Privacy Protection

m99 Privacy Policy

Your personal data is fully protected at m99. This policy clearly explains how we collect data, how we use it, and what your rights are.

Last Updated: 30 October 2026

1. Introduction

m99 is a digital entertainment and online gaming platform designed for the Myanmar market. We are committed to handling your personal data responsibly. This Privacy Policy applies to the m99.uno website and all related services.

This policy clearly explains why we collect data, how we use it, who we share it with, and what rights you have. By continuing to use our platform, you are considered to have accepted the terms of this policy. If you do not agree with this policy, please contact [email protected] to discuss it before using our services.

2. Data We Collect

We only collect data that matches the needs of each service and always apply a minimal approach — no more than necessary. The types of data we collect are as follows.

2.1 Data You Provide Directly

  • Name, date of birth, phone number, and email address provided when registering an account
  • Identity verification documents for payment purposes (KYC process)
  • Transaction data provided when making deposits and withdrawals
  • Complaints or questions submitted when contacting customer support

2.2 Data Collected Automatically

  • IP address, browser type and version, device type
  • Date and time of activity on the website (Myanmar Standard Time)
  • Pages viewed, clicks, and time spent on the website
  • Data from cookies and similar tracking technologies

2.3 Gaming Data

  • Game play records, bet amounts, and prize winnings
  • Records of bonus and promotion usage
  • Information related to VIP level progression

3. How We Use Data

We use the data we collect for the following purposes.

Data Type Purpose Legal Basis
Registration Data Account creation, KYC verification To perform contractual services
Payment Data Processing deposits and withdrawals To meet legal requirements
Game Play Records Calculating VIP level changes, verifying bonuses Legitimate business interest
Technical Data Security, checking for irregular play Legitimate business interest
Communication Data Customer service, service updates Legitimate business interest
Responsible Gaming Data To enforce gaming limits To meet legal requirements

4. Data Sharing and Disclosure

m99 does not sell or rent your personal data to third parties. However, we may share it only when necessary to provide our services, and only under the conditions set out below.

4.1 Service Providers

We work with KBZPay, Wave Money, AYA Pay, and CB Pay to process payment transactions. These parties are required to follow data security standards that match the protection we have committed to.

4.2 Legal Obligations

When we are required to comply with applicable law, a judicial process, or a government request, we will disclose data as needed. Where there is no legal restriction preventing us from doing so, we will make every effort to notify you in advance.

4.3 Business Changes

In the event of a business change such as a company merger, sale, or asset transfer, data will only be transferred to a successor who continues to comply with this policy and its standards.

5. Cookies and Tracking Technologies

We use cookies and related technologies to improve platform performance, security, and user experience.

Types of Cookies We Use

  • Essential Cookies: Cookies that cannot be disabled — they keep you logged in and protect against frozen game issues.
  • Functional Cookies: Cookies that remember your language preference and game settings.
  • Analytics Cookies: Used to understand which pages are most visited and to improve our services.

You can control cookies through your browser settings. However, please note that blocking essential cookies may prevent some features of the website from working properly.

6. Data Security Measures

At m99, we combine technical, operational, and administrative security measures to protect your data.

  • SSL (Secure Socket Layer) encryption is applied to all data transfers
  • Payment data is encrypted and stored on separate, isolated servers
  • Access control — data access is restricted to staff who need it on a need-to-know basis only
  • Regular security audits are carried out
  • Continuous monitoring is in place to detect unauthorized access

While we do our best, we acknowledge that no service in the world is 100% secure. If you suspect unauthorized access to your account, please contact [email protected] immediately.

7. Data Retention Period

We retain data for as long as we are providing services and as long as is needed to meet our legal obligations. When data is no longer required for its purpose, it will be deleted using a method that complies with legal standards.

  • Active account data — retained for as long as the account remains open
  • Payment data — retained for 5 years from the date the account is closed
  • Game play records — retained for a period in line with legal requirements
  • Data requested for deletion — deleted after all legal obligations have been fulfilled

8. Your Rights

Regarding this policy, you have the following rights. To exercise any of these rights, please contact [email protected].

Right to Access

You may ask what data we hold about you and request a copy of it.

Right to Rectification

You may request that any incorrect or incomplete personal data be corrected.

Right to Erasure

You may request deletion of your data as long as it does not conflict with any legal obligations.

Right to Restrict

You may request that we restrict how we use your data for certain purposes.

Right to Data Portability

You have the right to receive your data in a readable format or to transfer it to another service.

Right to Object

You may object to our use of your data by raising grounds against our legitimate interests.

9. Protection of Minors

m99 services are intended only for adults aged 21+. We do not knowingly collect personal data from anyone under 21.

If you believe that someone under 21 is accessing our website, please notify us immediately at [email protected]. We will review the data related to that person and take steps to delete it.

10. International Data Transfers

Our data servers are located in the Myanmar region and related areas. If data needs to be transferred outside the country, it will only be sent to countries that have security measures equivalent to the protections described in this policy.

11. Policy Changes

m99 may update this policy from time to time to reflect changes in technology, law, or our services. For material changes, we will post a notice on the website 30 days in advance. Continuing to use the website after a change takes effect means you accept the updated policy. The "Last Updated" date is shown at the top of this policy.

12. Contact Us

If you have any questions or requests regarding this Privacy Policy, you can reach our data protection officer through the following channels.

When submitting a data request, please clearly state your account details and the type of data you are requesting. We will handle your request and respond within a reasonable timeframe.

Privacy Protection FAQ

m99 does not sell or rent your data to third parties. We only share the data needed with service providers such as KBZPay, Wave Money, AYA Pay, and CB Pay to process payments. Sharing beyond that only occurs when required by a legal request.

Yes. You can request deletion of your personal data. However, some data cannot be deleted immediately due to legal obligations (for example, payment records must be kept for 5 years). Those records will be deleted once the legal retention period ends. You can make a request by contacting [email protected].

You can block cookies from your browser settings. However, cookies are essential for stable login sessions and certain game functions. If you block them, some parts of the website may not work properly.

Send an email to [email protected] to request access to your data. Once we verify the request from your registered account, we will send you a copy of the data held within a reasonable timeframe.

Game records are kept to calculate VIP levels and cashback amounts, verify bonus conditions, and handle responsible gaming limits. Anonymised aggregate data is also used to improve our services.

For significant changes, we will post a notice in a prominent place on the website 30 days in advance. For minor changes (spelling, references), only the "Last Updated" date on this policy will be updated.

If we become aware of a personal data breach that could seriously affect your rights and freedoms, we will make every effort to notify you within the timeframe required by law. You can contact us immediately at [email protected].