mco99 Privacy Policy

1. Introduction

mco99 ("mco99", "we", "us", "our") operates the online gaming platform accessible at mco99.one and any associated subdomains or applications (the "Platform"). This Privacy Policy ("Policy") describes how mco99 collects, processes, stores, discloses, and protects personal data relating to users of the Platform ("you", "your", "User").

This Policy is to be read alongside the mco99 Terms & Conditions, which govern your use of the Platform. Together they form the complete agreement between you and mco99 regarding your account and the use of your personal data. Both documents are available at all times on the Platform.

mco99 takes data privacy seriously. We are committed to handling your personal information with care, transparency, and in compliance with applicable data protection laws and internationally recognised privacy standards. If you have questions about this Policy at any time, please contact us using the details provided in Section 14.

2. Personal Data We Collect

Depending on how you interact with the mco99 Platform, we may collect the following categories of personal data:

We collect only data that is necessary for the purposes described in this Policy. Where optional data fields are available, their optional nature will be indicated at the time of collection.

3. How We Collect Your Data

mco99 collects personal data through the following channels:

3.1 Direct Interactions

You provide data directly when you register an account, complete identity verification, make a deposit or withdrawal, contact support, respond to surveys, or participate in promotions.

3.2 Automated Technologies

When you interact with the Platform, we automatically collect Technical Data and Usage Data through cookies, server logs, web beacons, and similar tracking technologies. See Section 8 for full details of our cookie use.

3.3 Third-Party Sources

We may receive data about you from third-party service providers in the following contexts: payment processors confirming the status of deposit and withdrawal transactions; identity verification services used to validate KYC submissions; fraud detection and anti-money laundering screening services; and game providers' systems where game data is generated on their infrastructure.

4. How We Use Your Personal Data

mco99 uses your personal data for the following purposes:

• Account registration and management — creating and maintaining your mco99 account, processing your login credentials, and managing your account preferences.
• Identity verification and KYC compliance — verifying your identity in accordance with applicable anti-money laundering and know-your-customer obligations.
• Payment processing — processing deposits and withdrawals via your chosen payment method, reconciling transactions, and investigating payment disputes.
• Service delivery — providing access to casino games, sportsbook, live casino, and other Platform features; managing your game history and bet records.
• Customer support — responding to your enquiries, resolving account issues, and handling complaints.
• Responsible gaming — monitoring gaming behaviour for indicators of problem gambling; applying self-exclusion restrictions; enforcing deposit and session limits you have set.
• Fraud prevention and security — detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct.
• Legal and regulatory compliance — complying with applicable laws, regulations, and lawful requests from regulatory or law enforcement authorities.
• Platform improvement — analysing aggregate usage patterns to improve the Platform's functionality, performance, and user experience.
• Communications — sending account notifications, security alerts, and, where you have opted in, promotional communications regarding offers on the Platform.

mco99 does not use your personal data for profiling activities that produce legally significant effects without appropriate safeguards, and does not engage in automated decision-making of a solely automated nature in relation to your account without human review being available.

5. Legal Basis for Processing

mco99 processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform the contract between you and mco99 (i.e., the Terms & Conditions), including account registration, payment processing, and service delivery.
• Legal obligation — processing required to comply with applicable laws, including KYC verification, AML screening, and responses to lawful regulatory requests.
• Legitimate interests — processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where such interests are not overridden by your rights and interests.
• Consent — processing for optional purposes such as marketing communications, where you have provided explicit consent. You may withdraw consent for marketing communications at any time by updating your account communication preferences.

6. Data Sharing and Disclosure

mco99 does not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients, strictly as necessary:

• Payment processors and e-wallet providers — Touch n Go eWallet, Boost, GrabPay, Maybank FPX, CIMB, Public Bank, and cryptocurrency network service providers, solely for the purpose of processing your transactions.
• Identity verification providers — third-party KYC and document verification services used to validate your identity as required by our compliance obligations.
• Game providers — licensed game studios whose games are available on the Platform. Game providers receive the minimum data necessary to deliver their games and maintain game integrity records.
• Regulatory and law enforcement authorities — where required by applicable law, court order, or regulatory direction. mco99 will notify you of such disclosure where legally permitted to do so.
• IT and infrastructure providers — hosting, content delivery, and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Professional advisers — solicitors, auditors, and compliance consultants, where necessary and subject to confidentiality obligations.

All third parties with whom mco99 shares personal data are required to handle it in accordance with applicable data protection standards and to use it only for the specific purposes for which it was shared.

7. Data Retention

mco99 retains personal data for as long as necessary to fulfil the purposes described in this Policy, and in any event for the minimum periods required by applicable law and regulation. As a general guide:

• Account data and transaction records are retained for a minimum of five years following account closure, in accordance with standard AML record-keeping requirements.
• KYC verification documents are retained for the same minimum five-year period following account closure.
• Communications records (live chat logs, support emails) are retained for a minimum of two years.
• Technical and usage data collected via cookies and server logs is retained for up to 13 months on a rolling basis.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

8. Cookies and Tracking Technologies

mco99 uses cookies and similar browser technologies on the Platform. A cookie is a small text file stored on your device by your browser. mco99 uses the following categories of cookies:

• Strictly necessary cookies — essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without affecting core Platform functionality.
• Functional cookies — store your preferences such as language settings, preferred game lobby view, and notification preferences. These improve your experience but are not essential.
• Analytical cookies — collect aggregated, anonymised data about how users interact with the Platform. This data is used solely to improve Platform performance and usability. mco99 does not share analytical data with advertising networks.

mco99 does not use advertising or cross-site tracking cookies. You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the Platform, including the login function.

9. Data Security

mco99 implements technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for sensitive personal data fields stored in our databases.
• Strict access controls ensuring that staff can only access personal data relevant to their role.
• Regular security audits and penetration testing of our Platform infrastructure.
• Two-factor authentication available to all user accounts and mandatory for internal staff access to data systems.
• Intrusion detection and real-time monitoring systems on all production infrastructure.

While mco99 takes data security seriously, no system is entirely immune to risk. We recommend that you use a strong, unique password for your mco99 account, enable two-factor authentication, and contact us immediately if you suspect your account has been compromised.

10. Your Data Rights

Subject to applicable law and our legitimate regulatory obligations, you have the following rights in relation to your personal data held by mco99:

• Right of access — you may request a copy of the personal data mco99 holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data.
• Right to erasure — you may request deletion of your personal data, subject to our legal retention obligations. Note that data held for regulatory compliance purposes cannot be deleted until applicable retention periods have expired.
• Right to restrict processing — you may request that we limit the processing of your data in certain circumstances, for example while the accuracy of data is being verified.
• Right to data portability — where processing is based on consent or contractual necessity, you may request your data in a structured, machine-readable format.
• Right to object — you may object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent — where processing is based on consent, you may withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact mco99 support via live chat or at [email protected]. We will respond to verifiable requests within 30 days. Requests may require identity verification before processing.

11. Children's Privacy

The mco99 Platform is strictly intended for adults aged 21 and above. mco99 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If mco99 determines that personal data has been collected from a minor, the relevant account will be closed and all associated data will be securely deleted in accordance with our data retention procedures.

If you are a parent or guardian and believe that a minor has registered or attempted to register on the mco99 Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

12. International Data Transfers

mco99's primary data infrastructure is hosted in secure data centre facilities. Where personal data is transferred to or accessed from locations outside the jurisdiction in which it was collected — for example, in connection with the use of game provider systems or cloud infrastructure — mco99 ensures that such transfers are conducted in accordance with applicable data protection standards, including the use of standard contractual clauses or equivalent safeguards where required.

mco99 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without appropriate contractual safeguards in place.

13. Changes to This Privacy Policy

mco99 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, the Platform, or applicable law. The "Last updated" date at the top of this page indicates when the Policy was most recently revised.

Where changes are material, mco99 will provide notice via email to your registered address or via a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by mco99, please contact our support team:

• Live Chat: Available 24 hours, 7 days a week via the mco99 Platform.
• Email: [email protected] (plain text — not a clickable link).

We aim to respond to all data-related correspondence within 5 business days. For urgent account or security matters, live chat is the fastest resolution channel and is available around the clock.