Privacy Policy — GW999

Introduction

GW999 ("GW999", "we", "us", or "our") operates the online sports betting and live casino platform accessible at gw999.cam (the "Platform"). This Privacy Policy describes how GW999 collects, uses, discloses, stores, and protects personal data provided by or collected from registered Members and visitors to the Platform ("you" or "your").

GW999 is committed to handling your personal information responsibly, transparently, and in accordance with the principles of data minimisation, purpose limitation, and storage limitation. We operate under international licensing frameworks that impose data governance obligations aligned with internationally recognised privacy standards.

By creating an account on GW999 or otherwise accessing the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Privacy Policy is incorporated by reference into the GW999 Terms & Conditions.

Definitions

In this Privacy Policy, the following terms have the meanings set out below:

Data We Collect

GW999 collects the following categories of personal data in the course of providing the Platform:

3.1 Identity and Contact Data

• Full legal name as it appears on government-issued identification.
• Date of birth (for age verification — all Members must be aged 21 or above).
• Nationality and country of residence.
• Email address and mobile phone number.
• Physical address (required for certain withdrawal methods and regulatory compliance).

3.2 Identity Verification (KYC) Documents

• Copy of government-issued photo identification — Malaysian MyKad, passport, or equivalent.
• Proof of address document (utility bill, bank statement, or equivalent) where required.
• Facial biometric data (selfie / liveness check) where required by our KYC service provider for high-value accounts or suspicious activity review.
• Source of funds documentation for high-volume accounts, as required under anti-money laundering (AML) procedures.

3.3 Financial and Transaction Data

• Payment method identifiers — Touch 'n Go eWallet account number, GrabPay identifier, Boost account, DuitNow registration, FPX bank account reference, Maybank account number, CIMB, Public Bank, Hong Leong, or RHB account details as applicable.
• Cryptocurrency wallet addresses where cryptocurrency deposits or withdrawals are used.
• Deposit amounts, withdrawal requests, and transaction history.
• Bonus claims, wagering activity, and account balance history.

3.4 Technical and Usage Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser type and version.
• Pages visited, session duration, click patterns, and in-platform navigation behaviour.
• Login timestamps and session logs.
• Cookies and similar tracking technologies (see Section 10).

3.5 Communications Data

• Content of live chat conversations with the GW999 support team.
• Email correspondence between the Member and GW999.
• Records of any complaints or formal requests submitted by the Member.

How Data Is Collected

GW999 collects personal data through the following channels and methods:

• Account Registration: Data provided directly by you when creating your GW999 account.
• KYC Verification Portal: Identity documents and biometric data submitted through our secure KYC intake interface.
• Deposit and Withdrawal Transactions: Payment method data provided when initiating financial transactions on the Platform.
• Support Interactions: Information shared with our team through live chat, email, or any other support channel.
• Platform Usage Tracking: Technical data collected automatically through cookies, server logs, and analytics tools as you navigate the Platform.
• Third-Party Verification Services: Identity and fraud-screening data returned by our licensed KYC, AML, and payment verification partners.
• Promotional Opt-In: Contact preferences recorded when you subscribe to receive GW999 promotional communications.

Purposes of Processing

GW999 processes personal data for the following specific and legitimate purposes:

GW999 does not process personal data for any purpose not listed above without first obtaining explicit consent from the Member, except where compelled to do so by applicable law or a lawful order from a competent authority.

Legal Basis for Processing

GW999 relies on the following legal bases when processing your personal data:

• Contractual Necessity: Processing required to perform our contract with you — including account management, KYC, and payment processing — is necessary to deliver the services you have registered for.
• Legal Obligation: Certain processing activities — including identity verification, AML screening, and record-keeping — are required to comply with our international licensing obligations and applicable financial regulations.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and product improvement is carried out on the basis of GW999's legitimate interest in operating a safe, secure, and compliant platform, balanced against Members' privacy interests.
• Consent: Marketing communications and certain non-essential cookie use are conducted on the basis of your explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

GW999 does not sell, rent, or lease your personal data to third parties. We share personal data only in the following limited circumstances:

7.1 Licensed Service Providers (Data Processors)

GW999 engages trusted third-party data processors who handle personal data strictly on our behalf and under binding contractual obligations that prohibit independent use of your data. These include:

• Payment service providers — Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB, and cryptocurrency processing partners — who process transactional data to execute deposits and withdrawals.
• KYC and identity verification platforms — licensed identity verification providers who validate identity documents and perform liveness checks.
• AML screening services — financial crime compliance technology providers who screen transactions against sanctions lists and risk databases.
• Platform analytics providers — tools that help GW999 understand platform usage patterns to improve performance and user experience, operating under strict data processing agreements.
• Customer support infrastructure — live chat and helpdesk platforms that facilitate Member communications.

7.2 Regulatory and Law Enforcement Authorities

GW999 may disclose personal data to its international licensing authority, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or a lawful direction from a competent regulatory body. We will notify affected Members of any such disclosure to the extent permitted by applicable law.

7.3 Business Transfers

In the event of a merger, acquisition, sale of substantially all assets, or corporate restructuring involving GW999, personal data held by GW999 may be transferred to the acquiring or successor entity as part of that transaction. Affected Members will be notified of any such transfer in advance where feasible, and the successor entity will be bound by privacy obligations no less protective than those in this Policy.

Data Retention

GW999 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

Following expiry of the applicable retention period, GW999 will securely delete or anonymise the relevant personal data. Where deletion is not technically feasible — for example, backup storage — the data will be isolated from further processing until deletion becomes possible.

Your Data Rights

As a Member of GW999, you hold the following rights in respect of your personal data. These rights may be exercised by contacting us via live chat or by emailing [email protected] with "Data Rights Request" in the subject line. We will acknowledge your request within 3 business days and aim to resolve it within 30 calendar days.

Please note that certain rights may be limited where compliance with your request would conflict with GW999's legal obligations — for example, mandatory financial record retention requirements will override a deletion request for transaction data within the mandatory retention window.

Cookies & Tracking Technologies

GW999 uses cookies and similar client-side tracking technologies to enable core Platform functionality and to gather aggregated analytics data that helps us improve the user experience. The following cookie categories are used:

You may manage or disable optional cookies through your browser's settings. Note that disabling performance or functional cookies may affect some Platform features. Instructions for managing cookies in major browsers are available in your browser's help documentation.

Data Security

GW999 implements a layered security framework to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Transport-layer encryption: All data transmitted between your device and GW999 servers is protected by TLS 1.2 or higher (256-bit SSL encryption).
• At-rest encryption: Sensitive data stored in GW999 databases — including payment details, identity documents, and KYC materials — is encrypted at rest using industry-standard algorithms.
• Access controls: Internal access to personal data is strictly role-based, with staff accessing only the data necessary to perform their specific function. Access logs are maintained and audited regularly.
• Two-factor authentication (2FA): Available for Member account logins and mandatory for all GW999 staff accessing production data systems.
• Penetration testing and vulnerability scanning: GW999 conducts regular security assessments, including third-party penetration testing, to identify and remediate vulnerabilities proactively.
• Incident response: A documented data breach response protocol is in place. In the event of a breach affecting Member data, affected Members will be notified without undue delay in accordance with applicable requirements.

Minors & Age Restriction

GW999 does not knowingly collect or process personal data from individuals under the age of 21. Access to all real-money gaming services on the Platform is strictly restricted to persons aged 21 and above. Age verification is a mandatory step in the KYC process for all Members.

If GW999 becomes aware that personal data has been collected from or in relation to a person under the age of 21 — whether through registration fraud or any other means — we will immediately suspend the relevant account, delete the associated personal data to the extent not required to be retained for regulatory or fraud prevention purposes, and report the matter as required by our licensing obligations.

Parents or guardians who believe that a minor has registered an account on GW999 should contact us immediately via live chat or email at [email protected].

International Data Transfers

GW999 operates under international licensing and may store or process personal data on servers located outside Malaysia. Where personal data is transferred to jurisdictions outside Malaysia, GW999 ensures that appropriate safeguards are in place, including:

• Contractual clauses in agreements with data processors requiring them to maintain data protection standards equivalent to those required under GW999's licensing framework.
• Use of data processors in jurisdictions that provide an adequate level of data protection as assessed by GW999's compliance function.
• Technical measures — including encryption and pseudonymisation — applied to data prior to transfer where additional protection is warranted.

By using GW999's Platform, you acknowledge and consent to the transfer of your personal data outside Malaysia on the basis of these safeguards.

Policy Amendments

GW999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. The "Last Updated" date at the top of this page will be revised accordingly upon any material change.

Where changes are material — that is, where they significantly affect how we process your personal data or the rights available to you — GW999 will notify registered Members via email or a prominent on-platform notice at least 14 days before the changes take effect. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

We encourage you to review this page periodically. Previous versions of this Privacy Policy are available on request from our support team.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a complaint about GW999's data practices, please contact us through the following channels:

GW999 takes all privacy complaints seriously and aims to resolve them fairly and promptly. If you are not satisfied with our response to your complaint, you may have the right to escalate your concern to a relevant supervisory authority in your jurisdiction.