Privacy Policy

This Privacy Policy ("Policy") describes how 99myr ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("User", "you", "your") who register for, access, or use any service available at https://99myr.cam.

99myr is committed to handling all personal data in a responsible, transparent, and lawful manner. This Policy is intended to provide a clear and complete explanation of our data practices, consistent with internationally recognised data protection principles including those reflected in frameworks such as the European General Data Protection Regulation (GDPR) and applicable provisions of Malaysian data protection law.

This Policy applies to all personal data collected through the Platform, including data provided at the time of account registration, during the Know Your Customer (KYC) verification process, through ongoing Platform usage, via customer support interactions, and through our payment processing infrastructure.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, location data, email address, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.
• "Processing" means any operation or set of operations performed on personal data, whether or not by automated means, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, 99myr.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller, under instruction from and in accordance with agreements with the Data Controller.
• "KYC" means Know Your Customer — the identity and address verification process conducted by 99myr in accordance with its licensing and anti-money laundering obligations.
• "Cookies" means small text files placed on a User's device by the Platform for the purposes of session management, analytics, personalisation, and fraud detection.
• "Sensitive Personal Data" means categories of personal data that receive enhanced protection, including information relating to racial or ethnic origin, health, biometric data, or financial account details.

The Data Controller responsible for the personal data of 99myr users is the legal entity operating the 99myr Platform under its international gaming licence. For all privacy-related enquiries, requests, or complaints, please contact us using the details provided in Section 15 of this Policy.

99myr operates the Platform under an international online gaming licence. While the Platform accepts users from Malaysia and is designed with Malaysian players in mind — reflecting local payment preferences including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks — data processing activities are governed by the legal framework of the licensing jurisdiction.

99myr collects personal data from Users across several categories. The following table sets out the categories of data collected, the context in which they are gathered, and examples of specific data points within each category:

We do not collect or store full payment card numbers. Where payment card data is involved, it is processed exclusively by our certified payment service providers and is not retained on 99myr servers.

99myr uses personal data collected from Users for the following specific purposes. We do not use personal data for purposes incompatible with those listed below without first obtaining User consent or establishing an appropriate alternative legal basis:

• Account Creation and Management: To register and maintain your 99myr account, verify your identity, and provide access to Platform services including casino games, sports betting markets, and payment facilities.
• KYC and Regulatory Compliance: To fulfil our obligations under our gaming licence, including Know Your Customer verification, age verification (21+ requirement), anti-money laundering screening, and sanctions list checks.
• Payment Processing: To process your deposits — including via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank — and to execute withdrawal requests to your designated payment account.
• Fraud Detection and Prevention: To identify, investigate, and prevent fraudulent activity, money laundering, account takeover, and other prohibited conduct that may harm you or the Platform.
• Customer Support: To respond to your support queries, investigate account issues, and resolve disputes in a fair and timely manner.
• Responsible Gambling: To monitor gaming activity for indicators of problem gambling, implement player-requested restrictions (deposit limits, self-exclusion), and fulfil our duty of care obligations.
• Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates — but only where you have opted in to receive such communications, or where we have a legitimate interest in informing you of relevant updates to your account.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, improve game performance, and develop new features based on aggregate, anonymised usage data.
• Legal Obligations: To comply with applicable laws, regulatory requirements, and lawful requests from competent authorities.

All personal data processing conducted by 99myr is carried out on one or more of the following lawful bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and 99myr — specifically, to provide Platform access, process payments, and manage your account. This covers the majority of core account and transaction processing activities.
• Legal Obligation: Processing is required to comply with applicable laws and regulatory requirements, including KYC, anti-money laundering obligations, and age verification requirements under our gaming licence.
• Legitimate Interests: Processing serves the legitimate interests of 99myr or third parties — for example, fraud prevention, platform security monitoring, and product improvement through anonymised analytics — provided those interests do not override your fundamental privacy rights.
• Consent: Processing is conducted on the basis of your explicit consent in circumstances where no other lawful basis applies — for example, for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

99myr does not sell, lease, or trade your personal data to any third party. However, we do share personal data with specific categories of trusted third parties where necessary to operate the Platform and fulfil our obligations. All third-party data processors are bound by contractual data protection obligations consistent with applicable privacy law.

Categories of third parties with whom your data may be shared include:

• Payment Service Providers: Including the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking partners — to process your deposit and withdrawal transactions. These providers operate under their own regulatory frameworks and privacy policies.
• KYC and Identity Verification Providers: Third-party services that assist in verifying the authenticity of identity documents and conducting AML screening checks.
• Fraud Detection and Security Providers: Specialist services that analyse transactional and behavioural data to identify and prevent fraudulent account activity.
• Game Content Providers: Software studios that provide casino games and betting engines integrated into the Platform may have access to aggregated session and game play data for audit, RTP verification, and technical purposes.
• Legal and Regulatory Authorities: Competent authorities, law enforcement agencies, and gaming regulators, where disclosure is required by law, court order, or regulatory direction.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged in the course of legitimate business operations, under strict confidentiality obligations.

In each case, data shared with third parties is limited to the minimum necessary for the specified purpose. We do not authorise third parties to use your personal data for their own independent commercial purposes.

99myr uses cookies and similar tracking technologies to operate the Platform effectively, personalise your experience, and maintain session security. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the Platform. These include session cookies that keep you logged in during your visit and security cookies that protect your account. These cannot be disabled without significantly impairing Platform functionality.
• Functional Cookies: These enable enhanced functionality and personalisation, such as remembering your game preferences, preferred language, and display settings.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — including pages visited, session duration, and device type. This data helps us improve the Platform experience.
• Fraud Prevention Cookies: Cookies used to detect and prevent fraudulent activity, unusual access patterns, and potential account takeover attempts. These are an important element of our security infrastructure.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from logging in or using core Platform features. Analytics and functional cookies can typically be disabled without affecting core functionality.

99myr retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Account and Identity Data: Retained for the duration of your account and for a period of no less than five (5) years following account closure, in accordance with anti-money laundering regulatory requirements applicable to gaming operators.
• KYC Documentation: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, in accordance with AML compliance obligations.
• Transaction Records: Financial transaction data, including deposits and withdrawals processed via Malaysian payment methods, is retained for a minimum of five (5) years for regulatory and reconciliation purposes.
• Gaming Activity Records: Bet history and game session data is retained for a minimum of three (3) years for dispute resolution, responsible gambling monitoring, and audit purposes.
• Support Correspondence: Live chat transcripts and email communications are retained for two (2) years unless they relate to an unresolved dispute, in which case they are retained until the dispute is resolved.
• Marketing Data: Retained until you withdraw consent or request deletion, subject to overriding legal retention requirements.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to any individual.

99myr implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. Our security infrastructure includes:

• Encryption in Transit: All data exchanged between your device and the Platform is encrypted using TLS 1.2 or higher (HTTPS). This applies to all account pages, payment screens, and support interfaces.
• Encryption at Rest: Sensitive personal data — including KYC documents and account credentials — is encrypted at rest using AES-256 or equivalent standards on our servers.
• Access Control: Access to personal data is restricted on a strict need-to-know basis. Employees and contractors with access to User data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: Available for all User accounts and mandated for staff with administrative access to systems containing personal data.
• Penetration Testing and Vulnerability Assessments: The Platform undergoes regular independent security assessments to identify and remediate potential vulnerabilities.
• Incident Response: 99myr maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify affected users and relevant authorities in accordance with applicable law.

While we maintain robust technical safeguards, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account login credentials. Never share your password with any third party, including parties claiming to represent 99myr — our staff will never ask for your password.

Subject to applicable law and certain conditions, you have the following rights in respect of your personal data held by 99myr. To exercise any of these rights, please contact us using the details in Section 15. We will respond to verified requests within 30 days.

The 99myr Platform is strictly intended for use by persons who are 21 years of age or older. We do not knowingly collect personal data from any person under the age of 21. This minimum age requirement is strictly enforced through our KYC verification programme.

If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to close the associated account, delete the relevant data, and — where applicable — report the matter in accordance with our licensing obligations.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on 99myr, please contact our support team immediately via live chat. We will investigate and act promptly.

As an international online gaming platform, 99myr may transfer personal data to servers and third-party processors located in jurisdictions outside Malaysia. Such transfers are necessary to provide the Platform services and to engage the specialist providers described in Section 7 of this Policy.

Where personal data is transferred internationally, 99myr takes all reasonable steps to ensure that appropriate safeguards are in place, including:

• Transferring data only to jurisdictions that maintain an adequate standard of data protection as assessed by relevant regulatory bodies.
• Using contractual data protection clauses in agreements with third-party processors that impose equivalent obligations to those applicable to 99myr under its licensing framework.
• Applying technical security controls — including encryption in transit and at rest — to all cross-border data transfers regardless of the destination jurisdiction.

By using the 99myr Platform, you acknowledge that your personal data may be transferred, stored, and processed outside Malaysia. These transfers are conducted in accordance with applicable data protection requirements and the safeguards described in this Policy.

99myr reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to our data processing practices, changes in applicable law, new product features, or feedback from regulatory authorities.

Where changes are material — for example, affecting how we use your data in a significant way — we will provide advance notice through one or more of the following channels: a prominent notice on the Platform, an email to your registered address, or an in-account notification. The effective date of any revision will be reflected in the "Last Updated" date displayed at the top of this page.

For minor or administrative changes that do not materially affect your privacy rights or our core data practices, updates may take effect immediately upon publication. We encourage you to review this Policy periodically to stay informed of how 99myr handles your personal data.

Your continued use of the Platform following publication of revised Terms constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must discontinue use of the Platform and request account closure.

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 99myr, please contact us through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week, directly from within the Platform. This is the recommended channel for time-sensitive privacy or data requests.
• Email: [email protected] — please include "Privacy Request" in the subject line for efficient routing. Allow up to 30 days for a full written response to formal data rights requests.

To exercise your rights under Section 11 of this Policy — including access, rectification, erasure, or portability — please submit your request through live chat or email, providing your full registered name, account email address, and a brief description of your request. Identity verification will be required before we process any request that involves accessing, modifying, or deleting personal data.

For additional information about our responsible gambling tools, including self-exclusion, deposit limits, and support resources for problem gambling, please visit our Responsible Gambling page. For the full legal terms governing your use of the Platform, please refer to our Terms & Conditions.