256-bit SSL
Malaysia PDPA
No Data Selling
Encrypted Data
Right to Data Access
24/7 Support

99play's 6 Data Protection Principles

Before reading the full policy, here are the six core principles that define how 99play handles your personal data.

Minimum Necessary Collection

99play collects only the data genuinely necessary to provide its services. We do not request excessive information, nor do we retain data unrelated to the operation of your account.

No Sale of Data to Third Parties

Your personal data has never been, and will never be, sold, rented, or shared with advertisers, data brokers, or any third party for commercial gain by 99play.

Bank-Grade Data Encryption

All personal data and financial transactions are encrypted using 256-bit SSL encryption – the same technology used by Malaysia's leading banks such as Maybank and CIMB.

Full Malaysia PDPA Compliance

99play operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). All our data management practices have been reviewed and approved to ensure compliance with local laws.

You Have the Right to Access & Request Deletion

Every 99play member has the right to access, correct, or request deletion of their personal data at any time. The process is straightforward and can be done through your account settings or by contacting our support team.

Timely Data Breach Notification

In the event of a security incident involving your data, 99play is committed to notifying you within 72 hours and taking immediate remediation steps.

This Privacy Policy explains how 99play ("we", "Platform") collect, use, store, and protect your personal data when you use our website and services at 99play.ws. This Policy applies to all users who browse our website, register an account, make deposits or withdrawals, and use any feature or game on the 99play platform.

By using the 99play platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact us to delete your account.

This Privacy Policy is to be read together with Terms & Conditions 99play. Together, both documents form the complete agreement between you and 99play regarding your use of the platform and the management of your data.

Section 1

Personal Data We Collect

99play collects various types of personal data depending on how you interact with our platform. Below are the categories of data we may collect:

1.1 Data You Provide Directly

Data Categories Example Information Purpose of Collection
IdentityFull name, national identity card number (MyKad)Identity verification (KYC), legal compliance
RelationshipEmail address, phone numberAccount communications, security notifications
FinanceEWallet account details (Touch 'n Go, GrabPay), bank account numberProcessing deposits & withdrawals in MYR
LocationState/city of residenceRegional compliance, local support
Log InUsername, password (encrypted)Account verification, security

1.2 Automatically Collected Data

  • IP address and device information (phone type, operating system, browser version).
  • Platform activity data – games played (slots, live casino, football betting, badminton, e-sports), bets placed, session duration.
  • Access log data – login dates and times, general geographic location.
  • Cookie data and similar tracking technologies (see Section 5).

1.3 Data From Third-Party Sources

In certain cases, we may receive data from third-party identity verification providers used for KYC processing, or from payment providers (such as FPX and DuitNow gateways) for transaction verification purposes.

99play does not collect sensitive data such as health information, religious beliefs, or political views unless specifically stated and with your explicit consent.

Section 2

How We Use Your Personal Data

The data 99play collects is used solely for lawful purposes that have been disclosed to you. The following are the primary purposes for which your data is used:

  • Account Management: Creating, verifying, and maintaining your account with 99play.
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks), and withdrawals to your Malaysian bank account in MYR (RM).
  • Service Provision: Allows you to play slots, Live Casino, and bet on Malaysia Super League, EPL, BWF badminton, e-sports, and other games within the platform.
  • Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, and account misuse.
  • Legal Compliance: To comply with applicable laws, regulations, and regulatory directives, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
  • Customer Support: Enables the 99play support team to assist you with account issues, payment enquiries, and technical problems.
  • Communications: Sending important notifications related to your account, security updates, and promotional information (if you have opted in to receive them).
  • Platform Improvements: Analysing aggregated, anonymised usage patterns to improve the user experience and platform performance.

Regarding marketing communications – you may opt out of receiving promotional emails from 99play at any time by clicking the "unsubscribe" link in any email or by contacting our support team. Opting out does not affect important account-related notifications.

Section 3

Sharing Information with Third Parties

99play does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where we may share your data with the following parties, solely to enable us to provide services to you:

3.1 Trusted Service Providers

  • Payment Providers: Malaysian payment gateways such as FPX, DuitNow, and eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) to process your transactions in RM.
  • KYC Providers: Third-party identity verification services that help us securely verify member identities.
  • Game Providers: Game software companies that provide slots, Live Casino, and other games — data shared is kept to a minimum and only to enable gameplay.
  • Cloud Services & Infrastructure: Cloud server and storage providers that host our platform data under strict security agreements.

3.2 Legal Requirements

99play may be required to disclose your data to the relevant authorities in the event of:

  • A valid court order or writ of summons.
  • Investigations by Malaysian law enforcement authorities.
  • Reporting obligations under Malaysia's Anti-Money Laundering laws (AMLA).

All third-party service providers working with 99play are bound by strict data protection agreements and may only use your data for agreed purposes. They are not permitted to use your data for their own ends.

Section 4

Data Security & Protection Measures

The security of your personal data is 99play's top priority. We implement multiple layers of technical and organisational security measures to protect your data from unauthorised access, use, disclosure, alteration, or destruction.

Our Technical Security Measures:

  • 256-bit SSL Encryption for all communications between your browser and 99play's servers — the same standard used by Malaysian banks.
  • Data encryption at rest for all sensitive information, including passwords (which are never stored in plain text) and financial details.
  • Two-Factor Authentication (2FA) available to all member accounts as an added layer of security.
  • 24/7 Monitoring by our cybersecurity team to detect and respond to any threats.
  • Regular security audits by independent parties to identify and address vulnerabilities.
  • Data segregation – member data is kept separate from other operational data under strict access controls.

While we take all reasonable steps to protect your data, no system is 100% impenetrable. We recommend using a strong, unique password for your 99play account and never sharing your login credentials with anyone.

Section 5

Cookies & Tracking Technologies

99play uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

  • Essential Cookies: Required for core platform functions such as login session authentication, security, and basic performance. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Helping us understand how users interact with our platform through anonymised analytics data, enabling us to improve performance and the overall user experience.
  • Functional Cookies: Remembering your preferences such as language, display settings, and login information (if you select "Remember Me") to deliver a more personalised experience.
  • Security Cookies: Helping to detect and prevent fraudulent activity and cyberattacks.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality and user experience of the 99play platform.

99play does not use third-party cookies for targeted advertising. We do not share your cookie data with external advertising networks or data brokers.

Section 6

Your Personal Data Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data held by 99play:

Right of Access

You have the right to request a copy of the personal data 99play holds about you. Data access requests will be processed within 21 business days.

Right to Rectification

If you find that your data is inaccurate or out of date, you have the right to request a correction. Updates can be made through your account profile settings or by contacting our support team.

Right to Erasure ("Right to Be Forgotten")

You may request the deletion of your personal data, subject to applicable legal retention requirements (see Section 7). Requests can be submitted by emailing support@99play.ws.

Right to Withdraw Consent

You may withdraw your consent to data processing at any time, particularly for marketing communications. Withdrawing consent does not affect the validity of any processing that took place prior to withdrawal.

Right to Object to Processing

You have the right to object to the processing of your data for specific purposes, such as analytics or direct marketing, by contacting our privacy team.

To exercise any of the rights above, contact the 99play Privacy team at support@99play.ws stating the type of request and your account details for identity verification. We will respond within 14 business days.

Section 7

Data Retention & Deletion

99play retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.

Data TypeRetention PeriodReason
Active account dataThroughout the active account period + 5 yearsAccount operations, audit requirements
Financial transaction records7 yearsMalaysia AMLA legal requirements
KYC verification documents5 years after account closureKYC/AML Compliance
Access & activity logs2 yearsSecurity & fraud investigation
Support communication data3 yearsCustomer service records
Marketing data (with consent)Until consent is withdrawnMarketing communications

When data is no longer needed and there is no legal requirement to retain it, 99play will delete or destroy that data securely using methods that ensure it cannot be recovered.

Section 8

Changes to This Privacy Policy

99play reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to how we protect your data.

You will be notified of any significant changes through:

  • In-platform notifications when you log in to your 99play account.
  • Notification email sent to the email address registered to your account.
  • Updates are reflected on the "Last Updated" date at the top of this document.

Continued use of the 99play platform after any changes take effect will be considered your acceptance of the updated Privacy Policy.

This Privacy Policy takes effect from 1 January 2026. For any questions about this policy or how we handle your personal data, contact us at support@99play.ws.

You're Always in Control

Under Malaysia's PDPA and 99play's commitment to privacy, you have full control over your personal data. Here is what you can do at any time.

Manage Privacy Settings

Log in to your 99play account and go to "Settings > Privacy" to manage your data and communication preferences.

Request a Copy of Your Data

Email support@99play.ws with the subject line "Data Access Request" to receive a full copy of your personal data within 21 business days.

Email Unsubscribe

Click the "Unsubscribe" link in any promotional email from 99play, or update your communication preferences in your account settings.

Manage Cookies

Use your browser settings to manage cookies. Options such as "Delete Cookies" or "Block Third-Party Cookies" are available in the settings of all modern browsers.

Correct Your Information

Basic profile information can be updated directly in your account settings. For changes that require verification (such as your ID number), please contact our support team.

Delete Account & Data

To request deletion of your account and data, contact support@99play.ws. Please note that certain data must be retained to meet legal obligations.

Your Data Is Safe with 99play

Join over 500,000 Malaysian members who have trusted 99play with their personal data. Register today and enjoy industry-standard data protection.

Bahasa Melayu