Official Documents

Privacy Policy 99group —
Our Commitment to Protecting Your Data

At 99group, every member's privacy is more than a legal obligation — it is a responsibility we take to heart. This document transparently explains how we collect, use, store, and protect your personal data at all times.

Last Updated: 1 January 2026

Six Pillars of Your Privacy Protection

The core principles that shape how 99group handles members' personal data

Advanced Encryption

All data transmitted between your device and 99group's servers is protected by 256-bit SSL encryption. This ensures no third party can intercept or read your personal and financial information in transit.

Full Data Control

You have the full right to access, correct, or request deletion of your personal data held by 99group. Your request will be processed within 14 business days at no additional charge.

No Sale of Data to Third Parties

99group does not sell, rent, or disclose your personal data to any third party for marketing purposes. Your data is used exclusively for platform operations and service improvements.

Secure Data Storage

Members' personal data is stored on servers protected by multi-layered firewalls, strict access controls, and 24-hour monitoring. Only authorized personnel have access to members' personal data, strictly on a need-to-know basis.

Malaysian Legal Compliance

The 99group privacy policy is designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We continuously update our data handling practices in line with current legal developments.

Data Breach Notification

In the event of any security incident involving your personal data, 99group will notify you and the relevant authorities within the timeframe required by law, along with the remedial steps taken.

Note: This Privacy Policy applies to all users of the 99group platform, including our official website and mobile app. By registering or using our platform, you agree to the terms set out in this document.

1 Information We Collect

To provide a complete and secure platform experience, 99group collects several categories of information from our members. We only collect data that is strictly necessary for the stated purposes, and nothing beyond that.

Account Registration Information:

  • Full name as shown on your identity document
  • Date of birth for age verification (18 and above)
  • Active email address for account communications
  • Mobile phone number registered in Malaysia
  • Passwords stored in hashed form that cannot be reversed

Identity Verification (KYC) Information:

  • Copy of identity card (MyKad) or valid travel document
  • Proof of current residential address (if required)
  • Bank account or digital wallet details for deposit and withdrawal processing

Platform Usage Information:

  • Gaming activity records including date, time, and game type
  • Financial transaction history within the platform
  • IP address and device information used to access the platform
  • Login and logout activity logs for security purposes
  • Language preferences and account settings
All collected information is stored on secure servers located in regions that comply with international data security standards. 99group does not store credit or debit card information directly — all payment processing is handled by licensed third-party payment processors.

2 How We Use Your Data

99group uses collected personal data solely for purposes related to the provision and improvement of platform services. Below is a summary of how we use your data:

Purpose of Use Data Type Category
Member account management and verification Name, email, phone number Operations
Deposit and withdrawal processing Bank details, transaction history Finance
Identity verification (KYC) and fraud prevention MyKad, proof of address Compliance
Security monitoring and fraud prevention IP address, activity logs Security
Customer service communications Email, phone number Services
Product improvement and usage analytics Anonymized usage data Analytics
Compliance with legal requirements All required data Compliance

We do not use your personal data for automated profiling that materially affects your rights without explicit consent. Any use of data for marketing purposes will only be carried out after obtaining your written consent.


3 Legal Basis for Data Processing

Every instance of personal data processing carried out by 99group has a valid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA). These bases include:

  • Consent: For marketing communications and preference-related purposes, we obtain your explicit consent in advance, and you may withdraw that consent at any time.
  • Contract performance: Processing required to fulfil our obligations to you as a platform member, including payment processing and account management.
  • Legal obligation: Data processed to meet Malaysian legal requirements, including AML (Anti-Money Laundering) and KYC obligations.
  • Legitimate interest: Processing for fraud prevention, platform security and service improvement for all members.

4 Data Sharing with Third Parties

99group does not sell or disclose members' personal data to third parties for commercial purposes. However, there are limited situations where data may be shared with trusted parties:

  • Licensed payment processors: Minimum required transaction data is shared with payment processors to complete your deposits and withdrawals.
  • Technology service providers: Cloud and security infrastructure providers bound by strict confidentiality agreements and not permitted to use your data for any other purpose.
  • Legal authority: When required by court order, regulatory directive, or applicable Malaysian law.
  • Identity verification partners: For legitimate KYC verification purposes to ensure platform security and legal compliance.
All third parties that receive 99group member data are bound by strict data protection agreements and are required to uphold the same security standards we apply ourselves.

5 Data Retention Period

99group retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law.

  • Active account data: Retained throughout the period your account is active and for a reasonable period after account closure for audit purposes.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax legislation.
  • KYC records: Retained for 5 years after the business relationship ends, in line with AML legal requirements.
  • Customer support communication logs: Retained for 2 years for reference and service improvement purposes.
  • Anonymous analytics data: May be retained indefinitely as it contains no personally identifiable information.

Upon expiry of the designated retention period, your personal data will be securely deleted or anonymised using methods that comply with industry standards.


6 Cookies & Tracking Technologies

The 99group platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. Cookies are small text files stored on your device when you browse our website.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
  • Performance Cookies: Collects information on how you use the platform to help us improve the user experience. All data is collected anonymously.
  • Functional Cookies: Saves your preferences such as language and display settings to make using the platform easier on your next visit.

You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect the functionality of the 99group platform.


7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have several important rights regarding your personal data held by 99group:

Right of Access

Request a copy of the personal data we hold about you within 14 working days.

Right to Rectification

Request correction of inaccurate or incomplete data in your records.

Right to Erasure

Request deletion of your personal data subject to applicable legal obligations.

Right to Object

Object to the processing of your data for direct marketing or profiling purposes at any time.

Right to Data Portability

Receive your personal data in a machine-readable format for transfer to another platform.

Right to Restrict Processing

Request restriction of your data processing in certain situations during an investigation or dispute.

To exercise any of the above rights, please contact our data protection team by email at [email protected]. We will respond to your request within 14 business days. We may need to verify your identity before processing your request to ensure the security of your data.


8 Data Security Measures

The security of member personal data is a top priority for 99group. We implement multiple layers of technical and organisational safeguards to keep your data secure at all times:

  • 256-bit SSL/TLS encryption for all data transmission between servers and user devices
  • Password storage using bcrypt hashing algorithm that cannot be decrypted
  • Two-factor authentication (2FA) available for all member accounts as an additional layer of protection
  • Continuous security threat monitoring 24 hours a day, 7 days a week
  • Regular security audits by independent third-party security experts
  • Mandatory data protection training for all 99group staff who handle personal data
  • A comprehensive incident response plan to address any data breach promptly
While we take all reasonable steps to protect your data, no security system can be guaranteed 100% safe. You also play an important role in keeping your account secure by using a strong password and not sharing your login credentials.

9 Children's Privacy

The 99group platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of individuals under 18. If we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account.

If you as a parent or guardian discover that your child has registered an account on our platform, please contact us immediately at [email protected] so that appropriate action can be taken without delay.


10 Privacy Policy Amendments

99group reserves the right to amend this Privacy Policy at any time to reflect changes in our data handling practices, updated legal requirements, or service improvements. The date of the last update will always be displayed at the top of this document.

For material amendments, we will notify members via in-platform notification or registered email at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of those amendments.


11 Contact Our Data Protection Officer

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact the 99group Data Protection Officer (DPO):

  • Email: [email protected]
  • Response Time: Within 14 business days
  • Language: Malay and English

You also have the right to lodge a complaint with the Malaysian Personal Data Protection Department if you believe your rights under the PDPA 2010 have been violated. However, we encourage you to contact us first so we can resolve any issues promptly and to your satisfaction.

Your trust is our most valuable asset. 99group is committed to handling your personal data with the utmost responsibility, transparency and respect at all times.

Join 99group with Full Confidence

Your personal data is fully protected. Register an account today and enjoy a secure gaming experience alongside hundreds of thousands of trusted Malaysian members.

Bahasa Melayu