Coy99 Privacy Policy – Protecting Your Personal Data in Malaysia

coy99 collect various types of personal data from you during and after the registration process, during your use of the platform, and through your interactions with our support team. The following are the categories of data we may collect:

Financial data such as your Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks) account details is used solely to process your deposits and withdrawals at coy99. We do not store this information in an unsecured format or share it with any unauthorised third parties.

coy99 uses your personal data only for legitimate and specific purposes. We do not use your data for any purpose beyond the scope stated below without first obtaining your additional consent.

• Account management: Your identification and contact data is used to create, manage, and verify your coy99 account. This includes sending account-related notifications such as login confirmations and security alerts.
• Financial transaction processing: Your payment data is used to process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as to process your winnings withdrawals to your Malaysian bank account or digital wallet.
• Legal compliance (KYC/AML): coy99 is legally required to carry out Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures. Your identification data is used to fulfil these compliance obligations as required under Malaysian law.
• Platform security: Technical data such as IP addresses and device information is used to detect and prevent unauthorised access, fraud, and any suspicious activity on your coy99 account.
• Service improvements: Usage data and gaming history are used in aggregate and in non-identifiable form to understand usage patterns and improve the overall user experience on the coy99 platform.
• Customer support communications: When you contact the coy99 support team, we use your data to help resolve your query or complaint more efficiently and effectively.
• Marketing communications (with consent): If you have consented to receive marketing communications, coy99 may send you information about promotions, new bonuses, and the latest games via email or WhatsApp. This consent may be withdrawn at any time.

coy99 does not sell or disclose your personal data to third parties for marketing purposes. However, there are limited situations where we need to share your data with certain parties to ensure the platform functions properly and remains compliant with applicable law.

• Payment processing providers: coy99 works with authorised payment service providers to process deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. These providers receive only the data necessary to complete the relevant transaction and are bound by strict confidentiality agreements with coy99.
• Game providers: Third-party game providers offering slots, crash games such as Spaceman and Mines, and card games such as Thai HiLo on the coy99 platform may receive the session data required to deliver those games to you. Data shared is kept to a minimum and is subject to data protection agreements.
• Authorities required by law: coy99 will disclose your personal data to Malaysian government authorities or relevant regulatory bodies where we are legally required to do so under applicable Malaysian law, such as the Anti-Money Laundering Act 2001 or a valid court order.
• Technical service providers: Companies providing technical infrastructure such as server hosting services, platform analytics, and cybersecurity systems may process certain data as part of their services. All such providers are bound by strict data processing agreements and are not permitted to use your data for any other purpose.
• Business merger or acquisition: In unforeseen circumstances such as a merger, acquisition, or restructuring of coy99, user data may be transferred as part of the business assets. In such cases, the receiving party will be held to the same or higher data protection standards as those set out in this Privacy Policy.

coy99 continually invest in world-class security infrastructure to ensure your personal data is protected at every stage — whether in transit, during processing, or in storage. Security is not a one-off project for us; it is an ongoing process that is continuously updated.

• Data encryption in transit: All communications between your browser or app and coy99's servers are protected using TLS (Transport Layer Security) protocol version 1.2 or higher with 256-bit SSL encryption. This means no third party can intercept or read your data while it is transmitted over the internet.
• Data encryption at rest: Sensitive data stored in coy99's databases — including identification information, payment details, and passwords (stored in an irreversible hash format) — is protected with AES-256 encryption.
• Internal access controls: Only coy99 staff who require access to specific data to perform their job responsibilities are permitted to do so, in accordance with the principle of least privilege. All internal access is logged and actively monitored.
• Continuous threat monitoring: coy99's security monitoring system operates around the clock to detect anomalies, intrusion attempts, and suspicious activity on the platform. Any identified threats are addressed immediately in accordance with our incident response protocol.
• Regular security testing: coy99 conducts regular penetration testing and security audits carried out by accredited independent third parties to identify and address any system vulnerabilities before they can be exploited.
• Two-factor authentication (2FA): coy99 offers a 2FA option that is strongly recommended for all accounts. With 2FA enabled, logging into your account requires additional verification via your mobile device, providing a significant layer of protection against unauthorised access.

coy99 uses cookies and similar tracking technologies to keep the platform running smoothly, personalise your experience, and understand how users interact with our platform. Below is an explanation of the types of cookies we use and how you can manage them.

• Essential cookies (required): These cookies are essential for the basic operation of the coy99 platform. They allow you to log in, maintain your session while playing, and use the platform's core features. Without these cookies, coy99 will not function properly. They do not store any personal information that can directly identify you.
• Functional cookies: These cookies remember your preferences on the coy99 platform — such as your chosen language, display settings, and game preferences — to deliver a more personalised experience each time you visit.
• Analytics cookies: coy99 uses analytics data collected through cookies to understand aggregated platform usage patterns — such as which games are most popular, which pages receive the most visits, and where users encounter issues. This data is used to improve the platform and is not linked to your personal identity.
• Security cookies: Security cookies help coy99 detect and prevent fraud, suspicious login attempts, and other harmful activity on the platform. These cookies form an essential part of your account protection system.
• Managing your cookies: You can manage or delete cookies at any time through your web browser settings. Please note, however, that disabling certain cookies (especially essential cookies) may affect the functionality of the coy99 platform and your overall experience.

By continuing to use the coy99 platform after the cookie notification is displayed and you select "Accept", you consent to the use of cookies as described in this Privacy Policy. You may change your cookie preferences at any time through your browser settings.

As a user of the platform coy99 based in Malaysia, you hold certain rights over your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). coy99 respect and facilitate the exercise of these rights for every one of our members.

coy99 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law. We do not retain data longer than necessary.

• Retention period for active accounts: For as long as your coy99 account remains active, we will retain all relevant personal data and gaming data so you can access your account history and receive customer support.
• Period following account closure: After your account is closed, coy99 retains the necessary records for the minimum period required under Malaysian law — typically between 5 and 7 years — for financial compliance, audit, and fraud prevention purposes. Data that is no longer required for these purposes will be deleted or anonymised within 90 days of account closure.
• Financial transaction data: Records of deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other methods are retained for the period required under Malaysia's financial reporting and anti-money laundering laws.
• Deletion upon request: You have the right to request the deletion of your personal data (the "right to be forgotten"). coy99 will fulfil such requests after evaluating whether any legal obligations or operational requirements prevent full deletion. We will inform you of our decision within 30 days of receiving your request.
• Security of stored data: All data stored in coy99's databases — whether active or archived — is protected to the same security standard as active user data. Our databases are backed up regularly at secure, encrypted locations.

coy99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. We are committed to notifying you of any material changes.

• Notice of material changes: If there are material changes to the way we collect, use, or share your personal data, coy99 will notify you via your registered email or through a prominent in-platform notification before those changes take effect.
• Effective date: The last updated date of this Privacy Policy will always be displayed at the top of this page. The most current version of the Privacy Policy is the one that applies to all users of the coy99 platform.
• Ongoing consent: Your continued use of the coy99 platform after any changes to this Privacy Policy take effect will be considered your acceptance of the updated terms. If you do not agree with the changes made, you may close your account by contacting our support team.
• Archive of previous versions: coy99 maintains an archive of previous versions of the Privacy Policy for reference. If you would like to view an earlier version, please contact our support team via email.

If you have any questions, concerns, or requests relating to this Privacy Policy or how coy99 handling your personal data, our team is ready to assist. We take every privacy-related enquiry seriously and are committed to responding in a satisfactory and timely manner.

• Privacy email: [email protected] (please state "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24 hours a day, 7 days a week on the coy99.my platform
• WhatsApp: Contact the coy99 support team via WhatsApp for a faster response during operating hours

For formal requests relating to your personal data rights (access, rectification, deletion, portability), please submit a written request via email to [email protected] along with proof of your identity. coy99 will process your request within 14 business days of receiving a complete submission.

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant data protection authority under the PDPA 2010.