Privacy Policy madani 99 – Malaysian User Data Protection

1

Introduction – madani 99's Privacy Commitment

Your privacy is more than a legal obligation for madani 99 — it is a core value we have upheld since the platform was first built. We understand that as a member placing bets and conducting financial transactions on our platform, you are trusting us with highly sensitive information. That trust is something we never take lightly.

This Privacy Policy is written in plain, easy-to-understand language — not lengthy, confusing legal jargon — so that every madani 99 member in Malaysia can truly understand what happens to their data. We don't want you to simply "accept and press OK" without knowing what you are agreeing to.

Madani 99 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means every instance of personal data processing we carry out has a legitimate purpose, is conducted securely, and you have the right to know, access, and control your own information.

2

Personal Data We Collect

Madani 99 collects your personal data across several categories depending on how you interact with our platform. Below is a full breakdown of the data we collect and why:

Madani 99 does not collect sensitive data such as medical information, biometric data, or full credit card details. For financial transactions, we store only the transaction reference — not your full card number or PIN.

3

How We Use Your Data

Every piece of data collected by madani 99 serves a specific and legitimate purpose. We do not use your data for unrelated purposes without your consent. Below is a full explanation of how your data is used:

• Account Management: Identity data and contact information are used to create, manage, and secure your madani 99 account. This includes the identity verification process (KYC) required prior to your first withdrawal.
• Transaction Processing: Your financial data — including your Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX account details — is used solely to process your deposits and withdrawals at madani 99. We do not use this data for any other purpose.
• Platform Security: Technical data such as IP addresses and device information is used by madani 99's security systems to detect and prevent unauthorised access, fraud, and suspicious activity — all to protect your account and funds.
• Service Communications: Your email address and phone number are used to send important account notifications — including deposit confirmations, withdrawal alerts, security notices, and madani 99 policy updates.
• Responsible Gaming: Your platform usage data — including betting patterns and session duration — is monitored by madani 99's responsible gaming system to detect early signs of gambling-related issues and offer appropriate assistance to members who may need it.
• Platform Improvements: Anonymised usage data (with all names and personal identifiers removed) is used to understand overall platform usage patterns for the purposes of technical improvements and user experience enhancement.
• Legal Compliance: madani 99 may need to process your data to fulfil legal obligations, including anti-money laundering (AML) requirements and lawful requests from competent authorities.

4

Data Sharing with Third Parties

Madani 99 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. This is an absolute commitment we do not compromise on. That said, there are specific situations where we need to share your data for legitimate operational purposes:

• Payment Processors: madani 99 shares only the minimum necessary transaction data with authorised payment providers — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX-supporting banks such as Maybank2u and CIMB Clicks. Any data shared is strictly limited to what is required to complete the transaction.
• Technical Service Provider: madani 99 works with carefully selected third-party technical service providers for specific functions such as server hosting, security monitoring, and customer support. All providers are bound by strict confidentiality agreements and may only access data necessary for their specific tasks.
• Regulatory Body & Authorities: madani 99 may be required to disclose your personal data to authorised authorities — including the police, courts, or Malaysian financial regulators — if compelled to do so by law or a valid court order. We will inform you of any such request unless prohibited from doing so by law.
• Business Transfer: In the event of a merger, acquisition, or sale of madani 99 assets, user data may be transferred as part of the business assets. In such cases, all members will be notified in advance and your data will remain protected under a privacy policy of equal or higher standard.

5

Security & Data Protection

Madani 99 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

• 256-bit SSL Encryption: All communications between your browser and madani 99's servers are encrypted using TLS with a 256-bit key — the same level of protection used by Malaysia's major banks, including Maybank and CIMB.
• Data-at-Rest Encryption: Sensitive data stored in madani 99's databases — including personal identification details and financial information — is encrypted at rest using industry-standard encryption protocols.
• Strict Access Controls: Access to members' personal data within madani 99's systems is restricted to staff with a legitimate operational need. All access is logged and regularly monitored.
• Two-Factor Authentication: madani 99's internal systems that hold member data are secured with mandatory two-factor authentication for all staff. VIP member accounts are also offered two-factor protection as an additional option.
• 24/7 Security Monitoring: madani 99's automated threat detection system continuously monitors all network and account activity to identify intrusion attempts, cyberattacks, and unusual access patterns.
• Regular Security Audits: madani 99 conducts regular security assessments and audits to identify and address vulnerabilities in our systems before they can be exploited.

While we take all reasonable steps to protect your data, no digital system is 100% breach-proof. If you suspect your madani 99 account has been accessed without your authorisation, please contact our support team immediately.

6

Cookies & Tracking Technologies

Like most digital platforms, madani 99 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Below is an explanation of the types of cookies we use:

• Essential Cookies: These cookies are essential for the madani 99 platform to function. They store your login session, language preference, and basic security settings. Without them, the platform will not work properly. These cookies cannot be disabled.
• Performance Cookies: These cookies collect information about how you use the madani 99 platform — which pages you visit most frequently, page load times, and any technical errors that occur. All such data is anonymised and used solely to improve the platform's technical performance.
• Functional Cookies: These cookies allow the madani 99 platform to remember your preferences — such as your preferred table view in the Live Casino or your favourite teams in Sports Betting — to deliver a more personalised experience on your next visit.
• Security Cookies: Used for verification and fraud detection purposes. These cookies help madani 99's systems confirm that you are a legitimate user and not a bot or fraudulent actor.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the madani 99 platform. For guidance on managing cookies in your browser, refer to the documentation for your browser of choice (Chrome, Firefox, Safari, Edge).

Madani 99 does not use third-party cookies for advertising or cross-site tracking purposes. We do not permit advertising networks to place tracking cookies on our platform.

7

Your Rights as a Data Subject

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia and data protection best practices, you as a madani 99 member have the following rights regarding your personal data:

• Right to Access: You have the right to request a copy of the personal data madani 99 holds about you at any time. We will fulfil this request within 21 business days from the date a valid request is received.
• Right to Rectification: If you find that your personal data held by madani 99 is inaccurate or out of date, you have the right to request a correction. Submit your correction request through your account or contact madani 99 customer support.
• Right to Erasure: Under certain circumstances, you have the right to request that madani 99 delete your personal data. However, we may need to retain certain data to fulfil legal obligations — such as financial records for tax purposes or AML compliance. We will explain our reasons if your deletion request cannot be fulfilled in full.
• Right to Restriction of Processing: You may request that madani 99 restrict the processing of your data in certain circumstances — for example, during a dispute regarding data accuracy or while you are deciding whether to continue using the platform.
• Right to Object to Marketing: You may withdraw your consent to receive marketing communications from madani 99 at any time through your account settings. Withdrawing marketing consent does not affect your account services.
• Right to Lodge a Complaint: If you believe madani 99 has processed your data in a manner that violates Malaysia's PDPA, you have the right to file a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.

To exercise any of the above rights, submit a written request to the madani 99 privacy team by emailing support@madani99.run with the subject line "Data Privacy Rights Request". Please include your account number and a description of your request. We will verify your identity before processing it.

8

Child Protection

The madani 99 platform is exclusively for users aged 18 and above. madani 99 does not knowingly collect or process personal data from anyone under the age of 18. This is an absolute commitment.

During the registration process, we require confirmation that the user is at least 18 years of age. The identity verification (KYC) process we conduct is also designed to verify a member's actual age through valid identity documents.

Should madani 99 discover that personal data belonging to someone under the age of 18 has been collected — whether through false information provided during registration or by any other means — we will immediately:

• Close the account in question and block access to the platform
• Delete all personal data collected in relation to that individual
• Taking further appropriate action in accordance with Malaysian law

If you discover that someone under the age of 18 is using the madani 99 platform, please notify us immediately at support@madani99.run. madani 99 takes child protection extremely seriously and will respond without delay.

9

Data Retention Period

Madani 99 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required under Malaysian law. The following are general data retention guidelines:

• Active Account Data: For the duration of your active madani 99 account and for 12 months following your last period of inactivity
• Financial Records: Minimum 7 years, as required by Malaysian tax legislation and financial compliance obligations
• Security Logs: 24 months for security investigation and fraud detection purposes
• Customer Support Records: 3 years from the date of last interaction
• KYC (Identity Verification) Data: For the lifetime of the account plus 5 years after closure, in accordance with AML compliance requirements

Once the relevant retention period has expired, madani 99 will securely delete or anonymise the data. Anonymised data may be retained for statistical purposes and cannot be linked back to any individual.

When you request the closure of your madani 99 account, we will delete all deletable data within 30 days, except for data that must be retained by law as outlined above.

10

Changes to This Privacy Policy

Madani 99 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features we introduce. The date of the most recent update is always displayed at the top of this page.

If we make material changes to this Privacy Policy — changes that significantly affect your rights or how we use your data — we will notify you through:

• In-account notifications on madani 99 when you log in
• Email to the address registered to your account (for important changes)
• Notice displayed on the madani99.run homepage

Continued use of the madani 99 platform after any changes to this Privacy Policy constitutes acceptance of the updated terms. If you do not agree with the changes, please discontinue use of the platform and contact us to close your account.

11

Contact Us – Data Privacy Enquiries

For any questions, concerns, or requests relating to madani 99's Privacy Policy or the processing of your personal data, please reach out to us through the following channels:

• Privacy Email: support@madani99.run — use the subject line "Privacy Policy Enquiry" to ensure your message reaches the right team. We reply within 24 hours.
• Live Chat: Available 24/7 within the madani 99 platform for general privacy and account-related questions.
• FAQ: Visit page Frequently Asked Questions us for quick answers to the most frequently asked privacy questions.

We are committed to taking every privacy enquiry seriously and providing a clear, helpful response within a reasonable timeframe. Your privacy is our priority.