w2299 – Privacy Policy & Personal Data Protection for Malaysian Members

1 Introduction & Scope of the Privacy Policy

This Privacy Policy applies to all services offered by w2299, including the main website at w2299.my, the mobile app for Android and iOS, and all official communication channels operated by w2299. By registering as a member and using any w2299 service, you agree to the collection and use of your information as described in this policy.

W2299 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) across all our data processing practices. This means every action we take in relation to your personal data has a clear and lawful basis under Malaysian law.

As an online casino platform serving over 500,000 active members across Malaysia — from Kuala Lumpur, Selangor, Johor Bahru, Penang, Kota Kinabalu to Kuching — w2299 understands that your trust is our most valuable asset. That trust can only be maintained when you know exactly how your data is handled.

2 Types of Personal Data Collected

W2299 collects the information necessary to provide a safe, fair, and high-quality service. The following are the categories of data we collect:

W2299 collects this information through three main methods: (1) information you provide directly during registration and use of the platform, (2) information collected automatically as you use our services, and (3) information received from legitimate third parties, such as payment providers, to verify transactions.

3 How We Use Your Data

Personal data collected by w2299 is used solely for the following legitimate and necessary purposes. We do not use your data for anything outside this scope without first obtaining your consent:

• Account Management: Creating and maintaining your w2299 account, processing your registration, and managing your profile information.
• Transaction Processing: Securely processing deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks, and other available payment methods.
• Platform Security: Detecting and preventing fraud, money laundering, multi-account abuse and other unlawful activities.
• Legal Compliance: Meeting KYC (Know Your Customer), AML (Anti-Money Laundering), and reporting obligations as required under Malaysian law.
• Customer Support: Responding to enquiries, resolving complaints and providing the technical assistance you need.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support when needed.
• Service Communications: Sending you important notifications about your account, policy updates, relevant w2299 bonus promotions, and service information you need to know.
• Platform Enhancements: Analysing usage patterns in aggregate (not at an individual level) to improve the quality, performance, and overall experience of the w2299 platform.

W2299 does not use your data to make automated decisions that materially affect your rights without human oversight. Should any automated decision impact your account, you have the right to request a review by our team.

4 Data Sharing with Third Parties

W2299 understands that your trust depends largely on the confidence that your information does not circulate beyond our control. We do not share your personal data for commercial purposes. However, there are limited situations where data sharing is necessary and legally permitted:

• Payment Providers: Transaction data that must be shared with payment providers such as Touch 'n Go, GrabPay, FPX and others in order to process your deposits and withdrawals. This data is shared under strict confidentiality agreements.
• Technology Service Providers: Companies that assist w2299 in operating the platform – such as server hosts, cybersecurity services, and analytics providers – may have limited access to data solely as required to carry out their respective functions.
• Legal Compliance: w2299 will disclose personal data when required to do so by Malaysian law, court order or direction from a competent authority. In such cases, we will notify you where we are permitted to do so.
• Fraud Prevention: In situations where there are strong grounds to suspect serious fraud or money laundering, relevant information may be shared with the appropriate law enforcement authorities as required.

5 Data Security Measures at w2299

Protecting your data from unauthorised access, loss or misuse is w2299's highest priority. We continually invest in cutting-edge security infrastructure to ensure our platform remains one of the most secure in Malaysia's online casino industry.

The key security layers protecting your data at w2299 include data encryption in transit using TLS 1.3, encryption of stored data using AES-256, real-time threat monitoring 24 hours a day 7 days a week, two-factor authentication (2FA) for account access, an advanced intrusion detection system, and regular independent security audits.

While no security system can guarantee absolute 100% protection, w2299 takes all reasonable and appropriate measures to minimise risk. Should any security incident occur that affects your data, we are committed to notifying you within 72 hours of the incident being detected, in line with international best practices in data protection.

6 Cookie & Tracking Technology Policy

The w2299 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates correctly. Cookies are small text files stored on your device when you visit our platform.

You can manage your cookie settings through your web browser at any time. Please note, however, that blocking essential cookies may affect core w2299 platform functionality, such as staying logged in or using certain security features. Analytics and functional cookies are entirely optional and will not affect your gaming experience if disabled.

W2299 does not use cookies to track your activity on third-party websites outside of our own platform. Tracking is limited strictly to activity within the w2299 platform.

7 Data Retention Period

W2299 retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required under Malaysian law. The following are general guidelines on data retention periods at w2299:

• Active Account Data: Retained for the duration of your active account plus 7 years after account closure, as required by financial compliance and AML obligations.
• Transaction Records: Retained for a minimum of 7 years from the transaction date for audit and tax compliance purposes.
• Communication Logs: Customer support communication records are retained for 3 years for reference and dispute resolution purposes.
• Technical Data & Logs: System logs and technical data are retained for 90 days for security and fraud detection purposes.
• Marketing Data: Marketing communication preferences and related data are retained for as long as you have not withdrawn your consent.

When data is no longer needed and there is no legal obligation to retain it, w2299 will securely delete or anonymise that data. The deletion process uses methods that ensure the data cannot be recovered by any party.

8 Your Personal Data Rights

As a w2299 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data. We take each of these rights seriously and are committed to making it easy for you to exercise them:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 30 days of receipt.
• Right to Rectification: If any information we hold about you is inaccurate or out of date, you have the right to request a correction. Basic profile details can be updated directly within your w2299 account.
• Right to Erasure: In certain circumstances, you have the right to request the erasure of your personal data. This right is subject to the legal retention requirements outlined in Section 7.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.
• Right to Restriction: In certain circumstances, you may request that the processing of your data be restricted while your objection or complaint is pending resolution.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format and to transfer it, where this is technically feasible.

To exercise any of the above rights, contact the w2299 privacy team by email at [email protected] or via Live Chat within the platform. Please include your account number and identity verification to help expedite the process. w2299 is committed to responding to all privacy rights requests within 30 calendar days.

9 Protection of Children's Data

The w2299 platform is NOT SUITABLE and NOT PERMITTED for individuals under the age of 18. w2299 does not knowingly collect any personal data from minors or underage individuals.

If you are a parent or guardian and believe that your minor child has registered for or used the w2299 platform, please contact us immediately at [email protected]. We will take prompt action to close the account and delete all associated data.

10 Changes to the Privacy Policy

W2299 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, evolving legal requirements or service improvements. The "Last Updated" date at the top of this document will always reflect the most current version.

For significant changes to how we use your data, w2299 will provide members with clear notice at least 14 days before the changes take effect. This notice will be delivered via in-account notifications or by email to the address registered on your account, giving you sufficient time to review the changes and decide whether you are comfortable continuing to use the platform.

Your continued use of the w2299 platform after any policy changes take effect constitutes your acceptance of the updated policy. If you do not agree with any changes, you may stop using the platform and request account closure along with deletion of your data.

11 How to Contact Us for Privacy Enquiries

If you have any questions, concerns, or requests regarding privacy and data protection at w2299, our team is ready to assist you promptly and transparently. We take every privacy enquiry seriously and are committed to providing clear, satisfactory responses.

• 24/7 Live Chat: The fastest way to handle any urgent privacy enquiry. Average response time under 2 minutes.
• Email: For detailed written requests such as data access or deletion requests, please send an email to [email protected] with the subject line "Privacy Enquiry – [Your Account Number]".

When contacting us regarding privacy, please provide your registered account number and describe your request clearly. For data access or deletion requests, additional identity verification may be required to ensure the security of your data.