Privacy Policy – dn999

1. Data Controller

1.1 For the purposes of applicable data protection law, dn999 ("the Platform", "we", "us", "our") is the data controller responsible for the personal data of Players ("you", "your") collected and processed through the dn999.win website and associated services.

1.2 All data processing activities carried out by dn999 are conducted in compliance with the personal data protection obligations applicable to online gaming operators under international licensing standards.

2. Data We Collect

2.1 Identity Data. Full legal name, date of birth, nationality, and a copy of your government-issued identification document (Malaysian IC, passport, or equivalent) collected as part of the mandatory Know Your Customer (KYC) verification process.

2.2 Contact Data. Registered email address, phone number (if provided), and residential address, including postcode and country of residence.

2.3 Financial Data. Payment method details (where permissible to store under applicable regulations), transaction history including deposits, withdrawals, and wager records denominated in Malaysian Ringgit (MYR).

2.4 Account Data. Username, account preferences, responsible gaming settings (deposit limits, session alerts, self-exclusion status), promotional eligibility, and communication preferences.

2.5 Technical Data. IP address, browser type and version, device type and operating system, session timestamps, pages visited, and referral source data collected automatically when you access dn999.win.

2.6 Communications Data. Records of correspondence between you and dn999 customer support, including live chat transcripts, email exchanges, and any documentation submitted in connection with account queries or disputes.

2.7 Behavioural Data. Gaming activity data including game titles accessed, bet amounts, win/loss records, session durations, and patterns of play. This data is used for responsible gaming monitoring and fraud detection purposes.

3. How We Collect Data

3.1 Directly from You. Data you provide when registering an account, completing KYC verification, making a deposit, requesting a withdrawal, contacting customer support, or responding to a promotional communication.

3.2 Automatically. Technical and behavioural data collected automatically through cookies, server logs, and similar tracking technologies when you access and navigate the dn999 platform.

3.3 Third Parties. Identity verification data from KYC service providers; fraud and sanctions screening data from compliance data providers; payment processing data from licensed payment service providers including Touch 'n Go eWallet, Boost, Maybank FPX, CIMB Clicks, and Public Bank.

4. Purpose & Legal Basis for Processing

4.1 dn999 processes your personal data only where a lawful basis for doing so exists. The primary purposes for which we process personal data, together with the applicable legal basis, are set out below.

• Account registration and management – necessary for the performance of our contract with you as a Player;
• Identity and age verification (KYC) – compliance with legal obligations under gaming licensing requirements, including the mandatory enforcement of the 21+ age restriction;
• Processing deposits and withdrawals – necessary for the performance of our contract with you;
• Anti-money laundering (AML) and fraud prevention – compliance with legal obligations and legitimate interests in protecting the integrity of the Platform;
• Responsible gaming monitoring – legitimate interests in identifying at-risk players and fulfilling regulatory obligations relating to player protection;
• Customer support – legitimate interests in resolving your queries and maintaining service quality;
• Platform security and abuse prevention – legitimate interests in protecting the Platform and its users;
• Marketing and promotional communications – your consent, where you have opted in to receive such communications.

5. Data Sharing & Disclosure

5.1 dn999 does not sell, rent, or trade your personal data to any third party for their own commercial purposes.

5.2 We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• KYC and identity verification providers – to fulfil age and identity verification obligations;
• Payment service providers – to process deposits and withdrawals via Touch 'n Go eWallet, Boost, Maybank FPX, CIMB Clicks, Public Bank, and cryptocurrency processors;
• Gaming software providers – limited technical data necessary for game delivery and RNG certification logging;
• AML and fraud screening services – to screen transactions and account activities against sanctions lists and fraud databases;
• IT infrastructure and cloud hosting providers – solely for the purpose of operating and maintaining the dn999 platform;
• Regulatory and law enforcement authorities – where dn999 is legally compelled to disclose information, including in connection with AML reporting obligations or a court order.

5.3 All third-party service providers engaged by dn999 are required to process personal data only on dn999's documented instructions and in compliance with applicable data protection law.

6. Data Retention

6.1 dn999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations.

6.2 Active accounts: Personal data is retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements applicable to online gaming operators.

6.3 KYC documentation: Identity verification documents are retained for the period required under the applicable gaming licence conditions and AML regulations, which is generally a minimum of five (5) years from the date of submission.

6.4 Transaction records: Financial transaction data including deposit and withdrawal records is retained for a minimum of five (5) years from the date of each transaction.

6.5 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with dn999's data disposal procedures.

7. Cookies & Tracking Technologies

7.1 dn999.win uses cookies and similar tracking technologies to operate the Platform, analyse usage patterns, and deliver a personalised experience. By using the Platform, you consent to the use of cookies as described in this section.

Types of Cookies Used

• Strictly necessary cookies – required for the Platform to function, including authentication session cookies and security tokens. These cannot be disabled.
• Analytics cookies – used to understand how players navigate the Platform, which pages are visited, and where errors occur. This data is aggregated and anonymised.
• Functional cookies – used to remember your preferences such as language settings, display preferences, and responsible gaming configuration.
• Performance cookies – used to monitor Platform performance, server response times, and the delivery of game assets.

7.2 You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may impair the functionality of the dn999 Platform.

8. Data Security

8.1 dn999 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• TLS 1.3 encryption for all data transmitted between your browser and dn999 servers;
• Secure, salted hashing of account passwords — passwords are never stored in recoverable plain text;
• Access controls limiting employee access to personal data on a strict need-to-know basis;
• Login anomaly detection to identify and flag unusual access patterns on player accounts;
• Two-factor authentication (2FA) available to all Players, strongly recommended for account protection;
• Regular security audits and vulnerability assessments of the Platform infrastructure.

8.2 No method of data transmission over the internet or electronic storage is 100% secure. While dn999 employs industry-standard safeguards, we cannot guarantee absolute data security. In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected individuals, dn999 will notify the relevant regulatory authority and affected Players in accordance with applicable notification obligations.

9. Your Data Rights

9.1 Subject to applicable data protection law, you have the following rights in relation to your personal data held by dn999:

• Right of access – you may request a copy of the personal data dn999 holds about you;
• Right to rectification – you may request correction of inaccurate or incomplete personal data;
• Right to erasure – you may request deletion of your personal data where dn999 no longer has a legal basis for processing it, subject to overriding retention obligations;
• Right to restrict processing – you may request that dn999 limits its processing of your data in certain circumstances;
• Right to data portability – you may request a structured, machine-readable copy of the data you have provided to dn999;
• Right to object – you may object to processing carried out on the basis of legitimate interests, including direct marketing;
• Right to withdraw consent – where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

9.2 To exercise any of the above rights, contact dn999's data team at: [email protected]. We will respond to all verified requests within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days, with notification provided to you.

10. Children's Privacy

10.1 dn999's services are strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If dn999 becomes aware that personal data has been collected from an individual below the minimum age requirement, we will immediately delete that data and close any associated account.

10.2 If you believe a minor has registered an account or provided personal data to dn999, please notify us immediately at [email protected] so that we can take appropriate action.

11. Cross-Border Data Transfers

11.1 In order to operate the dn999 Platform, personal data may be transferred to and processed in jurisdictions outside of Malaysia. Such transfers occur, for example, when dn999 uses cloud infrastructure hosted in other countries, or when KYC or payment processing services are operated from overseas locations.

11.2 Where personal data is transferred outside of Malaysia, dn999 ensures that appropriate safeguards are in place, which may include contractual clauses requiring the recipient to process personal data to standards equivalent to those applicable in Malaysia, or processing in jurisdictions that provide an adequate level of data protection recognised under applicable law.

12. Third-Party Links

12.1 dn999.win may contain links to third-party websites or services for informational or operational purposes. dn999 is not responsible for the privacy practices or content of any third-party website. We encourage you to review the privacy policies of any external site you visit.

13. Amendments to This Policy

13.1 dn999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered Players via email to the address on file or through a prominent notice on the Platform prior to the amendment taking effect.

13.2 The date of the most recent update is displayed at the top of this Policy. Continued use of the Platform following notification of any amendment constitutes your acceptance of the revised Privacy Policy.

14. Contact & Complaints

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or dn999's handling of your personal data, please contact us at: [email protected]

14.2 dn999 will acknowledge all privacy-related enquiries within 5 business days and endeavour to resolve complaints within 30 days of receipt of all relevant information.

14.3 If you are not satisfied with dn999's response to your privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.