Cat999 Privacy Policy – Your Personal Data Protection

1Introduction

Welcome to the cat999 Privacy Policy. This document is the official agreement between you as a member and cat999 as the operator of the online gaming platform, regarding how we handle your personal information. We understand that privacy is more than just a word — it is the trust you place in us every time you register, log in and play on our platform.

Cat999 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international personal data protection standards. We only collect information that is strictly necessary to provide you with the best service, ensure the security of your account and fulfil our relevant legal obligations.

By using the cat999 platform, you agree to the terms set out in this Privacy Policy. If you disagree with any part of this policy, please discontinue use of the platform and contact us to close your account. We encourage you to read this document in full so you understand the rights and choices available to you.

2Information We Collect

Cat999 collects various types of personal information depending on the nature of your interaction with our platform. Below are the categories of information we collect and their purposes:

• Information you provide directly: This includes all information you enter during registration, profile updates, withdrawal requests or when contacting our support team.
• Automatically collected information: When you use our platform, our systems automatically record technical information such as your IP address, device type, operating system version, and browsing activity within the platform.
• Information from third parties: In certain cases, we may receive information from third-party identity verification service providers, payment providers, or regulatory bodies for legal compliance purposes.

3How We Use Your Data

Every piece of information we collect is used for specific, legitimate and reasonable purposes. cat999 is committed to not using your data beyond the scope stated in this policy:

• Account management: To create, verify, manage and protect your account on the cat999 platform.
• Financial transaction processing: To process deposits, withdrawals and any other financial transactions related to your account.
• Identity verification (KYC): To fulfil anti-money laundering (AML) compliance requirements and verify your identity before authorising fund withdrawals.
• Security and fraud prevention: To detect and prevent any fraudulent activity, unauthorised access or security breaches that could potentially affect your account.
• Service communications: To send account-related notifications, security updates, promotional information you have opted in to receive, and responses to your support enquiries.
• Platform improvements: To analyse usage patterns in aggregate and improve platform features, user experience and our services.
• Responsible gaming: To monitor gaming patterns and identify early signs of problem gambling, and to reach out to you if necessary.
• Legal compliance: To fulfil all legal obligations, regulations and directives from relevant authorities.

4Sharing Information with Third Parties

Cat999 does not sell, rent or trade your personal information to any third party for marketing purposes. However, under certain limited circumstances, we may share some of your information with the following parties:

• Payment service provider: FPX, DuitNow, Maybank2u, CIMB Clicks, and our partner banks receive only the transaction information necessary to process your deposits and withdrawals.
• Identity verification provider: Third-party companies that assist us in carrying out the KYC process may receive your identity documents for verification purposes only.
• Regulatory bodies and law enforcement: cat999 is legally required to disclose certain information to authorities when mandated by a court order, official investigation or regulatory compliance requirement.
• Technical service provider: Companies providing hosting, cybersecurity, analytics and technical infrastructure services may process some of your data in their capacity as data processors, subject to strict data protection agreements.
• Audits and compliance: Independent auditors and certification bodies that verify our game fairness and compliance may access certain data within the limited scope of their assignments.

All third parties we work with are bound by strict confidentiality agreements and are only permitted to use your data for the purposes specified in those agreements. cat999 conducts thorough due diligence before engaging any service provider to ensure they adhere to data protection standards equivalent to our own.

5Data Security

Protecting your personal data is a responsibility we take very seriously. cat999 implements multiple layers of technical and organizational security to ensure your information remains safe at all times:

• 256-bit SSL Encryption: All data transmitted between your device and cat999's servers is protected by 256-bit Secure Socket Layer (SSL) encryption — the same security standard used by leading banking institutions and government agencies worldwide.
• Encryption of data at rest: Sensitive information such as passwords and KYC documents is stored in encrypted form using the latest encryption algorithms, ensuring the data cannot be read even by unauthorized internal staff.
• Two-factor authentication (2FA): cat999 offers two-factor authentication for your account, adding an extra layer of protection against unauthorised access.
• 24/7 security monitoring: Our automated monitoring system operates around the clock to detect any unusual activity or unauthorised access attempts on your account.
• Data segregation: Financial data, identity data, and gaming data are stored in separate environments with strict access controls.
• Regular security audits: cat999 undergoes periodic independent security audits conducted by certified cybersecurity firms to ensure our infrastructure continuously meets the latest security standards.

6Cookies and Tracking Technologies

Cat999 uses cookies and similar tracking technologies to enhance your experience on our platform, maintain the security of your login session and analyse platform performance. The following are the types of cookies we use:

• Essential cookies: These cookies are required for core platform functions such as login sessions, language preferences, and security. Disabling this type of cookie will affect platform functionality.
• Performance cookies: Used to gather statistical information on how visitors use our platform, helping us identify areas for improvement.
• Functional cookies: Allows the platform to remember your preferences such as interface settings, currency selection, and your favorite games.
• Security cookies: Helps identify and prevent fraudulent activity, multi-account access, and other security threats.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the cat999 platform. cat999 does not use third-party cookies for targeted advertising.

7Data Retention and Deletion

Cat999 retains your personal data for as long as your account is active and for a defined period following account closure, in accordance with applicable legal and regulatory requirements:

• Active account data: For as long as your account is active, all profile information, transaction history and game records are retained for operational and compliance purposes.
• After account closure: In accordance with Malaysian legal requirements and gambling industry standards, cat999 retains financial records and identity information for a minimum of 7 years following account closure.
• Security log data: Security log records such as login records and account activity are retained for 5 years for investigation and compliance purposes.
• KYC Documents: Identity verification documents are retained in accordance with PDPA requirements and applicable AML laws, typically for 7 years.

Once the mandatory retention period has expired, your data will be securely deleted or anonymised in accordance with our established data deletion procedures. You may request a review of your data status by contacting our privacy team.

8Your Rights Regarding Personal Data

As a data subject under Malaysia's PDPA, you have certain rights regarding your personal information held by cat999. We fully respect and support these rights:

• Right to access: You have the right to request a copy of the personal data we hold about you. Access requests will be processed within 21 business days.
• Right to rectify: If any of your personal information is inaccurate or out of date, you have the right to request immediate correction.
• Right to withdraw consent: You may withdraw consent for specific data processing at any time, although this may affect our ability to provide certain services.
• Right to object: You have the right to object to the processing of your data for specific purposes, such as direct marketing.
• Right to be informed: You have the right to know the purpose for which your data is processed, who receives it, and how long it is retained.

To exercise any of the above rights, please contact our Privacy Officer by email at [email protected] with the subject line "Personal Data Rights Request". Include your full name and account number to expedite the process. We will verify your identity before processing any data-related request.

9Protection of Minors' Data

Cat999 is a gaming platform dedicated to adult users aged 18 and above. We do not knowingly collect, process or store any personal information from individuals under the age of 18.

All account applicants are required to confirm that they are 18 years of age or older at the time of registration. Our KYC process is designed to detect and prevent registration by underage individuals. Should we find that information collected belongs to an underage individual, the account in question will be closed immediately and all related data will be securely deleted in accordance with our procedures.

10Privacy Policy Amendments

Cat999 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements or service improvements. Any amendments will take effect upon publication of the latest version on our website.

For significant changes that affect how we use your data, we will provide reasonable notice via in-platform notifications or email to your registered address at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make an informed decision.

Your continued use of the cat999 platform after any changes are published constitutes your acceptance of the amended policy. The latest amendment date is always displayed at the top of this document. We encourage you to review this page periodically.

11Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us:

• Privacy Officer Email: [email protected] (subject: Privacy Policy Enquiry)
• Live chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform
• Response time: We are committed to responding to all privacy-related inquiries within 3 business days

We take every privacy complaint seriously and will thoroughly investigate each case. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Personal Data Protection Department or the relevant supervisory authority in your jurisdiction.