Privacy Policy mykad 99 – Protecting Your Personal Data Is Our Priority

This Privacy Policy is published by mykad 99, Malaysia's leading online casino and Sports Betting platform. This document outlines our privacy practices in relation to all personal information collected through the mykad99.biz website, the mykad 99 mobile app, and all related services we offer to users in Malaysia.

When we refer to "personal data" in this document, we mean any information that can be used to identify you directly or indirectly – including your name, email address, phone number, payment information, and platform usage data.

This policy is drafted to fully comply with Personal Data Protection Act 2010 (PDPA) Malaysia and relevant international data protection principles.

Mykad 99 collects your personal data through a number of different channels. Below are the categories of data we collect and the purposes for which they are used:

We never collect credit card information directly on our servers. All payments via FPX (Maybank2u, CIMB Clicks) and e-wallets are processed by licensed and regulated third-party payment providers.

The personal data we collect is used for clearly defined and limited purposes. mykad 99 uses your data to:

• Managing your account – registration, identity verification (KYC), login, and member profile management.
• Processing financial transactions – deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, and CIMB Clicks; withdrawals to your bank account or e-wallet.
• Providing gaming services – ensuring you can seamlessly access all Live Casino games, jackpot slots, Malaysia Super League football Sports Betting, badminton, and e-sports.
• Security and fraud prevention – to detect suspicious activity, prevent money laundering, and maintain platform integrity.
• Legal compliance – meeting financial reporting requirements and PDPA 2010 compliance.
• Service communications – to send important notifications regarding your account, transactions, and policy changes.
• Marketing (with consent) – sending promotions, bonus offers, and relevant updates – only where you have given explicit consent to receive marketing communications.
• Platform improvements – analysing usage patterns in aggregate (without identifying individuals) to improve the mykad 99 user experience.

In accordance with Malaysia's PDPA 2010, mykad 99 processes your personal data on the following lawful bases:

• Contract performance – processing data necessary to deliver the services you requested when registering and using the platform.
• Legal obligation – processing required to comply with Malaysian law, including anti-money laundering (AML) requirements and financial reporting.
• Legitimate interest – processing for the purposes of platform security, fraud prevention, and service improvement, where our interests do not override your privacy rights.
• Consent – for marketing and promotional communications, we act solely on your explicit consent, which may be withdrawn at any time.

Mykad 99 does not sell, does not rent, and does not commercialise your personal data to any third party. However, in the context of legitimate platform operations, we may share data with the following categories of parties:

• Licensed payment providers – Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX processors for banks such as Maybank2u and CIMB Clicks. Data shared is strictly limited to what is necessary to complete the transaction.
• IT and infrastructure service providers – a server hosting and cybersecurity company bound by strict confidentiality agreements.
• Licensed game providers – a casino software company that provides live baccarat, roulette, slots, and Sports Betting games for the mykad 99 platform. Only the minimum technical data required for integration purposes is shared.
• Legal authorities – when required by Malaysian law, a court order, or a legitimate law enforcement investigation.

Mykad 99 continuously invests in cybersecurity infrastructure to ensure your personal data remains protected at all times. Key security measures we have implemented include:

• 256-bit SSL/TLS encryption for all data in transit between your device and mykad 99 servers.
• AES-256 encryption for all sensitive personal data stored in our databases.
• Role-based access control (RBAC) ensures that only authorised staff can access specific data.
• Independent security audits are conducted every quarter by a licensed cybersecurity firm.
• Intrusion detection systems (IDS) and 24/7 real-time threat monitoring.
• Two-factor authentication (2FA) is mandatory for administrative access and strongly encouraged for all members.
• Mandatory data security awareness training for all mykad 99 staff every quarter.

Mykad 99 does not retain your personal data longer than necessary for the original purpose of collection or as required by Malaysian law.

Upon expiry of the retention period, your personal data will be securely deleted using industry-recognised data disposal methods (data wiping / secure deletion).

As a mykad 99 member and an individual whose data we process, you have the following rights under Malaysia's PDPA 2010:

To exercise any of the rights above, submit a written request to support@mykad99.biz with the subject line "PDPA Rights Request". We will verify your identity before processing the request to ensure the security of your data.

Mykad 99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can manage your cookie settings through your web browser settings. Please note that disabling essential cookies may affect the functionality of the mykad 99 platform.

The mykad 99 Platform not intended for children or individuals under the age of 18. We do not knowingly collect personal data from individuals under the age of 18.

Should we discover that personal data has been collected from a minor without proper age verification, we will take immediate action to delete that information and close the account in question.

Mykad 99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in business operations, legal requirements, or the technologies we use. Any material changes will be communicated to you via:

• In-app or on-site notification on mykad 99 for at least 14 days before any changes take effect.
• Email to the address registered to your account for significant changes.
• Updates are reflected on the "Last Updated" date at the top of this page.

Continued use of the mykad 99 platform after any changes to the Privacy Policy take effect will be considered your acceptance of the updated terms. If you do not agree with any changes, you have the right to close your account.

For any enquiries, concerns, or requests relating to the Privacy Policy and the protection of your personal data at mykad 99, please contact our Data Protection Officer (DPO):

If you believe that mykad 99 has processed your personal data in a manner that violates the PDPA 2010 or your privacy rights, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.