Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 999myr ("we", "us", "our", "the Company") collects, processes, stores, and protects the personal data of individuals ("you", "Player", "User") who access or use the 999myr online gaming platform available at https://999myr.cam and any associated services (collectively, the "Platform").

We are committed to processing personal data in a lawful, fair, and transparent manner. This Policy is intended to give you clear information about the data we hold about you and the choices you have in relation to that data.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which form part of your agreement with 999myr. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2 Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, IP address, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, 999myr.
• "Data Processor" means any third party that processes Personal Data on behalf of 999myr, including payment providers and KYC verification services.
• "Cookies" means small text files placed on your device by the Platform to facilitate functionality and analytics.
• "KYC" means Know Your Customer verification, encompassing identity and address verification procedures required by regulatory obligations.
• "MYR" means Malaysian Ringgit, the currency used for all financial transactions on the Platform.
• "Platform" means the 999myr website, mobile site, and all associated gaming and support services.

3 Data Controller

999myr acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, we are responsible for determining why and how your data is processed and for ensuring that such processing complies with applicable data protection laws.

For all privacy-related enquiries, data access requests, or complaints, you may contact us directly using the details provided in Section 14 of this Policy. We endeavour to respond to all substantive data privacy requests within 30 calendar days of receipt.

4 Data We Collect

999myr collects Personal Data from you in the following categories, depending on how you interact with the Platform:

4.1 Registration & Identity Data

• Full legal name, date of birth, and nationality.
• Email address and Malaysian mobile phone number.
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam) and postcode.
• Government-issued identification documents submitted during KYC verification (e.g., MyKad number, passport details).

4.2 Financial & Transaction Data

• Payment method details used for deposits and withdrawals, including e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account numbers (Maybank, CIMB, Public Bank, Hong Leong), and DuitNow / FPX transaction references.
• Transaction history, including deposit amounts in MYR, withdrawal requests, and balance movements.
• Bonus and promotional credit records, including wagering history associated with active bonus funds.

4.3 Technical & Usage Data

• IP address, browser type, operating system, and device identifiers.
• Session data, including login timestamps, pages visited, and game activity logs.
• Cookie and tracking data as described in Section 9.

4.4 Communications Data

• Records of communications between you and our support team via live chat and email.
• Complaint records and any documentation submitted in connection with a dispute or KYC review.

4.5 Responsible Gambling Data

• Deposit limit settings, session limit preferences, and self-exclusion records, maintained to fulfil our responsible gambling obligations.

Summary: Categories of Data Collected

5 Purposes & Legal Basis for Processing

We process your Personal Data for the following purposes and rely on the corresponding legal bases:

• Account Registration & Management: To create and maintain your 999myr account, verify your identity, and administer your player profile. Legal basis: contractual necessity.
• Payment Processing: To process deposits and withdrawals in MYR via your chosen payment method. Legal basis: contractual necessity; legal obligation (anti-money laundering compliance).
• KYC & Fraud Prevention: To verify your identity, confirm your age (21+), and detect and prevent fraud, money laundering, and other illegal activities. Legal basis: legal obligation; legitimate interest.
• Customer Support: To respond to your enquiries, resolve complaints, and provide assistance with account issues. Legal basis: contractual necessity; legitimate interest.
• Responsible Gambling: To administer deposit limits, self-exclusion requests, and responsible gambling tools in compliance with our obligations. Legal basis: legal obligation; legitimate interest.
• Platform Security & Integrity: To detect and prevent unauthorised access, technical vulnerabilities, and breaches of our Terms & Conditions. Legal basis: legitimate interest.
• Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, and law enforcement requests. Legal basis: legal obligation.
• Service Improvement & Analytics: To understand how players use the Platform and to improve the quality and relevance of our services. Legal basis: legitimate interest.
• Direct Marketing (where consented): To send you promotional communications about 999myr offers, bonuses, and game updates where you have expressly opted in to receive such communications. Legal basis: consent. You may withdraw consent at any time.

6 Data Sharing & Disclosure

999myr does not sell, rent, or trade your Personal Data to third parties. We may share your data only in the following limited circumstances and solely to the extent necessary for each purpose:

• Payment Service Providers: We share transaction data with payment processors necessary to complete your deposits and withdrawals (including e-wallet operators, banks such as Maybank, CIMB, Public Bank, and Hong Leong, and DuitNow / FPX infrastructure providers). These processors are bound by data processing agreements.
• KYC & Identity Verification Providers: We engage third-party KYC service providers to verify identity documents. These providers act as Data Processors on our behalf and are contractually restricted from using your data for any other purpose.
• Game Providers: Certain game session data (such as game round IDs and bet values) may be shared with third-party Game Providers for the purpose of delivering game content and resolving disputes. No directly identifiable personal data such as your name or national identification number is shared with Game Providers.
• Regulatory & Law Enforcement Authorities: We may disclose Personal Data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction.
• Fraud Prevention Agencies: We may share data with recognised fraud prevention services where we have reason to suspect fraudulent, abusive, or criminal activity on your account.
• Professional Advisers: We may share data with legal counsel, auditors, or other professional advisers where strictly necessary for the conduct of our business and subject to duties of confidentiality.

In all cases of third-party sharing, we take reasonable contractual and technical steps to ensure that your data is handled securely and in accordance with this Policy.

7 Data Retention

We retain your Personal Data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:

• Account & Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations.
• Transaction & Financial Data: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following the completion of the KYC verification process or account closure, whichever is later.
• Support & Communications Records: Retained for three (3) years from the date of the last interaction, or longer where a complaint or dispute remains unresolved.
• Responsible Gambling Records: Self-exclusion and deposit limit records are retained indefinitely to prevent circumvention of restrictions through re-registration.
• Marketing Data: Retained until you withdraw consent or object to processing, after which it is promptly deleted.

Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

8 Security Measures

999myr implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security infrastructure includes, but is not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data fields (including payment credentials and identification numbers) at rest.
• Two-factor authentication (2FA) available to all players and mandatory for certain account operations.
• Role-based access controls ensuring that staff can only access Personal Data necessary for their specific functions.
• Regular internal security audits, penetration testing, and vulnerability assessments.
• Automated monitoring systems designed to detect and alert on anomalous access patterns or potential data breaches.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected individuals without undue delay in accordance with applicable notification obligations.

9 Cookies & Tracking Technologies

The 999myr Platform uses cookies and similar tracking technologies to support Platform functionality, measure performance, and enhance your experience. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state and security tokens that protect against cross-site request forgery. These cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised information about how players navigate the Platform, which pages are most visited, and where errors occur. This data helps us improve the Platform experience.
• Functionality Cookies: Used to remember your preferences, such as language settings, preferred payment method, and game lobby filters, so you don't need to re-enter them on each visit.
• Responsible Gambling Session Cookies: Used to power session time reminders and display real-time session duration information where you have enabled these tools.

You may manage or delete cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the Platform. We do not use cookies to build marketing profiles or track your activity across unaffiliated third-party websites.

10 Your Data Rights

Subject to applicable data protection law and the limitations set out in this Policy, you have the following rights in relation to your Personal Data held by 999myr:

• Right of Access: You may request a copy of the Personal Data we hold about you. We will provide this within 30 calendar days of a valid request.
• Right to Rectification: You may request that inaccurate or incomplete Personal Data be corrected. Many details (such as contact information) can be updated directly within your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations (see Section 7). Note that we cannot delete data that we are legally required to retain.
• Right to Restriction of Processing: You may request that we restrict processing of your Personal Data in certain circumstances — for example, while we verify the accuracy of data you have contested.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your Personal Data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests where your particular circumstances give grounds to do so.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact us using the details in Section 14. We may be required to verify your identity before processing any rights request. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive.

11 Minors & Age Restrictions

The 999myr Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process Personal Data from individuals under the age of 21.

If we become aware that Personal Data has been collected from an individual under the age of 21, we will promptly take steps to delete that data, close the associated account, and, where applicable, return any real-money balance to the original payment method used for deposit.

If you believe that a minor has registered on the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

12 International Data Transfers

In the course of providing our services, your Personal Data may be transferred to and processed in jurisdictions outside Malaysia. This may occur, for example, when we use cloud infrastructure providers or international KYC verification services.

Where Personal Data is transferred internationally, we take appropriate safeguards to ensure that your data continues to receive a level of protection that is consistent with this Policy and applicable data protection standards. Such safeguards include contractual data processing agreements with all international processors and, where required, supplementary technical and organisational measures.

13 Amendments to This Policy

999myr reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via email notification or a prominent notice displayed on the Platform prior to the changes taking effect.

The "Last updated" date at the top of this page will be revised whenever the Policy is amended. We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of any amended Policy constitutes your acceptance of the revised terms.

14 Contact Us

For all privacy-related enquiries, data subject rights requests, or complaints regarding the handling of your Personal Data, please contact the 999myr Data Privacy team using the following details:

• Email: [email protected]
• Live Chat: Available 24/7 via the Platform
• Response Time: We aim to acknowledge all privacy requests within 5 business days and resolve them within 30 calendar days.

If you are not satisfied with our response to your privacy concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

For general support enquiries unrelated to privacy, please use the live chat or email our main support team as detailed on our FAQ page.