Luna99 Privacy Policy – Your Data Protection

01Introduction

Welcome to the luna99 Privacy Policy. This policy outlines our commitment to protecting your personal data when you register, log in, or use any services provided through the luna99 platform at luna99.win and our official mobile app.

Luna99 takes this responsibility seriously. In today's digital age, privacy is not merely a formality — it is a fundamental right of every user. We ensure that every piece of information you provide is handled with full integrity, used only for legitimate purposes, and protected with the latest security technology.

By registering a Luna99 account, you confirm that you have read and understood this privacy policy and agree to the way we process your personal data as described herein. If you disagree with any part of this policy, please discontinue use of our platform.

02Personal Data We Collect

Luna99 collects your personal data in several ways — directly when you provide it to us, automatically as you use our platform, and in some cases, through trusted third parties such as payment providers.

2.1 Data You Provide Directly

• Registration information: full name, email address, mobile phone number, date of birth, and your preferred username.
• Identity verification (KYC) information: a copy of your identity card (MyKad), passport, or other valid identification document to fulfill legal compliance requirements.
• Financial information: bank account details, e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), or debit card information for the purpose of deposits and withdrawals.
• Support communications: any messages, complaints, or feedback you submit to the luna99 customer support team via live chat or email.

2.2 Automatically Collected Data

• Usage data: login records, betting history, gaming activity, deposit and withdrawal transactions, and your gaming preferences.
• Technical data: IP address, web browser type and version, device operating system, unique device identifier, screen resolution, and time zone.
• Location data: general location based on IP address for the purposes of regional verification and fraud prevention.
• Cookie data: session information, language preferences, and analytics data collected through cookies and similar tracking technologies.

2.3 Data Types & Purposes Table

03How We Use Your Data

Luna99 uses collected personal data solely for legitimate and transparent purposes. We will not process your data for any other purpose not stated here without first obtaining your consent. The following are the primary purposes for which your personal data is used:

• Account management: create and manage your member account, including identity verification and the KYC process required by law.
• Transaction processing: process deposits, withdrawals, and all financial activities related to your luna99 account securely and accurately.
• Platform security: detect and prevent fraud, unauthorized access, collusion, money laundering, and suspicious or unlawful activity.
• Customer Support: assist you in resolving any issues, inquiries, or complaints relating to your account or gaming experience more effectively.
• Legal compliance: fulfill applicable legal obligations, including reporting requirements to relevant authorities when necessary.
• Service improvement: analyze platform usage patterns to enhance the user experience, introduce new features, and optimize platform performance.
• Promotional communications: send you the latest offers, bonuses, and promotions — only if you have given your consent to receive such communications.

04Data Storage & Security

4.1 Retention Period

Luna99 retains your personal data for as long as your account is active or as long as necessary to fulfill the purposes stated in this privacy policy. After an account is closed, some data may be retained for an additional period to meet legal obligations — typically between 5 to 7 years — before being securely deleted or anonymized.

4.2 Technical Security Measures

Luna99 implements multiple layers of technical protection to ensure your data remains safe from unauthorized access, disclosure, alteration, or destruction at all times:

• 256-bit SSL encryption: all data communications between your browser and luna99 servers are protected with high-security SSL encryption, equivalent to that used by leading banking institutions.
• Data-at-rest encryption: sensitive data stored in our databases is encrypted using AES-256 algorithms, ensuring the data remains unreadable even in the event of a security breach.
• Two-factor authentication (2FA): luna99 supports two-factor authentication to add an extra layer of protection to your account.
• Continuous monitoring: our security system monitors account activity 24 hours a day, 7 days a week to detect any unusual activity that may indicate a breach attempt.
• Strict access control: access to members' personal data within luna99's internal systems is granted only to staff with a legitimate operational need and is subject to strict confidentiality agreements.

05Data Sharing with Third Parties

Luna99 does not sell, rent, or trade members' personal data to any third party for their own marketing or business purposes. Your data is shared only in the following limited and controlled situations:

• Payment providers: transaction information required to be shared with payment gateway providers (FPX, Touch 'n Go, GrabPay, Boost, ShopeePay) solely for the purpose of processing your deposits and withdrawals.
• Technical service providers: companies providing infrastructure, server hosting, analytics, and technical support services — subject to strict data processing agreements.
• Game providers: account information required to be shared with game providers such as Pragmatic Play, Evolution Gaming, and others to enable you to access their games.
• Legal authorities: when required by law, court order, or law enforcement authorities in the course of a lawful investigation.
• Fraud prevention: in cases where it is necessary to share information with fraud prevention agencies or licensing bodies to protect the integrity of the platform.

All third parties working with luna99 data are required to comply with privacy and security standards equivalent to our own. We do not permit them to use such data for any purpose other than those specified.

06Cookies & Tracking Technologies

Luna99 uses cookies and similar tracking technologies to enhance the user experience, analyze platform performance, and ensure the security of your account. The following are the types of cookies we use:

6.1 Essential Cookies

These cookies are required for core luna99 platform functions such as login session management, security, and language preferences. Without them, the platform cannot function properly. Essential cookies cannot be disabled.

6.2 Analytics Cookies

We use analytics cookies to understand how members interact with our platform — which pages are visited most frequently, how long sessions last, and where technical issues may arise. This data is used in aggregate and does not directly identify individuals.

6.3 Preference Cookies

These cookies save your preferences such as display mode, preferred language, and other personal settings so you don't have to configure them again each time you log in. You may choose to disable these cookies without affecting the platform's core functionality.

You can manage or delete cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect your experience on the Luna99 platform.

07Your Rights Regarding Personal Data

As a luna99 member, you have certain rights regarding your personal data. luna99 respects and facilitates the exercise of these rights in accordance with applicable data protection laws:

To exercise any of the above rights, please contact the luna99 customer support team via live chat or send us an email. We will process your request within 30 business days from the date of receipt of the complete request. In complex cases, this period may be extended, and we will notify you in advance.

08Children's Data

Luna99 is an online gambling platform that strictly limited to individuals aged 18 and above. We do not intentionally collect or process personal data of minors. Should we discover that we have inadvertently collected data from a minor, we will promptly delete that data and close the relevant account.

If you believe that someone under the age of 18 has registered an account at Luna99, please contact us immediately so we can take the appropriate action.

09Links to Third-Party Platforms

The luna99 platform may contain links to third-party websites or services such as game providers or payment partners. This privacy policy applies only to data collected by luna99 and does not cover the privacy practices of those third-party platforms.

We encourage you to read the privacy policy of each third-party platform you visit separately. Luna99 is not responsible for the content or privacy practices of any third-party websites or services.

10Amendments to the Privacy Policy

Luna99 reserves the right to update or modify this privacy policy at any time to reflect changes in our practices, legal requirements, or new platform features. Members will be notified of any significant amendments via their registered email or in-platform notification at least 14 days before the changes take effect.

The latest update date of this privacy policy will always be displayed at the top of this page. We encourage you to review this page periodically. Your continued use of the luna99 platform following any amendments constitutes your acceptance of the updated policy.

11Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal data, please do not hesitate to contact us:

• 24/7 Live Chat: The fastest way — directly within the Luna99 platform, handled by our Malaysian-speaking support team.
• Privacy Email: [email protected] — for specific inquiries relating to privacy and data subject rights requests.
• General Support Email: [email protected] — for general inquiries relating to accounts and services.

We are committed to responding to all privacy-related enquiries within 3 business days. For formal data subject rights requests, the response time is within 30 business days as required by applicable law.