Data Protection

Privacy Policy 99md — Member Personal Data Protection

At 99md, your privacy is more than a legal obligation — it is our commitment to every member who entrusts their personal information to our platform. This document transparently explains how we collect, use, store, and protect your data.

Last Updated: 1 January 2026

99md's Six Data Protection Principles

We uphold six core principles in managing members' personal data — each designed to ensure your information remains safe, private, and handled responsibly.

Advanced-Level Encryption

All data transmitted between your device and 99md servers is protected by SSL 256-bit encryption — the same standard used by leading banking institutions in Malaysia.

No Sharing Without Consent

Your personal data will not be sold, rented, or shared with any third party for marketing purposes without your explicit prior consent.

Full Control in Your Hands

You have the right to access, correct, or request deletion of your personal data at any time. The process is straightforward and can be done through our customer support team.

Secure Data Storage

Member data is stored on servers protected by multi-layered access controls, intrusion detection systems, and regular backups to ensure ongoing data security.

Legal Compliance

99md complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international regulations, ensuring every aspect of our data management meets established protection standards.

Immediate Breach Notification

In the event of any security incident involving your data, we will notify you within the stipulated timeframe and take immediate remedial action.


1 Information We Collect

When you register and use the 99md platform, we collect several categories of personal information to provide you with a safe, seamless, and high-quality service.

Data Categories Examples of Information Collection Methods
Personal Identity Full name, date of birth, identification card number Registration form, KYC process
Contact Information Email address, phone number, residential address Account registration, profile updates
Financial Data Bank account number, transaction history, deposit and withdrawal records Payment processing, KYC verification
Technical Data IP address, device type, web browser, operating system Automatically collected during platform use
Gaming Data Betting history, games used, session duration Automatically collected during gaming activity
Cookies and Usage Platform preferences, pages visited, time of visit Cookies and tracking technologies

We only collect information that is genuinely necessary for the stated purposes. We do not collect sensitive data such as your medical information or religious beliefs unless required by law.

Important Note: You are responsible for ensuring that all information provided to 99md is accurate and up to date. Inaccurate information may affect our ability to process transactions or verify your identity during the KYC process.

2 How We Use Your Data

Your personal information is used by 99md for legitimate and transparent purposes. We will not use your data for any purpose other than those stated here without notifying you in advance.

  • Create and manage member accounts and enable access to all 99md platform services
  • Process deposits, withdrawals, and all financial transactions securely and promptly
  • Carry out identity verification (KYC) processes to comply with anti-money laundering legal requirements
  • Provide responsive customer support and resolve disputes or account-related issues
  • Send important account-related notifications, including transaction confirmations and security alerts
  • Analyse usage patterns to improve platform performance, user experience, and game offerings
  • Identify and prevent fraud, unauthorised access, and suspicious activity that could compromise the security of other members
  • Send promotional information and exclusive offers to members who have consented to receive them
  • Comply with legal obligations and report to the relevant authorities when required

Whenever we use your data for a new purpose not previously stated, we will inform you and, where necessary, seek fresh consent from you.

3 Legal Basis for Data Processing

99md processes your personal data on one or more valid legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA):

  • Consent: When you register an account and agree to our Terms and Conditions, you give your consent for us to process your data for the stated purposes.
  • Contract Execution: Data processing is required to fulfil the service contract between you and 99md, including processing payments and managing accounts.
  • Legitimate Interest: We process certain data based on legitimate business interests, such as fraud detection and enhancing platform security.
  • Legal Obligation: Some data processing is mandatory to comply with Malaysian law, including anti-money laundering requirements and financial reporting obligations.

Right to Withdraw Consent: You may withdraw your consent at any time. However, withdrawal of consent does not affect the validity of any processing carried out prior to the date of withdrawal.

4 Data Sharing

99md takes seriously our responsibility not to disclose your personal information without strong justification. Your data is shared only in the following circumstances:

  • Trusted Service Providers: We work with selected payment providers, game suppliers, and technology infrastructure providers to keep the platform running. All third parties are bound by strict data confidentiality agreements.
  • Legal Requirement: We may be required to disclose data to government authorities, regulatory bodies, or courts when mandated by Malaysian law.
  • Fraud Prevention: In certain circumstances, information may be shared with fraud prevention agencies or identity verification service providers to protect members and the platform.
  • Business Transfer: If 99md is involved in a merger, acquisition, or asset transfer, user data may be transferred as part of that process with appropriate notice given to members.

We never sell, rent, or trade your personal data to any third party for marketing or commercial purposes without your explicit consent.

5 Data Retention Period

99md retains your personal data for as long as necessary to fulfill the original purpose of collection and to meet our legal obligations. The following are our general data retention guidelines:

  • Active account data is retained for the duration your account remains active, plus any period required by law following account closure
  • Financial transaction records are retained for a minimum of seven (7) years to meet tax reporting and anti-money laundering compliance requirements
  • Customer support communication logs are retained for three (3) years for reference and dispute resolution purposes
  • Technical data and system logs are retained for six (6) months for troubleshooting and security purposes
  • Marketing data and communication preferences are retained until you withdraw your consent or close your account

After the Retention Period: When data is no longer needed, 99md will securely delete or anonymize it using industry-approved methods, ensuring it cannot be recovered or re-identified.

6 Data Security

The security of your personal data is the absolute priority of 99md. We continuously invest in the latest security infrastructure to ensure your information is always protected against increasingly sophisticated cyber threats.

  • 256-bit SSL encryption for all data transmissions between your device and our servers
  • Passwords are stored using strong hashing algorithms — your password is never stored in plain text
  • Two-factor authentication (2FA) is available and encouraged for all member accounts
  • 24/7 system monitoring by our cybersecurity team to detect and respond to suspicious activity
  • Regular penetration testing and security audits by independent third-party experts
  • Strict access controls — only authorised staff with a legitimate business need may access member data
  • A tested incident response plan to ensure a swift and organised response in the event of a data breach

While no security system can guarantee 100% absolute protection, we are committed to applying the best industry-standard measures available to minimise risk to your data.

7 Your Rights

Under Malaysia's PDPA and our own policies, you have the following rights regarding your personal data held by 99md:

  • Right of Access: You may request a copy of the personal data we hold about you at any time.
  • Right to Rectification: You may request correction of any data that is inaccurate, incomplete, or outdated.
  • Right to Erasure: In certain circumstances, you may request deletion of your personal data, subject to our ongoing legal obligations.
  • Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
  • Right to Restrict Processing: In certain situations, you may request that we restrict the processing of your data pending the resolution of a dispute.
  • Right to Data Portability: You may request your data in a structured, machine-readable format for transfer to another service provider.

How to Submit a Request: To exercise any of the above rights, contact the 99md customer support team via live chat on our platform. We will process your request within 30 business days and may require identity verification before any action is taken.

8 Cookies and Tracking

99md uses cookies and similar tracking technologies to enhance user experience, analyze platform performance, and deliver relevant content to you.

  • Essential Cookies: Required for core platform functions such as Login, session management, and security. These cookies cannot be disabled.
  • Performance Cookies: Collect information on how you use the platform to help us identify and resolve technical issues.
  • Functional Cookies: Save your preferences such as language, display settings, and login information to streamline repeat use.
  • Marketing Cookies: Used to deliver more relevant ads and offers based on your interests and activity. You may opt out of these cookies.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality and experience of the 99md platform.

9 International Data Transfers

In the course of its operations, 99md may need to transfer your personal data to servers or service providers located outside Malaysia. All such international transfers are conducted with strict safeguards:

  • We only transfer data to countries or regions with a level of data protection equivalent to or higher than Malaysia
  • All third-party service providers are bound by data processing agreements that comply with international protection standards
  • Data transfers are carried out using approved protection mechanisms, including standard contractual clauses
  • We conduct thorough due diligence on all data processing partners before any data sharing takes place

Your Rights Regarding International Transfers: You have the right to know where your data is transferred and what protective measures are in place. Contact us if you would like more information about international data transfers involving your information.

10 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, do not hesitate to contact us.

  • Reach our customer support team via live chat, available 24 hours a day, 7 days a week on the 99md platform
  • Submit your written enquiry via our official email at: [email protected]
  • All privacy-related complaints will be acknowledged within 2 business days and resolved within 30 business days
  • If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Personal Data Protection Department

We value every piece of feedback from our members, as it helps us continually improve our privacy practices and data security at 99md.


99md Privacy Policy FAQ

Answers to the most frequently asked questions by members regarding data protection and privacy at 99md.

No. 99md never sells, rents, or trades your personal data to any third party for commercial or marketing purposes. Your data is only shared with service providers necessary for the operation of our platform, and all such parties are bound by strict confidentiality agreements. We are fully committed to protecting your privacy.

You may submit a data access request by contacting our customer support team via live chat on the 99md platform or through our official email. We will require identity verification before disclosing any information, and will process your request within 30 business days.

When you close your account, we will delete data that is no longer required. However, certain financial records and transactions must be retained for a minimum of 7 years to comply with Malaysian law, including tax reporting requirements and anti-money laundering regulations. After this period, data will be permanently deleted or fully anonymized.

Yes. All financial information you provide is protected by SSL 256-bit encryption during transmission. Payment transactions are processed through verified payment gateways that comply with industry security standards. 99md does not store your full credit or debit card details on our servers — this data is managed entirely by approved and registered payment providers.

Yes, you can opt out of receiving promotional emails at any time by clicking the "unsubscribe" link found at the bottom of every email, or by contacting our support team to update your communication preferences. Please note that you will still receive important account-related emails such as transaction confirmations and security alerts even after unsubscribing from promotional emails.

Trusted Platform

Ready to Play Safe?

Join millions of members enjoying the best gaming experience at 99md — a platform that puts your security and privacy first at every step.


Bahasa Melayu