OK99 Privacy Policy – Our Commitment to Protecting Malaysian Players' Data

1Information We Collect

Ok99 collects your personal information through several different channels as you interact with our platform. Below are the categories of data ok99 collects and the reasons for collecting them:

Account Registration Information: When you register an ok99 account, we collect your full name as per your Malaysian identity card, an active Malaysian mobile number, email address, date of birth (for age verification), and an encrypted password. All of this information is required to create and manage your ok99 account securely.

Identity Verification (KYC) Information: To meet compliance requirements and prevent fraud, ok99 may request a copy of your valid Malaysian MyKad or passport, a selfie with your identification document, and proof of residential address such as a utility bill or bank statement. These documents are stored securely and accessed only by authorised ok99 staff.

Financial Information: To process deposits and withdrawals, ok99 records your e-wallet account information (Touch 'n Go, GrabPay, Boost, ShopeePay) or Malaysian bank account details, transaction history, deposit and withdrawal amounts, and your preferred payment method. Full account numbers are not stored in ok99's system — only partially masked numbers are kept for reference purposes.

Gaming Activity Data: Ok99 records your gaming history, bets placed, wins and losses, game preferences, and general platform usage patterns. This data is used to improve your gaming experience, detect unusual activity that may indicate fraud, and meet licensing compliance requirements.

Technical Data: Each time you access ok99, our system automatically records your IP address, device type and operating system, browser type and version, pages visited within the ok99 platform, session time and duration, and cookie data. This technical data is used for security management and platform improvement.

2How We Use Your Data

Ok99 uses your personal data only for clear and legitimate purposes. We do not use your data for any other purpose without informing you in advance. The following are the primary purposes for which your data is used:

• Account Management: Creating and maintaining your ok99 account, processing logins securely, and managing your account settings
• Payment Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as handling withdrawal requests to your Malaysian bank account or e-wallet.
• Platform Security: Detecting and preventing fraud, money laundering, and suspicious activity that could compromise the security of your account or the ok99 platform as a whole
• Legal Compliance: To meet KYC, AML (Anti-Money Laundering), and licensing reporting requirements mandated under Malaysian law.
• Customer Support: Providing assistance when you contact the ok99 support team, resolving complaints, and handling account requests
• Promotional Communications: Sending information about ok99 promotions, bonuses, and platform updates — only if you have opted in to receive such communications
• Platform Improvement: Analysing aggregated (not individual) usage patterns to improve the design and functionality of the ok99 platform

3Data Sharing with Third Parties

Ok99 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where ok99 needs to share your data with certain parties for legitimate operational reasons:

Payment Service Providers: To process your deposits and withdrawals, ok99 needs to share the necessary transaction details with e-wallet providers such as Touch 'n Go, GrabPay, Boost, and ShopeePay, as well as Malaysian banks that support DuitNow and FPX. These providers only receive the data required to process the transaction and are bound by their own privacy policies.

Game Service Providers: ok99 works with third-party game providers to deliver a wide games library. These providers may receive the technical data necessary to run the games, but not your full personal information.

Regulatory Body: ok99 is legally required to disclose certain information to regulatory bodies, law enforcement authorities, or courts when lawfully requested. ok99 will not disclose information beyond what is required by law.

Technical Service Providers: Ok99 works with trusted third-party technical service providers for server infrastructure, cybersecurity, and platform analytics. All such providers are bound by strict data processing agreements and are prohibited from using your data for their own purposes.

4Data Security & Protection

Ok99 invests seriously in security infrastructure to protect your personal data. The security measures we have in place are industry-standard and updated on a regular basis:

• 256-Bit SSL Encryption: All communication between your browser and ok99's servers is encrypted using Transport Layer Security (TLS) 1.3 with AES-256 encryption — the same standard used by Malaysian banking institutions.
• Stored Data Encryption: Sensitive data such as account numbers and verification documents are stored in encrypted form within the ok99 database — even internal staff cannot view this data in its original format
• Strict Access Controls: Only specifically authorised ok99 staff may access players' personal data, and all access is logged for internal audit purposes
• 24/7 Security Monitoring: ok99's systems are continuously monitored for cyber threats, intrusion attempts, and suspicious activity.
• Regular Security Testing: Ok99 conducts regular penetration testing and security audits carried out by accredited independent cybersecurity firms.
• Two-Factor Authentication: ok99 supports and encourages the use of two-factor authentication for an added layer of protection on your account

While ok99 takes all reasonable steps to protect your data, no system can guarantee absolute security. In the event of a data breach involving your personal information, ok99 will notify you within the timeframe required under applicable law.

5Cookies & Tracking Technologies

Ok99 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit ok99. The following are the types of cookies ok99 uses:

• Essential Cookies: Required for core ok99 platform functions such as login sessions and security. These cookies cannot be disabled as they are necessary for the platform to operate properly.
• Preference Cookies: Saves your preferences — such as language, display settings, and favourite games on ok99 — so you don't have to reconfigure them every time you log in.
• Analytics Cookies: Helping ok99 understand how players use the platform — most visited pages, time spent, and navigation patterns in aggregate. This data does not identify you as an individual
• Security Cookies: Used to detect suspicious login attempts and protect your account from unauthorised access

Ok99 does not use third-party cookies for advertising or marketing purposes unrelated to the ok99 platform. You can manage and delete cookies through your browser settings, though please note that disabling essential cookies may affect the functionality of the ok99 platform.

6Your Personal Data Rights

As an ok99 player and as an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights over the personal data ok99 holds about you:

• Right of Access: You have the right to obtain a copy of the personal data ok99 holds about you. Data access requests can be submitted through the ok99 support team and will be processed within 14 business days.
• Right to Correction: If any personal data that ok99 holds about you is inaccurate or out of date, you have the right to request a correction. You can update much of your basic information directly in your ok99 account settings.
• Right to Erasure: In certain circumstances, you have the right to request that ok99 delete your personal data. This right is subject to ok99's obligation to retain certain records for legal compliance and fraud prevention purposes
• Right to Withdraw Consent: You may withdraw your consent for ok99 to use your data for specific purposes (primarily marketing) at any time. This withdrawal does not affect the validity of any processing carried out prior to it
• Right to Restrict Processing: In certain circumstances, you have the right to request that ok99 restrict how your data is processed while any dispute is being resolved
• Right to Lodge a Complaint: If you believe that ok99 has processed your personal data in a manner that violates Malaysia's PDPA, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of the rights above, contact ok99's privacy officer by email at privacy@ok99-khelo.com or via live chat within the platform. ok99 is committed to responding to all privacy requests within 14 business days.

7Data Storage & Retention

Ok99 retains your personal data for as long as your ok99 account remains active, plus any additional period required for legal compliance and post-closure operational purposes:

• Active Account Data: Retained for as long as your account is active with ok99. You may request deletion at any time by closing your account, subject to the conditions below
• Financial Transaction Data: Retained for a minimum of 7 years following the transaction, in line with Malaysian financial and tax legal requirements
• KYC Records: Identity verification documents are retained for a minimum of 5 years after account closure, in line with Malaysia's AML requirements.
• Security Logs: Technical and security activity logs are retained for 2 years for investigation and audit purposes as required.
• Marketing Data: Retained until you withdraw consent for marketing communications or close your ok99 account

Once the retention period ends, ok99 will securely delete or anonymise your data using methods that ensure it cannot be recovered or linked back to you.

8Cross-Border Data Transfers

In the course of operating the ok99 platform, some of your personal data may be processed or stored outside Malaysia — for example, by cloud server infrastructure providers or international gaming service providers. When cross-border data transfers occur, ok99 ensures that protections equivalent to Malaysian standards are upheld through:

• Binding data processing agreements with all recipients of data outside Malaysia
• Selecting partners that operate in jurisdictions with recognised data protection laws
• Use of approved data transfer mechanisms such as Standard Contractual Clauses

Ok99 only works with service providers that have undergone rigorous security assessments and have signed data protection agreements that comply with Malaysia's PDPA requirements. Your data will not be transferred to jurisdictions that do not provide an adequate level of protection.

9Privacy Policy Amendments

Ok99 reserves the right to update or amend this privacy policy from time to time to reflect changes in our data practices, evolving legal requirements, or improvements to how we operate. When significant amendments are made, ok99 will:

• Updating the "Last updated" date at the top of this document
• Displaying a clear notice on the ok99 platform during your next login session after the amendment takes effect
• Sending a notification email to the address registered on your ok99 account for significant amendments

Your continued use of the ok99 platform after any amendments take effect will be considered acceptance of the updated privacy policy. If you do not agree with the changes, you have the right to close your ok99 account.

This current version takes effect from 15 January 2026 and supersedes all previous versions of the ok99 privacy policy.

10Contact the OK99 Privacy Officer

If you have any questions, concerns, or requests regarding how ok99 handles your personal data, you can reach ok99's privacy officer through the following channels:

• Privacy Email: support@ok99-khelo.com — use the subject line "Data Privacy Request" for faster processing.
• Live Chat: Available 24/7 directly within the ok99 platform — please indicate that your enquiry relates to data privacy so you can be directed to the appropriate staff member.

Ok99 is committed to responding to all privacy enquiries within 14 business days. For more complex requests such as data deletion or full data access requests, processing may take up to 30 business days depending on the complexity of the request.