99play2 Privacy Policy

1. Introduction

99play2 ("we", "us", "our", "the Company") operates the online gaming platform accessible at 99play2.net, including the sportsbook, live casino, slots, Plinko, and Lottery 4D services (collectively, the "Platform"). As the data controller, 99play2 is responsible for the personal data of individuals ("you", "your") who register for and use the Platform.

This Privacy Policy is incorporated into and forms part of the 99play2 Terms & Conditions. By creating a 99play2 account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

99play2 is committed to handling all personal data with care, in compliance with applicable data protection legislation and the requirements of the international gaming authority under which it is licensed.

2. Data We Collect

99play2 collects the following categories of personal data in connection with your use of the Platform:

2.1 Identity & Contact Data

• Full legal name
• Date of birth
• Residential address
• Email address
• Mobile phone number
• Government-issued identity document details (for KYC verification purposes)

2.2 Financial Data

• Bank account or e-wallet details used for deposits and withdrawals (Maybank2u, CIMB, Public Bank, Touch n Go eWallet, Boost, GrabPay, DuitNow, FPX)
• Transaction history including deposit amounts, withdrawal requests, and MYR balances
• Source of funds documentation where required

2.3 Gaming & Account Activity Data

• Betting history across all Platform products
• Login timestamps and session durations
• Device identifiers, IP addresses, and browser/operating system information
• Game preferences and interaction patterns
• Communications with customer support

2.4 Technical Data

• Cookies and similar tracking technologies (see Section 8)
• Referral source data (how you arrived at the Platform)
• Performance and error logs

3. How We Collect Your Data

99play2 collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make deposits or withdrawals, place bets, contact support, or participate in promotions.
• Automatically — through cookies, server logs, and device detection technologies when you access and interact with the Platform.
• From third parties — including identity verification providers, fraud prevention agencies, payment processors, and gaming software suppliers, to the extent necessary to operate the Platform and comply with regulatory obligations.

4. How We Use Your Data

99play2 uses your personal data for the following purposes:

• To create and manage your 99play2 account and verify your identity in compliance with KYC/AML requirements.
• To process deposits, withdrawals, and all financial transactions conducted on the Platform in MYR.
• To provide and improve all Platform services, including the sportsbook, live casino, slots, Plinko, and Lottery 4D.
• To detect, investigate, and prevent fraud, money laundering, match fixing, and other prohibited conduct.
• To enforce the Terms & Conditions and applicable gaming regulations.
• To send account-related communications including transaction confirmations, security alerts, and support responses.
• To administer promotions, bonuses, and loyalty programmes where you have opted in.
• To conduct responsible gaming monitoring, including identification of players who may be exhibiting problem gambling indicators, in compliance with our licensing obligations.
• To perform analytics and Platform performance optimisation.

5. Legal Basis for Processing

99play2 processes your personal data on the following legal bases:

• Contractual necessity — processing required to provide the services you have contracted for, including account management, transaction processing, and bet settlement.
• Legal obligation — processing required to comply with applicable laws, including AML/KYC regulatory obligations and gaming licence conditions.
• Legitimate interests — processing for fraud prevention, security monitoring, and Platform improvement, where these interests are not overridden by your data protection rights.
• Consent — for marketing communications and certain cookie placements, where we have obtained your prior consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Data

99play2 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Identity verification and KYC providers — to verify your identity and age as required by gaming regulations.
• Payment processors and financial institutions — to process your deposits and withdrawals via Touch n Go, DuitNow, Boost, FPX, and other supported channels.
• Gaming software suppliers — who provide the underlying game engines for our casino, slots, and other Platform products.
• Fraud prevention and security services — to detect and prevent unlawful activity on the Platform.
• Regulatory and law enforcement authorities — where disclosure is required by law, court order, or gaming authority direction.
• Professional advisors — including legal, financial, and audit professionals, under strict confidentiality obligations.

All third-party processors engaged by 99play2 are contractually required to handle data in accordance with applicable data protection standards and to use it solely for the purposes for which it was disclosed.

7. Data Retention

99play2 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Account data and identity verification records: minimum five (5) years from account closure, as required by AML regulations.
• Transaction and betting records: minimum five (5) years from the date of each transaction.
• Customer support communications: three (3) years from the date of last interaction.
• Marketing consent records: retained for the duration of the consent and two (2) years thereafter.

Following the expiry of applicable retention periods, data is securely deleted or anonymised such that it can no longer be associated with an individual.

8. Cookies & Tracking Technologies

99play2 uses cookies and similar technologies (including pixel tags and local storage) on the Platform. Cookies serve the following purposes:

• Strictly necessary cookies — required for the Platform to function, including maintaining your login session and storing your MYR balance display preferences. These cannot be disabled.
• Performance cookies — used to collect anonymised data about how visitors use the Platform, enabling us to identify and fix errors and improve performance.
• Functionality cookies — used to remember your preferences, such as language settings and recently viewed games.
• Analytics cookies — used to understand player behaviour and optimise the Platform experience over time.

You may manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. Continued use of the Platform constitutes consent to the use of strictly necessary cookies.

9. Data Security

99play2 implements technical and organisational security measures proportionate to the risk associated with processing your personal data. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive personal data and financial information at rest.
• Access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Incident response procedures to address data breaches promptly and in compliance with applicable notification obligations.

While 99play2 takes all reasonable steps to protect your data, no transmission over the internet or data storage system is entirely secure. You are responsible for maintaining the security of your own 99play2 login credentials.

10. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 99play2:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete personal data.
• Right to erasure — to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations.
• Right to restriction — to request that processing of your data be restricted in certain circumstances.
• Right to data portability — to receive your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object — to object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent — to withdraw consent at any time where processing is consent-based, without affecting prior lawful processing.

To exercise any of the above rights, please contact 99play2 at [email protected]. We will respond within 30 days of receiving a verifiable request. We may require proof of identity before fulfilling any request.

11. Children's Privacy

The 99play2 Platform is strictly intended for adults aged 21 and above. 99play2 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under this age threshold, the data will be deleted promptly and the account closed. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

12. International Data Transfers

99play2 may transfer personal data to service providers and partners located outside Malaysia. Where such transfers occur, 99play2 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law, including the use of contractual clauses approved for international data transfers and, where relevant, adequacy decisions by relevant supervisory authorities.

13. Policy Changes

99play2 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform functionality. Material changes will be communicated to registered users by email or prominent notice on the Platform, with a minimum of fourteen (14) days' advance notice where practicable. The date of the most recent update is displayed at the top of this document. Continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the changes.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 99play2, please contact our Data Protection team:

Email: [email protected]

For responsible gaming-related data requests (including self-exclusion data), please also visit our Responsible Gaming page.