Madani99 Privacy Policy – Our Commitment to Protecting Your Personal Data

Madani99 ("we", "the madani99 platform") is committed to protecting the privacy and personal data of every member who uses our platform. This Privacy Policy transparently explains how we handle your personal information when you register, log in, make deposits or withdrawals, play games, or interact with any part of the madani99 platform.

The madani99 Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We take our responsibilities as a data controller under that Act seriously and ensure that all our data processing practices comply with the principles established under Malaysian law.

We understand that your trust is madani99's most valuable asset. Every decision we make regarding your data is guided by your best interests as a member — not our short-term commercial gain. This is why we are committed to never selling your personal data to any third party for marketing purposes.

Madani99 collects your personal data through several channels — directly when you register or use the platform, automatically as you browse our website, and occasionally through third parties who assist us in delivering our services. Below is a detailed breakdown of the data we collect and its purposes:

We do not collect more sensitive categories of data such as health information, religious beliefs, or political views unless you voluntarily disclose them in your communications with us — in which case, they are used solely for the purpose of that communication.

Madani99 uses members' personal data only for legitimate purposes that have been stated at the time of collection. We do not use your data for purposes unrelated to the provision of platform services without your explicit consent. Our data usage purposes are as follows:

• Account Management: Creating and managing your madani99 account, verifying your identity and age, and processing service requests
• Financial Transaction Processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX; processes withdrawal requests to your payment account
• Service Provision: Provide access to slots, Live Casino, table games, roulette, and Sports Betting; manage VIP programmes and bonuses
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, and unauthorised access to your account
• Customer Support: Providing assistance via live chat, email, and WhatsApp; resolving complaints and enquiries
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and to inform the appropriate responsible gaming tools
• Legal Compliance: To meet reporting and compliance obligations under Malaysian law, including anti-money laundering (AML) requirements
• Platform Improvements: Analysing aggregated usage data to improve the user experience, resolve technical bugs, and develop new features
• Service Communications: Send important notifications relating to your account, policy changes, and security information

For marketing communications such as the latest promotions, bonuses, and exclusive madani99 offers, we will only send such communications to members who have given their consent to receive marketing communications during registration. You may withdraw this consent at any time through your account settings or by contacting customer support.

Madani99 does not sell, rent, or trade members' personal data to any third party for their own marketing purposes. This is an absolute principle we will not compromise on. That said, in the course of operating the platform, we do need to share data with a limited category of third parties in the following situations:

• Payment Service Providers: We share the necessary transaction details with eWallet operators (Touch 'n Go, GrabPay, Boost, ShopeePay) and FPX/DuitNow systems to process your deposits and withdrawals. These providers are bound by their own privacy policies and are not permitted to use your data for any other purpose.
• Game Providers: Game providers such as Evolution Gaming, Pragmatic Play, PG Soft, and Jili Games may receive the minimum technical data required to deliver games within the madani99 platform. They do not receive your full identity data.
• Security & Anti-Fraud Services: We use third-party services to detect fraud and security threats. These services receive technical data and transaction patterns, but not your full identity data.
• Relevant Authorities: We are legally required to disclose certain information to Malaysian authorities when requested through a valid legal process, including investigations into financial crime, money laundering, or court orders.
• Audit Services: Independent audit firms conducting security and compliance reviews of the madani99 platform may access data within a fully controlled and protected environment.

Madani99 invests seriously in security infrastructure to protect members' personal data from unauthorised access, disclosure, alteration, or destruction. The following are the security layers we have in place:

• 256-bit SSL Encryption: All communications between your device and madani99 servers are protected by 256-bit TLS/SSL encryption, ensuring that any data transmitted cannot be intercepted or tampered with by unauthorized parties.
• Data at Rest Encryption: Sensitive data stored in our databases — including financial information and identity documents — is encrypted at rest using modern encryption algorithms.
• Hashed & Salted Passwords: Your account password is stored in hashed and salted form using a strong cryptographic hash function. This means no one — including madani99 technical staff — can read your original password.
• Role-Based Access Control: madani99 staff may only access the data necessary to perform their duties. Access to sensitive member data is restricted and comprehensively logged.
• 24/7 Security Monitoring: An automated monitoring system operates around the clock to detect suspicious activity, intrusion attempts, and abnormal access patterns.
• Regular Penetration Testing: madani99 conducts regular security testing by independent security teams to identify and address vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% secure. You also play an important role in keeping your account safe — choose a strong password, never share your login details, and contact us immediately if you suspect any unauthorised access to your madani99 account.

Madani99 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law. The following is a guide to our data retention periods:

• Active Account Data: For the duration your account remains active and for up to 5 years after account closure, for audit and legal compliance purposes
• Financial Transaction Records: Minimum 7 years in accordance with Malaysia's anti-money laundering (AML) legal requirements
• Identity Verification Records (KYC): 5 years from the date of verification or account closure, whichever is later
• Support Communication Records: 2 years from the date of last communication, for training and service improvement purposes
• Technical Log Data: 90 days for standard access logs; 1 year for security incident-related logs
• Marketing Data (with Consent): Until you withdraw your consent or close your account

Once the retention period expires, data is securely deleted or anonymised using procedures that ensure it cannot be recovered. For data that must be retained longer due to legal requirements, we take steps to restrict access and limit its use strictly to the required purposes.

If you request data deletion before the retention period ends, we will review your request and inform you which data can be deleted immediately and which must be retained due to legal obligations.

The madani99 platform uses cookies and similar tracking technologies to enhance the user experience, secure login sessions, and understand how members use the platform. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for the platform's core functions, such as maintaining your login session, remembering language preferences, and securing form submissions. The platform will not function properly without them.
• Functional Cookies: Used to remember your preferences and settings — such as favourite games, display settings, and language choice — to deliver a more personalised experience.
• Analytics Cookies: Helps us understand how members interact with the platform — which pages are visited most, where users encounter difficulties, and how to improve navigation flow. This data is collected in aggregate and is not used to identify individuals.
• Security Cookies: Used to detect suspicious login attempts, identify trusted devices, and protect your account from unauthorised access.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the madani99 platform. Analytical and functional cookies can be disabled without affecting the platform's core functions.

The madani99 platform is strictly for adults aged 18 and above. We do not accept registrations from underage individuals and take active steps to verify members' age during the registration process and whenever necessary.

Madani99 does not knowingly collect or process personal data from individuals under the age of 18. Should we discover or suspect that personal data has been collected from a minor, we will promptly delete that data and close the associated account.

Madani99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or member feedback. When we make material changes to this policy, we will:

• Notify you via your registered email at least 14 days before the changes take effect
• Display a clear notice on the madani99 platform regarding upcoming changes
• Update the "last updated" date at the top of this document

For minor changes that do not affect your fundamental rights or how we handle your personal data, we may not send individual notifications but will still update this document. We encourage you to review this Privacy Policy periodically.

Continued use of the madani99 platform after the effective date of an updated Privacy Policy constitutes acceptance of those changes. If you do not agree with the changes, you may close your account before the effective date and request deletion of your data.

For any enquiries, concerns, or requests relating to this Privacy Policy or how madani99 handles your personal data, please contact us through the following channels. We are committed to responding to all privacy-related enquiries within 14 business days:

• Privacy Officer Email: support@madani99.biz – use the subject line "Data Privacy Enquiry" for faster handling
• 24/7 Live Chat: Available on the madani99 platform – for immediate or general privacy enquiries
• WhatsApp: Number available in the "Contact Us" section after logging in to your account

For formal requests relating to your rights under Malaysia's PDPA — such as access, rectification, or data deletion requests — please email our Data Protection Officer at support@madani99.biz, stating the type of request and sufficient account information for us to verify your identity. We will process formal requests within 21 business days.