Privacy Policy – gw99apk

This Privacy Policy applies to all personal data collected and processed by gw99apk in connection with the operation of the online gaming platform accessible at https://gw99apk.co ("the Platform"). It covers data collected from Members resident in Malaysia and from all other jurisdictions from which the Platform is lawfully accessed.

gw99apk is committed to processing personal data lawfully, fairly, and transparently, in accordance with applicable data protection legislation and the requirements imposed by the gaming authority under which gw99apk holds its licence. This Policy should be read alongside the gw99apk Terms & Conditions.

This Policy does not apply to third-party websites, services, or platforms that may be referenced on gw99apk. Third-party data practices are governed by their own respective privacy policies.

For the purposes of applicable data protection law, gw99apk acts as the data controller in respect of the personal data of its Members. As data controller, gw99apk determines the purposes and means by which personal data is processed.

Contact details for data-related queries are set out in Section 16 of this Policy.

gw99apk collects the following categories of personal data from Members:

gw99apk does not collect special categories of sensitive personal data (such as racial or ethnic origin, health data, or biometric data) except where KYC verification processes incidentally include a photograph of a document containing such information. Such data is not stored beyond what is necessary for KYC purposes.

gw99apk collects personal data through the following mechanisms:

• Direct collection — data you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting support, or updating your account settings.
• Automated collection — technical and usage data collected automatically when you access the Platform, via server logs, session tracking, and cookie technologies (see Section 9).
• Third-party collection — identity and payment verification data provided by KYC service providers and payment processing partners acting as data processors on gw99apk's behalf.
• Fraud and compliance monitoring — data received from fraud detection services and financial crime compliance databases as part of our regulatory obligations.

gw99apk processes personal data on the following legal bases:

• Contractual necessity — processing required to perform the Member agreement, including account creation, transaction processing, and game access.
• Legal obligation — processing required to comply with anti-money laundering (AML) obligations, KYC requirements, and responsible gaming obligations imposed by our gaming licence.
• Legitimate interests — processing for fraud prevention, platform security, service improvement, and abuse detection, where such interests are not overridden by the Member's rights.
• Consent — where gw99apk processes data for marketing communications, consent is obtained separately and may be withdrawn at any time via account settings or by contacting support.

gw99apk uses the personal data we collect for the following purposes:

• Creating and managing your gw99apk Account
• Processing deposits and withdrawals in MYR via Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, HLB, and other supported methods
• Verifying your identity and age (you must be 21 or older) through the KYC process
• Delivering the Platform's gaming services — slots, live casino, sportsbook, Fisher Game
• Administering bonuses, promotions, and the VIP programme
• Communicating with you regarding your Account, transactions, and service updates
• Providing customer support via live chat and email
• Detecting and preventing fraud, money laundering, and Terms violations
• Complying with regulatory and legal obligations under our gaming licence
• Administering responsible gaming tools and monitoring for indicators of problem gambling
• Analysing usage patterns to improve Platform performance and user experience
• Sending marketing communications where you have provided consent

gw99apk retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following retention principles:

• Active account data — retained for the duration of the Member relationship.
• Closed account data — retained for a minimum of five (5) years following account closure, as required by our AML obligations and gaming licence conditions.
• KYC documents — retained for a minimum of five (5) years from the date of verification, or longer if required by applicable law or regulatory instruction.
• Transaction records — retained for a minimum of five (5) years from the date of the transaction.
• Support communications — retained for three (3) years from the date of the communication.
• Marketing consent records — retained until consent is withdrawn, plus three (3) years as evidence of prior consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with gw99apk's internal data disposal procedures.

gw99apk does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data may be disclosed in the following limited circumstances:

• Service providers and data processors — KYC verification providers, payment processing partners, fraud detection services, cloud infrastructure providers, and customer support platforms, all operating under contractual data processing agreements with gw99apk.
• Regulatory and licensing authorities — where required by the gaming authority under which gw99apk holds its licence, or by applicable law, including law enforcement agencies where required by valid legal process.
• Anti-money laundering compliance — financial intelligence units and compliance databases as required to meet AML obligations.
• Corporate transactions — in the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

All third-party service providers are contractually bound to process gw99apk Member data only for the specific purposes instructed, to maintain appropriate security standards, and not to use or disclose such data for their own purposes.

gw99apk uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies — session management, authentication tokens, and security features. These cannot be disabled without impairing core Platform functionality.
• Functional cookies — remembering your preferences such as language, odds format, and display settings.
• Analytics cookies — collecting aggregated, anonymised data about Platform usage to improve performance and user experience.
• Fraud prevention cookies — device fingerprinting and behavioural analysis to detect and prevent fraudulent activity.

gw99apk does not deploy advertising or retargeting cookies from third-party advertising networks. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect Platform functionality.

As gw99apk operates under an internationally recognised gaming authority licence, some personal data may be processed by our service providers in jurisdictions outside Malaysia. Where such transfers occur, gw99apk ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent data transfer mechanisms — to ensure that your personal data receives a level of protection equivalent to that required by applicable data protection law.

gw99apk implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the gw99apk Platform
• Encryption of sensitive data at rest, including KYC documents and financial records
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security assessments and penetration testing of the Platform infrastructure
• Multi-factor authentication for administrative access to systems holding personal data
• Incident response procedures for detecting, reporting, and mitigating personal data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, gw99apk will notify affected Members without undue delay, in accordance with applicable legal requirements.

Subject to applicable data protection law and to certain limitations arising from our legal and regulatory obligations, you have the following rights in respect of your personal data held by gw99apk:

• Right of access — to request a copy of the personal data gw99apk holds about you.
• Right to rectification — to request correction of inaccurate or incomplete personal data.
• Right to erasure — to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction — to request that gw99apk restricts processing of your data in certain circumstances, for example while the accuracy of the data is disputed.
• Right to data portability — to receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contractual necessity.
• Right to object — to object to processing based on legitimate interests, including profiling for fraud prevention, subject to gw99apk demonstrating compelling legitimate grounds.
• Right to withdraw consent — where processing is based on consent (e.g. marketing communications), to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, submit a written request to gw99apk via the contact details in Section 16. gw99apk will respond within 30 days of receiving a valid request. We may request identity verification before processing a data subject rights request.

The gw99apk Platform is strictly for individuals aged 21 and above. gw99apk does not knowingly collect personal data from persons under 21 years of age. If gw99apk becomes aware that personal data has been collected from a person under 21, that Account will be closed immediately, the data will be deleted as soon as permitted by legal retention obligations, and any balance will be forfeited in accordance with the gw99apk Terms & Conditions.

Age is verified as part of the KYC process. If you believe a person under 21 has registered an account on gw99apk, please notify us immediately using the contact details in Section 16.

The gw99apk Platform does not contain links to third-party websites for commercial or advertising purposes. Where payment processing redirects to a third-party payment provider's interface, that provider's own privacy policy governs the handling of data within their environment. gw99apk is not responsible for the privacy practices of third-party payment processors beyond the contractual safeguards described in Section 8.

gw99apk reserves the right to amend this Privacy Policy at any time. The version published on this page constitutes the operative policy. Where amendments are material, gw99apk will notify Members via their registered contact details prior to the amended policy taking effect. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised policy.

The date of the most recent revision is stated at the top of this page.

For questions, data subject rights requests, or complaints relating to gw99apk's data processing practices, please use the following channels:

• 24/7 Live Chat: Available inside the gw99apk Platform after login
• Email: [email protected]

gw99apk will acknowledge data-related requests within 5 business days and provide a substantive response within 30 days. If you are dissatisfied with gw99apk's response to a data protection complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.