Viva99 Privacy Policy – Malaysian User Data Protection

1. Introduction

Viva99 ("we", "Platform", "viva99.pro") is committed to protecting the privacy of every user who registers and uses our services. This Privacy Policy outlines our practices regarding the collection, use, storage, and protection of your personal data.

We recognise that user trust is viva99's most valuable asset. Every data-related decision is therefore made with user security and interests as the top priority. Our platform adheres to internationally recognised data protection standards and operates with full transparency in all data processing activities.

This policy applies to all users of the viva99 platform, including those accessing via the viva99.pro website, iOS and Android mobile apps, and any related services provided by viva99.

2. Types of Data We Collect

Viva99 collects your personal data through various means – directly when you interact with the platform, and automatically as you use our services. The following are the categories of data we collect:

2.1 Data You Provide Directly

• Identity Information: Full name, date of birth, gender, national ID number (MyKad/passport)
• Contact Information: Email address, phone number, residential address
• Financial Information: Bank account number, bank name, e-wallet details for withdrawal purposes
• KYC Verification Documents: Copies of identification documents, proof of address, and other supporting documents required for account verification
• Communication: Messages you send to our support team via Live Chat, email, or other channels

2.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, operating system, screen resolution
• Usage Data: Pages visited, time spent on each page, games played, navigation patterns
• Device Data: Unique device identifier, hardware information for accounts using the mobile app
• Session Data: Login, logout, session duration, transaction activity
• Cookie Data: Session cookies, preference cookies, analytics cookies (see Section 6 for more details)

3. How We Use Your Personal Data

The data we collect is used for clear and lawful purposes. Below is a summary of our data usage:

Viva99 will not use your data for any purpose not stated in this policy without obtaining your consent first. Any new use of your data will be communicated to you via email or in-platform notification.

4. Data Storage & Security

The security of your personal data is viva99's highest priority. We implement multiple layers of technical and organisational safeguards to ensure your data is always protected against unauthorised access, breaches, or misuse.

4.1 Technical Security Measures

• 256-bit SSL Encryption: All data transmitted between your browser and viva99 servers is encrypted using the latest TLS 1.3 protocol
• Stored Data Encryption: Sensitive data such as financial information and KYC documents are stored in an encrypted state using AES-256
• Two-Factor Authentication (2FA): User accounts are protected with 2FA options via an authenticator app or SMS
• Continuous Threat Monitoring: Our systems are monitored 24/7 to detect any suspicious activity or intrusion attempts
• Data Segregation: User data is stored in an isolated environment with strict access controls

4.2 Organisational Security Measures

• Only authorised and trained staff may access users' personal data
• All staff sign binding confidentiality agreements
• Internal and external security audits are conducted on a regular basis
• Clear and tested security incident response procedures

5. Data Sharing With Third Parties

Viva99 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, we may share your data in the following limited circumstances:

• Payment Service Provider: To process your deposits and withdrawals via FPX, DuitNow, Touch 'n Go, and other payment channels. They only receive the data necessary to complete the transaction.
• KYC Verification Provider: Licensed third-party identity verification companies assist us in verifying user documents in accordance with compliance requirements.
• Game Service Provider: Integrated game providers on the viva99 platform may receive limited session data for technical purposes only.
• Regulatory Authority: We are required to share certain information with the relevant authorities when mandated by law, court order, or official investigation.
• Fraud Prevention: Limited information may be shared with industry security partners to detect and prevent cross-platform fraud.

All third parties receiving viva99 user data are bound by strict data protection agreements and may only use that data for authorised purposes.

6. Cookies & Tracking Technologies

Viva99 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how users interact with our platform. The following are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Preference Cookies: Stores your settings and preferences such as language, theme, and preferred layout for a more personalised experience.
• Analytics Cookies: Helps us understand how users interact with the platform for continuous improvement. This data is collected in aggregate and does not identify individuals.
• Security Cookies: Used to detect and prevent suspicious activity, including unauthorised login attempts and automated attacks.

You can manage cookie settings through your browser settings. However, disabling certain cookies may affect platform functionality. Continued use of viva99 after receiving a cookie notification is considered your consent.

7. User Rights Regarding Personal Data

Viva99 respects and recognises your rights regarding the personal data we hold. You have the following rights, which you may exercise at any time:

8. Protection of Children's Data

The viva99 platform is exclusively for users aged 18 and above. We do not knowingly collect or process personal data of individuals under 18. If we discover that a minor's data has been collected without our knowledge, the account will be closed immediately and all related data will be deleted within 72 hours.

Parents or guardians who suspect their child has registered on the viva99 platform are urged to contact our support team immediately via Live Chat or email at [email protected] so that prompt action can be taken.

9. Cross-Border Data Transfers

In the course of platform operations, your personal data may be transferred to and stored on servers located outside Malaysia. In such cases, viva99 ensures that all data transfers comply with relevant data protection requirements and are safeguarded by appropriate protection mechanisms, including standard data transfer agreements and equivalent data protection standards.

10. Data Retention Period

Viva99 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. In general:

• Active Account Data: Retained for the duration your account is active and for a period of 5 years after account closure for compliance purposes
• Financial Transaction Records: Retained for 7 years in accordance with anti-money laundering legal requirements
• KYC Documents: Retained for 5 years after the date of verification or account closure
• Support Communication Logs: Retained for 2 years from the date of last interaction
• Analytics Data: Aggregated data without personal identifiers may be retained indefinitely for platform improvement purposes

11. Amendments to the Privacy Policy

Viva99 reserves the right to update this Privacy Policy from time to time in line with changes in business operations, legal requirements, or industry practices. Any material changes will be communicated to you via your registered email or in-platform notification at least 14 days before taking effect.

The latest update date will always be displayed at the top of this page. You are encouraged to review this page periodically. Continued use of the platform after changes take effect will be considered acceptance of the updated terms.

12. Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the viva99 Data Protection Officer (DPO) team is ready to assist:

• Live Chat 24/7: The fastest way – directly via the chat icon on the viva99 platform
• DPO Email: [email protected] (copy and paste – do not click)
• Response Time: We will respond to all privacy enquiries within 3–5 business days
• FAQ: Visit FAQ page us for frequently asked questions about privacy and accounts