At 99ply, we take your privacy seriously. This Privacy Policy explains what personal data we collect from Malaysian players and other users of our platform, why we collect it, how we use and protect it, and what rights you have over your information. Please read it alongside our Terms & Conditions.
99ply ("the Company", "we", "us", "our") operates the online sportsbook and live casino platform accessible at 99ply.cam ("the Platform"). In doing so, we process personal data relating to players, prospective players, and visitors to the Platform ("you", "your", "the Data Subject").
This Privacy Policy sets out in clear terms how we handle that personal data — from collection through to deletion — in accordance with applicable data protection law and international best practice. We are committed to processing your data lawfully, fairly, and transparently, and to maintaining appropriate technical and organisational measures to protect it against unauthorised access, loss, or misuse.
By registering an Account on the Platform, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing described herein to the extent that consent is the applicable legal basis for that processing.
For the purposes of this Privacy Policy, the following terms have the meanings stated below:
The categories of Personal Data we collect and hold about you depend on how you interact with the Platform. The following table sets out the main data categories and examples:
| Data Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad / passport / driver's licence details |
| Contact Data | Email address, mobile phone number, residential address (including Malaysian city references where provided) |
| Account Data | Username, hashed password, account creation date, last login timestamp, account status |
| Financial Data | Deposit and withdrawal history, MYR balance, payment method identifiers (e-wallet IDs, bank account last digits), cryptocurrency wallet addresses |
| Transaction Data | Bet history, game session records, win/loss summaries, bonus claims, rollover progress |
| Technical Data | IP address, device type, browser type and version, operating system, session duration, referring URL |
| KYC Documents | Scanned identity documents, proof-of-address documents, source-of-funds declarations |
| Communications Data | Records of live chat conversations, support ticket history, email correspondence with 99ply |
| Behavioural Data | Platform navigation patterns, game preferences, odds browsing history, responsible gambling tool usage |
The majority of Personal Data we hold is provided directly by you when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in promotions, or use responsible gambling tools. This includes all identity, contact, and KYC data.
When you visit or use the Platform, we automatically collect certain technical and behavioural data through server logs, cookies, and similar technologies. This includes your IP address, device identifiers, browser information, and navigation behaviour. This data is collected whether or not you hold a registered Account.
We may receive data about you from third-party sources, including:
We process your Personal Data only for specified, explicit, and legitimate purposes. The table below outlines each primary processing purpose and the legal basis on which we rely:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration, login authentication, and account management | Performance of contract |
| Processing deposits and withdrawals in MYR via Malaysian payment channels | Performance of contract |
| Identity verification and KYC compliance | Legal obligation (anti-money laundering requirements) |
| Fraud detection, prevention, and risk management | Legitimate interests / legal obligation |
| Customer support and complaint handling | Performance of contract |
| Responsible gambling monitoring and intervention | Legal obligation / legitimate interests |
| Marketing communications (where opted in) | Consent |
| Platform analytics and performance optimisation | Legitimate interests |
| Compliance with regulatory and licensing obligations | Legal obligation |
We do not sell your Personal Data to any third party under any circumstances. We do not share your data with third parties for their own marketing purposes without your explicit prior consent.
We may share your Personal Data with the following categories of recipients, strictly limited to what is necessary for each stated purpose:
Transaction data is shared with Malaysian payment processors — including but not limited to Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank — solely to facilitate deposits and withdrawals. These providers operate under their own regulatory frameworks and privacy obligations.
KYC Data may be transmitted to third-party identity verification services to validate documents and confirm age eligibility. These providers act as Data Processors under binding contractual terms.
Where required by our licensing obligations or anti-money laundering procedures, we may share data with fraud prevention databases and screening services operated by specialist third parties.
We may disclose Personal Data to law enforcement, regulatory authorities, or courts where we are legally required to do so, where disclosure is necessary to comply with a legal obligation, or where we have a good-faith belief that disclosure is required to protect the rights, safety, or property of 99ply, our players, or the public.
In the event of a merger, acquisition, or sale of all or part of the Company's business, your Personal Data may be transferred to the successor entity, subject to equivalent data protection commitments.
As an internationally licensed operator, 99ply may process and store your Personal Data in countries outside Malaysia. Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection, we implement appropriate safeguards to protect your data, which may include:
By using the Platform, you acknowledge that your data may be transferred internationally and consent to such transfer where your consent is the applicable legal basis for the underlying processing activity.
We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:
| Data Category | Indicative Retention Period |
|---|---|
| Account and identity data (active accounts) | Duration of account plus 5 years after closure |
| KYC documents | 5 years from account closure (AML obligation) |
| Financial transaction records | 7 years from the date of each transaction |
| Customer support communications | 3 years from the date of last interaction |
| Technical / server log data | 13 months on a rolling basis |
| Marketing preferences and opt-out records | 5 years from the date of opt-out |
| Self-exclusion records | Indefinitely (to prevent circumvention) |
Following expiry of the applicable retention period, Personal Data will be securely deleted or anonymised so that it can no longer be attributed to you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
Cookies are small text files stored on your device when you visit the Platform. They enable the Platform to recognise your device, maintain your session, and collect analytics data about how the Platform is used. Similar technologies including web beacons, pixel tags, and local storage may also be used.
You may manage or withdraw consent for non-essential cookies at any time through your browser settings or through the cookie preference controls available on the Platform. Note that disabling certain cookies may affect the functionality and performance of the Platform.
Subject to applicable data protection law and certain conditions, you have the following rights in respect of your Personal Data held by 99ply. To exercise any of these rights, please contact us as described in Section 14.
99ply implements industry-standard technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:
While we take all reasonable steps to protect your Personal Data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and we encourage you to maintain the security of your Account credentials and to notify us immediately of any suspected unauthorised access.
The Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, use, or retain Personal Data of any individual under 21 years of age.
All new accounts are subject to mandatory age and identity verification before any deposit, wager, or bonus claim is processed. Where we become aware, or have reasonable grounds to suspect, that a registered account belongs to an individual under 21, we will immediately suspend the account, void all associated bets, withhold any winnings pending investigation, and report the matter to relevant authorities where required.
If you believe that a minor has accessed our Platform using credentials that misrepresent their age, please contact us immediately at the address provided in Section 14.
We reserve the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When we make material changes, we will notify you by displaying a prominent notice on the Platform and, where applicable, by sending an email notification to the address registered to your Account.
The "Last updated" date at the top of this page reflects the date on which the most recent version came into effect. We encourage you to review this Privacy Policy periodically. Continued use of the Platform following the publication of any amendment constitutes your acceptance of the revised policy.
To submit a data subject access request, request rectification or erasure, withdraw consent, or raise any other privacy-related query, please contact our Data Protection team through the following channels:
To protect your privacy and the security of your Account, we may need to verify your identity before actioning any data subject request. We will ask you to provide information sufficient to confirm you are the Account holder.
If you believe we have handled your Personal Data in a manner that is inconsistent with this Privacy Policy or applicable data protection law, we encourage you to contact us in the first instance so that we may investigate and resolve your concern. We will acknowledge all privacy complaints within 5 business days and aim to provide a substantive response within 20 business days.
If you remain dissatisfied with our response, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction governing our processing activities.
Six core commitments that define how 99ply handles the personal data of every player on our platform.
Your Personal Data is never sold, rented, or traded to any third party for their own commercial or marketing purposes, under any circumstances.
All data transmitted between your device and our servers is protected by TLS 1.2+ encryption. Sensitive stored data — including KYC documents and payment identifiers — is encrypted at rest.
We keep your data only as long as necessary. Most data is deleted or anonymised within a defined window after account closure, unless a legal obligation requires longer retention.
Access, correct, export, or request deletion of your Personal Data at any time. Our team responds to all verified data subject requests within 30 calendar days.
Data shared with third parties — including Malaysian payment processors such as Touch 'n Go eWallet, Boost, and DuitNow — is limited strictly to what is necessary to fulfil each service.
We do not knowingly collect data from individuals under 21 years of age. All new accounts are verified for age eligibility before any betting or gaming activity is permitted.
A quick reference to the eight data rights you hold as a 99ply player. Contact us at any time to exercise any of these.
Request a copy of all Personal Data we hold about you.
Correct inaccurate or incomplete data we hold about you.
Request deletion of your data where no legal obligation requires retention.
Ask us to pause processing your data while accuracy or lawfulness is assessed.
Receive your data in a structured, machine-readable format for transfer.
Object to processing based on legitimate interests or for direct marketing.
Withdraw any consent given for data processing at any time without penalty.
Request human oversight of any decision made about you by automated systems.
We believe transparency builds trust. Now that you've read our Privacy Policy, explore 99ply with confidence — knowing exactly how your data is handled and what control you have over it. For players aged 21 and above only.
Questions about your data? Contact us via live chat 24/7 or at [email protected]. Also see our Terms & Conditions and Responsible Gambling pages. Gambling can be addictive — play responsibly. 21+ only.