Privacy Policy syok99 — Your Personal Data Protection

1 Introduction & Scope of This Policy

This Privacy Policy ("Policy") describes how syok99 ("we", "Platform") collects, stores, processes and protects your personal data when you use our services, browse our website at syok99.vu, or interact with any part of our platform including the mobile app.

We are committed to respecting every member's privacy and ensuring your personal data is always handled with full integrity and responsibility. This document is written in plain language so you know exactly what happens to your information from the moment you register until you close your account.

2 Personal Data We Collect

Syok99 only collects data that is genuinely necessary to provide a safe, fair, and legally compliant service. We do not collect excessive information that is unrelated to the platform's functionality.

2.1 Data You Provide Directly

• Full name as shown on official identification documents
• Active email address for account communications
• Mobile phone number for two-factor authentication (2FA)
• Date of birth to verify that you are 18 years of age or older
• Current residential address for KYC compliance
• Copies of identification documents (MyKad, passport) when required
• Payment method information for deposits and withdrawals

2.2 Data Collected Automatically

• IP address and device information (operating system, browser type)
• General location data based on IP address (not GPS)
• Game activity logs and betting records
• Login and logout session information
• Cookie data and similar tracking technologies
• Complete financial transaction records

3 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. Below is a summary of our key data uses:

4 Data Sharing With Third Parties

Syok99 does not sell your data. However, in certain limited situations, we may need to share your information with carefully selected third parties solely to enable us to deliver our services to you.

4.1 Payment Service Providers

Financial data required to process deposits and withdrawals is shared with PCI-DSS certified payment providers such as DuitNow gateways, eWallets, and crypto payment processors. They are bound by strict confidentiality agreements and may only use your data for the specified purposes.

4.2 Statutory Authorities

We may be required to disclose your data to government authorities, law enforcement agencies, or regulatory bodies when mandated by law or by a valid court order. We will notify you of any such disclosure where permitted by law to do so.

4.3 Technology Vendors

The syok99 platform uses several third-party technology providers for server hosting, cybersecurity and platform analytics. All such providers are subject to strict data processing agreements and have only limited access to the data required for their functions.

5 Cookies & Tracking Technologies

Syok99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

5.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as secure login and session management. Cannot be disabled.
• Performance Cookies: Collect anonymous data about how you use the platform to help us improve our services.
• Functional Cookies: Remember your preferences such as language and display settings for a smoother experience.
• Marketing Cookies: Used with your consent to display relevant promotions. You may opt out at any time.

You can manage your cookie settings through your browser at any time. Please note that disabling essential cookies may affect platform functionality.

6 Data Security & Protection Measures

We continuously invest in security infrastructure to ensure your data remains protected against threats. Key security measures we employ include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL
• Data encryption at rest (data-at-rest encryption)
• Two-factor authentication (2FA) for all account logins
• 24/7 suspicious activity monitoring by our cybersecurity team
• Regular penetration testing by independent security experts
• Strict access controls — only authorised staff may access sensitive data
• Daily data backups to a secure, separate location

7 Your Rights as a Data Subject

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by syok99:

• Right of Access: Request a copy of your personal data we hold at any time
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data under certain circumstances permitted by law
• Right to Object: Object to the processing of your data for direct marketing purposes
• Right to Withdraw Consent: Withdraw any consent you have previously given at any time
• Right to Data Portability: Receive your data in a machine-readable format

To exercise any of these rights, please contact our data protection team via the email listed in the "Contact Us" section of the platform. We will process your request within 30 business days.

8 Data Retention Period

Syok99 retains your personal data for as long as necessary to fulfill the purposes stated in this Policy or as required by applicable law. In general, the retention periods are as follows:

• Active account data: For the duration of your active membership
• Financial transaction records: Minimum 7 years from the transaction date (AML requirement)
• Security logs: 12 months from the date of creation
• KYC data: 5 years after account closure
• Customer support communications: 3 years from the date of last interaction

Once the retention period has ended, your data will be securely deleted or anonymized in accordance with our standard procedures.

9 Cross-Border Data Transfers

In some cases, your data may be processed or stored on servers located outside Malaysia as part of the global technology infrastructure we use. When this occurs, syok99 ensures that such data transfers are carried out with adequate safeguards, including standard contractual clauses and thorough security assessments of our technology partners.

10 Children's Privacy

Syok99 services are exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of minors. If you believe a minor has registered an account on our platform, please contact us immediately and we will take prompt action to close the account and delete all related data.

11 Amendments to This Privacy Policy

Syok99 reserves the right to update this Privacy Policy from time to time in line with changes in business practices, technology, or legal requirements. When material amendments are made, we will notify you via your registered email or a prominent notification on the platform at least 14 days before the amendment takes effect.

The date of the last amendment will always be displayed at the top of this document. Continued use of the platform after the amendment's effective date constitutes your acceptance of the latest version of this Policy.

12 Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us. Our Data Protection team is available to assist you 24/7.