Data Security Policy

md999 Privacy Protection Policy

Q: How can I request to update or delete my personal information?

Email us at support@md999.lol or contact us through Live Chat on the website. In your request, include your account username and clearly state which personal information you want updated or deleted. We will respond within 30 days of receiving your request. If any data cannot be deleted due to legal or financial requirements, we will explain that to you.

This page explains how md999 protects your personal information, what it is used for, and what your rights are.

Last updated: 30 October 2026

Policy Summary

Introduction — Purpose of This Policy

md999 is a platform for gaming enthusiasts in Myanmar offering football betting, live casino, slots, and fish shooting games. This Privacy Policy is an official document that explains how md999 collects, stores, uses, and protects your personal information when you visit our website at https://md999.lol or when you register an account and use our services.

By reading this policy and continuing to use our website or services, you are considered to have agreed to the terms of this Privacy Policy. If you do not agree with the policy, please stop using our services and contact us at [email protected].

Information We Collect

Personal Information We Collect

md999 collects and stores personal information in the following categories—

2.1 Information You Provide Directly

Full name, date of birth, contact phone number, and email address
Username and password provided when registering an account (passwords are encrypted and stored securely)
Bank account number, KBZPay number, Wave Money number, or AYA Pay number provided for deposits and withdrawals
National ID card and facial photo submitted by you for KYC verification
Messages sent via customer service Live Chat and to [email protected]

2.2 Technical data collected automatically

IP address, browser type, operating system, and device model
Pages visited, click history, and time spent on the site
Data collected from cookies and similar tracking technologies (see Section 7 for details)
Deposit and withdrawal records, game history, and transaction timestamps

How We Use It

Personal Data Purpose of Use

md999 uses your information only for the following purposes—

Account registration and identity verification (KYC)
Processing deposit and withdrawal transactions
Managing bonuses, promotions, and VIP tier services
Providing customer support when issues arise during play
Preventing fraud and financial misconduct
Upholding our Responsible Gaming policy and the 21+ requirement
Analytics to improve the website
Compliance with laws, regulations, or legal processes

Sharing Policy

Data Sharing with Third Parties

md999 never sells or rents your personal data to third parties. However, data may be shared under the following conditions—

4.1 Service Providers

Payment processors (KBZPay, Wave Money, AYA Pay), hosting, and cybersecurity providers receive only the data necessary to perform their services, and they are bound by data protection agreements with us.

4.2 Legal Requirements

If we receive a lawful order from a legal authority or court, we are required to provide data in accordance with the law. Where permitted by law, we will notify you in advance.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of md999's business, personal data may be transferred. If this happens, we will require the successor to continue applying the protection standards described in this policy.

Retention

Data Retention and Deletion

md999 retains your personal data for as long as necessary to provide our services and to meet any legal, financial, or audit requirements.

Transaction records after account closure — at least 5 years, as required by financial law
KYC verification data — 5 years after account closure
Customer support records — 3 years
Website analytics data — 2 years (retained indefinitely after anonymisation)

After those periods, data will be deleted securely. To request deletion, contact [email protected] — we will delete your data once the relevant legal requirements have been met.

Security

Personal Data Security Measures

md999 applies technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction—

SSL (Secure Sockets Layer) encryption — all data transfers between the website and our servers are encrypted
Passwords are stored using bcrypt hashing and are never stored in plain text anywhere
Access to payment and personal data is restricted to the minimum number of staff necessary (Least Privilege Principle)
Suspicious access attempts are monitored 24 hours a day
Regular security audits are conducted with external security specialists

We acknowledge that no technology is 100% secure. In the event of a data breach, we will notify affected users as quickly as possible and take preventive action.

Cookies and Tracking Technology

The md999 website uses cookies to improve your browsing experience—

7.1 Essential Cookies

These cookies are used for session memory, security tokens, and payment protection. Blocking them will prevent the website from functioning properly.

7.2 Performance Cookies

Used to gather website analytics. This data is collected anonymously and is used solely to improve the website.

7.3 Cookie Controls

You can block cookies through your browser settings. Please note that blocking essential cookies may cause some website features to stop working.

Your Rights

Your Personal Rights

As a customer of md999, you have the following rights regarding your personal data—

8.1 Right of Access

You can request to know what personal data md999 holds about you.

8.2 Right to Rectification

You can request correction of any inaccurate or incomplete personal data. You can update it yourself through your account settings, or contact us at [email protected].

8.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data, unless there are legal, financial, or regulatory requirements that prevent it.

8.4 Right to Restrict Transfer

You can request that your personal data not be transferred to third parties — it will only be transferred when legally required.

8.5 How to Exercise Your Rights

To exercise any of the above rights, please write to us at [email protected]. We will respond within 30 days of receiving your request.

Minors

Protection of Minors Under 21

md999 services are intended for users aged 21 and above only. If we become aware that personal data of anyone under 21 has been collected, we will delete it immediately. If you find that a minor is using the site, please notify us right away at [email protected].

Policy Updates

Changes to This Policy

md999 may update this privacy policy from time to time. When changes are made, the "Last Updated" date on the website will be revised accordingly. For significant changes, we will notify you via your account email. Continuing to use the site after any update is considered your acceptance of the changes.

Privacy Matters Contact

If you have questions about this privacy policy or wish to exercise your rights regarding your personal data, please get in touch with us—

Email: [email protected]
Live Chat: You can reach us through the 24/7 Live Chat service on the website

When contacting us, please include your account username and a clear description of your reason for reaching out — this will help us assist you more quickly.

Q&A

Frequently Asked Questions on Privacy Protection

Yes. KBZPay, Wave Money, AYA Pay, and bank account numbers are transferred using SSL encryption and stored encrypted in the database. We have data protection agreements in place with our payment service providers, and those providers never use your data for their own purposes.

Never. md999 does not sell, rent, or share personal information with social media companies, advertising companies, or third parties. When data sharing with third parties is required, we only work with providers that meet our data protection standards — except where disclosure is required by law.

Email us at [email protected] or contact us through Live Chat on the website. In your request, include your account username and clearly state which personal information you want updated or deleted. We will respond within 30 days of receiving your request. If any data cannot be deleted due to legal or financial requirements, we will explain that to you.

If we become aware of a data breach, we will notify affected users as quickly as possible via their account email or Live Chat. We will immediately explain the nature of the breach, what data was affected, and what preventive steps are being taken, and we will act quickly to prevent further harm.

Blocking performance and analytics cookies still allows you to browse the site. However, blocking essential cookies such as session cookies may interrupt basic functions like logging in. We recommend allowing essential cookies for a better gaming experience.

KYC verification data is retained for 5 years after your account is closed. This period meets financial regulatory requirements. After that, KYC data will be securely deleted.