Spade99 Privacy Policy – Our Commitment to Protecting Your Data

Spade99 ("we", "our platform") understand that privacy is something every individual values deeply. When you register and use the Spade99 platform – whether to play slots, baccarat, blackjack, roulette, live casino, or to place sports bets on the Liga Super Malaysia, EPL, badminton, or e-sports – you are trusting us with your personal information. We do not take that trust lightly.

This Privacy Policy transparently describes how Spade99 collects, uses, stores, protects, and shares your personal data when you use our platform. This document has been prepared in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and comply with all applicable data protection legal requirements in Malaysia.

By registering a Spade99 account or continuing to use our platform, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please contact our support team before continuing.

Spade99 collects personal data from various sources during your interactions with our platform. Below are the categories of data we collect, along with examples of the information included in each category:

Spade99 does not collect sensitive data such as health information, biometric data, political views, or religious beliefs except in very specific circumstances and with your explicit consent. We only collect data that is genuinely necessary for legitimate platform operations – nothing more.

Spade99 collects and processes your personal data solely for legitimate and transparent purposes. The primary purposes are as follows:

• Registration and Account Management: Processing your registration application, creating and managing your Spade99 account, and enabling you to log in securely to the platform.
• Identity Verification (KYC): Conducting the Know Your Customer (KYC) process required to verify member identities, and to prevent fraud, money laundering, and platform access by individuals under the age of 18.
• Financial Transaction Processing: Processing deposits via DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, as well as processing winnings withdrawals to your bank account or e-wallet.
• Platform Service Delivery: Providing access to all Spade99 games and services, including slots, Live Casino, baccarat, blackjack, roulette, and Sports Betting.
• Customer Support: Handling your enquiries, complaints, and assistance requests via Live Chat, WhatsApp, and email.
• Security & Fraud Prevention: Identifying and investigating suspicious activity, preventing unauthorised access, and protecting the platform and its members from fraud.
• Legal Compliance: To fulfil our obligations under applicable laws and regulations, including Malaysia's PDPA 2010 and other relevant legislation.
• Platform Improvements: Analysing platform usage patterns on an aggregate basis (without identifying individuals) to help us improve the user experience, develop new features, and resolve technical issues.
• Marketing Communications: Sending information about Spade99 promotions, bonuses, and special offers to members who have consented to receive such communications. You may withdraw this consent at any time.

To give you a clear and honest picture, here is a more detailed explanation of how your data is used in Spade99's day-to-day operations:

During the registration process: Your name, phone number, and email are used to create a unique account and to send a verification OTP. This data is also used to confirm that you do not already hold another Spade99 account, in line with our one-account-per-user policy.

During financial transactions: Your payment method details — whether DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay — are used solely to process deposits and withdrawals. Spade99 does not store your full bank card number or sensitive payment information directly — all financial data is processed through secure, certified payment gateways.

In fraud detection systems: Your IP address, device data, and account activity patterns are automatically analysed by our security systems to identify unusual or suspicious activity. This analysis is carried out to protect your account from unauthorised access and to safeguard the platform against misuse.

In bonus and VIP programmes: Your game history and transaction records are used to determine bonus eligibility, calculate progress in the VIP programme, and ensure rollover requirements are met before withdrawals are approved.

In marketing communications: If you have given your consent, your email or phone number may be used to send you information about the latest Spade99 promotions, seasonal bonuses for occasions such as Hari Raya, or major sporting tournaments like the Thomas Cup or World Cup, as well as exclusive offers for VIP members. Every marketing communication will include an option to unsubscribe.

Spade99 does not sell, rent, or commercialise members' personal data to any third party. However, in the course of operating the platform, we may share your personal data with the following limited categories of third parties, and only to the extent necessary:

• Payment Service Providers: Payment gateways and service providers that process your DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay transactions are required to receive certain information in order to process those transactions. These providers are bound by strict confidentiality agreements.
• Game Software Providers: World-class game providers such as Pragmatic Play, PG Soft, Evolution Gaming, and others may receive the technical data necessary to deliver game content to you. They do not receive your full identity information.
• Security and KYC Service Providers: Companies providing identity verification, fraud detection, and anti-money laundering compliance services may process your identification data for verification purposes.
• Competent Authorities: Spade99 may be legally required to disclose certain data to Malaysian government authorities or law enforcement bodies where a valid court order or applicable legal requirement exists.

In all of the above cases, data sharing is limited to the minimum information necessary, and third parties receiving your data are bound by confidentiality obligations that are equivalent to or more stringent than those we impose on ourselves.

Spade99 invests seriously in security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The security measures we have implemented include:

• Encryption in Transit: All communications between your browser or app and Spade99's servers are protected using TLS (Transport Layer Security) protocol with 256-bit encryption. This ensures that data transmitted — including login credentials and transaction details — cannot be intercepted by third parties.
• Stored Data Encryption: Sensitive data stored in the Spade99 database – including passwords (stored as hashes, never in plain text) and financial information – is encrypted using the latest industry standards.
• Internal Access Controls: Access to members' personal data within the Spade99 organisation is restricted to personnel who require it to carry out their duties. All access is logged and periodically audited.
• Two-Factor Authentication (2FA): All Spade99 internal systems containing member data are protected with two-factor authentication. We also encourage members to enable 2FA on their accounts for an added layer of security.
• 24/7 Monitoring: Spade99's security systems are monitored around the clock by a trained information security team. Any unusual activity or potential security breach is responded to promptly.
• Regular Penetration Testing: Spade99 conducts regular penetration testing using independent security specialists to identify and remediate vulnerabilities in our systems before they can be exploited.
• Incident Response Plan: We have a comprehensive security incident response plan in place. In the event of a data breach affecting your personal information, Spade99 is committed to notifying you and the relevant authorities within the timeframe required by law.

The Spade99 platform uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and analyse platform usage patterns on an aggregate basis.

Types of cookies used by Spade99:

• Session Cookies: Required to maintain your logged-in status during an active session. This cookie is automatically deleted when you close your web browser. Without it, the Spade99 platform cannot function properly.
• Preference Cookies: Saves your preferences such as language, display size, and game settings so you do not need to reconfigure them each time you log in to Spade99.
• Analytics Cookies: Used to collect aggregated, anonymous platform usage data — including visitor counts, most-visited pages, session duration, and navigation paths. This data helps us improve the platform.
• Security Cookies: Helps identify and prevent fraudulent activity, CSRF (Cross-Site Request Forgery) attacks, and other security threats.

You can control and manage cookies through your web browser settings. Please note, however, that disabling certain cookies — particularly session and security cookies — may affect the functionality and security of the Spade99 platform for you.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by Spade99. We respect and facilitate the exercise of these rights:

To exercise any of the rights above, please contact the Spade99 Data Privacy Officer by email at support@spade99.best or via Live Chat on the platform. We will process your request within 14 business days. For complex cases, we may require up to 30 business days and will notify you accordingly.

Spade99 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable laws and regulations in Malaysia.

In general, our data retention policy is as follows:

• Active Account Data: For as long as your Spade99 account remains active, we retain all data necessary to manage your account and provide our services to you.
• Data After Account Closure: Once your account is closed, we retain your personal data and transaction history for the minimum period required under Malaysia's anti-money laundering legislation and financial regulations – typically between 5 and 7 years.
• Support Communication Data: Customer support chat records are retained for 3 years for reference and dispute resolution purposes.
• Aggregate Analytics Data: Anonymised and aggregated platform usage data (with no personal identifiers) may be retained for a longer period for trend analysis and platform improvement purposes.

Once the designated retention period has elapsed, Spade99 will securely delete or anonymise your personal data using procedures that comply with industry standards for irreversible data deletion.

The Spade99 platform is intended exclusively for users aged 18 years and above only. We do not intentionally collect, store, or process personal data from individuals under the age of 18.

Spade99 enforces strict age verification procedures during the registration process to ensure that only eligible individuals can create an account and use our platform. Any account found to be owned or used by a minor will be terminated immediately, and all related data will be deleted once the investigation is complete.

If you are a parent or guardian and become aware that your child or ward has registered a Spade99 account without authorisation, please contact us immediately at support@spade99.best. We will take immediate action to close the account and delete all associated data. 18+

Spade99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, current legal requirements, or improvements in how we handle data. The "Updated" date at the top of this document will always reflect the date of the most recent amendment.

For amendments deemed material — such as changes to the types of data collected, new purposes for data processing, or changes to data-sharing policies — Spade99 will endeavour to provide advance notice to members via their registered email or in-platform notifications before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Spade99 platform after any amendments are published constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or complaints regarding how Spade99 handles your personal data, or if you wish to exercise any of the privacy rights described in this Privacy Policy, please contact us through the following channels:

• Privacy Email: support@spade99.best (please include "Privacy Inquiry" in the email subject for faster processing)
• Live Chat: Available 24 hours a day, 7 days a week within the Spade99 platform
• WhatsApp: The Spade99 support WhatsApp number is available on the platform after you log in

Our team is committed to responding to privacy-related inquiries within 3 working days and resolve data rights requests within 14 business days. If your case requires a more in-depth investigation, we will notify you within 5 business days and provide a realistic estimated resolution time.

If you believe that Spade99 has not handled your personal data in accordance with the requirements of the Malaysia PDPA 2010 and you are dissatisfied with our response, you have the right to lodge a formal complaint with Malaysia's Personal Data Protection Department which is the relevant regulatory body under Malaysia's Ministry of Communications and Multimedia.