Privacy Policy 99play – Data Protection & Privacy for Malaysian Players

This Privacy Policy applies to all individuals who interact with the 99play platform, including but not limited to: registered players, unregistered website visitors, customer support applicants, and participants in promotions or lucky draws organised by 99play.

99play is the Data Controller responsible for processing personal data collected through our platform. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs how personal data of Malaysians is collected and used by private organisations.

This policy no apply to any third-party websites or services that may be linked through our platform. We encourage you to read the privacy policy of each platform you visit separately.

99play collects various types of personal data depending on how you interact with our platform. This data is collected either directly from you or automatically during your use of the platform.

99play uses your personal data on a lawful legal basis and only for the purposes stated below. We will not use your data for any other purpose without notifying you in advance.

• Account Management: To register, verify your identity, and manage your 99play account, including processing deposits and withdrawals in MYR.
• Service Delivery: To give you full access to all 99play games and services, including Malaysia Super League and EPL Sports Betting, Live Casino, online poker, e-sports, and slots.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, account manipulation, or any other misuse of the 99play platform.
• Legal Compliance: To meet KYC (Know Your Customer), AML (Anti-Money Laundering), and applicable legal reporting requirements.
• Service Communications: To send you important account-related notifications — including transaction updates, changes to terms, or security alerts — via SMS or email.
• Marketing (with consent): To send you promotional information, exclusive offers, and the latest 99play news — only with your consent. You may withdraw this consent at any time.
• Platform Improvements: To analyse usage patterns, resolve technical issues, and develop better new features for Malaysian players.

99play does not sell or rent your personal data to any party for commercial purposes. However, we may share your data in the following limited circumstances:

• Payment Service Providers: Transaction information required to process deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and local Malaysian FPX banks. These providers are bound by strict confidentiality agreements.
• Game Software Providers: Minimum technical data required to enable the operation of live casino, poker, and slots games. No financial or full identity data is shared.
• Analytics Providers: Anonymised and aggregated data used for platform usage analytics. This data cannot be used to identify you as an individual.
• Legal Requirement: When required by competent authorities in Malaysia or by a valid court order. 99play will notify you of such disclosures unless prohibited by law.
• Protection of Public Interest: Where necessary to prevent financial crime, money laundering, or serious threats to public safety.

99play retains your personal data for as long as necessary to fulfil the purpose of collection, comply with legal requirements, or resolve any outstanding disputes. The following are general data retention guidelines:

Technical security measures we have in place:

• 256-bit SSL/TLS encryption for all communications between your device and 99play servers.
• Two-factor authentication (2FA) that players can enable for added account security during login.
• Real-time security threat monitoring using an intrusion detection system (IDS).
• Strict internal access controls — only authorised staff may access player data, and all access is logged.
• Periodic penetration testing and security audits conducted by certified independent parties.
• Multi-layered data backups across multiple secure locations to ensure service continuity.

As a data subject under Malaysia's PDPA, you have the following important rights regarding your personal data held by 99play:

99play uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can control and manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the 99play platform.

As a platform operating on global technology infrastructure, some of your data may be stored or processed on servers located outside Malaysia — for example, for data backup purposes or by international game software providers.

In such circumstances, 99play ensures that:

• All data transfers comply with the conditions set out under Malaysia's PDPA governing cross-border data transfers.
• The recipient country or organisation maintains a level of data protection equivalent to or higher than that required under Malaysian law.
• Legally binding data processing agreements (DPA) are signed with all third-party providers who receive 99play player data.
• High-level encryption is applied to all cross-border data transfers without exception.

99play strictly prohibits use of the platform by individuals under 18 years of age. We do not target our services at minors and do not knowingly collect any personal data from underage individuals.

99play reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform improvements. When significant changes are made, we will:

• Updating the "Last updated" date at the top of this document.
• Notifying all registered members via email or in-platform 99play account notifications at least 7 days before the changes take effect.
• Displaying a clear notice on the 99play homepage regarding any policy updates that have been made.

Continued use of the 99play platform after a notice of amendment is deemed acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

99play has appointed a Data Privacy Officer responsible for ensuring compliance with this policy and handling all privacy-related enquiries from Malaysian players.

If you believe that your privacy rights have been violated by 99play and you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia (JPDP), the relevant authority under PDPA 2010.