Privacy Policy bet99 – Personal Data Protection for Malaysian Members

Bet99 is an online betting platform operating in Malaysia, fully committed to protecting the privacy of all members who use its services. This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and clearly sets out our data handling practices.

This policy applies to all users of the bet99 platform, including website visitors, registration applicants, active registered members, and former members who still have active records in our system. It covers all channels of interaction with bet99 – via the website https://bet99.express, mobile interface, email communications, live chat, and any other customer support channels.

Bet99 acts as a "data processor" as defined under PDPA – meaning we are the entity that determines the purpose and manner in which personal data collected from members is used. This carries legal and ethical responsibilities that we take seriously in every decision involving user data.

Bet99 follows the principle of data minimisation — we only collect the information necessary to provide and improve our services. Below are the categories of data we collect, along with their purposes and legal basis for collection:

Bet99 not collect sensitive information such as biometric data, health information, religious beliefs, or political views. We also do not request credit or debit card numbers directly – all payments are processed through secure third-party payment gateways such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX online banking.

Personal data collected by bet99 is used solely for purposes related to the provision and improvement of platform services. The specific purposes for which your data is used are as follows:

• Account management – creating, verifying, and maintaining your member account, including the mandatory Know Your Customer (KYC) process.
• Transaction processing – handles deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u and CIMB Clicks, as well as the secure and accurate processing of winnings withdrawals.
• Service provision – gives you access to all games and features on the bet99 platform, including slots, live casino, Sports Betting, roulette, and e-sports.
• Security & fraud prevention – detecting and preventing fraudulent activity, money laundering, unauthorised access, and other breaches of our terms that could harm other members or the platform.
• Responsible Gaming – monitoring gaming patterns to identify signs of problem gambling and taking appropriate preventive action in accordance with our Responsible Gaming Policy.
• Customer support – effectively processing and resolving your enquiries, complaints, and support requests.
• Service communications – sending important notifications about your account, platform updates, promotions you have opted into, and relevant security information.
• Legal compliance – fulfilling the legal and regulatory obligations applicable to the operation of the bet99 platform in Malaysia.
• Platform improvements – analysing aggregated and anonymised usage data to better understand user needs and enhance the overall platform experience.

Bet99 will not use your personal data for purposes other than those stated above without first obtaining fresh consent from you, unless required to do so by law.

Bet99 does not sell, rent, or share members' personal data with third parties for their own marketing purposes. However, in the course of operating the platform, there are specific situations where data may be shared with trusted parties:

• Payment service providers – payment gateways such as Touch 'n Go eWallet, GrabPay, ShopeePay, Boost, DuitNow, and banks for FPX receive the transaction details necessary to process your deposits and withdrawals.
• Game providers – live casino, slots, and Sports Betting software providers that partner with bet99 may receive session data required to deliver their games.
• Cloud & infrastructure service providers – the bet99 platform uses certified cloud computing services to store and process data securely.
• Identity verification providers – for the KYC process, bet99 may engage approved third-party services to verify member identities.
• Legal authorities – when required by law, court order, or official investigations by the relevant Malaysian authorities.
• Professional advisors – lawyers, accountants, or auditors who are subject to strict professional confidentiality obligations when carrying out assignments related to bet99.

All third parties who receive bet99 member data are bound by data protection agreements ensuring they handle such information to security standards equal to or exceeding those of bet99 itself. bet99 is not responsible for the privacy practices of third parties that maintain their own privacy policies.

Bet99 continually invests in security technologies and procedures to protect members' personal data from unauthorised access, use, disclosure, alteration, or destruction. Key security measures we practise include:

• 256-bit SSL/TLS Encryption – all data transmitted between your browser and the bet99 servers is protected by bank-grade encryption. The padlock icon in your browser confirms a secure connection.
• Stored data encryption – sensitive information stored in the bet99 database is encrypted using industry-standard algorithms, rendering it unreadable even in the event of an unauthorised access incident.
• Two-Factor Authentication (2FA) – bet99 encourages the use of 2FA for all accounts, adding an extra layer of protection even if your password is compromised.
• 24/7 security monitoring – automated monitoring systems continuously watch for suspicious activity, unauthorised access attempts, and anomalies in usage patterns.
• Regular penetration testing – bet99 conducts regular security assessments by independent cybersecurity experts to identify and remediate any system vulnerabilities.
• Internal access controls – only bet99 staff with a legitimate business need have access to members' personal data, and such access is continuously monitored and audited.
• Secure data backups – critical data is regularly backed up to a secure, separate location to ensure prompt recovery in the event of a system failure.

While bet99 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against every cyber threat. In the rare event of a data breach involving member information, bet99 will take immediate action and notify affected members in accordance with its legal obligations.

Bet99 retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are retention period guidelines for the various data categories:

Once the retention period has expired, or when the purpose for which the data was collected has been fulfilled and there is no longer a legal requirement to retain it, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally.

As a bet99 member and data subject under the PDPA 2010, you have the following rights regarding your personal information held by bet99. All requests to exercise these rights may be submitted to our privacy team by emailing support@bet99.express with the subject line "Privacy Rights Request".

All requests to exercise the above rights are free of charge and will be processed within 21 business days of receiving a complete request. bet99 may require identity verification before processing your request to ensure the security of your data.

The bet99 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how members interact with the platform. The following are the types of cookies we use:

• Required session cookies – these cookies are essential to the core functionality of the bet99 platform. They store your session login information, language preferences, and basic security data. Without them, the platform cannot function properly. These cookies cannot be disabled.
• Preference cookies – saves your personal settings such as game table preferences, display mode, and other preferences so you don't need to reconfigure them each time you log in to bet99.
• Analytics cookies – helps us understand how members use the platform – which pages are visited most frequently, time spent in each section, and general navigation patterns. This data is used in aggregate and anonymised form solely for platform improvement purposes.
• Security Cookies – helps bet99's security systems detect suspicious activity, verify your device identity, and protect your account from unauthorised access.

You can manage cookie settings through your web browser. Disabling certain cookies may affect the functionality of the bet99 platform. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

The bet99 platform is strictly for individuals aged 18 and above. bet99 does not intentionally collect or store any personal information from individuals under the age of 18.

If bet99 becomes aware that personal information of an underage individual has been collected without valid parental or guardian consent, we will take immediate steps to delete that information from our systems and close the relevant account. bet99 employs an age verification process during registration to prevent sign-ups by underage individuals.

If you believe your child or any minor has registered for or used the bet99 platform without your knowledge, please contact us immediately at support@bet99.express so that we can take appropriate action promptly.

In the course of operating the platform, bet99 may need to transfer members' personal data to servers or service providers operating outside Malaysia. This includes cloud infrastructure providers, international gaming software vendors, and global payment processing systems.

All cross-border data transfers carried out by bet99 are subject to adequate safeguards to ensure that the personal data of Malaysian members receives a level of protection consistent with the requirements of PDPA 2010. The measures we apply include:

• Data Processing Agreements with all third-party providers, establishing strict data protection obligations.
• Selection of supplier partners operating in jurisdictions with recognised and equivalent data protection laws.
• Data encryption in transit for all cross-border data transfers, without exception.
• Regular reviews of third-party vendors' data protection practices to ensure ongoing compliance.

If you would like to learn more about the protection mechanisms used for cross-border data transfers involving your data, please contact our privacy team.

Bet99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform service improvements. We are committed to informing you of any significant changes through the following means:

• In-platform notification on the bet99 platform during your next login session after the changes take effect.
• A notification email will be sent to the address registered on your account for any significant changes.
• Updating the "Last Updated" date displayed at the top of this Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the bet99 platform following any changes to this Privacy Policy will be deemed acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account and request a withdrawal of any eligible balance.

If you have any questions, concerns, or requests regarding this Privacy Policy or how bet99 handles your personal data, please contact our Data Privacy Officer through the following channels:

• Email – support@bet99.express with the subject line "Privacy Inquiry" or "Data Rights Request". Response within 3–5 business days.
• Live Chat – available 24/7 within the bet99 platform for general privacy-related enquiries.
• WhatsApp – for quick inquiries. Our team will direct you to the appropriate channel for formal requests.

For formal complaints regarding a privacy breach, please submit your complaint in writing via email with full details of the issue, the date it occurred, and any relevant evidence. bet99 is committed to investigating and responding to all privacy complaints within 14 working days of receiving a complete complaint.

If you are not satisfied with bet99's response to your privacy complaint after going through our internal process, you have the right to escalate the matter to Malaysia's Department of Personal Data Protection (JPDP).