This Privacy Policy explains how s99my collects, uses, stores, and protects the personal information of registered players and site visitors. Please read it carefully alongside our Terms & Conditions.
This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal data by s99my ("we," "us," "our") in connection with the operation of the online gaming platform accessible at s99my.win (the "Platform"). It applies to all registered players, prospective players, and visitors to the Platform, regardless of location.
s99my takes the privacy of its Malaysian players and all users seriously. We collect only the data necessary to operate a safe, licensed, and compliant online gaming platform, and we process it only for the purposes set out in this Policy. We do not sell personal data to third parties for marketing purposes.
This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together govern your use of s99my.
The data controller responsible for your personal information in connection with your use of the s99my Platform is the operator of s99my.win, operating under applicable international gaming licensing. For all data protection enquiries, including requests to exercise your rights, please contact us at the address set out in Section 14 of this Policy.
Where s99my engages third-party service providers who process personal data on our behalf (such as payment processors, KYC verification providers, and game software suppliers), those providers act as data processors operating under contractual obligations consistent with this Policy.
s99my collects personal data in the following categories:
When you create an s99my account, we collect your full name, date of birth, nationality, residential address, email address, and mobile phone number. This information is required to create your account, verify your age (21+ requirement), and satisfy our Know Your Customer (KYC) obligations under our gaming licence.
We may request copies of identity documents (such as your Malaysian NRIC, passport, or utility bill) to verify your identity, address, or source of funds. This is a regulatory requirement under our international gaming licence and applicable anti-money laundering (AML) obligations.
We collect data relating to your deposits, withdrawals, and transactions on the Platform, including payment method identifiers (such as your Touch n Go eWallet account identifier or bank account details submitted for withdrawal), transaction amounts, dates, and references. We do not store full card numbers or payment credentials — these are handled directly by our PCI-DSS compliant payment processor partners.
We collect records of all game sessions, wagers placed, game outcomes, bonus usage, and betting history associated with your s99my account. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.
When you access the Platform, we automatically collect technical data including your IP address, browser type and version, operating system, device identifiers, session timestamps, and page interaction data. This data is used for security monitoring, fraud prevention, platform optimisation, and analytics.
We retain records of communications between you and s99my support, including live chat transcripts, emails, and support ticket history. This data is used to manage your requests, resolve disputes, and improve our support services.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity & Registration | Name, DOB, address, email, phone | Account creation, KYC, age verification |
| KYC Documents | NRIC, passport, utility bill | Regulatory compliance, AML |
| Financial | Payment method IDs, transaction records | Deposits, withdrawals, AML monitoring |
| Gaming Activity | Wagers, game history, bonus usage | Account management, responsible gaming |
| Technical | IP address, device, browser data | Security, fraud prevention, analytics |
| Communications | Support chat transcripts, emails | Dispute resolution, service improvement |
s99my uses the personal data we collect for the following purposes:
s99my processes your personal data on the following legal bases:
s99my does not sell your personal data to third parties. We may share your data with the following categories of recipients where necessary:
All third parties to whom s99my discloses personal data are required to maintain appropriate security measures and to process the data only for the purposes for which it was disclosed.
s99my uses cookies and similar tracking technologies to operate the Platform, maintain your session, personalise your experience, and collect analytics data.
These cookies are strictly necessary for the Platform to function — they maintain your login session, remember your account preferences, and enable secure transactions. You cannot opt out of essential cookies while using the Platform.
We use analytics technologies to understand how the Platform is used — which pages are most visited, how players navigate between sections, and where performance improvements are needed. Analytics data is aggregated and not used to identify individual users.
Where you have consented, s99my may use tracking technologies to deliver relevant promotional content about s99my offers and products. You may withdraw consent for marketing cookies at any time by adjusting your browser settings or contacting s99my support.
s99my retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:
When personal data is no longer required for the purpose for which it was collected and no legal obligation requires its retention, s99my will securely delete or anonymise it.
s99my implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:
While s99my takes all reasonable precautions to protect your data, no internet transmission or digital storage system is entirely immune from risk. You should take appropriate steps to secure your own device and s99my login credentials.
Subject to applicable data protection law, you have the following rights in relation to your personal data held by s99my:
To exercise any of these rights, please contact s99my support via the details in Section 14. s99my will respond to valid requests within a reasonable period and, where required by applicable law, within 30 days of receipt.
Note that certain rights may be limited where s99my is required to retain data under its gaming licence, AML obligations, or other applicable legal requirements. s99my will explain any limitation when responding to your request.
The s99my Platform is strictly for adults aged 21 and above. s99my does not knowingly collect personal data from individuals under the age of 21. If s99my becomes aware that personal data has been collected from an individual under 21, the relevant account will be immediately suspended and the data will be deleted in accordance with applicable law.
If you believe that a person under 21 has registered an account on s99my, please contact us immediately at the address in Section 14 so that we can take appropriate action.
s99my operates under international gaming licensing and uses service providers located in various jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, s99my ensures that appropriate safeguards are in place to protect your data, including contractual protections consistent with applicable data protection standards.
By using the s99my Platform, you acknowledge and consent to the international transfer of your personal data as described in this Policy.
s99my reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform functionality. Where changes are material, s99my will notify registered players via the email address registered to their account or by displaying a prominent notice on the Platform prior to the changes taking effect.
The date at the top of this Policy ("Last Updated") indicates when the most recent revision was made. Continued use of the Platform following notification of changes constitutes your acceptance of the revised Privacy Policy.
For any questions, concerns, or requests relating to this Privacy Policy, or to exercise your data rights, please contact s99my via:
s99my will not ask for your account password in any privacy-related communication. Do not share your login credentials with anyone claiming to be s99my staff.
Six commitments behind every s99my player's data.
All data exchanged between your browser and s99my's servers is encrypted to banking-grade standard. Your credentials, payment details, and personal information travel securely.
s99my does not sell your personal data to third parties for marketing or advertising purposes. Your data is used to operate your account and comply with our licensing obligations — nothing more.
s99my operates under international gaming licensing which mandates strict data protection standards, including KYC verification, AML monitoring, and secure record-keeping for regulatory purposes.
You have the right to access, correct, delete, or export your personal data held by s99my. Submit any data rights request to s99my support and we'll respond within 30 days.
s99my does not store full payment card numbers. Payment credentials are handled exclusively by PCI-DSS compliant processors — Touch n Go eWallet, Boost, GrabPay, and banking partners.
s99my retains personal data only as long as required by our gaming licence and applicable law. When data is no longer needed, it is securely deleted or anonymised — not held indefinitely.
Your data is protected, your account is secured, and your privacy is respected. Explore s99my's casino, sportsbook, and slots — all in MYR for Malaysian players. 21+ only.
21+ only • Play Responsibly • International Gaming Licensed