W2299 Privacy Policy – Malaysia Personal Data Protection

Welcome to the w2299 Privacy Policy. This document explains how w2299 ("we", "Platform") collects, processes, stores, and protects your personal data when you use the https://w2299.net and all services offered under the w2299 brand.

W2299 takes the privacy of every Malaysian member seriously. We understand that your personal data — including financial information and transaction history — is highly sensitive and deserves the strongest possible protection. That is why we invest wholeheartedly in security infrastructure and data handling practices that meet the latest industry standards.

This Privacy Policy applies to all users of the w2299 platform, including website visitors, registered members, and applicants in the process of registering. By using the w2299 platform, you agree to the terms set out in this Privacy Policy. If you do not agree, please discontinue use of our platform.

W2299 collects your personal data through several channels. Below are the categories of data we may collect:

We may also receive your personal data from legitimate third-party sources, such as identity verification service providers, local Malaysian payment providers, and fraud prevention agencies, where required for security and compliance purposes.

W2299 uses your personal data only for legitimate and specified purposes. We will not process your data beyond the scope outlined below without obtaining fresh consent from you:

• Account Management: Creating, verifying, and managing your member account on the w2299 platform.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks), as well as withdrawals to your bank account.
• Identity Verification (KYC): Verifying that you meet the age and eligibility requirements in line with Malaysian legal compliance obligations.
• Security & Fraud Prevention: Detecting and preventing unauthorised access, identity fraud, money laundering, and any activity that violates w2299's Terms & Conditions.
• Customer Support: Addressing your enquiries, complaints, and requests via live chat and email.
• Service Communications: Sending important notifications about your account, policy updates, promotions you have opted in to receive, and security updates.
• Responsible Gambling: Monitoring your betting patterns to identify signs of problem gambling and provide appropriate assistance.
• Platform Enhancements: Analysing usage data in aggregate and anonymised form to improve platform features, user experience, and technical performance.
• Legal Compliance: Fulfilling the reporting and record-keeping obligations required by Malaysian authorities.

When you register with w2299 and opt in to marketing communications, you may withdraw that consent at any time through your account settings or by contacting our support team.

W2299 does not sell or provide your personal data to any third party for their marketing or commercial purposes. However, we may share your personal data in the following limited circumstances:

• Payment Service Providers: Required transaction details are shared with local Malaysian payment providers such as Touch 'n Go, GrabPay, DuitNow, and FPX-participating banks to process your financial transactions.
• Identity Verification Providers: KYC verification data is shared with licensed and trusted identity verification partners to authenticate your documents.
• Game Providers: Limited account information is shared with live casino and slots game providers partnering with w2299, solely for technical game operation purposes.
• Statutory Authorities: w2299 will disclose personal data to Malaysian authorities (such as the police, courts, or the Malaysian Communications and Multimedia Commission) when required to do so by court order or applicable law.
• Business Transfer: In the event of a merger, acquisition, or sale of w2299's assets, members' personal data may be transferred to the new entity, subject to written notice being provided to affected members.

W2299 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, alteration, or unintended disclosure:

• 256-bit SSL Encryption: All communications between your browser and w2299's servers are protected by 256-bit TLS/SSL encryption, ensuring that data in transit cannot be intercepted.
• Encrypted Data Storage: Sensitive data such as passwords, banking details, and MyKad numbers are stored in encrypted form within protected databases.
• Two-Factor Authentication (2FA): We encourage the use of 2FA via SMS OTP to your registered Malaysian mobile number as an added layer of security.
• 24/7 Monitoring: An automated monitoring system runs around the clock to detect suspicious activity, unusual login attempts, and potential security threats.
• Role-Based Access Control: Internal w2299 staff may only access data relevant to their specific job responsibilities.
• Regular Security Audits: w2299 conducts regular security audits and independent penetration testing to identify and address vulnerabilities.
• Secure Data Centres: Member data is stored in data centres equipped with physical access controls, CCTV surveillance, and fire protection systems.

While we take all reasonable precautions, no security system can be guaranteed 100% secure. In the event of a data breach involving your personal data, w2299 is committed to notifying you within a reasonable timeframe and taking the necessary remedial action.

W2299 uses cookies and similar tracking technologies to enhance your experience on the platform. Below are the types of cookies we use:

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the w2299 platform. Please note that disabling all cookies does not mean you are completely untracked — certain information such as your IP address may still be recorded by our servers for security purposes.

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights regarding your personal data held by w2299:

W2299 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law:

• Active Account Data: Retained for the duration of your active membership on the w2299 platform.
• Closed Account Data: Retained for a minimum of 7 years following account closure to meet financial record-keeping and compliance audit requirements under Malaysian law.
• Financial Transaction Data: Retained for 7 years in compliance with Malaysia's Income Tax Act requirements and anti-money laundering (AMLA) regulations.
• Security Logs: Retained for 12 months for security investigation and digital forensics purposes.
• Support Communication Data: Retained for 3 years for reference and service improvement purposes.

Once the specified retention period has elapsed, your personal data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-linked to your identity.

The w2299 platform is strictly for individuals aged 18 years and above only. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

Should we discover that personal data belonging to someone under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect their child has registered on the w2299 platform without authorisation are encouraged to contact us immediately at support@w2299.net.

W2299 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or technological developments. The "Updated" date at the top of this page will always reflect the latest version.

For amendments that involve material changes to how we handle your personal data, we will:

• A clear notice will be displayed on the w2299 platform homepage at least 14 days before any changes take effect.
• Sends notification emails to all registered members with an active email address.
• In cases of highly significant amendments, request your renewed consent before continuing to process your data.

Continued use of the w2299 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way w2299 handles your personal data, please contact our Data Protection Officer (DPO):

• Email: support@w2299.net (subject: "Privacy Policy Enquiry")
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the w2299 platform
• Response Time: We are committed to responding to all privacy-related enquiries within 14 business days

If you believe that w2299 has not handled your privacy complaint to your satisfaction, you have the right to lodge a complaint with Department of Personal Data Protection, Ministry of Communications and Digital Malaysia through their official channels.