certain records.

In all instances of data sharing, coy99 ensures that recipients are subject to confidentiality and data protection obligations that are equivalent to or stricter than our own standards.

Coy99 operates on a data minimisation principle — we only retain your data for as long as necessary for the stated purpose or as required under Malaysian law.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in respect of your personal data held by coy99:

To exercise any of the above rights, submit a written request to privasi@coy99.click specifying the right you wish to exercise, along with a copy of your identification document for identity verification. coy99 will respond within 21 business days.

The coy99 platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand how members use our platform. Cookies are small text files stored on your device when you visit a website.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may prevent access to certain key functions of the coy99 platform.

Coy99 has a zero-tolerance policy towards use of the platform by individuals under the age of 18. Our platform is not designed for, nor intended to be used by, children or minors below the stipulated age limit.

We do not knowingly collect personal data from individuals under the age of 18. Should we discover that personal data of a person under 18 has been inadvertently collected, we will take immediate steps to delete that data and close the account in question.

If you believe a minor has registered a coy99 account, please contact us immediately at support@coy99.click so we can take the appropriate action.

Coy99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, technological developments, business requirements, or relevant changes to Malaysian law.

When we make material changes to this Policy, we will:

• Updating the "Last Updated" date at the top of this document
• Displaying a prominent notice on the coy99 platform homepage
• Sending email notifications to all registered members for significant changes
• Requires acknowledgement of new policy terms at login for significant changes

Continued use of the coy99 platform after an amendment's effective date constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account before the amendment takes effect.

For any enquiries, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact coy99's Data Protection Officer (DPO) through the following channels:

If you are not satisfied with how we have handled your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with PDPA 2010.