fatcai99 Privacy Policy

This Privacy Policy ("Policy") is issued by fatcai99 ("the Platform", "we", "us", "our"), the operator of the online casino and sports betting website accessible at https://fatcai99.cam ("the Website"). It sets out the manner in which fatcai99 collects, processes, stores, shares, and protects personal data relating to registered players, prospective players, and visitors to the Website ("Data Subjects", "you", "your").

fatcai99 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy is designed to give Data Subjects a clear and complete understanding of our data practices so that informed consent can be given and rights can be exercised with confidence.

This Policy applies to all data collected through the Website, including data provided during the registration and KYC process, data captured through your use of Platform services (including deposits, withdrawals, and gameplay), and data collected through cookies and analytics technologies when you browse the Website.

The following terms, as used in this Privacy Policy, shall have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or one or more factors specific to their identity.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, fatcai99 acts as the Data Controller in respect of all Personal Data collected through the Website.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement. fatcai99 engages certain service providers as Data Processors, as described in Section 7 of this Policy.
• "Consent" — freely given, specific, informed, and unambiguous indication of a Data Subject's agreement to the processing of their Personal Data.
• "KYC Data" — identity and address verification documents submitted by a Player as part of the Know Your Customer verification process, including copies of identity cards, passports, driver's licences, utility bills, and selfie photographs.
• "Cookies" — small text files placed on a user's device by the Website for the purposes of session management, preference storage, and analytics.
• "Platform" — the fatcai99 Website and all associated services, games, promotional features, and customer support channels operated at https://fatcai99.cam.

fatcai99 collects the following categories of Personal Data in connection with its services. Data is collected only to the extent genuinely necessary for the purposes described in Section 5 of this Policy.

fatcai99 does not intentionally collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless such data is incidentally contained in KYC documents submitted by the Player. Where such data is present in submitted documents, it will be processed solely for the purposes of identity verification and will not be used for any other purpose.

fatcai99 collects Personal Data through the following means:

• Direct Submission by the Player — Data provided by Players during registration, the KYC verification process, deposit and withdrawal requests, customer support interactions, and promotional sign-ups.
• Automated Technical Collection — Data collected automatically as Players navigate and interact with the Website, including through server logs, cookies, and session tracking technologies. See Section 10 for full cookie details.
• Payment Processing Partners — Certain financial data is received from or verified through payment service providers including those operating the Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX platforms, as part of transaction processing and fraud prevention workflows.
• Third-Party Identity Verification Services — Where fatcai99 engages third-party KYC verification providers, data may be cross-referenced against publicly available or commercially licensed identity databases to verify the authenticity of documents submitted.
• Fraud Prevention and Anti-Money Laundering Databases — The Platform may receive or verify data against industry-standard fraud prevention and anti-money laundering screening lists as part of its compliance obligations.

fatcai99 processes Personal Data for the following specific and legitimate purposes:

1. Account Creation and Management. To establish, maintain, and administer Player accounts on the Platform, including authentication and security verification.
2. Identity Verification (KYC). To verify the identity and eligibility of Players as required for compliance with anti-money laundering obligations and to ensure that the Platform is not accessed by underage individuals. All players must be 21 years of age or above.
3. Transaction Processing. To process deposits and withdrawals via Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and USDT TRC20, and to maintain accurate transaction records.
4. Customer Support. To respond to support queries, resolve account disputes, and communicate with Players regarding the status of their accounts and transactions.
5. Fraud Prevention and Platform Security. To detect and prevent fraudulent activity, account abuse, bonus manipulation, money laundering, and unauthorised access to Player accounts.
6. Legal and Regulatory Compliance. To fulfil any legal obligation applicable to the Platform, including retention of transaction records, cooperation with lawful regulatory enquiries, and enforcement of the Platform's Terms and Conditions.
7. Platform Improvement and Analytics. To analyse aggregated usage data to understand how the Platform is used, identify areas for improvement, and optimise the Player experience. This analysis is conducted on anonymised or pseudonymised data wherever possible.
8. Marketing Communications (Opt-In Only). To send promotional emails, in-platform notifications, and bonus offers to Players who have explicitly opted in to receive such communications. This includes information about new games, Liga Super Malaysia betting markets, EPL specials, and other relevant promotions.
9. Responsible Gambling Monitoring. To monitor Player behaviour for signs of problem gambling and to implement responsible gambling interventions where appropriate, including the enforcement of self-exclusion elections.

fatcai99 processes Personal Data on the following legal bases, as appropriate to each processing activity:

• Contractual Necessity. Processing is necessary for the performance of the contract between fatcai99 and the Player — specifically the account agreement established upon registration. This covers account management, transaction processing, and KYC verification.
• Legal Obligation. Processing is required to comply with legal obligations applicable to the Platform, including anti-money laundering regulations, record-keeping requirements, and age verification obligations.
• Legitimate Interests. Processing is in the legitimate interests of fatcai99 (or relevant third parties), where those interests are not overridden by the rights and interests of Data Subjects. This basis is used for fraud prevention, platform security, and aggregated analytics.
• Consent. Where fatcai99 relies on consent as a legal basis — notably for the sending of marketing communications — that consent is freely given, specific, and can be withdrawn at any time without detriment to the Player. Withdrawal of consent for marketing does not affect account access or service provision.

fatcai99 does not sell, rent, or trade Personal Data to any third party for commercial purposes. Personal Data may be shared with the following categories of third parties, strictly for the purposes described:

• Payment Service Providers. Payment data is shared with the relevant payment platforms (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX operators, and USDT network processors) as strictly necessary to process deposit and withdrawal transactions.
• KYC and Identity Verification Providers. Identity documents and verification data may be shared with contracted third-party KYC service providers for the purpose of document authenticity verification. These providers act as Data Processors under binding data processing agreements.
• Fraud Prevention and AML Screening Services. Relevant Player data may be checked against fraud prevention and anti-money laundering screening lists through contracted service providers as part of the Platform's compliance obligations.
• Game Software Providers. Certain gameplay data (session identifiers, wager records) is exchanged with third-party game providers whose software is integrated into the Platform, for the purpose of game operation and dispute resolution.
• IT and Cloud Infrastructure Providers. Personal Data is stored on secure servers operated by contracted cloud infrastructure providers. All such providers are required to maintain appropriate technical and organisational security measures.
• Legal and Regulatory Authorities. Where required by applicable law, court order, or regulatory authority, fatcai99 may disclose Player data to the relevant authority. Disclosure will be limited to the minimum data necessary to satisfy the legal requirement.

All third parties with whom fatcai99 shares Personal Data are contractually required to process that data only for the specified purpose, maintain appropriate security standards, and comply with applicable data protection law.

8.1 General Principle. fatcai99 retains Personal Data for no longer than is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations.

8.2 Active Account Data. While a Player's account remains active, all account data, transaction records, gameplay logs, and KYC documentation will be retained for the duration of the account relationship and used as described in this Policy.

8.3 Post-Closure Retention. Following the closure of a Player's account — whether by the Player or the Platform — the following retention periods apply:

• KYC documents and identity records: retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and financial records: retained for a minimum of seven (7) years following account closure, in compliance with financial record-keeping obligations.
• Customer support correspondence: retained for three (3) years following account closure, for dispute resolution purposes.
• Marketing preference records: retained until consent is withdrawn or the account is closed, whichever is earlier.

8.4 Anonymisation. Upon expiry of the applicable retention period, Personal Data will be either permanently deleted or anonymised so that it can no longer be attributed to any identifiable individual. Anonymised data may be retained indefinitely for aggregated analytics purposes.

fatcai99 implements a comprehensive range of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL (TLS) encryption for all data transmitted between Player devices and the Platform.
• Encrypted storage of passwords using industry-standard hashing algorithms. Plaintext passwords are never stored.
• Two-factor authentication (2FA) available to all Players for enhanced account security.
• Access control policies limiting internal access to Personal Data to those employees and contractors with a genuine operational need, subject to confidentiality obligations.
• Regular security audits and penetration testing of Platform infrastructure and data handling processes.
• Incident response procedures to detect, contain, and report any data security incidents in a timely manner.

Despite these measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. Players are encouraged to take their own steps to protect their accounts, including using strong and unique passwords and enabling 2FA where available.

The fatcai99 Website uses cookies and similar tracking technologies to enable core Platform functionality, remember Player preferences, and gather anonymised analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies. Required for the Website to function. These cookies enable session management, maintain login state, and support the operation of core features such as the game lobby, cashier, and account settings. These cookies cannot be disabled without significantly impairing Platform functionality.
• Preference Cookies. Store Player preferences such as language settings, display options, and previously used payment methods to streamline the Player's experience on return visits.
• Analytics Cookies. Used to collect anonymised data about how visitors use the Website, which pages are visited most frequently, and how users navigate between sections. This data helps fatcai99 improve the Platform experience. Players may opt out of analytics cookies.
• Security Cookies. Support fraud detection and account security functions, including the identification of unusual login patterns or suspicious activity.

Players may manage their cookie preferences through their browser settings. Disabling strictly necessary cookies will affect the functionality of the Platform. Disabling preference and analytics cookies will not prevent access to the Platform or its services.

As a Data Subject whose Personal Data is processed by fatcai99, you hold the following rights. Requests to exercise any of these rights should be submitted to the contact details provided in Section 16 of this Policy.

fatcai99 will respond to all valid rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case the Player will be notified of the extension and the reason for it. fatcai99 reserves the right to refuse requests that are manifestly unfounded, excessive, or that conflict with legal retention obligations, in which case the reason for refusal will be communicated to the Player.

fatcai99 is strictly a platform for adults. Access to all Platform services is restricted to individuals who are aged 21 years or above. The Platform does not knowingly collect Personal Data from any individual under the age of 21.

If fatcai99 becomes aware that Personal Data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, all collected data will be deleted, and any balance will be returned to the originating payment method following appropriate verification.

Any parent or guardian who believes that their child has registered on the Platform or submitted personal data without authorisation is encouraged to contact us immediately at the address provided in Section 16 so that appropriate action can be taken without delay.

The fatcai99 Website integrates services provided by third-party game providers and payment processors. While fatcai99 endeavours to partner only with reputable providers who maintain appropriate privacy standards, the Platform does not control the privacy practices of third-party services and is not responsible for the content or data practices of any third-party platform or service accessed in connection with the use of fatcai99.

Players are encouraged to review the privacy policies of any third-party service they interact with in connection with the Platform, including the privacy policies of their chosen payment provider (e.g., Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank).

fatcai99 does not include links to unaffiliated external websites within the Platform. Any links that do appear on the Website direct to internal Platform pages only.

14.1 Opt-In Basis. fatcai99 sends marketing communications — including promotional emails, bonus notifications, game launch announcements, and sports betting specials — only to Players who have explicitly opted in to receive such communications at the time of registration or by updating their account preferences.

14.2 Withdrawal of Consent. Players may withdraw consent for marketing communications at any time by: (a) clicking the unsubscribe link included in all marketing emails; or (b) contacting customer support and requesting removal from the marketing list. Withdrawal of marketing consent will be processed within five (5) business days and will not affect the Player's account standing or access to Platform services.

14.3 Transactional Communications. fatcai99 will continue to send transactional and account-related communications (including withdrawal confirmations, KYC status updates, and security notifications) to all registered Players regardless of marketing preferences. These communications are necessary for the operation of the Player's account and do not constitute marketing.

14.4 No Sale of Marketing Data. fatcai99 does not share Player contact information with third parties for the purpose of enabling those third parties to send marketing communications directly. Any marketing activity conducted through third-party service providers is directed exclusively by fatcai99 and conducted using fatcai99's own Player data under appropriate data processing agreements.

fatcai99 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in data practices, regulatory requirements, or Platform services. Material changes to this Policy will be communicated to registered Players via a notice on the Website and, where the change is significant, by email to the registered account address.

The "Last Updated" date displayed at the top of this page indicates when the current version of this Policy came into effect. The version of the Policy in force at the time of any specific processing activity shall govern that activity.

Continued use of the Platform following notification of amendments constitutes the Player's acknowledgement and acceptance of the revised Policy. If a Player does not accept the revised Policy, they should cease using the Platform and may request account closure.

For any questions, concerns, or requests relating to this Privacy Policy or your Personal Data, please contact the fatcai99 data team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the live chat function on the Website. Recommended for urgent privacy concerns or account-level data requests requiring fast resolution.
• Email: [email protected] — for written data subject requests, please include your full registered name, account username, and a clear description of the request. Email responses are typically provided within 24 hours; formal data subject requests are handled within the 30-day window described in Section 11.

fatcai99 takes all privacy-related enquiries seriously and is committed to responding promptly and in full. Players are entitled to submit a formal complaint to the relevant data protection authority in their jurisdiction if they believe their rights have not been respected.