Privacy Policy poci99 Malaysia

01Introduction & Scope

Poci99 is an online gaming platform that operates and serves members in Malaysia. We understand that your privacy is more than a legal requirement — it is the foundation of trust that defines our relationship with every member.

This Privacy Policy applies to all personal information we collect through:

• The official poci99.win website and all related subdomains
• Poci99 mobile app for iOS and Android
• Live chat sessions, emails, and customer support communications
• Account registration process, identity verification (KYC), and financial transactions
• Promotions system, loyalty programmes, and customer satisfaction surveys

This Policy does not apply to third-party websites that may be linked from our platform. poci99 encourages you to read the privacy policy of any third-party website you visit separately.

02Data Collected

To enable poci99 to provide a safe, personalised, and responsible service, we collect several categories of personal information from our members. Below is a breakdown of the types of data we collect and their purposes:

Poci99 only collects data that is strictly necessary to operate the platform safely and responsibly. We do not collect sensitive information such as biometric data, medical records, or financial information beyond what is required for standard payment processing.

03How We Use Your Data

All information collected by poci99 is used solely for legitimate and necessary purposes. We do not use your data for anything unrelated to delivering poci99's services. Here are the primary ways we use your data:

• Registration & Account Management — To create, verify, and maintain your poci99 account so that your gaming experience runs smoothly and securely.
• Financial Transaction Processing — To process your deposits and withdrawals securely using supported payment methods including FPX, Touch 'n Go eWallet, GrabPay, and online bank transfers.
• Identity Verification (KYC) — To fulfil legal compliance requirements related to anti-money laundering and counter-terrorism financing, as mandated by the relevant authorities.
• Platform Security — To detect and prevent fraud, hacking, multi-account usage, and any activity that could compromise the security of other members.
• Service Improvement — To analyse usage patterns and member feedback in order to improve platform features, technical stability, and overall user experience.
• Service Communications — To send important notifications regarding transactions, account security updates, policy changes, and promotional information (if you have consented to receive them).
• Responsible Gaming — To monitor gameplay patterns and identify members who may need assistance or support related to responsible gaming habits.

04Information Sharing

Poci99 takes seriously its responsibility not to share your personal information arbitrarily. We do not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes.

However, in certain limited situations, poci99 may need to share your information with the following parties:

• Payment Service Providers — Including banks, FPX providers, Touch 'n Go, and GrabPay to enable processing of your deposit and withdrawal transactions.
• Technology Service Providers — Companies that provide the technical infrastructure, cloud services, analytics, and fraud detection tools used by poci99.
• Game Providers — Third-party gaming companies that provide Slot Games, Live Casino, and fish shooting games on the poci99 platform, strictly to the extent required for game operations.
• Regulatory Authority — When required by law, court order, or directive from a competent authority in Malaysia.
• Anti-Fraud Agency — In cases of suspected fraud, money laundering, or illegal activity, poci99 reserves the right to share relevant information with the appropriate authorities.

All third parties working with poci99 are required to adhere to data protection standards equivalent to this Privacy Policy and are not permitted to use your data for any purpose other than those specified in their service agreement with poci99.

05Data Security

Poci99 continuously invests in the latest information security technologies and procedures to ensure members' personal data is always protected to the highest standard. Our key security measures include:

• 256-bit SSL Encryption — All data transmitted between your device and poci99 servers is encrypted using the latest TLS protocol, making it unreadable to any unauthorised third party.
• Two-Factor Authentication (2FA) — An additional security layer that requires verification via your device before account access is granted, even if your password is known to another party.
• 24/7 Security Monitoring — A continuous monitoring system that detects any suspicious activity or unauthorised access attempts in real time.
• Internal Access Controls — Only poci99 staff who require access to specific data to perform their authorised duties are permitted to do so, with all access logged and audited regularly.
• Fund Segregation — Members' funds are held in a bank account separate from the company's operating funds, ensuring the safety of your financial assets at all times.
• Regular Security Testing — poci99 conducts regular penetration testing and security audits by independent parties to identify and address any system vulnerabilities.

06Cookies & Tracking

The poci99 platform uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and analyse usage patterns for continuous improvement.

The types of cookies we use include:

• Essential Cookies — Required for core platform functions such as login session verification, security, and navigation. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies — Stores your personal settings such as language, game preferences, and display configuration so you do not need to reset them each time you log in.
• Analytics Cookies — Helps poci99 understand how members use the platform, which pages are most popular, and where technical improvements are needed. Analytics data is collected in aggregate and does not identify individuals.
• Security Cookies — Helps us detect and prevent fraud, unauthorised login attempts, and bot activity that could compromise your account security.

You can manage cookie settings through your internet browser. However, disabling essential cookies may affect your ability to fully use certain features of the poci99 platform.

07Your Rights as a Member

As a poci99 member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

To exercise any of the rights above, please contact the poci99 privacy team via our support email. We will process your request within 21 business days. Some requests may require additional identity verification before they can be processed.

08Data Storage & Deletion

Poci99 retains members' personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law.

Our data retention guidelines are as follows:

• Active account data — Retained throughout the period your account is active and up to 7 years after account closure to meet financial legal requirements.
• Financial transaction records — Retained for a minimum of 7 years in accordance with the Financial Services Act 2013 and anti-money laundering regulations.
• Support communication logs — Retained for 3 years for complaint resolution and service improvement purposes.
• Analytics and system log data — Retained for 12 months in identifiable form, after which they are anonymised or deleted.
• KYC Documents — Retained for the duration of the active account period plus 7 years after account closure.

Once the retention period expires, your personal data will be securely deleted or anonymised so it can no longer be personally identified with you.

09Policy Changes

Poci99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, regulatory requirements, or technological developments that affect how we process data.

When material changes are made to this Policy, poci99 will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the platform's home page for a minimum of 14 days.
• Sending notifications to active members via their registered email or in-app notifications.

Continued use of the poci99 platform after any Privacy Policy changes are published will be considered your acceptance of the latest version. If you disagree with any changes, you have the right to close your account by contacting our support team.

10Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how poci99 handles your personal data, we are ready to assist through the following channels:

• Live chat on the platform — available 24 hours a day, 7 days a week
• Privacy & data protection email: [email protected]
• Page FAQ for frequently asked questions that have already been answered

Our team aims to respond within 24 hours for general enquiries and 5 business days for requests involving personal data rights. Complex requests may take up to 21 business days to fully resolve, and we will provide regular status updates throughout.