Privacy Policy Crow99 –
Personal Data Protection Malaysian Members

Welcome to the Privacy Policy page Crow99. This document constitutes an important agreement between you as the user and Crow99 as an online entertainment service provider in Malaysia. This Privacy Policy sets out in detail how Crow99 collects, uses, stores, and protects your personal information when you use our platform, website, services, and all features we offer.

Your privacy is not merely a legal obligation for Crow99 – it is a moral commitment we take seriously every single day. We understand that you trust us with sensitive personal information when you create an account, make deposits via Touch 'n Go eWallet or DuitNow, and enjoy your favourite games like Prosperity Lion or Live Baccarat on our platform. That trust is never taken for granted.

This Privacy Policy applies to all users of Crow99 without exception — whether you are simply browsing our website, in the process of registering, an active registered member or a former member whose account has been closed. By using any part of the Crow99 platform, you acknowledge that you have read and understood this Privacy Policy.

Crow99 only collects data that is genuinely necessary to provide you with a quality, safe, and responsible service. Below is a detailed breakdown of the categories of data we collect:

Crow99 does not collect sensitive personal data such as medical information, religious beliefs or political views, except in very specific circumstances and only with your explicit prior consent. We also do not collect full credit card details or bank account numbers — financial transactions are processed directly through secure payment gateways without such details passing through or being stored on our servers.

Every piece of data that Crow99 we collect serves a clear and legitimate purpose. We don't collect data simply because we can — we collect it because it's necessary to deliver the best, safest, and most enjoyable experience on our platform. The key purposes for which your data is used are as follows:

• Account Management: Creating and maintaining your Crow99 account, verifying your identity and securely processing your registration application.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and withdrawals to your registered account.
• Platform Security: Detecting and preventing fraud, unauthorised access, money laundering and other suspicious or non-compliant activities on Crow99.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and providing appropriate intervention in line with Crow99's responsible gaming policy.
• Legal Compliance: Meeting applicable legal and regulatory requirements in Malaysia, including anti-money laundering (AML) and know your customer (KYC) obligations.
• Service Enhancement: Analysing aggregated, anonymised usage patterns to improve the interface, introduce new games, and enhance the overall performance of the Crow99 platform.
• Communications: Sending transaction notifications, important account information, policy updates and — with your consent — relevant promotional offers.
• Customer Support: Efficiently resolving your enquiries, complaints and requests through securely stored communication records.

Crow99 does not sell, rent or disclose your personal data to third parties for marketing or commercial purposes. However, there are limited situations where data sharing is necessary to enable our services to function or to fulfil legal obligations:

• Payment Service Providers: Payment gateways used to process deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, CIMB Clicks and FPX are required to receive minimum transaction information in order to process payments securely. These providers are subject to strict data protection agreements with Crow99.
• Game Software Providers: Game providers receive the game data necessary to ensure proper gameplay and that the stated RTP is maintained. Personal data that could directly identify you is not shared.
• Legal Authorities: Crow99 will disclose required data to Malaysian government authorities or law enforcement bodies when compelled to do so by law, court order or valid legal process.
• Analytics Services: Crow99 uses third-party analytics services to understand how the platform is used. Data shared is in aggregated, anonymised form only – no individually identifiable information is disclosed.

In all of the data-sharing situations described above, Crow99 ensures that all recipients are bound by equivalent data protection obligations through written agreements. We also ensure that only data strictly necessary for the specific purpose is shared – this "data minimisation" principle is central to how we handle data sharing.

Protecting your personal data is among our greatest investments Crow99. We implement multiple layers of technical, physical, and organisational controls to safeguard your data against unauthorised access, loss, alteration, or improper disclosure:

• Data Encryption in Transit: All data transmitted between your device and Crow99's servers is encrypted using TLS 1.3 with 256-bit SSL encryption — the highest standard employed by Malaysia's leading financial institutions.
• Stored Data Encryption: Sensitive data stored in Crow99's databases is encrypted using strong encryption algorithms. Even in the highly unlikely event of a breach, stolen data cannot be read without the encryption key.
• Multi-Layered Access Control: Access to user data within Crow99's internal systems is strictly restricted on a need-to-know, least-privilege basis. Two-factor authentication is mandatory for all staff accessing systems that contain user data.
• 24/7 Security Monitoring: Crow99's automated security monitoring system operates around the clock to detect and respond to security threats in real time, including suspicious login attempts and abnormal traffic.
• Regular Security Testing: Crow99 conducts regular penetration testing and security audits by independent experts to identify and address any system vulnerabilities before they can be exploited.
• Incident Response Plan: Crow99 has a comprehensive data incident response plan in place. In the event of any security breach affecting your data, we will notify you within the timeframe required under applicable laws.

Crow99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you as a returning user and remember your preferences.

Types of cookies used by Crow99:

• Essential Cookies: These cookies are strictly necessary for the Crow99 platform to function. They manage your login session, ensure transaction security and retain your in-session settings and selections during gameplay. Disabling these cookies will affect the platform's core functionality.
• Performance Cookies: These cookies help us understand how visitors interact with the Crow99 platform — which pages are visited most frequently, how long users spend on certain pages, and where users may encounter difficulties. All such information is collected in aggregated, anonymised form.
• Functional Cookies: These cookies remember your preferences — such as your chosen language, display settings and login details (if you select "Remember Me") — to provide a more personalised and convenient experience every time you visit Crow99.

You can control and manage cookies through your web browser settings. However, disabling essential cookies may affect your ability to use the platform Crow99 entirely. Crow99 does not use third-party cookies for targeted advertising or to track your activity on other websites.

Crow99 only retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required under applicable Malaysian law. This minimum retention principle ensures that data no longer needed does not create unnecessary privacy risks.

• Active Account Data: Personal data of active Crow99 members is retained for the duration of the active account period, plus any additional period required by legal compliance obligations.
• Closed Account Data: After an account is closed, Crow99 retains essential records for the minimum period required under Malaysian law for compliance purposes, fraud prevention, and the resolution of any disputes that may arise.
• Financial Transaction Records: All financial transaction records — including deposits via DuitNow, Touch 'n Go eWallet, and withdrawals — are retained in accordance with Malaysia's applicable anti-money laundering laws.
• Customer Support Data: Customer support communication records are retained for a reasonable period to allow for follow-up and ongoing service quality improvement.

Once the retention period expires, your personal data will be securely deleted or fully anonymised so that it can no longer be linked to you as an individual. This deletion or anonymisation process is carried out periodically in accordance with schedules set by our internal data management policy. Crow99.

As a user Crow99, you have clear and enforceable rights regarding your personal data. Crow99 respects and facilitates the exercise of all these rights:

To exercise any of the above rights, please contact the support team Crow99 via email at [email protected] or through Live Chat, available 24 hours a day. Crow99 is committed to processing all privacy rights requests within a reasonable timeframe and will keep you informed of any action taken.

Services Crow99 is strictly for users aged 18 and above. Crow99 does not knowingly collect, store, or process any personal data from individuals under the age of 18.

If you believe or become aware that a minor has registered an account or provided personal information to Crow99 without valid parental or guardian consent, please contact our support team immediately at [email protected]. Crow99 will take immediate action to delete the relevant information and close the account without delay.

As an online entertainment platform, Crow99 may need to store or process data on servers located outside Malaysia in certain circumstances, such as when using international cloud computing services or working with global game software providers.

In all cross-border data transfer situations, Crow99 ensures:

• Data is transferred only to countries or organisations that provide a level of data protection equivalent to or greater than that required in Malaysia.
• Legally binding data protection agreements are established with all recipients of data outside Malaysia before any transfer takes place.
• Additional technical measures such as end-to-end encryption are applied to sensitive data that must be transferred across borders.
• Data transfers are limited strictly to what is necessary for the specific purpose — nothing more.

Crow99 is committed to ensuring your data receives consistent and robust protection regardless of where it is physically processed or stored.

Crow99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements or the addition of new platform features. The date of the most recent update is always clearly displayed at the top of this document.

When we make material changes to this Privacy Policy – particularly changes that affect how we collect or use your data – Crow99 will notify you through one or more of the following methods:

• Sending notification emails to your registered email address.
• Displaying clear notices on the Crow99 platform's main page.
• Sending in-app notifications or alerts via the platform's notification system.

Continued use of the platform Crow99 following any update to the Privacy Policy means you accept the amended policy. If you do not agree with the changes, you should discontinue use of the platform and may request account closure by contacting our support team.

If you have any questions, concerns or complaints regarding this Privacy Policy or the way Crow99 managing your personal data, we strongly encourage you to reach out to us. The Crow99 team is ready to help you understand your rights and address any concerns that may arise.

You can reach the Crow99 privacy team at:

• Email: [email protected] – responses within 2 business days for privacy enquiries
• Live Chat: Available 24 hours a day, 7 days a week on the Crow99 platform – ideal for urgent enquiries
• Support Form: Through the FAQ us, where you may submit a formal written request

Crow99 is committed to providing meaningful and helpful responses to all privacy-related enquiries within the stipulated timeframe. We treat every privacy enquiry seriously, as it reflects the trust you place in us – trust that we never take for granted.