Goldencity99 Privacy Policy – Malaysian Player Personal Data Protection Under PDPA 2010

1. Introduction & Scope of the goldencity99 Privacy Policy

This Privacy Policy explains how goldencity99 ("we", "the goldencity99 platform") collects, processes, uses, stores, and protects the personal data you provide to us or that we collect when you use the services on goldencity99.click.

This document forms part of the overall agreement between you and goldencity99, together with our Terms & Conditions and Responsible Gaming Policy. By registering a goldencity99 account and using our services, you agree to the data handling practices described in this Privacy Policy.

Goldencity99 acts as the data controller for your personal information and is fully responsible for ensuring that your data is handled in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards.

2. Types of Personal Data Collected by goldencity99

Goldencity99 collects your personal data through several channels — information you provide directly during registration and use of the platform, data collected automatically while you are using the platform, and in certain cases, data we receive from legitimate third parties.

Data you provide directly to goldencity99:

• Full name as per identity card or passport
• Date of birth for age verification (minimum 18 years)
• Malaysian identity card or passport number
• An active Malaysian mobile phone number
• Email address
• Residential address in Malaysia
• Payment account information (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX/Maybank2u/CIMB Clicks)
• Identity verification documents you upload (IC copy, utility bill, bank statement)

Data collected automatically during your use of goldencity99:

• Your device's IP address and approximate location information
• Device type, operating system, and web browser used
• Login history and active session duration
• Game history, including game types played and outcomes
• Complete deposit and withdrawal transaction history
• Communication records with the goldencity99 support team
• Cookie data and website usage (described in Section 7)

3. How goldencity99 Uses Your Personal Data

Goldencity99 uses the personal data we collect solely for legitimate purposes that are necessary to deliver our services to you. The following are the specific purposes for which data is used:

• Account management: Creating, verifying, and managing your goldencity99 account, including the KYC (Know Your Customer) process required by law.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, and sending your winnings withdrawals to your designated payment method.
• Provision of gaming services: Gives you access to over 1,200 games at goldencity99, including slots, Live Casino, poker, progressive jackpots, and Virtual Sports.
• VIP Rewards Programme: Calculating and automatically crediting weekly cashback, VIP points, and personalised rewards based on your gaming activity at goldencity99.
• Customer support: Handling enquiries, complaints, and support requests you submit to the goldencity99 support team via live chat or email.
• Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and any violations of goldencity99's Terms & Conditions.
• Responsible gambling: Monitoring gameplay patterns to identify players who may need support, and enforcing the self-imposed limits you have set.
• Legal compliance: Fulfilling reporting and compliance obligations to the relevant Malaysian authorities where required by law.
• Marketing communications: Sending you information about goldencity99 platform promotions, bonuses, and updates — only where you have given your consent to receive them.

4. Legal Basis for Data Processing at goldencity99

Under Malaysia's Personal Data Protection Act 2010 (PDPA), goldencity99 processes your personal data on a valid legal basis for each category of processing:

• Performance of contract: Most data processing is necessary to fulfil the service agreement between you and goldencity99 — for example, processing deposits and withdrawals, running games, and managing your account.
• Legal obligation: goldencity99 is required by Malaysian law to conduct identity verification (KYC), retain transaction records for specified periods, and report suspected activities to the relevant authorities.
• Legitimate interests: Processing for security purposes, fraud prevention, and service improvement is based on the legitimate interests of goldencity99 and its players.
• Consent: Processing for direct marketing and promotional communications is based on your consent, which may be withdrawn at any time.

5. goldencity99's Sharing of Data with Third Parties

Goldencity99 does not sell your personal data to anyone. However, in the course of providing our services, we may share data with the following limited and carefully selected categories of third parties:

• Payment providers and e-wallets: goldencity99 shares the necessary transaction information with Malaysian payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX participating banks to process your deposits and withdrawals. Information shared is limited strictly to what is required to complete the transaction.
• Game providers: Third-party game providers such as NetEnt, Pragmatic Play, PG Soft, and Evolution Gaming may receive technical data necessary to operate their games on the goldencity99 platform. They are bound by strict data protection agreements.
• IT service providers: Companies that assist goldencity99 in operating its technical infrastructure — such as server hosting, cybersecurity services, and analytics — may process your data on behalf of goldencity99 under strict data processing agreements.
• Relevant authorities: goldencity99 will disclose personal data to Malaysian authorities where required by law, court order, or in the context of a legitimate criminal investigation.
• Independent audit body: Independent auditors who verify the fairness of goldencity99's RNG and financial systems may access aggregated statistical data that does not identify any specific individual.

6. Data Security at goldencity99

Goldencity99 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

• 256-bit SSL Encryption for all data in transit between your device and goldencity99's servers.
• At-rest data encryption for all sensitive data stored in goldencity99's databases.
• Role-based access control — only goldencity99 staff who require access to carry out their authorised duties are permitted to access specific data.
• 24/7 Security Monitoring by goldencity99's cybersecurity team to detect any suspicious activity.
• Regular penetration testing (penetration testing) by independent external parties to identify and address security vulnerabilities.
• Encrypted data backups at geographically separate locations to ensure continuity of service.
• Data security training for all goldencity99 staff who handle user data.

While goldencity99 implements robust security measures, no system can guarantee absolute 100% security. In the event of a security breach involving your data, goldencity99 will notify you within 72 hours in accordance with the applicable data breach notification obligations.

7. Cookies & Tracking Technologies at goldencity99

Goldencity99 uses cookies and similar tracking technologies to enhance your user experience and ensure the platform operates correctly. The following are the types of cookies we use:

• Essential cookies: Required for core goldencity99 platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting the overall functionality of the platform.
• Performance cookies: Collects information on how you use goldencity99 — pages visited, time spent, and any errors encountered. This data is used to improve the platform and is aggregated in nature, meaning it does not identify you as an individual.
• Functional cookies: Remembering your preferences such as language, theme, and other settings to provide a more personalised experience on your next visit to goldencity99.
• Security cookies: Helping goldencity99 detect and prevent fraudulent activity, suspicious logins, and platform abuse.

You can manage cookies through your web browser settings. Please note that disabling essential cookies may affect your ability to log in and use the goldencity99 platform properly.

8. Data Storage & Retention Period at goldencity99

Goldencity99 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law. The following are our data retention guidelines:

• Active account data: Retained for the duration of your active account at goldencity99, plus any additional period required by law.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian taxation laws and financial compliance requirements.
• KYC records and identity verification: Retained for a minimum of 5 years after account closure in compliance with anti-money laundering (AML) requirements.
• Support communication logs: Retained for 3 years for dispute resolution and service improvement purposes.
• Account data closed upon request: Data will be deleted or anonymised within 90 days of the request being received, except for records that must be retained as required by law.

All goldencity99 data is stored on servers located in jurisdictions that meet the appropriate data protection standards. Where data needs to be transferred outside Malaysia — for example, for backup purposes or processing by technical service providers — goldencity99 ensures that protection equivalent to Malaysia's PDPA is maintained.

9. Your Personal Data Rights at goldencity99

As a goldencity99 player and as an individual protected under Malaysia's PDPA 2010, you have the following rights in relation to your personal data:

To exercise any of the above rights, contact the goldencity99 team via 24/7 live chat or email at support@goldencity99.click, clearly stating your request. goldencity99 may need to verify your identity before processing any data-related request in order to protect your privacy.

10. Protection of Children's Data

Goldencity99 is an adult-only entertainment platform. Our platform is not directed at, and we have no intention of collecting personal data from, individuals under the age of 18. If you are a parent or guardian and believe your child under 18 has provided personal data to goldencity99, please contact us immediately at support@goldencity99.click.

Goldencity99 will take all necessary steps to verify and promptly delete such data once it has been confirmed as belonging to a minor. Any account found to be owned by an individual under the age of 18 will be immediately terminated in accordance with the goldencity99 Terms & Conditions.

11. goldencity99 Marketing Communications

Goldencity99 may send you marketing communications about the latest promotions, new bonuses, new games, and platform updates — but only if you have given your consent to receive them during registration or through your account settings.

You may opt out of any marketing communications from goldencity99 at any time by:

• Clicking the "Unsubscribe" link found at the bottom of every goldencity99 marketing email.
• Adjusting the notification settings within your goldencity99 account.
• Contacting goldencity99 support via live chat and requesting to be removed from the marketing list.

Please note that even after you opt out of marketing communications, goldencity99 will still send essential account-related communications — such as transaction confirmations, security notifications, and important updates regarding changes to the terms of service.

12. Amendments to goldencity99's Privacy Policy

Goldencity99 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or service improvements. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending email notifications to all registered goldencity99 members at least 14 days before changes take effect.
• Displaying a clear notice on the goldencity99 homepage regarding changes that are due to take effect.

We recommend that you review this goldencity99 Privacy Policy page periodically. Your continued use of the goldencity99 platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy.

13. Contact goldencity99 About Your Data Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way goldencity99 handles your personal data, we encourage you to contact us directly:

• 24/7 Live Chat: The fastest way to get an immediate response — available on the goldencity99 platform at all times.
• Privacy Email: support@goldencity99.click — please state "Data Privacy Enquiry" in your email subject line. We will respond within 24 hours on business days.
• VIP Account Manager: For goldencity99 Platinum and Diamond VIP members, please contact your personal account manager through the channel provided to you.

If you believe that goldencity99 has not handled your personal data in accordance with the requirements of PDPA 2010, you also have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia. However, we kindly ask that you contact goldencity99 first so that we have the opportunity to address your concerns directly.