Privacy Policy

This Privacy Policy (the "Policy") sets out the basis on which cat999 ("cat999", "we", "us", "our") collects, uses, stores, shares, and otherwise processes personal data relating to users ("you", "User", "Player") of the cat999 platform, accessible at https://cat999.cam (the "Platform").

cat999 is committed to handling personal data responsibly and in accordance with applicable data protection legislation. We recognise that privacy is a fundamental right, and we take our obligations under applicable data protection frameworks seriously. This Policy applies to all personal data processed in connection with your use of the Platform, regardless of whether you are a registered player, a visitor browsing our pages, or a prospective customer in Malaysia or elsewhere.

By accessing or using the cat999 Platform, creating an account, making a deposit, or otherwise engaging with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should discontinue use of the Platform immediately.

For the purposes of this Policy, the following terms shall have the meanings set out below:

cat999 collects only the personal data that is reasonably necessary for the purposes described in this Policy. The categories of personal data we collect include, but are not limited to, the following:

3.1 Registration and Account Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (required to verify that you are aged 21 or above).
• Email address and contact telephone number.
• Residential address, including postcode and state within Malaysia.
• Username and encrypted password (passwords are stored using one-way hashing and are never stored in plain text).
• Preferred language and communication preferences.

3.2 KYC and Verification Data

• Copy of Malaysian identity card (MyKad) or passport.
• Proof of residential address such as a utility bill or bank statement issued within the previous three months.
• Selfie or live facial verification image where required by our compliance processes.
• Source of funds documentation for higher-value accounts.

3.3 Financial and Transaction Data

• Deposit and withdrawal history, including amounts in MYR, transaction reference numbers, and timestamps.
• Payment method identifiers — for example, the last four digits of a bank account or e-wallet account reference — to facilitate transaction matching and KYC.
• Cryptocurrency wallet addresses used for deposits or withdrawals via BTC, ETH, USDT TRC20, or LTC.

3.4 Technical and Usage Data

• IP address, device type, operating system, and browser type and version.
• Geolocation data derived from your IP address (country and city level only).
• Session duration, pages visited, game titles played, and betting history.
• Device identifiers and mobile advertising IDs where applicable.

3.5 Communications Data

• Records of live chat, email, or other written correspondence with the cat999 support team.
• Details of any complaints, disputes, or responsible gambling requests submitted to cat999.

cat999 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide voluntarily during account registration, KYC verification, support requests, or when updating your account profile.
• Automated collection: Technical data collected automatically when you access and browse the Platform, including via cookies, server logs, and similar tracking technologies as described in Section 10.
• Payment processors: Transaction-level data received from authorised payment service providers including those facilitating FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank transactions.
• Third-party verification providers: Identity and document verification data returned by authorised KYC and anti-money laundering service providers as part of our compliance obligations.
• Game suppliers: Aggregated game session data provided by our licensed game content partners, including session duration and wagering activity.

cat999 processes your personal data for the following specific purposes. We do not process personal data in any manner incompatible with the original purpose for which it was collected without your separate consent.

cat999 processes personal data only where we have a valid legal basis to do so. The primary legal bases on which we rely are as follows:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and service delivery.
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering legislation, age verification requirements, and lawful requests from competent authorities.
• Legitimate interests: Processing undertaken for cat999's legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your data protection rights.
• Consent: Processing of personal data for marketing communications and optional analytics, where we have obtained your prior explicit consent. You retain the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

cat999 does not sell, rent, or disclose your personal data to third parties for their independent marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment service providers: Including processors facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and Malaysian bank transfers, for the purpose of executing and reconciling your financial transactions.
• KYC and compliance providers: Authorised identity verification and anti-money laundering screening service providers engaged to assist with our compliance obligations.
• Game content licensors: Licensed game suppliers whose games are hosted on or integrated into the cat999 Platform. Game suppliers may receive session-level data for operational and audit purposes.
• IT infrastructure and hosting providers: Cloud infrastructure and server hosting providers engaged by cat999 to operate the Platform securely. All such providers are bound by appropriate data processing agreements.
• Regulatory and law enforcement authorities: Where required to do so by applicable law, valid court order, or lawful request from a competent regulatory or law enforcement body.
• Professional advisors: Legal, financial, and compliance advisors engaged by cat999, subject to appropriate confidentiality obligations.

cat999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our internal data lifecycle procedures. Anonymised or aggregated data that can no longer identify you may be retained indefinitely for analytical and statistical purposes.

cat999 implements appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Encryption in transit: All data transmitted between your device and the cat999 Platform is encrypted using TLS 1.2 or higher. HTTPS is enforced across all platform pages.
• Encryption at rest: Sensitive data stored in our systems is encrypted using AES-256 encryption. Passwords are stored exclusively as salted one-way cryptographic hashes.
• Access controls: Access to personal data within cat999's internal systems is restricted to authorised personnel on a need-to-know basis, governed by role-based access control policies.
• PCI-DSS compliance: Payment card and banking data processed through cat999's payment partners is handled in accordance with Payment Card Industry Data Security Standard (PCI-DSS) requirements.
• Penetration testing: cat999's infrastructure undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident response: cat999 maintains a documented data breach incident response plan. In the event of a material data breach affecting your personal data, we will notify you and relevant authorities within the timeframe required by applicable law.

While cat999 takes robust measures to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying cat999 immediately if you suspect any unauthorised access to your account.

cat999 uses cookies and similar tracking technologies to operate the Platform, enhance your user experience, and analyse Platform usage. The following categories of cookies are used:

You can manage or disable optional cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some Platform features. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Firefox, Safari, and Edge.

Subject to applicable law and any overriding legal obligation on cat999's part, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our Data Privacy team using the contact details in Section 15.

cat999 is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 21. Our registration process includes mandatory age declaration, and all accounts are subject to KYC verification that includes age confirmation.

If we become aware — through KYC verification, a third-party report, or any other means — that personal data has been collected from an individual under 21 years of age, we will immediately:

• Suspend the relevant account pending investigation.
• Delete all personal data associated with the underage account to the extent permitted by our legal record-keeping obligations.
• Return any deposited funds to the payment method used for the deposit, subject to verification of ownership.
• Escalate the matter to appropriate compliance bodies where required by law.

In operating the cat999 Platform, personal data may be transferred to, stored in, or processed in jurisdictions outside of Malaysia, including jurisdictions where data protection laws may differ from those applicable in Malaysia. Such transfers occur in connection with the engagement of international technology infrastructure providers, game content suppliers, and compliance service providers.

Where personal data is transferred internationally, cat999 ensures that appropriate safeguards are in place, including:

• Execution of appropriate contractual clauses with international data processors that impose data protection obligations equivalent to those applicable under this Policy.
• Restriction of transfers to jurisdictions that maintain an adequate level of data protection as assessed by cat999's compliance team.
• Implementation of supplementary technical measures where additional protection is warranted, including end-to-end encryption of data in transit and at rest.

cat999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the nature of our services. The date of the most recent revision will always be displayed at the top of this page.

In the event of a material change to this Policy — particularly any change that affects your rights or the way we process your personal data in a significant manner — we will notify registered cat999 players by email to the address on file and via an on-platform notice at least 14 calendar days prior to the change taking effect.

Your continued use of the cat999 Platform following the effective date of any Policy amendment constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must discontinue use of the Platform and, if desired, request account closure and data deletion in accordance with Section 11.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern about how cat999 handles your personal data, please contact our Data Privacy team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the cat999 Platform. Recommended for urgent or account-specific enquiries.
• Email: [email protected] — please include "Privacy Request" in the subject line for data rights matters.
• Response Commitment: We will acknowledge all privacy-related enquiries within 5 business days and aim to provide a substantive response within 30 calendar days.

For responsible gambling-related requests, including self-exclusion, deposit limit adjustments, or account cooling-off, please visit our dedicated Responsible Gambling page or contact support directly via live chat.