Hoky99 Privacy Policy – Your Personal Data Protection

1 Introduction & Scope

This Privacy Policy is issued by hoky99 ("Platform", "We") and applies to all users who access or use the hoky99 website, mobile app, and services (collectively "Services"). This document clearly explains how we collect, process, store, and protect your personal data.

Hoky99 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data security standards. We take this responsibility seriously because your trust is the foundation of our relationship as a platform and its members.

This Privacy Policy applies to:

• All hoky99 website visitors, whether registered or not
• Registered members who use any games or services on the platform
• Hoky99 mobile app users across all devices
• Individuals who communicate with our customer support team

2 How We Collect Data

Hoky99 collects your personal data through several transparent and responsible channels:

• Account Registration: When you register as a new member, you provide us directly with basic information such as your name, email, phone number, and date of birth.
• KYC Verification: To process your first withdrawal, we require a copy of a valid identification document such as your MyKad or passport for identity verification purposes.
• Financial Transactions: Payment information is collected automatically when you make a deposit or withdrawal via FPX, DuitNow QR, Touch 'n Go, GrabPay or Boost.
• Platform Usage: Technical data and usage behaviour are collected automatically via cookies, server logs, and first-party tracking technologies when you browse the platform.
• Support Communications: Your conversation records with our customer support team via live chat or email are retained for service quality and dispute resolution purposes.
• Referrals & Promotions: If you participate in a referral programme or promotion, the relevant information is collected for reward eligibility verification purposes.

We do not collect data beyond what is necessary for the stated purposes. The principle of data minimisation is central to how we operate.

3 Use of Personal Data

The personal data we collect is used solely for legitimate and transparent purposes. The following is a complete list of how hoky99 uses your data:

• Account Management: Securely create, verify and manage your member account
• Payment Processing: Process deposits and withdrawals accurately and swiftly in MYR
• Legal Compliance: Meet anti-money laundering (AML) reporting requirements and know-your-customer (KYC) obligations as required by law
• Platform Security: Detect and prevent fraudulent activity, unauthorized access and cybersecurity threats
• Responsible Gaming: Monitor usage patterns to identify members who may need self-exclusion assistance
• Service Communications: Send transaction notifications, platform updates and important account security information
• Targeted Marketing: Deliver relevant promotions and bonuses — only if you have consented to receive marketing communications
• Platform Improvement: Analyze aggregate and anonymized usage data to improve hoky99 platform performance and user experience

4 Data Sharing with Third Parties

Hoky99 does not sell or disclose your personal data to third parties without your consent, except in the following limited and legitimate circumstances:

• Payment Service Providers: Required transaction information is shared with licensed payment processors (FPX, DuitNow, e-wallets) solely for the purpose of completing financial transactions.
• Game Software Providers: Minimum technical data is shared with licensed game software providers to ensure smooth and fair game operability.
• Regulatory Authority: hoky99 complies with requests to disclose information from legitimate law enforcement agencies or regulatory authorities under a court order or legal requirement.
• Cybersecurity Services: Technical information is shared with third-party security service providers bound by strict confidentiality agreements to ensure platform protection.
• Independent Auditor: Required information is shared with licensed third-party auditors for the purpose of game fairness verification and compliance audits.

All third parties we work with are bound by strict confidentiality and data processing agreements. They are only permitted to use your data for the purposes specified in those agreements and nothing beyond that.

5 Cookies & Tracking Technologies

Hoky99 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions, account security, and basic navigation. These cookies cannot be disabled as they are the backbone of the platform.
• Performance Cookies: Collect anonymized information about how visitors use the platform — most visited pages, response times and errors encountered — for improvement purposes.
• Functional Cookies: Remember your preferences such as language, display settings and favorite games so you don't have to reconfigure them every time you log in.
• Analytics Cookies: Help us understand aggregate platform usage patterns to optimize design and content for Malaysian members.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, refer to your web browser's documentation.

6 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by hoky99:

• Right of Access: You have the right to request a copy of all personal data we hold about you. This request will be processed within 21 working days.
• Right to Rectification: If any of your personal data is inaccurate or out of date, you have the right to request that we correct it at no charge.
• Right to Erasure: You may request the deletion of your personal data, subject to any legal data retention requirements we are obligated to comply with.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your data in certain circumstances, such as when you are disputing the accuracy of the data.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time, and we are obligated to comply with such requests.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for the purpose of transferring it to another service provider.

To exercise any of the above rights, contact the hoky99 customer support team via live chat or email. We will verify your identity first before processing any data-related request to ensure the security of your account.

7 Data Retention & Deletion

Hoky99 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

• Active account data: Retained for the duration your account remains active on the hoky99 platform
• KYC and financial data: Retained for a minimum of 7 years after account closure to comply with anti-money laundering legal requirements
• Transaction Records: Retained for 5 years for audit and dispute resolution purposes
• Support communication logs: Retained for 2 years after the last interaction
• Cookie and analytics data: Retained for no more than 13 months after the last usage session

When the retention period expires, your data will be securely deleted or anonymised using methods that ensure the data cannot be recovered. The deletion process is carried out periodically according to a schedule set by our data security team.

8 Data Security

Hoky99 invests seriously in data security infrastructure to protect the personal information of all members. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• AES-256 encryption for all sensitive data stored in our databases
• Two-factor authentication (2FA) is available for all member accounts — we strongly encourage its use
• Multi-layered web application firewall (WAF) to prevent cyber attacks
• 24/7 security monitoring by internal and external cybersecurity teams
• Periodic penetration testing by independent third-party security firms
• Strict role-based access control — only staff who need it can access user data
• Mandatory security awareness training for all hoky99 staff who handle user data

9 Privacy Policy Changes

Hoky99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or technological developments. Any material amendments will be communicated to all members via:

• Clear notice on the home page or your account dashboard
• Email notification to your registered address at least 14 days before changes take effect
• Push notifications via the hoky99 mobile app if you have enabled notifications

The "Last Updated" date at the top of this document always reflects the latest version of the Privacy Policy currently in effect. Your continued use of the hoky99 platform after any changes take effect will be deemed as your acceptance of the updated policy.

10 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way hoky99 handles your personal data, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform
• Email: [email protected] — Response within 2 business days
• Service Language: Bahasa Melayu and English

For formal complaints regarding personal data protection that cannot be resolved by hoky99, you may submit a complaint to the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.