Data Minimisation
99play aims to request information that is relevant to account operation, security, payments and applicable obligations.
This Privacy Policy explains how 99play collects, uses, stores, protects and shares personal information when Malaysian users browse the website or access gaming-related services.
99play respects the privacy of people who visit the website, review casino or sports information, create an account, communicate with support or use payment-related features. This Privacy Policy describes the categories of information that 99play may process, why that processing is necessary and which choices may be available to users.
By using 99play, you acknowledge that personal information may be handled as described in this policy. If you do not agree with these practices, you should stop using the platform. This Privacy Policy should be read together with the 99play Terms & Conditions and responsible gambling information.
References to Malaysian cities, MYR payments and services such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong Bank are included because 99play is designed for Malaysian users. Those payment providers maintain their own systems and privacy practices, which remain separate from this 99play policy.
99play aims to request information that is relevant to account operation, security, payments and applicable obligations.
Administrative and technical safeguards help protect 99play records from unauthorised access, alteration or loss.
Identity checks may help 99play confirm age, protect withdrawals and detect duplicate or fraudulent accounts.
Eligible users may request access, correction or another available action concerning their personal information.
In this Privacy Policy, “99play”, “we”, “our” and “the platform” refer to the 99play website and its related services. “User”, “you” and “account holder” refer to any person whose personal information is processed through use of 99play. “Personal information” means information that identifies a person or can reasonably be connected with an identifiable person.
This policy applies to information processed when you browse 99play, create or manage an account, review game and sports content, deposit or withdraw funds, claim a promotion, use responsible gambling tools or communicate with support. It does not govern independent websites or services that are not controlled by 99play.
The information collected by 99play depends on how you use the platform. Some details are provided directly, while other data is created automatically through account activity, device interaction or transaction records.
99play does not need every category in every situation. Information should be proportionate to the relevant feature, security review, payment request or legal requirement.
99play may receive information directly when a user enters account details, completes verification, requests a withdrawal, changes a limit or contacts support. Information may also be generated when a user signs in, views an EPL or Liga Super Malaysia market, enters a live casino section or interacts with 99play security features.
Transaction information may be received from banks, eWallets, payment processors or digital-asset networks where necessary to confirm a deposit or withdrawal. Fraud-prevention and identity-verification providers may also return status results or risk indicators to 99play.
Technical information is generally produced automatically by browsers, devices, server logs and cookies. These records help 99play keep sessions operational, identify suspicious access and understand whether pages function correctly on commonly used Malaysian mobile devices.
99play may process personal information for legitimate platform and user requirements. The principal purposes include:
99play does not intend to use personal information for an unrelated purpose without an appropriate reason, notice or permission where permission is required.
Depending on the circumstances and applicable requirements, 99play may process information because it is necessary to provide requested services, administer an agreement, satisfy a legal obligation, protect legitimate interests or act with the user’s consent.
Legitimate operational interests may include securing 99play, preventing fraud, maintaining accurate transactions, improving service performance and protecting users. Before relying on such an interest, 99play should consider whether the processing is proportionate and whether user rights require stronger protection.
Where processing relies on consent, a user may ordinarily withdraw that consent for future activity. Withdrawal does not invalidate processing that was lawful before the request and may not affect records that 99play must retain for another valid reason.
Payment and identity information is particularly sensitive. 99play may compare an account name with details associated with Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow or FPX transactions. This helps confirm that funds belong to the account holder and reduces avoidable withdrawal errors.
KYC checks may involve identification documents, address evidence, payment ownership records or source-of-funds information. 99play may request clearer or updated documents if an image is unreadable, expired or inconsistent with account information.
Complete payment-card numbers, eWallet credentials, internet-banking passwords and authentication codes should never be sent through ordinary support messages. 99play support personnel should not ask a user to disclose a password or one-time authentication code.
Before confirming any transfer, verify the recipient, amount and payment reference displayed in the secure 99play account area. Keep transaction receipts, but do not publish them where personal banking details are visible.
99play may use cookies and similar storage technologies to maintain sessions, remember preferences, measure page performance and support security. Essential cookies may be necessary for sign-in, navigation, account protection or load balancing.
Analytical information may help 99play understand which pages are useful, whether an interface works on a particular screen size and where technical errors occur. Such analysis should be configured to use only the level of information reasonably needed for the stated purpose.
Browser settings may allow a user to block or remove cookies. Disabling essential storage can prevent certain 99play features from functioning correctly, including account login, security checks and preference retention.
99play does not sell personal information as a general business practice. Information may be shared with carefully selected service providers where access is necessary to operate the platform or complete a requested service.
Recipients may include hosting and security providers, identity-verification services, payment processors, professional advisers, fraud-prevention specialists and customer-support systems. Information may also be disclosed where required by a valid legal process or where reasonably necessary to protect 99play, its users or another person from fraud, abuse or serious harm.
Service providers should receive only the information needed for their assigned function and should be subject to appropriate confidentiality, data-protection and security requirements. Payment providers may independently determine how they process information submitted directly to them.
Some systems or service providers used by 99play may process information outside Malaysia. Privacy and data-protection standards can differ between countries. Where an international transfer occurs, 99play should use appropriate contractual, organisational or technical safeguards suited to the nature of the information and the transfer.
International processing does not remove the responsibilities described in this policy. 99play remains committed to using proportionate safeguards and limiting access to authorised recipients with a legitimate operational need.
99play uses administrative, organisational and technical controls designed to protect information against accidental loss, unauthorised access, misuse, alteration or disclosure. Measures may include access restrictions, encrypted transmission, account authentication, security monitoring, staff controls and incident-response procedures.
No internet service can promise absolute security. Users also have an important role in protecting their information. A strong and unique password should be used for 99play, devices should be locked when unattended, and login details must not be shared with friends or family members.
If a user suspects that a 99play account has been compromised, the user should change the password and notify support promptly. Reports should include useful account context but must not include passwords, one-time codes or full payment credentials.
99play retains information for as long as reasonably necessary to provide services, secure accounts, resolve disputes and meet applicable obligations. Retention periods vary according to the type of information, the reason it was collected, account status and the possibility of a legal or security claim.
Closing a 99play account does not necessarily result in immediate deletion of every record. Transaction, KYC, self-exclusion, fraud-prevention and dispute information may need to be retained after closure. When continued retention is no longer justified, information should be deleted, anonymised or placed beyond ordinary operational use.
Self-exclusion records may be kept where necessary to honour a user’s restriction and prevent the opening of replacement accounts intended to bypass that restriction.
Subject to applicable law and relevant exceptions, a user may ask 99play to provide access to personal information, correct inaccurate details, explain particular processing, restrict certain uses or delete information that no longer has a valid retention purpose.
99play may need to verify the identity of the person making a request before releasing or changing account information. Verification protects users against fraudulent access. A request may be limited or declined where disclosure would affect another person, compromise security, interfere with fraud detection or conflict with a legal retention duty.
Users should describe the information or action requested as clearly as possible. 99play may ask for clarification where a request is broad or cannot be matched to an account. Privacy requests should be handled within a reasonable period, taking account of complexity and verification needs.
Users should promptly update incorrect contact or identity information. Accurate details help 99play protect account access and reduce delays during payment or withdrawal checks.
99play may send operational messages concerning account security, verification, withdrawals, policy updates or responsible gambling controls. These communications are connected to account administration and may remain necessary even when promotional messages are disabled.
Where permitted, 99play may also communicate information about games, sports markets, bonuses or platform updates. Users may request to stop receiving optional promotional messages. Changing a marketing preference does not prevent essential security or service notices.
99play does not guarantee that every promotion will be available to every Malaysian user. Eligibility may depend on account status, age verification, location, payment method and promotion-specific conditions.
99play casino-style services are intended only for eligible users aged 21 and above. 99play does not knowingly permit an underage person to create or use a gambling account. Age verification may be requested before access to certain features or approval of a withdrawal.
If 99play learns that information was submitted by an underage person, the account may be restricted and the information reviewed for appropriate deletion or retention. Some records may need to remain temporarily available for security, investigation or legal reasons.
Parents and guardians should protect payment credentials, enable device controls and avoid leaving an authenticated 99play session accessible on a shared device.
99play may update this Privacy Policy when services, payment processes, security practices or applicable requirements change. The effective date at the top of the document indicates when the current version became active.
Material changes may be highlighted through 99play where appropriate. Users should review this page periodically, particularly before submitting new identity or payment information. Continued use after an update acknowledges the revised policy to the extent permitted by applicable requirements.
Questions about this Privacy Policy, the handling of personal information or an available privacy right may be directed to the 99play support team. Include enough information to identify the request, but never include a password, authentication code or complete payment-card number.
Website email: [email protected]
The email address is provided as plain text. Users may also review the 99play FAQ for general information about verification, account security, payments and responsible gambling.
Return to 99play after reviewing how account, payment and device information may be processed. You can also read the Terms & Conditions or visit the FAQ for further guidance about verification and platform use.