Privacy Policy clu99 – Your Personal Data Protection

Clu99 ("we", "Platform" or "company") takes your privacy very seriously. This Privacy Policy describes our practices regarding the collection, use, disclosure and protection of personal information you provide when using the clu99.fun platform and all related services.

This policy applies to all clu99 platform users regardless of how they access it — whether via web browser, mobile app, or any other device. It covers all data collected during registration, daily use, financial transactions, and interactions with our customer support team.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards. As the data controller, clu99 takes full responsibility for handling your personal data in a transparent, lawful, and secure manner.

Clu99 collects various types of information depending on your interactions with our platform. The following are the categories of data we collect:

We never collect sensitive information such as passwords in plain text, full credit card details (CVV numbers are not stored), or biometric data. All passwords are stored in hashed form that cannot be decrypted by anyone, including the clu99 technical team.

There is also data we collect automatically as you browse the platform — this includes cookie data, server logs and session information. This data helps us ensure the platform runs smoothly and securely for all users.

Clu99 uses your personal data only for lawful and transparent purposes. We will not use your data for any other purpose without first obtaining your consent. The primary purposes of data use are as follows:

• Account management: Creating, verifying, and managing your member account, including the KYC process required before your first withdrawal.
• Transaction processing: Processing deposits via DuitNow, FPX, Touch 'n Go, Boost, GrabPay, and USDT, as well as withdrawals to your bank account or digital wallet.
• Platform security: Detecting and preventing fraud, money laundering, bonus abuse, and any suspicious activity on the platform.
• Legal compliance: Meeting reporting obligations to relevant authorities under applicable Malaysian law.
• Customer support: Resolving inquiries, complaints, and technical issues you report to our team.
• Service improvement: Analyzing usage patterns to improve the overall gameplay experience and platform interface.
• Marketing communications: Sending promotional offers, bonuses, and updates only to members who have agreed to receive such communications.
• Responsible gaming: Monitoring gameplay patterns to identify members who may need self-control assistance.

Clu99 does not sell, rent or trade your personal data to any third party for marketing purposes. However, there are certain situations where we need to share your data with specific parties to ensure the platform operates correctly and remains legally compliant:

• Payment providers: Transaction information that must be shared with payment gateways and banks to securely process your deposits and withdrawals.
• Game providers: Game session data that must be shared with software providers such as Pragmatic Play, Evolution, and others to ensure games run correctly.
• Identity verification service: KYC information is shared with trusted third-party verification platforms to process your identity verification.
• Law enforcement agencies: We are legally required to disclose certain information to authorities in the event of a valid official request or criminal investigation.
• Auditors and consultants: Appointed professionals for audit, compliance and legal advisory purposes, subject to strict confidentiality agreements.

All third parties working with clu99 are required to uphold data protection standards comparable to our own. We ensure legally binding data processing agreements are signed before any personal data is shared.

Protecting your personal data is clu99's highest priority. We continuously invest in the latest security infrastructure to keep your information safe from unauthorized access, loss, misuse, or damage.

Technical security measures we use:

• 256-bit SSL Encryption: All data transmitted between your device and clu99's servers is encrypted using the latest TLS protocol, ensuring no third party can intercept your communications.
• Two-factor authentication (2FA): An extra security layer is available for all accounts — we recommend every member enable 2FA via account settings.
• 24/7 Monitoring: Our threat detection system monitors all platform activity around the clock to identify and block any unauthorised access attempts.
• Segregated data storage: Personal and financial data are stored in separate server environments with strict access controls.
• Regular penetration testing: Security audits and penetration testing are conducted regularly by independent security experts to identify and patch any vulnerabilities.
• Hashed passwords: Your password is never stored in plain text — we use industry-standard hashing algorithms that cannot be decrypted.

While we take all reasonable measures to protect your data, no security system is entirely foolproof. You also play an important role in keeping your account secure by using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to us.

Clu99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you on subsequent visits and personalise your experience.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled as they are essential for the platform to operate.
• Functional Cookies: Saving your preferences such as language, display settings, and region to ensure a more comfortable experience on future visits.
• Analytics Cookies: Helping us understand how users interact with the platform — most visited pages, time spent, and any technical issues that need to be addressed.
• Marketing Cookies: Used to display more relevant promotional offers to you based on your interests and gaming activity on the platform.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling essential cookies may affect certain functions on the clu99 platform. For more information on managing cookies, refer to your web browser's help documentation.

Under Malaysia's PDPA and international data protection standards, you have several important rights regarding your personal data held by clu99. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, contact the clu99 customer support team via 24/7 live chat or our official email. We will verify your identity before processing any personal data-related request.

Clu99 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by applicable Malaysian law. Our retention policy is as follows:

• Active account data: Retained for the duration your account remains active and in good standing.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's tax and financial legal requirements.
• KYC and identity verification data: Retained for 5 years after account closure in accordance with AML/CFT requirements.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Marketing data and communication preferences: Retained until you withdraw consent or close your account.
• Inactive account: Account data that has been inactive for more than 24 months may be archived or deleted in accordance with our internal procedures.

Once the designated retention period has elapsed, your personal data will be securely deleted or anonymised so it can no longer be linked back to your identity. Our data deletion process follows industry-standard secure deletion methods.

The clu99 platform is strictly for users aged 18 and above. We do not knowingly collect, store or process any personal data from children or individuals under the age of 18.

All account registrations go through a rigorous age verification process as part of our KYC procedures. Verified identity documents are required to confirm that applicants meet the minimum age requirement.

If we discover that personal data of a minor has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Parents or guardians who become aware of a possible underage registration on our platform are encouraged to contact us promptly.

Clu99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements or other operational reasons. The latest version of this Privacy Policy is always available on this page with the most recent "Updated" date.

For material changes — that is, changes that significantly affect how we process your personal data — we will notify you via:

• In-platform notification during your next login session.
• Email to the address registered in your account.
• Announcements in the platform's news and updates section.

Continued use of the clu99 platform after any changes to this Privacy Policy constitutes acceptance of the updated terms. If you do not agree with any changes, you have the right to close your account and request data deletion as outlined in Section 7.

For any enquiries, concerns or requests regarding your privacy and personal data protection at clu99, please contact our Data Protection Officer via official email or our 24/7 customer support live chat. We are committed to responding to all privacy-related enquiries within 72 working hours.