Privacy Policy 99play – Our Commitment to Protecting Your Data

1. Introduction

This Privacy Policy is issued by 99play (hereinafter referred to as "we", "Platform" or "99play") and applies to all users who register, browse or use any services offered through the 99play website.

We understand that your personal data is a trust placed in us. We therefore take a transparent and responsible approach to every aspect of data management — from how we collect it to how we protect it against any external threats.

This policy aims to clearly explain:

• The types of personal data we collect from you.
• The reasons and ways we use your data.
• Who your data may be shared with and under what circumstances.
• Your rights as a data subject under the Malaysia PDPA.
• How you can contact us for any privacy-related enquiries.

We encourage you to read this document carefully and to contact our team if anything is unclear.

2. Personal Data We Collect

Depending on how you interact with the 99play platform, we may collect the following categories of personal data:

Data You Provide Directly

Automatically Collected Data

We do not collect special-category data such as health information, religious beliefs, political opinions, or biometric data unless specifically required for legal compliance purposes.

3. Purpose of Data Collection & Use

99play uses your personal data solely for lawful, necessary purposes directly related to the delivery of platform services. We do not use your data for unrelated purposes without your prior consent.

For purposes marked "Optional", you may withdraw your consent at any time without affecting the core functionality of your account. To do so, contact our support team or update your communication settings in your account panel.

4. Data Sharing with Third Parties

99play does not sell your personal data. However, in the course of platform operations, we may share your data with the following categories of third parties for limited and specific purposes:

• Payment Processors: FPX, eWallet, and crypto payment service providers that require transaction information to process your deposits and withdrawals.
• Game Providers: Third-party game developers integrated with the 99play platform may receive the session data required to operate the games.
• KYC Services: Third-party identity verification providers that help us securely and accurately verify user documents.
• Cloud Hosting: Our server and database infrastructure stores your data in a secure, certified environment.
• Regulatory & Enforcement Bodies: Government agencies or regulatory bodies with legal authority to request data in connection with investigations or compliance matters.

All third parties with whom we share data are bound by strict data protection agreements and may only use your data for the specified purposes. We conduct regular reviews of these third parties to ensure ongoing compliance.

5. Data Security

The security of your data is a responsibility we take very seriously. 99play implements multiple layers of technical and organisational protection to safeguard your personal data from unauthorised access, loss, destruction, or disclosure.

• 1
  Data Encryption in Transit: All communications between your browser or app and 99play servers are secured using TLS 1.3 protocol with 256-bit encryption.
• 2
  Data Encryption at Rest: Sensitive data such as banking information and KYC documents are stored in the most secure conditions using AES-256 encryption within protected databases.
• 3
  Internal Access Controls: Only specifically authorised personnel may access user personal data, and every access is logged and continuously monitored.
• 4
  Two-Factor Authentication (2FA): All internal administrative access requires two-factor authentication as an additional security layer to prevent unauthorised access.
• 5
  Regular Security Audits: We conduct regular penetration testing and independent security audits to identify and address any system vulnerabilities.
• 6
  Incident Response Plan: 99play has a comprehensive incident response procedure to address any security breaches swiftly and effectively.

While we take all reasonable precautions, no security system in the world is completely impenetrable. You also play an important role in protecting your account by using a strong password and not sharing your login credentials.

6. Data Retention Period

99play does not retain your personal data longer than necessary for the purpose it was collected, or as required by applicable Malaysian law.

Once the retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked to your identity. The data deletion process is automated and regularly audited.

7. Your Rights as a Data Subject

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights regarding your personal data held by 99play:

To exercise any of the above rights, please contact our privacy team via email at [email protected]. We will process your request within 30 working days. In complex cases, this period may be extended up to 60 days with prior notice to you.

8. Cookies & Tracking Technologies

99play uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and deliver relevant content. The following are the types of cookies we use:

You can manage your cookie settings through your browser preferences at any time. Please note that disabling certain cookies may affect your experience on the platform.

9. Cross-Border Data Transfers

In certain circumstances, your personal data may be transferred to or stored on servers located outside Malaysia. This occurs when we use cloud infrastructure providers or global technology services to support platform operations.

In all cases of cross-border data transfers, 99play ensures:

• The recipient country or region has a level of data protection equivalent to or higher than that of Malaysia.
• Appropriate and legally binding data processing agreements have been established with all recipient parties.
• Additional technical measures such as end-to-end encryption are implemented to protect data in transit.
• You will be informed of any material changes to our cross-border data transfer practices.

10. Child Protection

The 99play platform is strictly for individuals aged 21 years and above. We do not intentionally collect, store or process personal data from minors.

If you are a parent or guardian and believe your child has provided us with personal data without your knowledge, please contact us immediately at [email protected]. We will take immediate action to delete that information from our systems.

We employ a range of technical mechanisms and age-verification procedures during registration to ensure the platform remains inaccessible to minors.

11. Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how 99play handles your personal data, you may contact our Data Protection Officer (DPO) via:

• Email: [email protected]
• Live Support: Via the live chat button within the 99play platform (available 24/7)
• Response Time: Within 3 working days for general enquiries; 30 days for formal data rights requests

We also encourage you to refer to Terms and Conditions us to fully understand your rights and responsibilities as a 99play platform user.