ng999 Privacy Policy

1. Who We Are and How to Contact Us

ng999 ("we", "us", "our") is the operator of the online casino and sports betting platform accessible at ng999.org. ng999 acts as the data controller in respect of all personal data processed in connection with your account and use of the Platform.

If you have any questions about this Privacy Policy or about how ng999 processes your personal data, please contact us using the support email address displayed in the footer of this website. Please quote your registered account username and "Privacy Enquiry" in the subject line to ensure a prompt response.

2. Personal Data We Collect

ng999 collects the following categories of personal data in connection with your registration and use of the Platform:

ng999 does not collect special category data (such as health data, biometric data, or political opinions) except where expressly required by applicable responsible gaming regulations, in which case you will be informed separately.

3. How We Collect Your Data

ng999 collects personal data through the following means:

• Direct provision by you: Information you enter during account registration, identity verification, payment processing, support requests, and any forms submitted on the Platform.
• Automated collection: Technical and usage data collected automatically when you access and interact with the ng999 Platform, including via cookies and similar tracking technologies.
• Third-party payment providers: Transaction confirmation data received from Malaysian payment providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect, solely for the purposes of deposit and withdrawal processing.
• Identity verification services: Where ng999 uses a third-party KYC service to verify documents you submit, data relating to the verification outcome may be shared with ng999 by that provider.
• Fraud and AML screening: Data may be cross-referenced against regulatory watchlists and sanctions databases as required by the anti-money laundering compliance obligations applicable to ng999's gaming licence.

4. Purposes and Legal Bases for Processing

ng999 processes personal data for the following purposes and relies on the following legal bases:

Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time by updating your account preferences or contacting ng999 support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

5. Cookies and Tracking Technologies

ng999 uses cookies and similar technologies (web beacons, pixel tags, local storage) on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function, including maintaining your login session and storing your account preferences. These cannot be disabled without affecting Platform functionality.
• Analytical cookies: Used to understand how Members interact with the Platform — which pages are visited, how long sessions last, and which features are used most. This data is aggregated and used to improve the Platform.
• Functional cookies: Used to remember choices you make (such as preferred language) to provide a more personalised experience.
• Security cookies: Used to detect and prevent fraudulent activity, including suspicious login patterns and account takeover attempts.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the ng999 Platform.

6. Sharing Your Personal Data

ng999 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipient, in each case only to the extent necessary for the stated purpose:

• Payment service providers: Malaysian payment processors (Touch 'n Go eWallet, DuitNow, FPX, etc.) for the purpose of processing deposits and withdrawals. These providers act as independent data controllers in respect of their own systems.
• Identity verification providers: Third-party KYC service providers engaged to verify identity documents. These providers operate under binding data processing agreements with ng999.
• Game providers: Where technically necessary, limited technical identifiers (not full identity data) may be passed to certified game studios whose titles are hosted on the ng999 Platform.
• Regulatory and law enforcement authorities: ng999 may disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts where required to do so by applicable law or the terms of its gaming licence.
• Professional advisers: Lawyers, auditors, and insurers, subject to obligations of confidentiality, where necessary for the operation or defence of ng999's business.

7. International Transfers

ng999 primarily processes personal data within the jurisdiction of its gaming licence. Where personal data is transferred to service providers located outside this jurisdiction, ng999 ensures that appropriate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities, or reliance on adequacy decisions where applicable.

Malaysian Members whose data is transferred internationally should be aware that data protection laws in destination countries may differ from those applicable in Malaysia. ng999 takes all reasonable steps to ensure equivalent protection is maintained regardless of where data is processed.

8. Data Retention

ng999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Account and identity data is retained for the duration of the membership and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements applicable to ng999's gaming licence.
• Transaction and financial records are retained for a minimum of seven (7) years for regulatory and audit purposes.
• Customer support correspondence is retained for three (3) years following the resolution of each interaction.
• Technical and usage data is retained for up to twenty-four (24) months and then aggregated or anonymised for analytical purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ng999's data disposal procedures.

9. Your Data Protection Rights

Depending on applicable data protection law, you may have the following rights in relation to the personal data ng999 holds about you:

• Right of access: You may request a copy of the personal data ng999 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to ng999's legal and regulatory retention obligations.
• Right to restriction: You may request that ng999 restrict the processing of your personal data in defined circumstances.
• Right to data portability: Where processing is based on consent or contract, you may request a machine-readable copy of the personal data you have provided to ng999.
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact ng999 using the support email in the footer. ng999 will respond to verifiable requests within thirty (30) days. We may need to verify your identity before processing a rights request.

10. Children and Underage Persons

ng999 is strictly an adults-only platform. The minimum age to register and use ng999 is 21 years. ng999 does not knowingly collect personal data from individuals under the age of 21. If ng999 becomes aware that personal data has been collected from an underage individual, that account will be closed immediately and all personal data associated with it deleted, except where retention is required by applicable law.

If you believe an underage individual has registered on the ng999 Platform, please contact ng999 support immediately so that the matter can be investigated and resolved promptly.

11. Security of Your Data

ng999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the ng999 Platform.
• Encryption at rest for sensitive personal data stored on ng999 servers.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Multi-factor authentication options for all registered ng999 Members.
• Intrusion detection and anomaly monitoring systems operating continuously across the Platform infrastructure.

Notwithstanding these measures, no method of electronic transmission or storage is completely secure. ng999 cannot guarantee absolute security and encourages Members to take personal precautions — including using strong, unique passwords and enabling two-factor authentication on their ng999 accounts.

12. Links to Third-Party Services

The ng999 Platform may contain links to third-party payment provider websites or other services. ng999 is not responsible for the privacy practices of these third parties and this Privacy Policy does not apply to their operations. We encourage you to review the privacy policies of any third-party services you access in connection with your use of ng999.

13. Changes to This Privacy Policy

ng999 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Members via email or via an in-Platform notification prior to the effective date of the change. The effective date at the top of this page reflects the date of the most recent revision.

Your continued use of the ng999 Platform following the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy. We recommend reviewing this page periodically to stay informed of how ng999 protects your data.

14. Contact and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or ng999's handling of your personal data, please contact the ng999 Data Protection team using the support email address displayed in the footer of this website. Please include "Privacy" in your subject line and provide your registered account username.

If you are not satisfied with ng999's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority applicable in your jurisdiction. ng999 will cooperate fully with any supervisory authority investigation.