99play1 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") is issued by 99play1 ("the Company", "we", "us", "our") and applies to all personal data processed in connection with your use of the 99play1 platform, including the website at 99play1.net, all associated subdomains, and any services or features made available therein.

1.2 99play1 is committed to protecting the privacy of its members. We process personal data in accordance with applicable data protection laws and our obligations as a platform operating under international gaming authority licensing requirements.

1.3 By registering an account with 99play1, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not use the 99play1 platform.

1.4 This Policy should be read alongside our Terms & Conditions and Responsible Gaming page, which together govern your use of the 99play1 platform.

2. Personal Data We Collect

2.1 Registration Data. When you create a 99play1 account, we collect your full name, date of birth, email address, Malaysian phone number, username, and password (stored in hashed form). This information is necessary to create and maintain your account.

2.2 Identity Verification (KYC) Data. In compliance with our anti-money-laundering (AML) obligations and international gaming authority licensing requirements, we collect and process government-issued identity documents, including your Malaysian MyKad or Passport, and where applicable, proof of address documents. This verification is mandatory before your first withdrawal.

2.3 Financial Data. We collect information about your deposits and withdrawals, including the payment method used (FPX, Touch n Go eWallet, Boost, Maybank2u, CIMB, or Public Bank), transaction amounts in Malaysian Ringgit (MYR), and transaction reference numbers. We do not store full bank account numbers or eWallet credentials on our servers.

2.4 Gameplay and Betting Data. We collect records of all bets placed, games played, promotional credits used, bonus wager progress, and game session duration. This data is used for account management, dispute resolution, regulatory reporting, and responsible gaming monitoring.

2.5 Technical and Device Data. We automatically collect IP address, browser type and version, operating system, device identifiers, time zone, referring URLs, and pages visited on the 99play1 platform. This data is used for security, fraud detection, and platform optimisation.

2.6 Communications Data. We retain records of your communications with the 99play1 support team, including live chat transcripts and email correspondence, for quality assurance and dispute resolution purposes.

3. How We Use Your Personal Data

3.1 99play1 uses your personal data for the following purposes:

• To create, maintain, and administer your 99play1 account;
• To process deposits and withdrawals in MYR and verify payment transactions;
• To verify your identity and age (21+) in accordance with our KYC obligations;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To provide 24/7 customer support and respond to your enquiries;
• To administer bonuses, promotions, and the 99play1 loyalty programme;
• To monitor gameplay for responsible gaming purposes and apply protective measures where appropriate;
• To send you account-related notifications and, where you have opted in, marketing communications;
• To comply with our legal obligations under international gaming authority regulations and applicable Malaysian law;
• To improve and personalise the 99play1 platform experience based on aggregate usage data.

4. Legal Basis for Processing

4.1 Contractual Necessity. The majority of data processing described in this Policy is necessary for the performance of the contract between you and 99play1 — that is, to provide you with access to the platform and its services.

4.2 Legal Obligation. Certain processing activities, particularly identity verification, AML screening, and regulatory reporting, are required by law and by our licensing obligations.

4.3 Legitimate Interests. We process technical and device data on the basis of our legitimate interests in maintaining the security of the platform, preventing fraud, and improving our services — provided these interests are not overridden by your privacy rights.

4.4 Consent. Where we process your data for marketing communications, we do so only with your explicit consent. You may withdraw this consent at any time.

5. Sharing Your Personal Data

5.1 99play1 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5.2 We may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment processors and eWallet providers — to process MYR deposits and withdrawals via FPX, Touch n Go eWallet, Boost, and participating Malaysian banks;
• Identity verification and KYC service providers — to verify your age, identity, and source of funds in accordance with our licensing obligations;
• Game software providers — licensed suppliers including Evolution Gaming, Pragmatic Play, and others, who operate their own servers and may process technical gameplay data;
• IT infrastructure and cloud service providers — who host platform data under contractual data processing agreements;
• Regulatory authorities and law enforcement — where we are legally required or compelled to disclose information by applicable law, court order, or regulatory authority.

5.3 All third-party data processors engaged by 99play1 are bound by contractual data processing agreements that require them to maintain appropriate security standards and process your data only for the purposes for which it was shared.

6. International Data Transfers

6.1 Some of our third-party service providers — including game software suppliers and cloud infrastructure providers — may be located outside Malaysia. Where your personal data is transferred internationally, we ensure that appropriate safeguards are in place, including contractual data transfer agreements that require the recipient to maintain data protection standards equivalent to those applicable under our licensing jurisdiction.

7. Data Retention

7.1 99play1 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal and regulatory obligations.

7.2 Account and KYC records are retained for a minimum of 5 years following account closure in accordance with standard anti-money-laundering regulatory requirements. Transaction and betting records are retained for a minimum of 5 years. Support communications are retained for 3 years.

7.3 Where data is no longer required for any lawful purpose, it will be securely deleted or anonymised.

8. Cookies and Tracking Technologies

8.1 The 99play1 platform uses cookies and similar tracking technologies. Cookies are small text files placed on your device when you visit our website. We use the following categories of cookies:

• Essential cookies — required for the platform to function, including session management and login authentication. These cannot be disabled without affecting platform functionality;
• Functional cookies — used to remember your preferences such as language and display settings;
• Analytics cookies — used to understand how members interact with the platform in aggregate, enabling us to improve performance and user experience. These cookies do not identify you personally.

8.2 You may manage cookie settings through your browser preferences. Disabling non-essential cookies will not prevent you from using the 99play1 platform, but may affect certain functional features.

9. Your Data Protection Rights

9.1 Subject to applicable law and our legal retention obligations, you have the following rights with respect to your personal data held by 99play1:

• Right of access — to request a copy of the personal data we hold about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data, where we are no longer required by law to retain it;
• Right to restrict processing — to request that we limit how we use your data in certain circumstances;
• Right to data portability — to receive your data in a structured, machine-readable format where technically feasible;
• Right to object — to object to processing based on our legitimate interests;
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

9.2 To exercise any of these rights, please contact the 99play1 data team at [email protected]. We will respond to verified requests within 30 days.

10. Data Security

10.1 99play1 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include SSL/TLS encryption for all data in transit, encryption of sensitive data at rest, role-based access controls limiting staff access to personal data, and regular security assessments.

10.2 In the event of a data breach that is likely to result in a risk to your rights and freedoms, 99play1 will notify affected members and the relevant regulatory authority in accordance with applicable legal requirements.

11. Children and Minors

11.1 The 99play1 platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, that account will be immediately closed and the data deleted, subject to any overriding legal retention obligations.

12. Changes to This Privacy Policy

12.1 99play1 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to members via email or a prominent notice on the platform. Continued use of the 99play1 platform after any update constitutes acceptance of the revised Policy.

12.2 The "Last Updated" date at the top of this page reflects the most recent revision.

13. Contact Us

13.1 For all privacy-related enquiries, data subject rights requests, or concerns about how 99play1 handles your personal data, please contact our support team: