At 99club, we take the privacy of our Malaysian players seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is used, and the rights you hold over your information.
Last Updated: 1 January 2026All personal data transmitted to and from 99club is protected by 256-bit SSL encryption. Player data is stored on secured servers with access restricted to authorised personnel only.
99club does not sell, rent, or trade your personal information to third parties for their marketing purposes. Your data is used exclusively for the legitimate purposes described in this Policy.
You have the right to access, correct, delete, and restrict processing of your personal data. Submit a request via live chat or email and we will respond within 30 days.
Payment data associated with Malaysian methods — Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong — is processed by verified payment partners and never stored in full on our servers.
We retain personal data only for as long as is necessary for its stated purpose, or as required by applicable legal and regulatory obligations including AML record-keeping requirements.
We use cookies and similar tracking technologies to improve your experience on the 99club platform. You may manage your cookie preferences through your browser settings at any time.
This Privacy Policy ("Policy") sets out how 99club ("Company", "Platform", "we", "us", "our"), accessible at https://99club.cam, collects, uses, stores, and discloses personal information about individuals ("Player", "User", "you", "your") who register for or otherwise interact with the 99club online gaming platform.
99club is committed to protecting the privacy and personal data of all players, with particular attention to users based in Malaysia. We recognise the trust our players place in us when sharing their personal information and we take our obligations as a data controller seriously.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which collectively constitute the full legal framework governing your use of the 99club platform.
Important: By registering a Player Account or otherwise using the 99club platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the platform immediately.
This Policy is effective as of 1 January 2026 and supersedes all prior privacy statements published by 99club. We will notify registered players of material changes via on-platform messaging or email prior to such changes taking effect.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, IP address, and device identifiers.
Any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, combination, restriction, erasure, or destruction.
The entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, the Data Controller is 99club.
A third party that processes Personal Data on behalf of 99club under a data processing agreement, such as a payment service provider or identity verification partner.
Know Your Customer — the identity and age verification process mandated under anti-money laundering (AML) and responsible gambling obligations.
Small text files placed on a user's device by a website for the purpose of recognising the user, storing preferences, and collecting analytical data about platform usage.
Any natural or legal person other than the Player and 99club, including payment service providers, identity verification services, analytics platforms, and regulatory authorities.
99club collects the following categories of personal data from players, either directly or through automated technical means:
| Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, gender, government-issued ID number (e.g., MyKad number, passport number) | Account registration; KYC verification |
| Contact Data | Email address, mobile phone number, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam) | Account registration; KYC verification |
| Financial Data | Payment method identifiers (e-wallet account reference, bank account details partially redacted), transaction history, deposit and withdrawal amounts in MYR | Deposit and withdrawal processing; KYC source of funds verification |
| Gaming Activity Data | Game history, wager amounts, win/loss records, bonus usage, session duration, bet types | Ongoing platform use |
| Technical Data | IP address, device type and model, operating system, browser type and version, screen resolution, time zone | Platform access and session management |
| Usage Data | Pages visited, links clicked, features used, search queries within the platform, referral source | Ongoing platform use; analytics |
| Communications Data | Records of live chat conversations, email correspondence, support ticket history | Customer support interactions |
| Verification Documents | Scanned or photographed copies of identity documents, proof of address, and proof of payment method submitted for KYC | KYC verification process |
We do not intentionally collect Special Categories of Personal Data (such as health information, racial or ethnic origin, political opinions, or religious beliefs) unless specifically required by our responsible gambling obligations (for example, where a Player voluntarily discloses a gambling-related health condition in connection with a self-exclusion request).
99club collects personal data through the following means:
4.1 Direct Collection
Data you provide directly when: registering a Player Account; completing KYC verification; making deposits or withdrawals; contacting customer support; participating in promotions; completing account settings or preference surveys; or submitting responsible gambling tool requests (deposit limits, self-exclusion, cooling-off periods).
4.2 Automated Technical Collection
Data collected automatically when you access the 99club platform, including Technical Data and Usage Data, is gathered via cookies, web beacons, pixel tags, server logs, and similar technologies embedded in the platform. This data is collected each time you visit the platform regardless of whether you are logged in.
4.3 Third-Party Sources
In certain circumstances, we may receive personal data about you from third parties, including:
99club processes your personal data exclusively for the following purposes:
5.1 Account Management
To create, maintain, and administer your Player Account, including authentication, preference management, and account security. This includes processing Identity Data, Contact Data, and Technical Data.
5.2 Service Delivery
To provide the games, sports betting markets, and other services available on the 99club platform, including processing deposits and withdrawals in Malaysian Ringgit (MYR) via supported payment methods and crediting winnings to your account.
5.3 KYC and Identity Verification
To verify your identity and age (minimum 21 years) in compliance with responsible gambling obligations and applicable regulations. This includes reviewing Identity Data, Verification Documents, and Financial Data.
5.4 AML and Fraud Prevention
To screen transactions and account activity for indicators of money laundering, fraud, collusion, or other prohibited conduct as described in the Terms & Conditions. We may share data with approved third-party screening services for this purpose.
5.5 Customer Support
To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance via live chat, email, and other support channels. Communications Data is retained for audit and quality assurance purposes.
5.6 Responsible Gambling
To administer responsible gambling tools including deposit limits, session reminders, cooling-off periods, and self-exclusion, and to monitor Gaming Activity Data for indicators of problem gambling behaviour.
5.7 Regulatory Compliance
To comply with applicable legal and regulatory obligations, including responding to lawful requests from governmental or regulatory authorities and maintaining records as required by AML legislation.
5.8 Platform Improvement
To analyse aggregate, anonymised Usage Data to improve platform performance, game selection, user experience, and promotional offerings. This processing does not identify individual players.
Where data protection laws require a lawful basis for processing personal data, 99club relies on the following bases:
99club does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of recipients, strictly for the purposes identified in Section 5:
7.1 Payment Service Providers
To process deposits and withdrawals, we share necessary financial and identity information with our integrated payment partners, including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking partners. Each payment service provider processes data under their own privacy terms and applicable financial regulations.
7.2 Identity & KYC Verification Services
We engage approved third-party identity verification partners to assist with KYC document checks. These partners are engaged under data processing agreements that bind them to confidentiality and data protection standards equivalent to those applied by 99club.
7.3 AML and Fraud Prevention Services
We share transaction and account data with approved AML screening services and fraud prevention platforms as part of our obligation to prevent financial crime. Screening results may trigger additional KYC requests or account reviews.
7.4 Regulatory and Law Enforcement Authorities
We will disclose personal data to regulatory authorities, law enforcement agencies, or courts where we are legally compelled to do so, or where we determine in good faith that such disclosure is necessary to prevent serious harm, protect our legal rights, or comply with a valid legal process.
7.5 Group Companies and Service Providers
We may share data with affiliated group companies and carefully vetted service providers (such as IT infrastructure providers and cloud hosting partners) who assist us in operating the platform. All such parties are bound by contractual data protection obligations.
In all cases of third-party data sharing, 99club applies contractual protections, diligence checks, and data minimisation principles to ensure your data is handled responsibly.
99club uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device that help us recognise you, remember your preferences, maintain session security, and gather analytical information about how the platform is used.
8.1 Types of Cookies We Use
8.2 Managing Cookies
You can manage, restrict, or delete cookies through your browser settings. Please note that disabling strictly necessary cookies may prevent you from using core platform features. Instructions for managing cookies in common browsers are available in each browser's help documentation.
99club does not currently operate a separate cookie consent banner for functional and analytical cookies beyond the browser-level controls described above. By continuing to use the platform, you accept the placement of cookies as described in this section.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal / AML obligation |
| KYC verification documents | Duration of account + 5 years post-closure | Legal / AML obligation |
| Financial transaction records | Duration of account + 7 years post-closure | Financial regulatory obligation |
| Gaming activity logs | Duration of account + 3 years post-closure | Regulatory / dispute resolution |
| Customer support records | 3 years from date of interaction | Legitimate interest / dispute resolution |
| Technical and usage logs | 13 months on a rolling basis | Legitimate interest / security |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gambling obligation |
Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures.
99club implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include:
While we employ commercially reasonable security measures, no system is entirely immune to security incidents. Players are responsible for maintaining the security of their own account credentials and should notify us immediately at [email protected] if they suspect any unauthorised access to their account.
Subject to applicable data protection laws, you have the following rights in relation to your personal data held by 99club. To exercise any of these rights, contact our support team via live chat or email at [email protected] with the subject line "Data Rights Request". We will respond within 30 days.
Request a copy of all personal data we hold about you (a "Data Subject Access Request"). We will provide this in a structured, commonly used format within 30 days.
Request correction of inaccurate or incomplete personal data. Many contact details can be updated directly in your account settings. For identity-sensitive data, a KYC reverification may be required.
Request deletion of your personal data ("right to be forgotten"). This right is subject to our legal obligations to retain certain data (AML, financial records). We will advise which data can be deleted and which must be retained.
Request that we suspend processing of your data in certain circumstances, for example while the accuracy of data is disputed or an objection to processing is under review.
Request that personal data you provided to us be transferred to another organisation in a machine-readable format, where technically feasible and where processing was based on your consent or contract.
Object to processing of your personal data based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
99club operates internationally and your personal data may be transferred to, stored in, and processed in countries outside Malaysia. Where such international transfers occur, we implement appropriate safeguards to ensure your data receives a level of protection equivalent to that provided under applicable Malaysian and international data protection standards.
Safeguards applied to international transfers may include:
By using the 99club platform, you acknowledge and agree to the international transfer of your personal data in accordance with this Policy.
Strict 21+ Policy: The 99club platform is intended solely for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21.
Age verification is conducted as part of our mandatory KYC process for all registered players. Where we discover or have reasonable grounds to suspect that a Player Account has been created by a person under 21 years of age:
If you are a parent or guardian and believe your child may have registered on 99club, please contact us immediately at [email protected].
99club reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform features. The effective date at the top of this Policy will be updated whenever material changes are made.
Where changes are material — meaning they substantially affect how we collect, use, or share your personal data — we will notify registered players via on-platform notification or email at least 14 days before the changes take effect. Your continued use of the 99club platform after the effective date of any revised Policy constitutes your acceptance of the changes.
We encourage you to review this Privacy Policy periodically to stay informed of how your personal data is being handled. The current version of this Policy is always accessible at https://99club.cam/privacy-policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data held by 99club, please contact our Data Privacy team through the following channels:
Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
Customer Support (24/7): Live chat on the 99club platform
Email: [email protected]
Response Time: Within 30 days for formal data rights requests; within 24 hours for general privacy enquiries
Support Hours: Malaysia Standard Time (MYT, UTC+8). Live chat response within 1 hour.
For formal legal correspondence related to data protection matters, please mark your communication "For the Attention of: Data Privacy" and direct it via email to the address above. We will acknowledge receipt within 5 business days.
At 99club, protecting your privacy is not an afterthought — it is built into every aspect of how we operate. If you have any questions about this Policy, our 24/7 support team is ready to help.
For players aged 21 and above only. Please gamble responsibly.