Privacy Policy ADA99 — Our Commitment to Protecting Your Data

ADA99 — Malaysia's leading online casino and Sports Betting platform — understands that your trust in us depends not only on the quality of our games or the speed of our payouts, but also on how we handle the personal information you entrust to us.

This Privacy Policy applies to all personal information we collect through:

• The ADA99 website at ada99.click and all related subdomains
• Member registration and account management process
• Financial transactions including deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX
• Gaming activity including live baccarat, Texas Hold'em poker, badminton and football Sports Betting, online slots, and other games
• Your communications with the ada99 customer support team
• Interactions with marketing emails, notifications, and promotions we send

ADA99 collects your personal data in two main ways — information you provide directly when registering or using the platform, and information collected automatically as you browse or play on our platform.

Sensitive financial data such as full bank account numbers or credit card details is never stored directly on ADA99's servers. Financial transactions are processed through secure, PCI-DSS-compliant third-party payment gateways.

Every piece of data we collect has a clear and legitimate purpose. ADA99 never collect data "just because we can" without a genuine need. Here are the primary purposes for which we collect your personal data:

• Account Management: Creating, verifying, and managing your member account — including the KYC (Know Your Customer) process to confirm that you meet the minimum age requirement of 18 and any other applicable eligibility criteria.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, and other methods, and handling your withdrawal requests securely and accurately.
• Game Operation: Delivering a seamless gaming experience — from live baccarat and poker to Sports Betting on the Malaysia Super League, BWF badminton, and the EPL — including storing your game history for your own reference.
• Platform Security: Detecting and preventing fraud, money laundering, bonus abuse, collusion in poker, and any other unlawful activity that could compromise the integrity of the platform or harm other players.
• Legal Compliance: To fulfill ADA99's obligations under Malaysia's PDPA, KYC/AML (Anti-Money Laundering) requirements, and any other applicable legal compliance obligations.
• Platform Improvements: Analyzing usage patterns in aggregate (not at an individual level) to help us understand which features are popular, where players encounter issues, and how the platform can be improved.
• Service Communications: Sending important notifications about your account, transactions, changes to our terms, and security information you need to know.
• Marketing (With Consent): Sending promotional information, bonus offers, and platform updates — only if you have given explicit consent to receive marketing communications.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, ADA99 has a valid legal basis for every type of data processing we carry out. We do not process personal data without a sound legal foundation.

• Contract Performance: The majority of our data processing is necessary to fulfil the agreement between you and ADA99 — including managing your account, processing transactions, and providing the gaming services you have requested.
• Legal Obligation: Certain data processing is required by law — such as the KYC and AML requirements prescribed by Malaysian legislation governing the financial and gaming industries.
• Legitimate Interests: We apply the "legitimate interests" basis for activities such as fraud detection, platform security, and service improvement — where the legitimate interests of ADA99 and our members outweigh any impact on individual privacy.
• Consent: For marketing communications and optional cookie usage, we rely on your explicit consent. You may withdraw this consent at any time.

ADA99 never sell, rent, or transfer your personal data to third parties for their own marketing purposes under any circumstances. However, there are limited situations where we need to share your data with certain parties for legitimate operational purposes:

• Payment Service Providers: Payment gateways and eWallet providers (such as Touch 'n Go, GrabPay, and the FPX processing network) need to receive the necessary transaction details to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Game Providers: Third-party gaming platforms that provide Live Casino, slots, and Sports Betting services on ADA99 may receive the session data required to operate the games. They do not receive your full personal identity information.
• Technical Infrastructure Provider: Hosting, cybersecurity, and technical infrastructure providers that help us operate the platform securely — all subject to strict data processing agreements in accordance with PDPA.
• Legal Authorities: Where we are required to do so by law, court order, or direction from a legitimate enforcement agency, ADA99 may need to disclose certain information. We will endeavour to notify you if this occurs, to the extent permitted by law.

ADA99 invest seriously in security infrastructure to protect your personal data from unauthorized access, disclosure, alteration, or destruction. The technical and organizational measures we implement include:

• Encryption in Transit: All data transmitted between your browser and ADA99's servers is encrypted using TLS 1.3 with a 256-bit SSL certificate. This ensures your data cannot be intercepted or read in transit.
• Storage Encryption: Sensitive data stored in our databases is encrypted using modern encryption algorithms. Even if someone were to gain access to the database, the stored data cannot be read without the decryption key.
• Access Controls: Access to member personal data is restricted to ADA99 staff who require it to perform their duties. All access is logged and monitored automatically.
• Regular Security Audits: We conduct regular penetration testing and security audits by independent experts to identify and address vulnerabilities before they can be exploited.
• Incident Response Plan: ADA99 has a clear incident response procedure. In the event of a serious data breach that affects you, we will notify you within 72 hours of becoming aware of it, in line with industry best practices.
• Two-Factor Authentication: We encourage (and in some cases require) the use of two-factor authentication (2FA) to protect your account from unauthorized access.

ADA99 does not retain your personal data for longer than necessary. Retention periods are determined based on operational requirements, legal obligations, and our legitimate interests. As a general guide:

• Active Account Data: For as long as your account remains active and for the required period following account closure.
• Financial Transaction Records: A minimum of 7 years from the transaction date, in line with Malaysian legal requirements for financial records and AML compliance.
• Game History: 2 years from the date of the game session, or longer if required for any related investigation.
• Support Communication Logs: 3 years from the date of last communication, for reference and dispute resolution purposes.
• Technical Data (Access Logs): 12 months from the log date, for security and fraud detection purposes.
• KYC Documents: For the period required by law — typically 5 to 7 years after the business relationship ends.

When data is no longer needed, it will be securely deleted or anonymised so that it can no longer be linked to you personally. The data deletion process is carried out in accordance with internally approved procedures to ensure deletion is complete and irreversible.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have several protected rights regarding your personal data held by ADA99. We are committed to respecting and facilitating the exercise of all these rights: