Privacy Policy

Introduction

Sizi99 ("sizi99", "we", "us", "our") operates the online gaming platform accessible at https://sizi99.click (the "Platform"). We are committed to protecting the personal data of all users ("Player", "User", "you") and to handling that data transparently, securely, and lawfully.

This Privacy Policy ("Policy") describes the categories of personal data sizi99 collects from users, the purposes for which that data is processed, the circumstances under which it may be disclosed to third parties, the measures in place to protect it, and the rights you hold in relation to your own personal data.

This Policy applies to all services offered through the Platform, including casino games, sports betting, payment processing, promotions, customer support, and any related digital communications. It is to be read in conjunction with our Terms & Conditions, which are incorporated by reference.

Definitions

In this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, location data, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means sizi99, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of sizi99 under a data processing agreement.
• "KYC" means Know Your Customer — the identity and address verification process required prior to processing withdrawals and in compliance with anti-money laundering obligations.
• "Cookies" means small text files placed on your device when you access the Platform, used for session management, analytics, and personalisation.
• "Sensitive Data" means Personal Data that requires heightened protection, including government-issued identification documents and payment card or bank account details.

Data We Collect

Sizi99 collects only the personal data that is necessary for the purposes described in this Policy. The categories of data we collect include:

3.1 Registration Data

• Full legal name
• Date of birth (for age verification — 21+ requirement strictly enforced)
• Residential address, including city and postcode (e.g., Kuala Lumpur, Petaling Jaya, Johor Bahru, Penang)
• Email address
• Mobile phone number
• Preferred language
• Account username and encrypted password

3.2 KYC and Identity Documents

• Copy of government-issued photo identification (Malaysian MyKad, Driver's Licence, or Passport)
• Proof of residential address (utility bill or bank statement within 3 months)
• Selfie photograph alongside identity document
• Proof of payment method ownership (for cryptocurrency withdrawals, wallet address confirmation may be required)

3.3 Financial Data

• Deposit and withdrawal transaction records
• Payment method identifiers (e.g., last four digits of bank account, e-wallet registered mobile number)
• Transaction amounts and timestamps
• Account balance history

Note: Full payment card numbers and bank account credentials are never stored on sizi99 servers. Payment processing is handled by regulated third-party processors.

3.4 Technical and Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser
• Session duration, login timestamps, and navigation patterns
• Game play history including bets placed, games accessed, and outcomes
• Responsible gambling tool settings (deposit limits, session timers, etc.)

3.5 Communications Data

• Support chat transcripts and email correspondence
• Feedback and complaint records
• Marketing email interaction data (opens, clicks) where you have opted in

How We Collect Data

Sizi99 collects personal data through the following channels:

• Directly from you: when you register an account, complete KYC, make deposits or withdrawals, use live chat or email support, or participate in promotions.
• Automatically: through server logs, cookies, and similar tracking technologies when you access and navigate the Platform.
• From third parties: including KYC verification partners, payment processors (Maybank2u, CIMB Clicks, DuitNow, Touch 'n Go eWallet, FPX, cryptocurrency networks), and fraud prevention services — to the extent necessary to verify your identity and process transactions.

Data Processing

Sizi99 processes your personal data for the following specific purposes:

Legal Basis for Processing

Sizi99 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the account agreement — including operating your account, processing transactions, and providing gaming services.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, KYC requirements under our gaming licence, age verification obligations, and any applicable reporting obligations.
• Legitimate Interest: Processing carried out to protect the security and integrity of the Platform, detect and prevent fraud, and improve our services — where such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw your consent at any time by updating your account communication preferences.

Data Sharing

Sizi99 does not sell your personal data. We share personal data only in the following circumstances, and only to the minimum extent necessary:

7.1 Regulated Service Providers

We share data with third-party service providers who process data on our behalf under binding data processing agreements, including:

• Payment processors and financial institutions — including providers of Maybank2u, CIMB Clicks, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency payment networks — strictly for processing deposits and withdrawals.
• KYC and identity verification service providers, for the purpose of verifying the identity and age of registered Players.
• Fraud detection and anti-money laundering screening services.
• Cloud hosting and IT infrastructure providers operating under equivalent security and data protection standards.
• Customer support platform providers who facilitate live chat and email support services.

7.2 Regulatory and Law Enforcement Authorities

Sizi99 may disclose personal data to gaming regulators, law enforcement agencies, or other governmental authorities where required to do so by applicable law, court order, or regulatory requirement — including our obligations under the Curaçao gaming licence and applicable anti-money laundering frameworks.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of sizi99's assets, personal data may be transferred to the acquiring entity. You will be notified of any such transfer and its implications for your personal data in advance.

Cookies & Tracking Technologies

Sizi99 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function — including session management, authentication, and security tokens. These cannot be disabled without preventing use of the Platform.
• Functional Cookies: Store your preferences such as language selection, responsible gambling limit settings, and game display preferences.
• Analytics Cookies: Used to collect anonymised, aggregated data about how the Platform is used, which pages are visited most frequently, and where technical errors occur. This data is used solely for internal performance improvement.
• Marketing Cookies: Used only where you have explicitly opted in to receive personalised promotional communications from sizi99. These are not used for third-party advertising.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect Platform functionality and may prevent you from logging in or using certain features.

Data Retention

Sizi99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations.

• Active account data — retained throughout the period your Account is active and for a minimum of 5 years following account closure, in compliance with AML and gaming licence requirements.
• KYC and identity documents — retained for a minimum of 5 years following the end of the customer relationship.
• Financial transaction records — retained for a minimum of 5 years following the transaction date.
• Support communications — retained for 3 years following the resolution of the relevant interaction, unless forming part of a formal complaint or legal proceedings.
• Marketing data — retained until you withdraw consent or for a maximum of 2 years from last engagement, whichever is earlier.
• Technical and usage logs — anonymised and aggregated after 12 months; raw logs deleted after 24 months.

Upon expiry of applicable retention periods, personal data is securely and permanently deleted or anonymised. You may request early deletion of specific data categories subject to any overriding legal retention obligations — see Section 11 for your rights.

Security Measures

Sizi99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or destruction:

• Encryption at Rest: All personal data stored on sizi99 infrastructure is encrypted using AES-256 encryption.
• Encryption in Transit: All data transmitted between your device and the Platform is protected by 256-bit SSL/TLS connections.
• Access Controls: Personal data is accessible only to authorised sizi99 personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Payment Security: Full payment credentials (card numbers, full bank account numbers) are never stored on sizi99 servers. All payment processing is handled by PCI DSS-compliant third-party processors.
• Penetration Testing: Regular independent security assessments are conducted to identify and remediate potential vulnerabilities.
• Incident Response: sizi99 maintains a documented data breach response plan. In the event of a confirmed breach affecting your personal data, you will be notified within 72 hours in accordance with applicable regulatory requirements.

Your Rights

Subject to applicable law and any overriding legal obligations, you hold the following rights in relation to your personal data held by sizi99. To exercise any of these rights, contact us at the details set out in Section 15.

Minors

The Platform is strictly for adults aged 21 years and above. Sizi99 does not knowingly collect or process personal data from persons under the age of 21. Age verification is conducted at registration and during KYC, and any account found to be operated by a person under 21 will be immediately suspended and the data subject notified.

If you have reason to believe that a person under the age of 21 has registered an account on sizi99, please contact our support team immediately at [email protected]. We will investigate and take appropriate action, including account suspension and deletion of collected data, within 48 hours of a confirmed report.

Third-Party Services

The Platform may contain links to third-party resources for reference purposes. Sizi99 is not responsible for the privacy practices or content of any third-party website, payment provider interface, or service. We encourage you to review the privacy policies of any external service before interacting with it.

Where sizi99 uses third-party software development kits (SDKs), analytics libraries, or security tools integrated into the Platform, those providers are contractually prohibited from using any data they receive for any purpose other than providing the specific service to sizi99, and from sharing that data with additional parties.

Changes to This Policy

Sizi99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform functionality. Material changes will be notified to registered Players via the email address on record, with a minimum of 14 days' notice prior to the revised Policy taking effect.

Your continued use of the Platform after the effective date of any revised Policy constitutes acceptance of the updated terms. The current version of this Policy, including its effective date, is always accessible at sizi99.click/privacy-policy.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact sizi99's Data Privacy team through the following channels:

To verify your identity before processing a data rights request, we may ask you to confirm account-specific information. This is a standard security measure to prevent unauthorised access to another person's data — it is not a barrier to exercising your rights.