Privacy Policy dn999 – Malaysia Member Personal Data Protection

1Introduction

This Privacy Policy ("Policy") describes how dn999 — a digital entertainment and online betting platform operating under the domain dn999-jit.com — collects, uses, stores, discloses, and protects your personal data as a member or user of our platform.

Dn999 takes seriously our responsibility to the privacy of every individual who entrusts their personal data to us. Every decision regarding data handling is made with our members' best interests in mind, not purely commercial ones.

This policy applies to all personal data collected through the dn999-jit.com website, the dn999 mobile app (where applicable), and all interactions with dn999's customer support team. It should be read together with dn999 Terms and Conditions which forms part of your agreement with us.

2Personal Data Collected

Dn999 collects your personal data through several means — when you register an account, when you use the platform's services, when you contact customer support, and automatically as you browse the dn999 website. The following are the categories of data we collect:

A) Registration & Identity Data

• The username you chose during registration.
• An active Malaysian phone number (used for OTP verification and account communications).
• Passwords are stored in encrypted form — dn999 cannot read your actual password.
• Date of birth (for age verification, 18+ requirement).
• Identity verification documents if requested as part of the KYC (Know Your Customer) process.

B) Financial & Transaction Data

• Payment method details you have registered — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX-linked accounts (Maybank2u, CIMB Clicks).
• Deposit and withdrawal history, including amounts, dates, and methods used.
• Records of bonus and promotional transactions claimed.

C) Gaming Activity Data

• Sports betting history — including badminton, Malaysia Super League football, EPL, and other sports.
• Gaming records for casino, slots, fishing games, and lottery at dn999.
• 4D, 6D, Mega Jackpot, and Digital Scratch Card lottery history.
• Deposit limit settings and responsible gaming options that you have activated.

D) Technical & Device Data

• The IP address of your device when accessing the dn999 platform.
• Device type, operating system, and web browser version used.
• Cookie and login session data for security and user experience purposes.
• Activity logs including pages visited and session duration on the dn999 platform.

3How Personal Data Is Used

Dn999 uses the personal data it collects for the following purposes, all of which are necessary to deliver a secure, fair, and high-quality platform experience:

Dn999 will not use your personal data for any purpose not listed above without obtaining your fresh consent. Should we wish to use your data for a new purpose, you will be informed in advance and given the option to agree or decline.

4Data Sharing with Third Parties

Dn999 takes a highly cautious approach when it comes to sharing members' personal data. As a matter of principle, dn999 does not share your personal data with third parties for commercial or marketing purposes without your explicit consent. That said, there are certain situations where data sharing is necessary and permitted:

• Payment Service Providers: dn999 shares only the minimum necessary transaction information with the payment processors we work with — such as Touch 'n Go, GrabPay, DuitNow, and FPX infrastructure providers — solely to facilitate the secure processing of your financial transactions. All such providers are bound by strict data protection agreements.
• Technical Service Providers: Companies we engage for server hosting, platform analytics, and cybersecurity services may have limited access to certain data solely to perform those services on dn999's behalf. They are not permitted to use that data for any other purpose.
• Legal Compliance: dn999 may be required to disclose your personal data to Malaysian legal authorities such as Bank Negara Malaysia, the Royal Malaysia Police, or other regulatory bodies when mandated by law — including investigations related to anti-money laundering under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act (AMLATFPUAA).
• Legitimate Interests Protection: In limited circumstances — such as preventing serious fraud or protecting the safety of other members — dn999 may share necessary information with the relevant parties.

5Data Security

Dn999 invests seriously in data security infrastructure to ensure every member's personal information is protected to the highest achievable standard. The technical and organisational security measures we have in place include:

• 256-bit SSL Encryption: All communication between your device and dn999's servers is fully encrypted using TLS/SSL protocol with a 256-bit key length — the highest encryption standard used in the banking and financial industry.
• Data-at-Rest Encryption: All sensitive data stored on dn999's servers — including account information and transaction history — is encrypted at rest, not only during transmission.
• Two-Factor Authentication (2FA): Dn999 provides a 2FA feature for all member accounts. We encourage all members to enable this feature for an additional layer of security that protects your account even if your password becomes known to someone else.
• 24/7 Security Monitoring: dn999's security team continuously monitors the platform using automated threat detection systems and manual reviews to identify and respond to any suspicious activity in real time.
• Internal Access Controls: Only dn999 staff with a legitimate business need are authorised to access members' personal data. This access is strictly controlled, regularly audited, and subject to binding confidentiality agreements.
• Regular Security Testing: dn999 conducts regular penetration testing and security audits by independent experts to identify and address vulnerabilities before they can be exploited.

Even with all these measures in place, no digital system can guarantee absolute 100% security. In the event of a material data breach, dn999 is committed to notifying affected members and the Malaysian Personal Data Protection Commissioner within the timeframe required by law.

6Cookies & Tracking Technologies

The dn999 website uses cookies and similar tracking technologies to enhance your experience as a user. Cookies are small text files stored on your device when you visit the dn999 website.

Dn999 uses the following types of cookies:

• Essential Cookies: These cookies are essential for the core functionality of the dn999 website — including your login session, account security, and transaction processing. Without them, the dn999 platform will not function properly. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences and settings on the dn999 platform — such as your preferred language, display preferences, and account settings — so you don't have to reconfigure them each time you log in.
• Analytics Cookies: dn999 uses analytics cookies to understand how members use our platform — which pages are visited most, which features are most popular, and where users encounter difficulties. This information is used to continuously improve the dn999 platform. Analytics data is processed in aggregate form and does not identify any individual specifically.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality of the dn999 platform. For guidance on managing cookies in your browser, please refer to your browser's documentation.

7Data Retention Period

Dn999 retains your personal data for as long as it is needed for the purpose it was collected, or for as long as your dn999 account remains active — whichever is longer. The following is a general guide to retention periods by data category:

• Active Account Data: For as long as your dn999 account remains active and has not been closed.
• Financial Transaction Data: A minimum of 7 years from the date of transaction, in accordance with Malaysia's anti-money laundering legislation.
• Security Activity Log: 12 months from the date the log was created, or longer if an investigation is ongoing.
• Support Communication Records: 3 years from the date of last communication, for reference and dispute resolution purposes.
• Technical Data & Cookies: Depends on the type of cookie — from the current session up to a maximum of 24 months for analytics cookies.

Once data is no longer needed and the mandatory retention period has ended, dn999 will securely delete or anonymize that data in accordance with established procedures.

8Your Rights Under PDPA 2010

As a dn999 member whose data is governed by Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to your personal data:

• Right to Access: You have the right to request a copy of the personal data dn999 holds about you.
• Right to Rectification: You have the right to request that dn999 correct any personal data that is inaccurate or incomplete.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of any processing carried out prior to the withdrawal.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data. However, such requests may not be fulfilled in full if dn999 has a legal obligation to retain that data.

To exercise any of the rights above, please contact the dn999 support team by email at support@dn999-jit.com. dn999 will process your request and respond within 21 business days of receipt, in line with the requirements of PDPA 2010. In complex cases, this period may be extended, and you will be notified accordingly.

9Data of Minors

The dn999 platform is strictly intended for individuals aged 18 and above. dn999 does not knowingly collect, store, or process any personal data from children or minors under the age of 18.

Should dn999 discover that personal data belonging to someone under the age of 18 has been inadvertently collected, we will take immediate steps to delete that data and close the account in question without prior notice. The age verification process dn999 carries out during registration is in place to prevent this from occurring.

If you are a parent or guardian and believe your underage child has registered an account with dn999, please contact us immediately at support@dn999-jit.com so we can take prompt action.

10Links to Third-Party Websites

The dn999 platform may from time to time contain links to third-party websites or services — for example, sports association websites for checking badminton or football match schedules. dn999's Privacy Policy does not apply to those external websites.

Dn999 is not responsible for the privacy practices or content of any third-party websites linked from our platform. We encourage you to read the privacy policy of every website you visit outside of the dn999 platform.

11International Data Transfers

Dn999 prioritises hosting data within Malaysia or in jurisdictions with equivalent or higher data protection standards. That said, some third-party technical service providers used by dn999 may store or process data at locations outside Malaysia.

When international data transfers occur, dn999 ensures that appropriate safeguards are in place through:

• Binding data processing agreements with the relevant providers.
• Security assessments of vendors to ensure they maintain adequate data protection standards.
• Limiting data transfers to the minimum required for the relevant service only.

12Amendments to the Privacy Policy

Dn999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. Members will be notified of any material changes via in-platform notifications on dn999 or by email.

The "Last updated" date at the top of this page will always reflect the date of the latest version of this Privacy Policy. We encourage you to review this page periodically, especially when you receive an amendment notification from dn999.

Your continued use of the dn999 platform after any amendments to this Privacy Policy are published will be taken as your acceptance of those changes. If you disagree with any amendments, you have the right to close your dn999 account by contacting our support team.

13Contact Us

If you have any questions, concerns, or requests regarding dn999's Privacy Policy or how we handle your personal data, please do not hesitate to reach out to us via:

• Email: support@dn999-jit.com — for privacy enquiries, please include "Privacy Enquiry" in the subject line of your email.
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the dn999 platform. Our team is fluent in Bahasa Melayu.
• Frequently Asked Questions: Refer to dn999 FAQ page for quick answers to frequently asked questions.

Dn999's privacy and data protection team is committed to responding to all privacy-related inquiries within 7 business days from the date the inquiry is received. For more complex requests such as data access or deletion applications, the response period may extend up to 21 business days in accordance with PDPA 2010 requirements.

Dn999 values the trust you place in us when you register as a member and use our platform. We are committed to handling your personal data responsibly, transparently, and with the respect it deserves — always.