Privacy Policy 4999 — Our Commitment to Protecting Your Data

1. Introduction

4999 (hereinafter referred to as "we", "our platform" or "4999") fully respects the privacy of every individual who uses our services. This Privacy Policy is provided to give a clear and transparent overview of how we handle your personal information — from the collection process through to storage, use, and deletion of data.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the processing of personal data in commercial transactions in Malaysia. We also adhere to international best practices in data privacy management to ensure the highest level of protection for all our members.

This document was originally drafted in Bahasa Malaysia for the convenience of our members. Should any ambiguity or discrepancy arise in translation, the English version shall serve as the official reference. We encourage you to read this document carefully and contact our support team should you have any queries.

2. Information We Collect

To provide a safe, personalized, and high-quality service, 4999 collects several categories of information from our users. The table below provides a comprehensive overview of the types of data we collect and their purposes:

We only collect information that is strictly necessary for the stated purpose. Our data minimisation principle ensures no excess data is collected without solid justification.

3. Data Collection Methods

4999 collects personal information through several transparent and legitimate channels. The following are the primary data collection methods we practise:

• Account Registration: When you complete the 4999 registration form, you voluntarily provide basic information such as your name, email, phone number, and date of birth.
• KYC Process: During identity verification, you upload official documents such as your MyKad or passport. These documents are collected securely and stored in accordance with strict security protocols.
• Financial Transactions: Every time you make a deposit or withdrawal, our system records the transaction details for accountability and AML compliance purposes.
• Platform Usage: Usage data is collected automatically via server logs, including pages visited, games played, and session duration.
• Support Communications: When you contact our support team via live chat or email, the content of that communication is stored for reference and service improvement purposes.
• Cookies & Similar Technologies: Our website and app use cookies to enhance the user experience and collect analytics data. Further details are provided in Section 7.

We have never purchased or obtained your personal data from third-party sources without your knowledge and consent.

4. How We Use Your Information

Every piece of data we collect has a clear and legitimate purpose. Your personal information is used for the following:

• Account Management: Creating, verifying, and managing your account on the 4999 platform, including password resets and two-factor authentication (2FA).
• Transaction Processing: Facilitating deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and USDT, and securely processing withdrawals to your bank account quickly.
• Legal Compliance: Meeting KYC and AML requirements mandated by Malaysian law, including the retention of transaction records for the period specified by the relevant authorities.
• Platform Security: Detecting and preventing fraudulent activity, hacking, money laundering, and any platform abuse that could harm other members.
• Service Communications: Sending important notifications relating to your account, such as transaction confirmations, security alerts, terms changes, and promotional information (with your consent).
• Product Improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve platform design, enhance features, and deliver a better user experience.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support to members who need it.

5. Data Sharing & Disclosure

4999 respects the confidentiality of your personal data. We do not share your information with external parties except in the following limited and lawful circumstances:

• Payment Service Providers: Minimal transaction information is shared with registered payment processors such as DuitNow, FPX, and e-wallet providers solely for the purpose of processing your transactions.
• Game Software Providers: Game content providers such as Evolution Gaming, Pragmatic Play, and similar companies may receive session data necessary to deliver the gaming experience. They are bound by strict confidentiality agreements.
• Legal Requirements: We will disclose the required information to Malaysian authorities (such as Bank Negara Malaysia or the police) when mandated by a valid court order, warrant, or statutory provision.
• 4999 Rights Protection: In cases of legal claims or fraud investigations, relevant information may be shared with legal parties representing 4999.
• With Your Consent: In other situations where you have given explicit consent for specific data sharing.

All third parties that receive data from 4999 are required to sign a strict Data Processing Agreement (DPA) and comply with security standards equal to or higher than those we practice.

6. Data Storage & Security Measures

The security of your data is the absolute top priority of 4999. We continuously invest in the latest security infrastructure to ensure your information is protected at all times.

The technical and organisational security measures we practise include:

• Data in transit encrypted using TLS 1.3 — the most current and secure encryption protocol available
• Stored data encrypted using AES-256, the industry standard for high-level data protection
• Role-based access control (RBAC) system ensuring only authorized personnel can access specific data
• 24/7 security monitoring with intrusion detection and prevention systems (IDS/IPS)
• Automatic data backup every four hours to a geographically separate secondary data center
• Strong password policy for all internal staff accounts, with two-factor authentication requirements
• Quarterly cybersecurity awareness training for all 4999 staff

Regarding retention periods, we store active personal data for the duration your account remains active. Following account closure, certain records are retained for seven years for legal and tax compliance purposes in accordance with Malaysia's requirements. Data that is no longer needed will be securely deleted using NIST-compliant data erasure methods.

7. Cookies & Tracking Technologies

The 4999 website and mobile app use cookies and similar tracking technologies to enhance your experience and help us understand how the platform is used. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session tracking, and security. These cookies cannot be disabled as the platform will not function without them.
• Performance Cookies: Collecting information about how visitors use our website — the most frequently visited pages, time spent, and errors encountered. All data is collected anonymously.
• Functional Cookies: Saving your preferences such as language, region, and display settings to deliver a more personalised experience.
• Analytics Cookies: We use trusted third-party analytics tools to understand traffic trends and usage patterns for product improvement purposes.

You can manage your cookie settings through your web browser at any time. Disabling certain cookies may affect some platform functionality. For guidance on managing cookies in popular browsers, please refer to your browser's help documentation.

8. Your Rights as a User

As a 4999 member and as an individual whose personal data we process, you have the following rights guaranteed under Malaysia's PDPA 2010:

• Right of Access: You have the right to request a copy of all personal data we hold about you. This request will be processed within 21 business days.
• Right to Rectification: You may request that we correct any inaccurate or incomplete information. Corrections will be applied within seven business days.
• Right to Erasure: You may request deletion of your personal data, subject to mandatory legal retention requirements. Closed accounts that have fulfilled the mandatory retention period will be permanently deleted.
• Right to Object to Processing: You may object to the use of your data for direct marketing or analytics purposes at any time without needing to provide a reason.
• Right to Withdraw Consent: You may withdraw any consent previously given for specific data processing, although this may affect certain services available to you.
• Right to Complain: If you are dissatisfied with how we handle your data, you have the right to file a complaint with the Malaysia Personal Data Protection Department.

To exercise any of the above rights, please contact our Data Protection Officer (DPO) via email at [email protected], clearly stating your request. We will acknowledge receipt of your request within 48 hours.

9. Children's Data Protection

4999 is a platform intended exclusively for individuals aged 18 and above. We take child protection issues very seriously and have a clear policy on this matter.

We do not knowingly collect, store, or process any personal data from individuals under the age of 18. All our registration processes include comprehensive age verification, and KYC confirmation ensures that only adults can fully access our services.

If we find that we have inadvertently collected data from someone under the age of 18, we will:

• Suspending the account in question immediately
• Deleting all related data without delay
• Refunding any deposits that have been made
• Notifying parents or guardians where contactable

If you believe someone under the age of 18 has registered or used our platform, please report it to us immediately at [email protected]. We will investigate the report within 24 hours.

10. Third-Party Links & Services

The 4999 platform may contain links to or be integrated with certain third-party services to enhance your experience. It is important to understand the limits of our responsibility in this context.

While we are careful in selecting third-party partners, the 4999 Privacy Policy applies only to the platform and services operated directly by us. We are not responsible for the privacy practices or content of third-party websites or applications, including:

• Game software providers such as Evolution Gaming, Pragmatic Play, and others
• Payment processors and payment gateways we use
• Social media platforms you may visit via share buttons
• Websites linked in our promotional materials or communications

We recommend reading the privacy policy of every third party you interact with, as their policies may differ from ours. 4999 only selects partners with a strong reputation and compliance with internationally recognised data protection standards.

11. Privacy Policy Amendments

4999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or improvements in how we handle user data. The "Updated" date shown at the top of this document will always indicate the latest version.

For material amendments — those that significantly alter your fundamental rights or how we use your data — we are committed to:

• Sending email notifications to all registered members at least 14 days before changes take effect
• Displaying clear notices on our platform's home page
• Providing a summary of key changes in plain, easy-to-understand language

Continued use of the 4999 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you disagree with the changes, you have the right to close your account and withdraw your remaining balance before the effective date.

We encourage you to review this page periodically. A version history of this document is available upon request — contact our support team to obtain a copy of any previous version.

12. Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, do not hesitate to contact us. Our team is ready to assist you at any time.

• Email (Privacy): [email protected] — use the subject line "Data Privacy Inquiry" for a faster response
• Live Chat: Available 24 hours a day, 7 days a week directly within the 4999 platform
• Telegram: Contact our dedicated agent via the official 4999 Telegram account

Our response time for privacy-related enquiries is within 48 business hours for email and under 5 minutes for live chat. For requests requiring in-depth investigation, such as data access or data deletion requests, the full process will be completed within 21 to 30 business days.

You may also refer your complaint to the Department of Personal Data Protection Malaysia (JPDP) if you are unsatisfied with the resolution we provide. JPDP's contact information is available on their official website.