ceo99 Privacy Policy

1. Introduction

ceo99 is committed to protecting the privacy and security of all personal data entrusted to us by Malaysian players and visitors to the ceo99 platform. This Policy is designed to be transparent about our data practices. We encourage you to read it carefully before registering or continuing to use ceo99. If you have any questions, please contact us via in-platform live chat before proceeding.

This Policy applies to all personal data collected through the ceo99 website, mobile browser interface, customer support channels, and any ceo99 marketing communications you have opted into. It does not apply to third-party websites linked from ceo99 or to the privacy practices of ceo99's licensed game software providers, who maintain their own separate privacy policies.

2. Data Controller

For the purposes of applicable data protection legislation, ceo99 acts as the data controller in respect of personal data collected from registered Members. ceo99 operates under international gaming authority licensing. Questions regarding the identity of the data controller may be directed to the ceo99 support team.

3. Personal Data We Collect

ceo99 collects the following categories of personal data from players:

• Registration Data: Full legal name, date of birth, residential address, nationality, email address, and Malaysian mobile phone number provided at account registration.
• Identity Verification Data: Copies of government-issued identification documents (e.g., Malaysian MyKad, passport), proof of address, and where required, selfie photographs submitted for KYC verification purposes.
• Financial Data: Payment method details including e-wallet identifiers (Touch n Go eWallet, Boost, GrabPay), DuitNow QR identifiers, and bank account details (Maybank, CIMB, Public Bank) used for deposit and withdrawal transactions. ceo99 does not store full card numbers or CVV codes.
• Transaction Data: Records of all deposits, withdrawals, wagers placed, game results, bonus claims, and account balance history.
• Device and Technical Data: IP address, browser type and version, operating system, device identifiers, session timestamps, and geolocation data (country/region level only).
• Communication Data: Records of live chat support interactions, email correspondence, and any feedback or complaints submitted to ceo99.
• Marketing Preferences: Your stated preferences for receiving promotional communications from ceo99, and records of any consent withdrawals.

ceo99 does not knowingly collect personal data from individuals under 21 years of age. If ceo99 discovers that personal data has been collected from an underage individual, that account will be immediately closed and all associated data deleted or anonymised in accordance with applicable legal retention requirements.

4. How We Use Your Personal Data

ceo99 uses collected personal data for the following purposes:

• Account Management: To create, maintain, verify, and administer your ceo99 account, including login authentication and account security.
• Service Delivery: To process deposits, withdrawals, and wagers; to credit bonus promotions; and to provide access to all ceo99 gaming products.
• Legal and Regulatory Compliance: To satisfy KYC, AML, and counter-terrorism financing obligations under our international gaming licence; to verify age and identity; and to report suspicious transactions to relevant authorities as required by law.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, multiple account creation, and other prohibited conduct as defined in the ceo99 Terms & Conditions.
• Responsible Gaming: To monitor player behaviour for indicators of problem gambling and to administer self-exclusion, deposit limit, and session control tools where requested or required.
• Customer Support: To respond to enquiries, process complaints, and deliver technical support via live chat and email.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve platform performance, game selection, and user experience.
• Marketing Communications: To send promotional offers, bonus notifications, and product updates to players who have provided marketing consent. ceo99 will not send unsolicited marketing communications.

5. Legal Basis for Processing

ceo99 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the agreement between ceo99 and the Member, including account administration, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with KYC, AML, licensing, and other applicable regulatory requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where ceo99's interests do not override the player's data protection rights.
• Consent: Processing for direct marketing communications, where freely given and withdrawable consent has been obtained.

6. Data Sharing and Disclosure

ceo99 does not sell personal data to third parties. Personal data may be shared in the following limited circumstances:

• Licensed Game Providers: Game software providers (e.g., Evolution Gaming, Pragmatic Play, PG Soft) may receive limited technical data necessary to deliver their games within the ceo99 platform. These providers are contractually bound to process data only as directed by ceo99.
• Payment Processors: Transaction data is shared with payment service providers (Touch n Go, DuitNow, Malaysian bank FPX networks) solely to the extent necessary to process deposits and withdrawals.
• Regulatory Authorities: ceo99 may be required to disclose player data to licensing authorities, financial intelligence units, or law enforcement agencies in accordance with applicable legal obligations. ceo99 will notify affected players of such disclosures where legally permitted to do so.
• Professional Advisors: Legal, audit, and compliance advisors engaged by ceo99 may have access to personal data on a need-to-know basis under binding confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or transfer of the ceo99 business, player data may be transferred to the successor entity, which will be required to honour the terms of this Policy.

7. Cookies and Tracking Technologies

ceo99 uses cookies and similar technologies (pixel tags, local storage) on the ceo99 platform for the following purposes:

• Essential Cookies: Necessary for platform functionality including login session maintenance, security tokens, and payment flow continuity. These cannot be disabled without affecting platform usability.
• Performance Cookies: Collect aggregated, anonymised data on how players navigate the ceo99 platform — page views, session duration, error frequency — to improve platform performance.
• Preference Cookies: Store your language, display settings, and game lobby preferences to personalise your ceo99 experience across sessions.

You can manage cookie preferences via your browser settings. Disabling non-essential cookies will not prevent you from using ceo99 but may affect certain personalisation features. ceo99 does not use advertising or third-party tracking cookies.

8. Data Retention

ceo99 retains personal data for as long as your account is active and for such further periods as are required to comply with applicable legal and regulatory obligations. Under our gaming licence conditions, transaction and identity verification records are typically required to be retained for a minimum period following account closure. Anonymised or aggregated data that does not identify individual players may be retained indefinitely for statistical purposes.

When personal data is no longer required and no legal retention obligation applies, ceo99 will delete or irreversibly anonymise it within a reasonable period.

9. Data Security

ceo99 implements technical and organisational security measures appropriate to the sensitivity of personal data held, including:

• 256-bit SSL/TLS encryption for all data transmitted between player devices and ceo99 servers.
• Hashed, salted storage of all account passwords — ceo99 does not store plain-text credentials.
• Access controls restricting internal data access to authorised personnel with a legitimate business need.
• Regular security audits and vulnerability assessments by independent third-party security professionals.
• Incident response procedures to detect, report, and remediate any personal data breaches within required regulatory timeframes.

While ceo99 takes all reasonable measures to protect your data, no internet transmission is completely secure. Players are responsible for maintaining the confidentiality of their ceo99 login credentials and for notifying ceo99 support immediately of any suspected unauthorised account access.

10. Your Data Rights

Subject to applicable law and our regulatory obligations, ceo99 players have the following rights regarding their personal data:

• Right of Access: Request a copy of the personal data ceo99 holds about you.
• Right of Rectification: Request correction of inaccurate or incomplete personal data.
• Right of Erasure: Request deletion of personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention requirements.
• Right to Restriction: Request that ceo99 restricts processing of your personal data in certain circumstances (e.g., while a rectification request is pending).
• Right to Object: Object to processing based on legitimate interests, including profiling for responsible gaming purposes.
• Right to Withdraw Consent: Withdraw marketing consent at any time via account settings or by contacting support. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, contact ceo99 support via in-platform live chat. ceo99 will respond within 30 days. ceo99 may request proof of identity before processing access or erasure requests.

11. Children and Minors

ceo99 services are strictly for individuals aged 21 years and above. ceo99 does not knowingly collect or process personal data from individuals under 21. Registration requires declaration of age, and documentary age verification is conducted on all accounts. If you believe a minor has registered on ceo99, please contact our support team immediately. ceo99 will close any confirmed underage account and delete associated personal data promptly.

12. International Data Transfers

ceo99 operates under international gaming authority licensing. Personal data may be stored on and transferred to servers located outside Malaysia. Where such transfers occur, ceo99 ensures that appropriate safeguards are in place — including contractual data protection clauses with service providers — to ensure that your personal data receives a standard of protection equivalent to that required under applicable data protection law.

13. Changes to This Privacy Policy

ceo99 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered Members via email or through a prominent notice on the ceo99 platform prior to the changes taking effect. Continued use of the ceo99 platform after notification constitutes acceptance of the updated Policy. We encourage you to review this page periodically to stay informed of any updates.

14. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the manner in which ceo99 processes your personal data, please contact the ceo99 Privacy team via in-platform 24/7 live chat or by writing to the email address shown in the footer of this page. ceo99 will acknowledge your enquiry promptly and respond in full within 30 days.