Privacy Policy mstar99 — Personal Data Protection for Malaysian Members

1Introduction

Mstar99 is an online casino platform operating in Malaysia. We take the privacy of our members very seriously. This Privacy Policy outlines our commitment to protecting your personal data and how we manage that information in accordance with relevant Malaysian law, in particular the Personal Data Protection Act 2010 (PDPA).

As a responsible data controller, mstar99 ensures that all personal data we hold is processed lawfully, fairly, and transparently. We only collect data that is genuinely necessary to provide our services and will never abuse the trust you place in us.

This Privacy Policy also outlines your rights as a mstar99 member in relation to your personal data, including the right to access, correct, request deletion, and object to the processing of your data in certain circumstances.

2Personal Data We Collect

Mstar99 collects various types of personal data depending on how you interact with our platform. The data we collect can be grouped into the following categories:

A. Data You Provide Directly

B. Automatically Collected Data

• Your IP address and device network information.
• The type and version of browser used.
• The device's operating system (iOS, Android, Windows).
• Pages visited, time of visit, and navigation patterns within the platform.
• Cookie data and session identifiers to enhance the user experience.
• General geolocation information (state/city in Malaysia) for regional verification.

3How We Use Your Personal Data

Mstar99 uses collected personal data solely for legitimate and reasonable purposes. We do not use your data beyond what is stated in this Privacy Policy without obtaining your prior consent.

Mstar99 uses your personal data for the following purposes:

• Account Management: To securely create, maintain, and manage your member account on the mstar99 platform.
• Transaction Processing: To process deposits and withdrawals in Malaysian Ringgit (MYR) quickly and securely via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, and CIMB Clicks.
• Identity Verification (KYC): To fulfil legal obligations relating to identity verification, age verification, and anti-money laundering (AML) compliance.
• Service Provision: To provide access to all mstar99 games including slots, live casino, baccarat, blackjack, roulette, Sports Betting, and lottery.
• Service Communications: To send important notifications regarding your account, transactions, changes to terms, and security matters.
• Responsible Gaming: To monitor gameplay patterns, identify signs of problem gambling, and enforce self-exclusion limits set by members.
• Marketing (with Consent): To send promotional information, bonus offers, and the latest mstar99 updates to members who have given their consent.
• Platform Improvements: To analyze usage patterns in order to improve the overall user experience and performance of the mstar99 platform.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, hacking, or unauthorised access.

4Legal Basis for Data Processing

In accordance with Malaysia's PDPA 2010, mstar99 processes your personal data on the following valid legal bases:

• Consent: For marketing activities and promotional communications, mstar99 obtains your explicit consent at the point of registration. You may withdraw this consent at any time.
• Contract Performance: Processing required to fulfil the service agreement between you and mstar99, including transaction processing and account management.
• Legal Obligations: Processing required to comply with Malaysian law, including AML/KYC obligations and directives from relevant authorities.
• Legitimate Interest: Processing for the purposes of platform security, fraud prevention, and service improvement, where mstar99's legitimate interests do not override your privacy rights.

5Sharing of Personal Data

Mstar99 never sells, rents, or distributes members' personal data to any third party for external marketing or commercial purposes. Your data is only shared in the following limited circumstances:

• Payment Processors: Transaction information is shared with licensed Malaysian payment processors (Touch 'n Go, GrabPay, DuitNow, FPX) solely for the purpose of completing your transactions.
• Technology Providers: Technical service providers that support the operation of the mstar99 platform, bound by strict confidentiality agreements and prohibited from using the data for any other purpose.
• Legal Authorities: Where required by a Malaysian court, law enforcement agency, or regulatory body with valid jurisdiction.
• Game Providers: The minimum technical information required to deliver games from providers such as Pragmatic Play, NetEnt, and Habanero — this data is limited to session identifiers only.

6Data Security

Mstar99 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and mstar99's servers is encrypted using the same encryption standard employed by banking institutions in Malaysia.
• Encrypted Passwords: Your account password is stored in hashed form using a strong cryptographic algorithm — mstar99 staff cannot view your password.
• Two-Factor Authentication (2FA): Additional security options are available for members who wish to add an extra layer of protection to their account.
• 24/7 Monitoring: A real-time threat detection system that identifies and blocks suspicious activity as it occurs.
• Internal Access Controls: Access to member data by mstar99 staff is strictly limited on a need-to-know basis.
• Regular Security Audits: mstar99 conducts regular security assessments and penetration testing carried out by independent security experts.

7Data Retention Period

Mstar99 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable Malaysian legal requirements.

Once the retention period expires, your personal data will be securely deleted or anonymised in accordance with mstar99's internal procedures.

8Your Personal Data Rights

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by mstar99:

9Cookies & Tracking Technologies

Mstar99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the mstar99 platform.

Types of cookies we use:

• Essential Cookies: Required for core platform operations — login authentication, session security, and essential functionality. Cannot be disabled.
• Functional Cookies: Saves your preferences such as language, display settings, and game preferences to streamline your experience on the platform.
• Analytics Cookies: Helps us understand how the platform is used for continuous improvement. Data is collected in aggregate and without personal identifiers.
• Marketing Cookies: Used to display relevant mstar99 promotional content — activated only with your consent.

You can manage your cookie settings through your browser or via the cookie control panel available in your mstar99 account settings. Please note that disabling essential cookies may affect platform functionality.

10Children's Data & Age Restrictions

The mstar99 platform is intended for users aged 18 years and above only. mstar99 does not knowingly collect or process the personal data of individuals under the age of 18.

If you believe that a minor has registered on the mstar99 platform, or that we have inadvertently collected the personal data of a child, please contact us immediately at privacy@mstar99.ws. mstar99 will take immediate action to delete the relevant information and close the account.

11Cross-Border Data Transfers

Some of mstar99's technology service providers may store or process data outside Malaysia. In such cases, mstar99 ensures that protection equivalent to Malaysia's PDPA is provided through:

• Data processing agreements compliant with international standards.
• Selection of vendors holding recognised data security certifications such as ISO 27001 or SOC 2 Type II.
• Contractually binding data protection clauses in all third-party service agreements.

Mstar99 does not transfer personal data to countries without adequate data protection without appropriate additional safeguards in place.

12Privacy Policy Amendments

Mstar99 reserves the right to amend this Privacy Policy from time to time to reflect changes in Malaysian law, industry practices, or our services. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying prominent change notices on the mstar99 platform homepage.
• Sending email notifications to registered members regarding significant changes.

Continued use of the mstar99 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to request account closure and deletion of your data.

13Contact Our Data Protection Officer

For any enquiries, concerns, or requests regarding this Privacy Policy or the processing of your personal data by mstar99, you may contact our Data Protection Officer (DPO):

• DPO Email: privacy@mstar99.ws
• General Support Email: support@mstar99.ws
• Live Chat: Available 24/7 on the mstar99 platform
• Response Time: We are committed to responding to all privacy enquiries within 21 business days.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia as provided under PDPA 2010.

Document version: 2.0 | Effective date: 1 January 2026 | Last updated by: mstar99 Data Protection Officer