mco99 Privacy Policy: How We Collect, Use and Protect Your Information

1. Introduction

This Privacy Policy applies to the personal information mco99 processes in connection with the mco99 website, the related mobile experience and any account, transaction, support interaction or promotional activity associated with the platform. It applies to players, registered members and visitors who browse without registering.

mco99 is committed to handling personal data in a manner that is lawful, fair and transparent. This Privacy Policy should be read alongside the mco99 Terms & Conditions, which govern the rules of use, and the Responsible Gambling page, which explains the specific data used to support safer-play measures. Where those documents address a data matter, this Privacy Policy provides the underlying data processing context.

If you have questions about any matter not addressed here, please contact mco99 support through the live chat available on the platform.

2. Definitions

The following terms are used throughout this Privacy Policy with the meanings given below.

3. Data we collect

The personal data mco99 collects depends on the nature of the interaction. The table below describes the main categories, together with the typical source and primary purpose.

mco99 does not deliberately collect personal data from persons under 21 years of age. Where such data is received accidentally, it will be deleted promptly following identification.

4. How we collect personal data

mco99 collects personal data through the following means:

• Direct provision: Information you submit when registering an account, completing identity checks, making a deposit or withdrawal, requesting a promotion, contacting support or setting responsible gambling controls.
• Automated collection: Technical data gathered as you browse the platform, including device identifiers, IP addresses, session durations and navigation paths, recorded through server logs and similar technologies.
• Payment providers: Confirmation and reference data from Malaysian payment channels including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost and GrabPay, received as part of transaction processing.
• Identity verification services: Where mco99 uses a third-party provider to confirm identity documents or conduct required checks, that provider may return a verification result and associated data.
• Cookies and similar technologies: Session cookies, authentication tokens and optional analytics or preference cookies placed on your device as described further in the cookies section below.

5. Legal basis and purposes of processing

mco99 processes personal data on the following legal bases, depending on the purpose:

5.1 Contractual necessity

Identity data, contact data, payment data and account activity data are processed because they are necessary to provide the services described in the mco99 Terms & Conditions. Without this processing, mco99 cannot open an account, verify age, process a MYR transaction or deliver the gaming and betting services.

5.2 Legal obligation

mco99 processes identity, payment and activity data to the extent required by applicable financial crime, anti-money laundering and record-keeping obligations. Such processing is mandatory and cannot be limited by a player's preference.

5.3 Legitimate interests

mco99 processes device and technical data, account activity data and support interaction data to detect and prevent fraud, investigate security incidents, protect the integrity of sporting markets, improve platform performance and manage complaints. These interests are balanced against player rights and do not override individual freedoms where data subjects would reasonably object.

5.4 Responsible gambling obligations

mco99 monitors account activity and processes responsible gambling data to identify patterns that may indicate problematic play and to apply requested controls. This processing serves a protective function in relation to members who use the platform.

5.5 Consent

Where mco99 seeks to send optional promotional communications or apply non-essential cookies, it will first obtain appropriate consent. Consent may be withdrawn at any time without affecting the lawfulness of processing that occurred before withdrawal.

6. Sharing of personal data

mco99 does not sell, lease or transfer personal data to unconnected third parties for their own marketing purposes. Data is shared only in the following circumstances:

• Payment and banking partners: Data necessary to process MYR deposits and withdrawals is shared with the relevant payment provider, bank or eWallet operator including Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost and GrabPay.
• Identity verification providers: Where third-party verification is used, the identity data required for the check is shared with the verification partner under a data processing agreement.
• Technology and hosting providers: Service providers that operate platform infrastructure, security tools or support systems process personal data under contractual obligations that restrict further use and require appropriate safeguards.
• Legal and regulatory bodies: mco99 may disclose personal data to competent authorities, courts or regulators where required by a binding legal obligation, court order or lawful governmental request.
• Business transfers: In the event of a merger, acquisition or asset sale involving mco99, personal data held at the time may be transferred to the relevant successor entity, subject to the protections stated in this Privacy Policy continuing to apply.

7. Data retention

mco99 retains personal data for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory or contractual obligations. General retention guidance is as follows:

• Account and identity data: Retained for the duration of the account relationship and for a defined period after account closure as required by applicable law and financial crime obligations.
• Transaction and payment data: Retained in accordance with financial record-keeping requirements applicable to MYR transactions.
• Responsible gambling data: Self-exclusion records and limit histories may be retained for a defined period after account closure to prevent the creation of duplicate accounts.
• Support and complaint data: Retained for a reasonable period after resolution to allow for follow-up and quality review.
• Device and technical data: Retained for the period necessary to support security monitoring and operational diagnostics.

When retention is no longer necessary and no lawful basis applies, personal data is securely deleted or anonymised so that it cannot be attributed to an individual.

8. Cookies and tracking technologies

mco99 uses cookies and similar technologies on its platform. The main categories in use are:

• Essential cookies: Required for login sessions, security tokens and core platform functions. These cannot be disabled without affecting the ability to use the service.
• Functional cookies: Remember preferences such as language settings and session configurations so that you do not need to re-enter them on each visit.
• Analytics cookies: Collect aggregated information about how players navigate the platform, which pages are visited and where errors occur. This data is used to improve service performance.

Most browsers allow cookies to be managed through settings. Disabling essential cookies will impair access to authenticated areas of mco99. Analytics and functional cookies may ordinarily be disabled without preventing basic platform use.

9. Security measures

mco99 applies technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration or disclosure. These include encrypted connections between the player's device and mco99 systems, access controls that restrict internal data access to personnel who require it for their role, regular review of security procedures and contractual requirements applied to third-party processors.

No online transmission or storage system can guarantee absolute security. Players should use unique, strong passwords, avoid public devices, enable any additional security features offered and report unusual account activity to support promptly. mco99 will take reasonable steps to contain and investigate any reported security concern.

10. User rights

Subject to applicable law, mco99 account holders may exercise the following rights in relation to personal data mco99 holds about them. Requests should be submitted through the live chat support channel together with sufficient information to identify the account.

• Access: Request a description of the categories and specific items of personal data mco99 holds about you.
• Correction: Ask mco99 to correct personal data that is inaccurate or incomplete.
• Deletion: Request erasure of personal data where it is no longer necessary for its original purpose, subject to mco99's legal obligations to retain certain records.
• Restriction: Ask mco99 to restrict processing in defined circumstances, such as where accuracy is disputed, while the matter is resolved.
• Objection: Object to processing based on legitimate interests where you believe your individual situation warrants a different outcome.
• Portability: Request personal data you have provided to mco99 in a structured, machine-readable format where the processing is based on contract or consent.
• Withdrawal of consent: Where processing is based on consent, withdraw that consent at any time without affecting prior lawful processing.

mco99 will respond within a reasonable period. Some requests may be declined where they conflict with a legal obligation, fraud prevention requirement, ongoing investigation or active responsible gambling restriction. Where a request is declined, mco99 will explain the reason as far as permitted.

11. Children and minors

mco99 is strictly for adults aged 21 and above. The platform is not directed at persons below this age, and mco99 does not knowingly collect personal data from such persons. Where mco99 becomes aware that data belonging to a person under 21 has been collected, that data will be promptly deleted and the account closed.

Players who suspect underage access should report this through support so that mco99 may investigate and act accordingly.

12. Updates to this Privacy Policy

mco99 may update this Privacy Policy when changes to platform operations, applicable law, payment processing arrangements or data practices make a revision necessary. Material changes will be indicated by a revised effective date and, where appropriate, a notification through the platform.

Continued use of mco99 following the revised effective date constitutes acceptance of the updated Privacy Policy. Players who do not accept the revised terms should stop using the platform and may request account closure through support.

13. Contact

Questions, requests or concerns relating to this Privacy Policy should be directed to mco99 customer support through the live chat available on the platform. Please do not send passwords, payment credentials or one-time verification codes when contacting support.

For formal data subject rights requests, please include your account reference, the nature of your request and sufficient information to confirm your identity without including sensitive authentication details.