Updated: 1 January 2026

99play Privacy Policy – Malaysia Member Personal Data Protection

Your privacy is our priority. This document transparently explains how 99play collects, uses, stores, and protects your personal data. We are committed to keeping your information secure and handled with full responsibility.

256-bit SSL Encryption
Secure Servers
No Data Selling

99play Data Protection Commitment

We believe your trust is our most valuable asset. Here are the six core principles that underpin how we manage personal data for 99play members.

🔐

High-Level Encryption

All data transmitted between your device and 99play's servers is protected by 256-bit SSL encryption, meaning your information cannot be intercepted or read by unauthorised parties during transmission.

🚫

Your Data Is Never Sold

99play has never and will never sell your personal data to any third party for marketing purposes. Your information is used solely for platform operations and account verification.

🗂️

Limited Data Collection

We only collect data that is strictly necessary to operate our services. No excess information is gathered — every data point we request has a clear and legitimate purpose.

👁️

Full Transparency

This Privacy Policy is written in plain language so you know exactly what happens to your data. There are no hidden terms or confusing fine print.

🛡️

Strict Access Control

Only authorized personnel may access member personal data, and strictly within the scope of their assigned duties. All access is logged and continuously monitored by our internal security team.

⚖️

Member Rights Protected

You have the right to access, correct, or request deletion of your personal data at any time. Our team is ready to help you exercise these rights without any barriers.

Important Note: This Privacy Policy applies to all members and users of the 99play platform, including our website and mobile app. By registering or using our platform, you agree to the terms stated here.

01Information We Collect

99play collects several categories of information from members to ensure the platform operates smoothly, securely, and in line with your needs. All data collected is based on legitimate operational requirements and is not used for any purpose beyond the scope stated in this policy.

The table below shows the types of data we collect and the purposes behind each:

Data Category Example Information Type Primary Purpose
Identity Information Full name, identity card number, date of birth Mandatory KYC verification, fraud prevention
Contact Information Email address, phone number Mandatory Account communications, transaction notifications
Financial Information Bank account number, digital wallet name Mandatory Deposit & withdrawal processing
Technical Data IP address, device type, web browser Auto Security, fraud prevention
Usage Data Game history, preferences, session duration Auto Service improvement, recommendations
Profile Information Display name, profile photo, language preferences Options Personalising the user experience

Important: We never store your full credit or debit card number. All transactions are processed through third-party payment providers that comply with PCI-DSS standards.

02How We Use Your Data

The data we collect is used solely for purposes related to the operation of the 99play platform and to provide you with the best experience as a member. We do not use your data for purposes beyond those stated without obtaining your consent first.

  • Account Management: Create and maintain your account, verify your identity, and ensure secure login.
  • Transaction Processing: Process deposits, withdrawals, and all financial transactions accurately and promptly.
  • Customer Support: Enables our support team to assist you effectively whenever you have a query or issue.
  • Platform Security: Detect and prevent fraudulent activity, hacking attempts, or unauthorized use of your account.
  • Legal Compliance: Fulfil reporting and compliance obligations set by the relevant regulatory bodies.
  • Marketing Communications: Send relevant promotional offers and notifications — only if you have consented to receive them.
  • Service Improvement: Analyse usage patterns to improve our platform's design, performance, and features.

In all cases, we ensure data processing is based on a solid legal basis — whether under a contractual agreement, the platform's legitimate interests, or compliance with applicable legislation.

03Sharing Information With Third Parties

99play takes its "no data selling" commitment very seriously. We never sell, rent, or exchange your personal data with any party for marketing or commercial gain.

However, there are limited situations where we may need to share your information with trusted third parties:

  • Payment Providers: Transaction details required to process deposits and withdrawals via FPX, Touch 'n Go eWallet, GrabPay, Boost, and local banks.
  • Game Service Providers: Third-party game providers may receive minimum session data required to run games within our platform.
  • Law Enforcement Authorities: If required by a court order or a lawful request from the relevant authorities, we will disclose only the minimum information necessary.
  • Technical Service Providers: Companies that assist us with technical operations (such as cloud hosting and cybersecurity) are bound by strict confidentiality agreements.

Our Commitment: Every third party that handles 99play member data is required to sign a data processing agreement that meets our security standards. We take full responsibility for how they handle that information.

04Data Security

Protecting your data from unauthorized access, loss, or misuse is one of 99play's highest priorities. We continuously invest in industry-grade security infrastructure to keep your information protected at all times.

The security measures we have implemented include:

  • 256-bit SSL encryption for all data communications between users and our servers.
  • Personal data in the database is encrypted using AES-256.
  • Two-factor authentication (2FA) is available for all member accounts.
  • 24/7 security monitoring and intrusion detection system (IDS).
  • Periodic penetration testing conducted by independent third parties.
  • Role-based access control (RBAC) for internal staff.
  • Encrypted data backups stored at separate locations.

Security Incidents: In the event of any security incident affecting your personal data, we will notify you within 72 hours of becoming aware of it, in line with industry best practices.

05Cookies & Tracking Technologies

The 99play platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how you use our platform.

There are several types of cookies we use:

  • Essential Cookies: Required for the platform to function properly, including login session management and form security. These cookies cannot be disabled.
  • Performance Cookies: Helps us understand which pages are visited most frequently and how long users spend on them, so we can improve your experience.
  • Functional Cookies: Save your preferences such as language, theme, and display settings so you do not need to reconfigure them each time you log in.
  • Marketing Cookies: Used to display relevant promotions to you. You may opt out of these cookies through your browser settings.

You can manage or delete cookies at any time through your browser settings. Please note that disabling essential cookies may affect certain functions of our platform.

06Data Storage & Deletion

We retain your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law. Generally, retention periods are as follows:

  • Active Account Data: Retained for the duration your account is active and for a defined period after account closure for legal compliance purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with financial and anti-money laundering (AML) legal requirements.
  • Security Logs: Retained for 12 months for security incident investigation purposes if required.
  • Support Communication Data: Retained for 3 years for reference and service quality improvement.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered. If you request early account deletion, we will remove all permitted data while retaining records required by law.

07Your Rights

As a 99play member, you have various rights regarding your personal data. We respect these rights and will process any valid request within 30 business days.

Your Rights as a 99play Member

We respect your right to control your own personal data. Below are the key rights you hold as a member of our platform.

👁️

Right of Access

You have the right to request a copy of the personal data we hold about you at any time through our support team.

✏️

Right to Rectification

If any of your information is inaccurate or out of date, you have the right to request a correction from us promptly.

🗑️

Right to Erasure

You may request deletion of your personal data, subject to legal obligations that require us to retain certain records.

Right to Object

You may object to the use of your data for direct marketing purposes at any time without providing any reason.

📦

Right to Data Portability

You have the right to request your data in a machine-readable format for transfer to another service provider if you wish.

🔒

Right to Restriction of Processing

In certain situations, you may request that we restrict how we process your data while your request is under review.

How to Submit a Request: To submit any request relating to your personal data rights, please contact our support team via Live Chat in the 99play app or platform. We will respond within 2 business days and resolve your request within 30 days.

08Children's Data

The 99play platform is an adult service intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data from children under the age of 18.

Should we discover that a child's personal data has been collected without valid parental or guardian consent, we will take immediate action to delete that information and close the account in question.

For Parents: If you believe your child has registered an account on 99play, please contact our support team immediately. We will review and close the account, and delete all associated data within 48 hours.

09Changes to the Privacy Policy

99play reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. We are committed to notifying you of any significant changes.

  • Minor updates will be applied silently with the "Updated" date refreshed at the top of this page.
  • Significant changes affecting your rights or how we use your data will be communicated via in-app notifications or email.
  • Continued use of the 99play platform after changes are published constitutes your acceptance of the updated policy.
  • We encourage you to review this page periodically to stay informed of our latest policy.

10Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how 99play handles your personal data, we are always here to help. Our privacy and support team operates 24/7 to ensure you receive a prompt and satisfactory response.

  • Live Chat: The fastest option — available in the 99play app and website, responded to within minutes.
  • Support Email: [email protected] — for enquiries requiring detailed clarification or supporting documents.
  • Help Centre: Visit the page FAQ us for answers to the most frequently asked questions about privacy and account security.

Data Protection Officer: For complex or sensitive privacy-related matters, you may contact our Data Protection Officer (DPO) directly at [email protected]. All complaints will be reviewed and responded to within 14 business days.

FAQ – Privacy Policy

Here are answers to the most frequently asked questions by 99play members regarding privacy and data protection.

Absolutely not. 99play has never and will never sell, rent, or trade members' personal data to any third party for marketing or commercial gain. Your data is used solely to operate the platform and deliver the best service to you.

Yes, you may request account closure and deletion of your personal data at any time. Please contact our support team via Live Chat. We will delete all permitted data within 30 days, except records that must be retained by law, such as financial transaction records for 7 years.

All financial information is protected by 256-bit SSL encryption during transmission. We do not store your full credit or debit card numbers — all transactions are processed through payment providers that comply with PCI-DSS standards. Financial data in our database is also encrypted using AES-256.

During registration, we require your full name, email address, phone number, and date of birth. For the KYC (identity verification) process, you may be asked to submit a copy of your national ID or passport. All this information is required to ensure account security and legal compliance.

You can update most of your profile information directly through the account settings page after logging in. For changes to sensitive information such as your ID number or full name, please contact our support team for an additional verification process to ensure your account's security.

The 99play platform uses 256-bit SSL encryption for all communications, meaning your data remains encrypted even on public Wi-Fi networks. Nevertheless, we still recommend using a private network or a trusted VPN when accessing your account for added security.
Safe & Trusted Platform

Your Data Is Protected. Join 99play With Confidence.

With industry-grade encryption, a transparent privacy policy, and a full commitment to data protection, you can play on 99play with complete peace of mind and confidence.

256-bit SSL Encryption
No Data Selling
24/7 Support
Integrated KYC
Bahasa Melayu