Rojak 99 Privacy Policy — Malaysian Player Data Protection

01Introduction & Scope of This Privacy Policy

This Privacy Policy is issued by Rojak 99 ("we", "the platform") and applies to all players, users, and visitors ("you") who access the Rojak 99 platform via our website or mobile interface. This document details the types of information we collect, the purposes for collection, how we use it, how it is protected, and your rights as a data subject.

Rojak 99 takes privacy very seriously. We understand that Malaysian players entrust us with sensitive personal information — including identity details, financial information and activity history on the platform. That trust is a responsibility we never take lightly. Every decision we make regarding data handling is guided by one simple question: would our players be comfortable with this if they knew exactly what was happening?

This Privacy Policy should be read together with the Rojak 99 Terms & Conditions. Both documents collectively form the complete agreement between you and our platform regarding your respective rights and responsibilities.

02Types of Personal Data We Collect

Rojak 99 only collects data that is strictly necessary to operate the platform and provide you with a quality service. We do not engage in excessive data collection or collect data for purposes unrelated to platform operations. The following are the categories of data we collect:

03Purposes for Which We Use Your Personal Data

Rojak 99 uses collected data solely for legitimate purposes directly related to operating the platform and delivering our services to you. The following outlines the specific purposes for which data is used:

• Account Management: Creating and managing your account, verifying your identity at login, processing password recovery requests, and maintaining your account profile.
• Transaction Processing: Processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay and FPX, as well as processing withdrawals to accounts registered in your name, quickly and securely.
• Game Management: Generating game history, calculating winnings and bonuses, managing account balances and ensuring the accuracy of all your game transaction records.
• Security & Fraud Prevention: Detecting unusual account activity, preventing the creation of multiple accounts, identifying fraud attempts and protecting the platform from misuse.
• VIP & Rewards Programme: Calculating your eligibility and benefits under the VIP programme based on your activity history, and crediting any cashback and bonuses you are entitled to.
• Service Communications: Sending important notifications about your account, terms updates, policy changes, and relevant security information. We do not send marketing emails without your consent.
• Dispute Resolution: Providing the evidence and records necessary to fairly resolve any disputes relating to gameplay, transactions, or platform usage.
• Legal Compliance: Complying with applicable legal obligations, including cooperation with investigations by lawful authorities where required under Malaysian law.

Rojak 99 does not use your data for purposes beyond those listed above without first obtaining your explicit consent.

04Data Sharing with Third Parties

Rojak 99 does not and will never sell, rent or share your personal information with third parties for marketing or advertising purposes. This is a principle we uphold without exception.

However, there are limited situations where rojak 99 needs to share certain data with specific parties in order to operate the platform:

• Licensed Payment Providers: Required transaction information is shared with payment providers such as Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay and the FPX gateway solely to process your financial transactions. These providers are subject to Malaysian data protection laws and Bank Negara Malaysia licensing requirements.
• Game Providers: Usernames or player IDs (not full personal details) are shared with game providers such as Evolution Gaming, Pragmatic Play and Playtech solely for the technical purpose of managing game sessions.
• Technical Service Providers: IT infrastructure providers, cloud services, and cybersecurity vendors who assist us in operating the platform may have limited access to data required to carry out their technical functions, subject to strict confidentiality agreements.
• Relevant Authorities: Where required by Malaysian law or a valid court order, Rojak 99 may be obliged to disclose certain data to the relevant authorities. In such situations, we will inform you where we are legally permitted to do so.

05Data Security Measures at Rojak 99

Rojak 99 invests seriously in security infrastructure to ensure your personal data remains protected at all times. The following are the key security measures we have in place:

• 256-bit SSL Encryption: All communications between your device and rojak 99's servers use 256-bit Transport Layer Security (TLS) encryption — the same standard used by Malaysian banking institutions such as Maybank and CIMB. Any data transmitted cannot be read by third parties while in transit.
• Secure Server: Your data is stored in data centres secured with multiple layers of physical and digital protection, including biometric access controls, intrusion detection systems, and multi-tiered data backups.
• Internal Access Controls: Access to player data is granted only to Rojak 99 staff with a legitimate business need, and only to the minimum extent required. All internal access is logged and audited on a regular basis.
• Continuous Monitoring: Our systems are monitored around the clock to detect any unusual activity that may indicate an attempted breach or unauthorised access.
• Two-Factor Authentication: Rojak 99 offers two-factor authentication (2FA) for players who wish to add an extra layer of protection to their account.

While we take all reasonable steps to protect your data, no security system in the world can be guaranteed 100% secure. In the event of a security incident that materially affects your personal data, Rojak 99 is committed to notifying you within a reasonable timeframe.

06Cookies & Tracking Technologies on the Rojak 99 Platform

Rojak 99 uses cookies and similar tracking technologies to operate the platform more effectively and enhance your experience. Here is an explanation of how we use them:

• Essential Cookies (Required): These cookies are required for the platform to function properly — including maintaining your login session, remembering your preferences, and ensuring transaction security. The platform cannot operate without them and they cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language (Bahasa Melayu or English), display settings, and game preferences. This allows us to deliver a more personalised experience each time you use the platform.
• Analytical Cookies: We use anonymised analytics data to understand how players use the platform — which pages are visited most frequently, how long sessions last, and where players encounter difficulties. This information helps us improve the platform over time. This analytics data contains no information that could personally identify you.
• Security Cookies: Used to identify and prevent fraudulent activity, including detecting unusual login attempts and ensuring that active sessions are legitimate.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality and you may be unable to log in or use the platform as intended.

07Data Retention & Deletion Period

Rojak 99 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy or as required by applicable law. The following are general data retention guidelines:

• Active Account Data: For as long as your account remains active on rojak 99, all data associated with that account will be retained to enable us to provide uninterrupted service and resolve any disputes that may arise.
• Financial Transaction Records: Deposit and withdrawal transaction records are retained for a minimum of 7 years from the date of each transaction, in compliance with applicable Malaysian financial and tax legislation.
• Support Communication Logs: Conversations with our customer support team are retained for 3 years from the date of communication, for reference, dispute resolution, and quality control purposes.
• After Account Closure: When an account is closed at your request (not due to a terms violation), personal data that is not required for legal obligations will be deleted or anonymised within 90 days of the closure date.
• Account Suspended for Violations: Account-related data for accounts closed due to terms violations or fraud is retained for a longer period to prevent the relevant player from opening a new account using the same or a different identity.

If you wish to request the deletion of your data before the designated retention period, you may submit a request to our support team. We will assess the request against applicable legal requirements and our operational obligations, and provide a response within 30 days.

08Your Rights as a User & Data Subject

As a Rojak 99 player, you have several important rights with respect to your personal data. Rojak 99 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, contact the rojak 99 support team via live chat or send an email to support@rojak99.biz with the subject line "PRIVACY RIGHTS REQUEST". Please include your account username and a brief description of your request. We will respond within 30 business days.

09Children & Privacy at Rojak 99

Rojak 99 is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data belonging to children or minors under the age of 18.

If we become aware that personal data of anyone under the age of 18 has been collected through our platform, we will take immediate action to delete that data and close the associated account. If you are a parent or guardian and believe your child has registered a rojak 99 account, please contact us immediately at support@rojak99.biz so we can take the appropriate steps.

10Links to External Services & Platforms

The Rojak 99 platform may contain links or integrations with third-party services required for our operations, such as payment providers (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX) and game providers (Evolution Gaming, Pragmatic Play, Playtech, and others).

Once you leave the rojak 99 platform to use these third-party services, the rojak 99 Privacy Policy no longer applies. Each third-party provider has its own privacy policy governing how they handle your data. We encourage you to read the relevant provider's privacy policy before using their services.

Rojak 99 is not responsible for the privacy practices of any third party, even if they are our business partners. That said, we only work with providers that uphold high security and privacy standards, and all our partnership agreements include strict data protection clauses.

11Amendments to This Privacy Policy

Rojak 99 reserves the right to amend this Privacy Policy at any time to reflect changes in our data handling practices, new legal requirements or improvements to how we protect your information.

When we make material changes to this Privacy Policy, we will notify you through one or more of the following methods:

• Notifications displayed prominently when you log in to your rojak 99 account
• Email sent to the address registered to your account
• Announcements on our platform's homepage or news section

Minor changes that do not materially affect your rights may be made without specific notice; however, the latest version of the Privacy Policy is always available on this page with the update date displayed. Continued use of the platform after the effective date of any changes will be considered acceptance of the updated terms.

If you disagree with any changes made, you have the right to stop using the platform and close your account. Please contact our support team to process the account closure, and all legitimate remaining funds will be returned to you.

12Contact Us for Privacy Enquiries

If you have any questions, concerns or requests regarding this Privacy Policy or how rojak 99 handles your personal data, our team is always happy to help.

• Live Chat: The fastest way to get help — live chat in Bahasa Melayu is available 24 hours a day, 7 days a week. Our average response time is under 2 minutes.
• Email: For more detailed privacy enquiries or formal data-related requests, please contact us at support@rojak99.biz with the subject line "PRIVACY POLICY ENQUIRY". We will respond within 48 business hours.
• Formal Written Request: For formal requests relating to data rights — such as data access, amendment, or deletion — please send an email with the subject line "PRIVACY RIGHTS REQUEST" along with your relevant account information.

Rojak 99 is committed to handling every privacy-related inquiry and request with seriousness, care, and within the agreed timeframe. Your trust is not something we take lightly — and the way we handle privacy inquiries is a direct reflection of our commitment to those values.