GTR99 Privacy Policy – Personal Data Protection for Malaysian Users

1. Introduction

GTR99 (gtr99.one) respects the privacy of every user and is committed to protecting the personal information you share with us. This Privacy Policy explains in detail how we collect, use, store and disclose your personal data when you use the GTR99 platform.

This document applies to all users of the GTR99 platform, including website visitors, registered members and any individual who interacts with our services via the website gtr99.one or the gtr99 mobile app.

By using the GTR99 platform, you acknowledge that you have read and understood this Privacy Policy and agree to the data processing practices described herein. If you do not agree, please discontinue use of our platform.

2. Information We Collect

GTR99 collects your personal data through various means when you use our platform. The following are the categories of information we collect and their purposes:

We only collect information that is strictly necessary to provide you with gtr99 services. We do not collect excessive or irrelevant data beyond what is required to operate our platform.

3. How We Use Your Data

The personal data we collect is used exclusively for the following legitimate and stated purposes. GTR99 will not use your data for any other purpose without obtaining your additional consent:

• Account Management – Creates, verifies, and maintains your member account, including the required identity verification (KYC) process.
• Transaction Processing – Processes deposits, withdrawals, and any financial transactions you make on the gtr99 platform safely and efficiently.
• Service Provision – Enables you to access all games, promotions, and gtr99 platform features that you are eligible for.
• Customer Support – Handles enquiries, complaints, and assistance requests you submit to the gtr99 support team.
• Security & Fraud Prevention – Identifies and prevents fraudulent activity, money laundering, and other security threats against our platform and members.
• Legal Compliance – Fulfils the legal and regulatory obligations imposed on gtr99 as an online platform operator in Malaysia.
• Service Improvement – Analyses aggregated and anonymised usage patterns to improve gtr99's platform quality, user experience, and game offerings.
• Marketing Communications – Sends you information about gtr99's latest promotions, bonuses, and offers, subject to the communication preferences set in your account.

4. Disclosure to Third Parties

Gtr99 does not sell or transfer your personal data to third parties for their own marketing purposes. However, in the course of operating our platform, there are certain situations where your data may need to be shared with the following parties:

• Payment Providers: Financial information that must be shared with integrated payment service providers such as FPX, DuitNow, and e-wallet processors for the purpose of processing your transactions.
• Game Software Providers: Game session data required by third-party game providers to enable you to play seamlessly on the GTR99 platform.
• Regulatory Authority: GTR99 will disclose the required information to authorities, regulatory bodies or law enforcement agencies where mandated by applicable Malaysian law.
• IT Service Providers: Companies that provide technical infrastructure, hosting, and cybersecurity services to gtr99, bound by strict confidentiality agreements.

All third parties that receive personal data from gtr99 are required to comply with data protection standards equal to or higher than those practiced by gtr99 itself.

5. Cookies & Tracking Technologies

GTR99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as secure login, session management and account security. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how members interact with the platform for improvement purposes. Data is collected anonymously.
• Functional Cookies: Stores your preferences such as language, display settings, and game preferences to deliver a more personalised experience.
• Analytics Cookies: Used to analyse aggregated usage patterns to help us make data-driven decisions for platform improvements.

You can manage or block cookies through your web browser settings. Please note that blocking essential cookies may affect certain functions of the GTR99 platform.

6. Data Security

GTR99 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction or accidental disclosure:

• Data Encryption in Transit – All communications between your device and gtr99's servers are protected with TLS 1.3 protocol and 256-bit SSL encryption.
• Data Encryption at Rest – Sensitive information such as MyKad numbers and financial details are stored in encrypted format in our database.
• Two-Factor Authentication – gtr99 supports and encourages the use of two-factor authentication (2FA) on all member accounts for an added layer of security.
• Continuous Monitoring – gtr99's security team monitors the platform 24/7 to proactively detect and respond to any security threats.
• Regular Security Audits – gtr99 conducts regular security audits and penetration testing by independent third parties to ensure our systems remain secure at all times.
• Staff Training – All gtr99 staff with access to personal data receive regular data protection training.

While gtr99 takes all reasonable steps to protect your data, no system can guarantee absolute security. You also play an important role in protecting your account by using a strong password and not sharing your login credentials.

7. Your Personal Data Rights

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by gtr99:

To exercise any of the above rights, please contact the gtr99 data protection team via email [email protected]. We will process your request within 21 working days.

8. Data Retention & Deletion

GTR99 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

• Active account data: Retained for the duration your account remains active and in use.
• Financial transaction data: Retained for a minimum of seven (7) years from the transaction date in accordance with Malaysia's tax and audit legal requirements.
• KYC and identity verification data: Retained for a minimum of five (5) years following account termination in accordance with anti-money laundering (AML) requirements.
• Support communication logs: Retained for three (3) years for service records and dispute resolution purposes.
• Cookie and analytics data: Session cookies expire when the browser is closed; persistent cookies are stored for no more than two (2) years.

Once the retention period ends, your personal data will be securely deleted or anonymised so it can no longer be linked back to your identity.

9. Changes to This Privacy Policy

GTR99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or new platform features. Any material changes will be communicated to you via:

• In-platform notifications on gtr99 or the mobile app when you log in.
• Refer to the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the gtr99 platform after any changes take effect constitutes your acceptance of the updated Privacy Policy.

10. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how gtr99 handles your personal data, please contact us through the following channels:

• Data Protection Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 on the gtr99 platform and app
• Response Time: Privacy enquiries are processed within 21 business days

We will make every effort to handle each request thoroughly and within a reasonable time. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Personal Data Protection Department.