Privacy Policy popi99 — Your Personal Data Protection

Popi99 ("we", "Platform") is an online entertainment platform operating under the domain popi99.vip, exclusively for adult users in Malaysia. This Privacy Policy explains in detail how we collect, store, process, protect and — under strictly defined limited circumstances — share your personal data whenever you use popi99's services.

This document applies to all individuals who access the popi99.vip website, register a member account, use the popi99 mobile app, or interact with any of our official communication channels including live chat support. It also covers data collected automatically during your visit, even if you have not yet registered as a member.

We want you to feel comfortable and confident that the information you provide to popi99 is in responsible hands. Every decision regarding our data handling is made with your interests and safety as our valued member as the top priority.

Popi99 only collects data necessary to provide you with a secure, efficient, and personalised experience. We do not collect excessive or irrelevant information beyond what is needed to operate the platform. The categories of data we collect are as follows:

Technical and usage data is collected automatically via cookies, server logs, and similar technologies when you access the popi99 platform. This information helps us identify technical issues, prevent fraud, and personalise your platform experience.

Every piece of data we collect has a clear and legitimate purpose. popi99 does not use your data for undisclosed purposes without obtaining your additional consent. The primary purposes for data use are as follows:

• Account management: Creating, verifying, and maintaining your member account, including password recovery and profile updates.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions related to your account securely and on time.
• KYC verification: Fulfilling legal obligations related to identity verification, anti-money laundering (AML) compliance, and regulatory requirements.
• Platform security: Detecting and preventing fraud, unauthorised access, bonus abuse, and other suspicious activity that could affect the platform or other members.
• Customer support: Resolving complaints, responding to enquiries, and providing effective technical assistance to you.
• Personalise your experience: Tailoring content, game recommendations, and relevant promotional offers based on your usage habits.
• Service communications: Sending important account notifications, security updates, and necessary service information.
• Analytics and improvement: Understanding usage patterns to improve platform quality, user interface, and the overall popi99 member experience.

Popi99 does not sell, rent, or trade your personal data to any third party for commercial purposes. This is our absolute, non-negotiable commitment. However, in the course of operating the platform, we may need to share certain information with the following parties under strictly limited and controlled circumstances:

• Payment processing providers: Required transaction information is shared with approved banks and e-wallet providers to process your deposits and withdrawals. These parties are bound by strict PCI-DSS security standards.
• Game software providers: Minimum account information required to enable access to games provided by duly licensed third-party providers.
• KYC service providers: Identity verification documents are shared with certified KYC verification platforms for identity verification purposes as required by law.
• Legal authority: popi99 will disclose personal data when required by court order, law enforcement agency request, or applicable regulatory compliance requirements.
• Professional auditors and advisors: Accountants, lawyers, and auditors appointed by popi99 may need to access certain data in the course of performing their professional duties. They are bound by strict confidentiality obligations.

Popi99 continuously invests in the latest security infrastructure to ensure your personal data and financial information are protected to the highest achievable standard. Our security approach is layered and comprehensive — not merely meeting minimum standards, but exceeding industry expectations.

• 256-bit SSL encryption: All data transmitted between your device and popi99 servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions.
• Data-at-rest encryption: Sensitive data stored in our databases — including financial information and KYC documents — is encrypted using the AES-256 algorithm prior to storage.
• 24/7 monitoring: Our cybersecurity team continuously monitors systems using real-time threat detection tools to identify and respond to any suspicious activity within the shortest possible time.
• Strict access controls: Access to member personal data within our internal systems is strictly controlled using the principle of least privilege — only staff who genuinely require access to perform their duties are authorised.
• Two-factor authentication (2FA): popi99 supports and encourages the use of 2FA for all member accounts to add an extra layer of protection against unauthorised access.
• Periodic penetration testing: We conduct regular security testing and vulnerability assessments by independent third-party security experts to ensure our systems remain robust at all times.

Popi99 uses cookies and similar tracking technologies to enhance platform functionality, understand usage patterns, and personalise your experience. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies: Required for core platform operations such as login session management and security. These cookies cannot be disabled as they are critical to platform functionality.
• Preference cookies: Saving your personal settings such as language preference, display theme, and game preferences so you do not need to reconfigure them on every visit.
• Analytics cookies: Helping us understand how members use the platform — which pages are visited most frequently, average session duration, and where users encounter difficulties. This information is used in aggregate form without identifying individuals.
• Security cookies: Used to detect suspicious activity, prevent fraud, and ensure your session remains secure at all times.

You can manage and control cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the popi99 platform and your overall user experience.

As a popi99 member and as an individual protected under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by us:

Popi99 retains your personal data for as long as necessary to fulfil the purpose for which it was collected and to comply with relevant legal obligations. The following are our general data retention guidelines:

• Active account data: Retained for the duration your account remains active and for a reasonable period following account closure for the purpose of resolving any disputes that may arise.
• Financial transaction records: Retained for a minimum of seven (7) years in compliance with Malaysia's accounting and anti-money laundering (AML) regulatory requirements.
• KYC documents: Retained for the period specified by the relevant regulatory authority, typically no less than five (5) years following account closure.
• Support communication logs: Retained for three (3) years to allow review of interaction history where required for dispute resolution.
• Analytics data: Aggregated and anonymised usage data is retained for a longer period for trend analysis and platform improvement purposes.

Once the specified retention period expires, popi99 will securely delete or anonymise your data in accordance with approved data disposal procedures. Anonymised data can no longer be linked to your personal identity.

Popi99 is an entertainment platform that is strictly for adults aged 18 and above. We do not knowingly target, accept registrations from, or collect personal data of individuals under the age of 18.

If we discover or are informed that we have collected personal data of an individual under the age of 18, we will take immediate action to:

• Closing the account in question immediately.
• Deleting all personal data associated with the account as promptly as possible.
• Returning any associated funds to their original source where identifiable.

If you believe that a minor has registered or is using the popi99 platform, please contact our customer support team immediately so that appropriate action can be taken.

Popi99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, legal requirements, or developments in the cybersecurity industry. We are committed to notifying you of any significant changes.

When material amendments are made:

• A clear notice will be displayed on the popi99.vip homepage at least seven (7) days before the effective date of any amendment.
• Members who have agreed to receive communications from us will be notified via email or in-platform notifications.
• The "Updated" date at the top of this document will be revised to reflect the latest version.

Continued use of the popi99 platform after the effective date of any amendment constitutes your acceptance of the updated terms. If you do not agree with the changes, you are entitled to stop using the platform and request closure of your account.

If you have any questions, concerns, or wish to exercise your privacy rights in relation to this Privacy Policy, the popi99 data protection team is ready to assist you. We take every privacy-related enquiry seriously and will respond to you within the stipulated timeframe.

You can reach us via:

• Live Chat: The fastest way for immediate enquiries — our team operates 24 hours a day, 7 days a week within the popi99 platform.
• Official email: [email protected] — for written enquiries requiring a more detailed response or formal documentation.