At 99club, your privacy is not merely a legal obligation — it is a core value we have upheld since day one. This document clearly explains what data we collect, how it is used, who can access it, and your full rights as a member to control your own personal information.
The core values behind every data privacy decision at 99club
All data transmitted between your device and 99club's servers is protected with 256-bit SSL encryption — the same standard used by Maybank, CIMB, and major Malaysian financial institutions. This means your login credentials, payment card details, and every transaction cannot be read by unauthorised parties during transmission.
99club has never sold, rented, or shared members' personal data with any third party for marketing purposes — and we never will. This is an absolute policy with no exceptions. Your information is collected solely for account operations and service improvement, not to be sold to advertisers or data brokers.
As a 99club member, you have full control over your personal data. You may request a copy of all data we hold about you, request corrections to any inaccurate data, and request deletion of your account along with all associated data at any time — no justification required.
99club member data is stored on servers equipped with multi-layered firewalls, intrusion detection systems, and regular automated backups. Access to the member database is granted only to authorised 99club staff with a legitimate business need — not to all employees as a matter of course.
In the event of any security incident that may affect members' personal data, 99club is committed to notifying affected members within 72 hours of the incident being identified. We will not conceal any data breach — transparency in difficult situations is part of the trust we build with our members.
99club member personal data is stored on infrastructure operating in Malaysia, subject to Malaysian data protection laws including the Personal Data Protection Act 2010 (PDPA). We do not transfer Malaysian members' personal data to overseas servers without your explicit consent and appropriate safeguards in place.
This Privacy Policy explains how 99club ("we", "Platform") collects, uses, stores, and protects the personal information you provide when registering and using our services. This Policy applies to all 99club members in Malaysia, regardless of whether you access the platform via website, mobile app, or any other channel. By registering a 99club account, you confirm that you have read and agreed to this Privacy Policy. For any enquiries, contact us at support@99club.click.
99club collects member personal data through several means: directly when you register and complete forms on the platform, automatically as you use our services, and in some cases from trusted third parties such as identity verification service providers. We only collect data that is genuinely necessary to deliver our services safely and effectively — not out of convenience or without clear purpose.
The data we collect falls into three main categories. First, identity and contact data: your full name, Malaysian phone number, email address (if provided), date of birth for age verification, and MyKad number or other identity document when KYC (Know Your Customer) verification is required for large transactions. Second, financial and transaction data: payment methods used (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, CIMB Clicks), destination bank account number for withdrawals, deposit and withdrawal history, and records of wins and losses. Third, technical and usage data: your device's IP address, device type and operating system, web browser used, session data and activity logs within the platform, and general location information (state or city, not your exact address) derived from your IP address.
| Data Category | Specific Examples | Purpose of Collection |
|---|---|---|
| Identity & Contact | Name, phone number, date of birth | Account & age verification |
| Finance & Transactions | Deposit methods, transaction records | Payment processing |
| Technical & Device | IP address, device type, browser | Security & improvements |
| Gaming Activity | Gaming history, sport preferences | Personal experience & audit |
| Communications | Live chat records, support emails | Dispute resolution |
99club uses members' personal data based on the principle of purpose limitation — meaning each type of data is used only for its relevant purpose and nothing beyond that. We do not use your data for purposes you would not expect or that are not directly related to the services you use.
The primary purposes for which your data is used include: verifying your identity and age during registration, processing deposits and withdrawals via Malaysian e-wallets and banking, delivering relevant gaming services based on your history and preferences, detecting and preventing fraud and unauthorised activity, providing effective customer support when you contact our team, fulfilling legal obligations and regulatory requirements, and sending important service communications such as transaction notifications and policy updates.
For marketing communications — such as emails about new promotions or bonuses — we will only send these if you have given explicit consent during registration or through your account settings. You may withdraw this consent at any time via the "unsubscribe" link in any marketing email or through the notification settings in your account, without affecting your access to 99club's core services.
This is the most important section to read carefully. 99club states clearly: we never sells members' personal data to any party. This is not merely a statement — it is an operational policy we have upheld since our first day and will continue to uphold going forward.
However, there are limited situations where 99club needs to share members' personal data with certain third parties. First, payment service providers: when you make a deposit or withdrawal, the necessary transaction information is shared with your e-wallet provider (such as Touch 'n Go or GrabPay) or bank to process the transaction. This is an unavoidable technical requirement, and these providers are subject to their own privacy policies and data protection measures.
Second, technology service providers that assist 99club in operating the platform — such as server hosting providers, anti-fraud systems, and customer support services. All such providers are bound by strict confidentiality agreements and may only access data that is strictly necessary for their work. They are not permitted to use 99club members' data for their own purposes.
Third, Malaysian authorities: if required by Malaysian law, a court order, or a lawful request from enforcement authorities, 99club may be required to disclose certain information. In such situations, we will notify the affected member in advance if the law permits us to do so.
99club continuously invests in security infrastructure to protect members' personal data from unauthorised access, loss, alteration, or disclosure. Our security systems are built on a multi-layered approach — meaning that even if one line of defence is breached, several other active protection layers remain in place.
256-bit SSL encryption protects all data in transit — from your device to 99club's servers and back. At the storage level, sensitive data such as payment information is stored in encrypted form using the latest industry standards. Member passwords are never stored in plain text — they are hashed using a one-way, irreversible algorithm.
For an additional layer of security, 99club uses two-factor authentication (2FA) via SMS OTP for every login and significant financial transaction. An active 24-hour monitoring system detects suspicious activity patterns and will automatically freeze transactions or logins deemed high-risk until the member completes additional verification through a secure channel.
99club's internal security team conducts regular vulnerability assessments and penetration testing to identify and address any weaknesses before they can be exploited. In addition, independent security audits by external firms are conducted at least once a year to provide independent verification of the level of protection we maintain.
The 99club website and app use cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device by your web browser when you visit the 99club platform. They allow the platform to remember your preferences, maintain your login session, and understand how you interact with our services.
We use several types of cookies. Session cookies are technically necessary for the platform to function correctly — they keep you logged in during an active session, save your language preference, and ensure transactions are processed properly. This type of cookie does not collect personally identifiable information and is automatically deleted when you close your browser.
Our analytics cookies collect information about how visitors use the platform — which pages are visited most, where visitors drop off during the registration flow, and how long they spend on each section. This information is used in aggregated, anonymised form to improve the design and usability of the 99club platform. You may opt out of analytics cookies via your browser settings without affecting the platform's core functionality.
99club does not use third-party cookies for targeted advertising purposes. We do not install Facebook Pixel, Google Ads, or similar ad tracking technologies that would send your behavioural data to third-party advertising platforms for the purpose of targeting ads on other websites.
Under the Malaysian Personal Data Protection Act 2010 (PDPA) and 99club's broader privacy commitments, you have a range of rights regarding your personal data. We take these rights seriously and provide a clear, straightforward process for you to exercise them.
The first right is the right to access — you may request a copy of all personal data we hold about you. 99club will provide a full report within 14 business days of receiving the request, in an easy-to-read format. No fee is charged for the first data access request within any 12-month period. Subsequent requests may be subject to a reasonable processing fee.
The second right is the right to rectification — if you find that any personal information we hold about you is inaccurate or out of date, you may request a correction promptly. We will process correction requests within 7 business days and confirm to you once the changes have been made.
The third right is the right to erasure — you may request deletion of your 99club account along with all associated personal data. Such requests will be processed within 30 days. Please note that certain data may need to be retained for periods prescribed by Malaysian law (such as financial transaction records for tax and anti-money laundering purposes) even after account closure.
Request a copy of all data we hold about you. Processed within 14 business days.
Correct inaccurate or outdated data within 7 business days.
Request account closure and data deletion. Processed within 30 days, subject to legal obligations.
Object to the processing of your data for marketing or analytics purposes at any time.
Request that 99club restrict how your data is used while an investigation or dispute is ongoing.
Request your data in a machine-readable format for transfer to another platform where applicable.
99club retains members' personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law. Our principle is straightforward: once data is no longer needed for its original purpose and there is no legal obligation requiring continued retention, it will be securely deleted.
For active accounts, we retain personal data for as long as your account remains active and you continue using 99club's services. After an account is closed, basic identity data such as your name and phone number is retained for the minimum period prescribed by Malaysian law for fraud prevention and regulatory compliance purposes — typically 7 years for financial records in accordance with tax and companies legislation.
Financial transaction records, including deposit, withdrawal, and winnings history, are retained for 7 years following the date of each transaction, in line with the requirements of Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA). Customer support communication data, such as live chat logs and emails, is retained for 2 years from the date of communication for dispute resolution purposes.
Once the retention period expires or a valid deletion request is submitted, 99club will securely delete or anonymise data using methods that meet industry standards for irreversible data destruction. We do not simply "delete" files from view — we ensure data is fully purged from all systems and backups.
To submit any request relating to your privacy rights — whether for data access, correction, deletion, or objection to processing — please contact the 99club Data Protection Officer by email at support@99club.click with the subject line "DATA PRIVACY REQUEST — [Your Account Number]". Clearly include the details of your request and we will acknowledge receipt within 48 hours and provide a full response within 14 business days.
If you have a complaint regarding how 99club handles your personal data and are unsatisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010 (PDPA). Contact details for the Department of Personal Data Protection Malaysia are available on its official website.
99club reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technological requirements, or new legal obligations. When material changes are made to this Privacy Policy, we will notify all active members via SMS or in-platform notification at least 14 days before the changes take effect. The "Updated" date at the top of this document will always reflect the latest version currently in force.
Many members wonder — when I log in, make a deposit, or play, what actually happens to my information behind the scenes? It is a fair question, and we want to answer it clearly.
Here is a straightforward overview of how your data moves within the 99club ecosystem from the moment you open the app to the point your winnings are credited to your account.
When you log in, your password is verified against a stored hash — not the actual password itself. An SMS OTP is sent for 2FA verification. A secure, encrypted session is then created. No actual passwords are stored anywhere in the 99club system.
When you deposit via Touch 'n Go or DuitNow, transaction information is transmitted with SSL encryption to the payment provider. 99club receives payment confirmation without storing your full sensitive card or account details. Your balance is credited instantly.
Every slots spin, blackjack hand, or badminton bet you place is recorded in a secure activity log. This data is used to ensure fairness, resolve disputes, and (in aggregated, anonymised form) for platform analytics.
Winnings are credited to your account balance. When you request a withdrawal, your bank account or e-wallet details are verified against the information you registered previously. Withdrawals are processed and arrive within 15 minutes for Malaysian e-wallets.
Our systems monitor activity around the clock to detect fraud and unauthorised access. If anything suspicious is flagged — such as a login from an unusual location — the system will require additional verification before allowing any transactions to proceed.
Malaysians are increasingly aware of their data privacy rights — and this is a very positive development. The Personal Data Protection Act 2010 (PDPA) is Malaysia's primary legislation governing how organisations collect, use, and protect users' personal data. 99club operates in full compliance with the PDPA and its principles.
The seven principles of Malaysia's PDPA — general principle, notice and choice, disclosure, security, data integrity, access, and the principle of data not being transferred outside Malaysia — are all embedded in the way 99club handles member data. These are not merely compliance checkboxes; they are the values that guide our actual operations.
To give a concrete example: when you register a 99club account, we clearly inform you (through this Privacy Policy) what data is collected and how it is used. You are given the choice of whether to receive marketing communications. Your data is not transferred to other countries without appropriate safeguards. And you have the right to access, correct, and delete your data.
One aspect we take particular pride in is our approach to children's data. The 99club platform is strictly for individuals aged 18 and above. If we detect that a minor has registered an account, that account will be closed immediately and all associated data will be permanently deleted — not retained for any other purpose.
Answers to the privacy questions most frequently asked by 99club Malaysia members
With 256-bit SSL encryption, a strict no-data-selling policy, full control in your hands, and complete compliance with Malaysia's PDPA — 99club is a platform that fully respects your privacy. Register for free and enjoy over 1,200 games with complete peace of mind.
This Privacy Policy is to be read together with the 99club Terms & Conditions, which set out the full rules governing use of the platform. Together, these two documents form the complete agreement between you and 99club. To fully understand your rights and responsibilities as a member, we encourage you to read both documents.
Read 99club Terms & ConditionsBeyond protecting your data privacy, 99club is also committed to your wellbeing as a player. We provide deposit limits, loss limits, account timeouts, and self-exclusion options to help you stay in control. This platform is for individuals aged 18 years and above only. Remember — gaming is entertainment, not a solution to financial problems.