Highland99 Privacy Policy – Data Protection for Malaysian Players

1. Introduction

This Privacy Policy ("Policy") describes how Highland99 ("we", "Platform") collects, uses, stores, and protects your personal data when you use highland99.biz and all services associated with it.

We take data privacy seriously. As a platform serving over 500,000 active members across Malaysia — from Kuala Lumpur, Johor Bahru, Penang, Kota Kinabalu to Kuching — we understand how important trust is. When you share your personal information with Highland99, you are trusting us to handle it with care. That is a responsibility we do not take lightly.

This policy applies to all users of the platform Highland99 regardless of how you access it — whether via a web browser on a desktop, an Android smartphone, or iOS. By using our platform, you agree to the practices described in this Privacy Policy.

2. Data We Collect

2.1 Data You Provide Directly

When you register an account or interact with the platform Highland99, we collect the following information:

• Identity Information — full name, date of birth, identity card number (for KYC purposes)
• Contact Information — Malaysian phone number, email address
• Account Information — username, password (stored in encrypted form, not readable)
• Financial Information — payment method used (DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, FPX), bank account number for withdrawals — processed through a secure payment gateway
• Verification Documents — a copy of your identity card or passport for identity verification (KYC)

2.2 Automatically Collected Data

When you use the platform Highland99, our systems automatically record:

• Usage Data — games played, bets placed, session times and duration
• Technical Data — IP address, device type, operating system, browser type and version
• Location Data — approximate location based on IP address for security and compliance purposes
• Cookie Data — session cookies and preference cookies to enhance your user experience
• Transaction Logs — all deposit, withdrawal and financial activity records within the account

3. How We Use Your Data

Highland99 use your personal data solely for the following purposes:

Highland99 does not use your data to make automated decisions that significantly affect you without human review. All decisions relating to account suspension, betting limits, and verification involve review by our compliance team.

4. Data Sharing

4.1 Core Principle: We Do Not Sell Your Data

Highland99 does not sell, rent, exchange, or transfer your personal data to any third party for marketing, advertising, or commercial purposes. This is a core principle that will never change.

4.2 Limited Sharing with Service Providers

In day-to-day operations, Highland99 may share limited data with the following parties, solely for the purpose of providing services to you:

• Payment Gateway Providers — to process DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX transactions in MYR. These providers are bound by strict confidentiality agreements.
• Game Providers — only an anonymous username is required to access games from licensed studios. Providers do not receive your financial details or full identity information.
• Technical Service Providers — for hosting, cybersecurity, and system monitoring. All subject to strict data processing agreements.

4.3 Legally Required Disclosures

Highland99 may be required to disclose personal data to the relevant authorities when mandated by Malaysian law, court order, or direction from law enforcement. In such circumstances, we will endeavour to notify you in advance where permitted by law.

5. Data Security

5.1 Technical Measures

Highland99 implements multiple layers of technical security measures to protect your personal data:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and our servers
• Encryption of data at rest for all personal data stored in our databases
• Two-factor authentication (2FA) available to all member accounts
• 24/7 security monitoring by our in-house cybersecurity team
• Regular penetration testing by an independent cybersecurity firm
• Layered access controls ensuring that staff can only access the data necessary for their specific roles

5.2 Shared Responsibilities

Although Highland99 implements comprehensive security measures, your account security also depends on your own actions. We encourage you to:

• Use a strong, unique password for your account Highland99 you
• Do not share your login credentials with anyone
• Log out of your account after each session, especially on shared devices
• Notify us immediately if you suspect any unauthorised access to your account

6. Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device when you browse a website. Highland99 uses cookies to ensure the platform functions properly and to deliver a better experience for you.

6.2 Types of Cookies Used

• Essential Cookies — required for essential platform functions such as staying logged in and session security. These cookies cannot be disabled.
• Preference Cookies — saving your preferences such as language, theme, and display settings. Can be disabled without affecting core functionality.
• Analytics Cookies — collecting aggregated usage data to help us understand how members use the platform and identify areas for improvement. No personally identifiable data is stored.
• Session Cookies — deleted automatically when you close your browser.

6.3 Managing Cookies

You can manage and delete cookies through your browser settings. However, disabling essential cookies may affect your ability to use certain features of the platform Highland99. For specific instructions, refer to the help section of your browser (Chrome, Safari, Firefox, or Edge).

7. Your Rights as a Data Owner

As a member Highland99 and the owner of your personal data, you hold the following rights, which you may exercise at any time:

• Right of Access — request a copy of all personal data we hold about you
• Right to Rectification — request correction of inaccurate or incomplete data
• Right to Erasure — request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations
• Right to Restriction — request restriction of the processing of your data under certain circumstances
• Data Portability Rights — requesting your data in a machine-readable format for transfer to another platform
• Right to Object — object to the processing of your data for direct marketing purposes
• Right to Withdraw Consent — withdraw any consent you have previously given, at any time

To exercise any of the above rights, please contact our support team Highland99 via live chat or email at support@highland99.biz. Requests will be processed within 14 business days. We may require identity verification before processing your request to ensure the security of your data.

8. Data Retention Period

Highland99 retains your personal data only for as long as necessary for the purposes it was collected, or as required by law. The following are our data retention guidelines:

• Active Account Data — retained for the duration your account is active and for up to 7 years after account closure for legal compliance purposes
• Financial Transaction Records — retained for a minimum of 7 years as required under Malaysian accounting and anti-money laundering laws
• Customer Support Data — retained for 3 years from the date of your last interaction
• Technical & Security Logs — retained for 90 days for security analysis and troubleshooting purposes
• Cookie Data — session cookies are deleted when the browser is closed; preference cookies are stored for up to 12 months

Once the retention period expires, Highland99 will delete or anonymise the relevant data using secure procedures to ensure it cannot be recovered.

9. Changes to the Privacy Policy

Highland99 may update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or the addition of services. When significant changes are made, we will:

• Displaying clear notices on the homepage Highland99 for at least 30 days
• Sending notifications via email or SMS to all registered members
• Updating the "Updated" date at the top of this document

For minor changes that do not materially affect your fundamental rights, we may update the document without issuing a specific notice. Continued use of the platform Highland99 after changes are published will be considered acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

10. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Highland99 handle your personal data, please contact us through the following channels:

• Live Chat — available 24/7 within the highland99 platform
• Privacy Email — support@highland99.biz (include "Privacy Enquiry" in the email subject line)

Support team Highland99 in Bahasa Malaysia and will handle your privacy enquiries as a priority. We are committed to responding within 72 hours for all privacy-related enquiries and within 14 working days for data rights requests.