Privacy Policy sizy99 – Our Commitment to Personal Data Protection for Malaysia Players

1. Introduction & Scope of Application

This Privacy Policy ("Policy") describes how sizy99 ("we", "Platform", "sizy99") collects, uses, discloses, and protects your personal information when you use the website, mobile app, and other digital services operated by sizy99.

This Policy applies to all sizy99 platform users, including visitors, registered members, and former members whose information is still retained in our systems within the designated retention period. By registering for or using sizy99 services, you acknowledge that you have read and understood this Privacy Policy.

Sizy99 operates in accordance with applicable data protection laws and regulations. We are committed to ensuring your personal information is processed lawfully, fairly, and transparently at all times.

2. Types of Personal Data We Collect

Sizy99 collects several categories of personal information depending on how you interact with our platform. The table below describes the types of data we collect and their sources:

We may also collect information you voluntarily provide through surveys, feedback, or participation in sizy99 promotional programmes. All data collection is carried out based on legitimate service requirements and appropriate legal grounds.

3. How We Use Your Personal Data

Sizy99 uses the personal data collected for the following purposes, all grounded in a valid legal basis:

• Service Provision: Processing account registration, verifying identity, handling deposits and withdrawals, and enabling access to all games and platform features.
• Security & Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, player collusion, and misuse of the sizy99 platform.
• Legal Compliance: Fulfilling legal obligations related to KYC, AML (Anti-Money Laundering), and reporting to relevant authorities as required by law.
• Service Improvement: Analysing usage patterns to improve platform design, technical performance, and overall user experience.
• Service Communications: Sending important notifications regarding your account, changes to terms, security updates, and transaction information.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need assistance with gambling addiction and providing appropriate support.
• Marketing (with consent): Sending promotional information, bonus offers, and the latest news about sizy99 — only to players who have consented to receive marketing communications.

Sizy99 will not process your data for any purpose not stated above without obtaining your fresh consent beforehand.

4. Data Sharing & Disclosure

Sizy99 does not sell, rent, or commercialise players' personal data to outside parties. However, in the following limited circumstances, we may share your data with trusted third parties:

• Service Providers: Payment gateway providers, KYC service providers, analytics companies, and technology infrastructure providers that assist us in operating the sizy99 platform. All third parties are bound by strict confidentiality agreements.
• Legal Compliance: Regulatory authorities, law enforcement agencies, or courts when we are legally required to do so.
• Rights Protection: Relevant parties when we need to enforce our terms, prevent fraud, or protect the rights, property, and safety of sizy99 and its users.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of the business assets — with appropriate notice given to players.

5. Data Security & Protection Measures

Sizy99 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, misuse, or accidental disclosure:

• 256-bit SSL/TLS encryption for all data transmitted between your device and sizy99 servers.
• Passwords are stored using one-way hashing with a unique salt — we are unable to read your password ourselves.
• Role-based access control (RBAC) ensuring only authorised staff can access player data.
• Regular security audits by independent third parties to identify and address any system vulnerabilities.
• Continuous 24/7 monitoring of suspicious activity and an automated intrusion detection system (IDS).
• Tested and documented security incident response procedures to minimise impact in the event of a data breach.

While sizy99 takes all reasonable precautions, no system on the internet can be guaranteed 100% secure. You also play an important role in keeping your account safe by using a strong password and not sharing your login details with anyone.

6. Cookies, Tracking Technologies & Analytics

Sizy99 uses cookies and similar tracking technologies to enhance user experience and understand how our platform is used. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how visitors use our platform to help us improve website performance and speed.
• Functional Cookies: Saving your preferences such as language, region, and display settings so you do not need to reconfigure them each time.
• Analytics Cookies: Helping us understand aggregated, anonymised usage patterns for product development and service improvement purposes.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality and user experience of the sizy99 platform. For more information on managing cookies, please refer to your web browser's documentation.

7. Your Rights Regarding Personal Data

As a sizy99 player, you have the following rights regarding your personal data. To exercise any of these rights, contact the sizy99 support team and we will process your request within 30 business days:

• Right to Access: You may request a copy of all personal data we hold in relation to your account.
• Right to Rectification: You may request correction of any inaccurate or incomplete information in our records.
• Right to Erasure: Under certain circumstances, you may request deletion of your personal data — subject to applicable legal retention obligations.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the validity of prior processing.

8. Data Retention Period

Sizy99 only retains your personal data for as long as necessary to fulfil the original purpose of collection or as required by law. In general, the retention periods are as follows:

• Active account data is retained for the duration of your active membership and 5 years after account closure.
• Financial transaction records retained for a minimum of 7 years in compliance with AML and tax legal requirements.
• Customer support communication logs are retained for 3 years from the date of the last interaction.
• Technical and security log data is retained for 12 months for fraud detection and security audit purposes.
• Data obtained through the KYC process is retained for 5 years after the business relationship ends.

When data is no longer required, sizy99 will securely delete it or permanently anonymise it so it can no longer be linked to you.

9. Cross-Border Data Transfer

In operating the sizy99 platform, your personal data may be processed or stored outside Malaysia by our technology service providers. When cross-border data transfers occur, sizy99 ensures adequate protection through the following mechanisms:

• Data processing agreements (DPA) with all third-party service providers, covering standard data protection clauses.
• Transfers only to countries or organisations that offer an equivalent level of data protection.
• Data Protection Impact Assessments (DPIA) are conducted before any new data transfer is approved.

By using the sizy99 platform, you understand and agree that your data may be transferred to and processed outside Malaysia, with appropriate protections as described above.

10. Children's Privacy

The sizy99 platform is not intended for individuals under 18 years of age. We do not knowingly collect or store personal data from minors. If you believe your child or any underage individual has registered on sizy99, please contact our support team immediately.

When we determine that personal data has been collected from a minor without proper age verification, we will take immediate steps to delete that information and close the relevant account.

11. Privacy Policy Amendments

Sizy99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. Any material changes will be communicated to you via your registered email or an in-platform notification at least 14 days before taking effect.

We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this document indicates when the latest version was published. Continued use of the sizy99 platform after any changes take effect will be considered acceptance of the updated terms.