vip99 Privacy Policy for Malaysian Users

1. Introduction and Scope

This Privacy Policy governs personal information processed through the vip99 website, account services, mobile-optimised interfaces, customer support channels, casino categories, sports betting areas and payment features. References to “vip99”, “we”, “us” or “our” mean the operator responsible for the relevant processing activity. References to “user” or “you” mean an individual who visits or uses vip99.

The policy is written for Malaysian users, including people accessing vip99 from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other locations. Where applicable, vip99 seeks to handle personal information consistently with relevant data protection principles, including those reflected in Malaysia’s Personal Data Protection Act 2010.

Some information is necessary to create or secure an account, verify identity, process a transaction or comply with a lawful requirement. If required information is not provided, vip99 may be unable to complete registration, approve a withdrawal, investigate a security issue or offer a particular feature.

2. Information We Collect

Depending on how a user interacts with vip99, the following categories may be collected:

vip99 may receive payment confirmation from Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank or another method selected by the user. vip99 does not require unrestricted access to a user’s e-wallet or bank account. Payment providers may process information under their own privacy terms.

3. How Information Is Collected

Information may be collected directly when a user creates an account, submits verification material, deposits MYR, requests a withdrawal, changes an account limit or contacts vip99 support. Users are responsible for ensuring that the information supplied to vip99 is accurate and current.

Technical and activity information may be generated automatically when a user loads a page, signs in, selects an EPL or Liga Super Malaysia market, opens a casino category or changes an account setting. vip99 may also receive limited information from payment processors, identity verification services, fraud prevention providers and other service partners acting under appropriate instructions.

4. Purposes of Data Processing

vip99 may process personal information for the following purposes:

• Creating, maintaining and authenticating a vip99 account.
• Confirming that a user is aged 21 or above and eligible to access the platform.
• Completing KYC, payment ownership and security checks.
• Processing MYR deposits and withdrawals through available payment routes.
• Recording wagers, game activity, account balances and transaction history.
• Preventing fraud, collusion, account takeover, money laundering and prohibited conduct.
• Operating deposit limits, cooling-off periods, self-exclusion and other responsible gambling controls.
• Responding to account enquiries, complaints and technical support requests.
• Maintaining platform performance, troubleshooting errors and improving usability.
• Meeting applicable legal obligations and responding to valid official requests.

5. Grounds for Processing

Depending on the activity and applicable requirements, vip99 processes information because it is necessary to provide requested account services, fulfil contractual obligations, comply with legal duties, protect legitimate operational interests or respond to user consent where consent is the appropriate basis.

Legitimate interests may include preventing fraud, securing accounts, maintaining accurate transaction records, improving technical performance and protecting users from gambling-related harm. vip99 considers the nature of the information and the likely effect on users before relying on such interests.

6. Cookies and Similar Technologies

vip99 may use cookies, local storage and similar technologies to maintain sessions, remember settings, measure page performance and protect accounts. Essential technologies support functions such as secure sign-in, language preferences, transaction continuity and fraud detection.

Analytics technologies may help vip99 understand general usage patterns, such as which payment guide or game category is frequently viewed. Where user choice is required, optional technologies should not be enabled until the appropriate preference has been recorded. Browser settings may allow users to block or delete cookies, although doing so may prevent parts of vip99 from working correctly.

7. Disclosure and Service Providers

vip99 does not sell personal information. Information may be shared only where reasonably necessary with selected categories of recipient, including:

• Payment processors and participating financial institutions that complete deposits, withdrawals or transaction checks.
• Identity verification and fraud prevention services that support KYC and account security.
• Hosting, infrastructure, security and technical support providers that maintain vip99 systems.
• Professional advisers, auditors or insurers where access is necessary for legitimate business purposes.
• Public authorities or enforcement bodies where disclosure is legally required or necessary to protect rights and safety.
• A successor organisation involved in a genuine corporate restructuring, subject to suitable confidentiality safeguards.

Service providers are expected to use information only for authorised purposes and to apply appropriate confidentiality and security measures. vip99 seeks to limit shared information to what each recipient requires for its assigned function.

8. International Data Transfers

Some vip99 service providers or technical systems may operate outside Malaysia. This means personal information may be processed in a jurisdiction with different data protection rules. Where an international transfer occurs, vip99 seeks to use appropriate contractual, technical or organisational safeguards and to limit the information transferred.

9. Data Retention

vip99 retains personal information for as long as reasonably necessary to operate an active account and fulfil the purposes described in this policy. After an account closes, certain identity, transaction, dispute, exclusion and security records may be retained to satisfy legal obligations, defend claims, prevent fraud or ensure that a self-exclusion request remains effective.

Retention periods vary according to information type, sensitivity and operational need. When information is no longer required, vip99 will seek to delete, anonymise or securely isolate it. Anonymised statistics that no longer identify a user may be retained for analysis and platform improvement.

10. Information Security

vip99 uses proportionate safeguards intended to protect information from unauthorised access, accidental loss, misuse, alteration or disclosure. Measures may include access controls, encrypted transmission, system monitoring, staff confidentiality requirements, secure backups and periodic security reviews.

No online service can promise absolute security. Users also play an important role by choosing a unique password, protecting one-time security codes, checking account activity and avoiding unsecured public Wi-Fi. A suspected account compromise should be reported to vip99 promptly.

11. User Rights and Requests

Subject to applicable law and valid exemptions, a user may request access to personal information held by vip99, ask for inaccurate information to be corrected, withdraw an optional consent or object to selected processing activities.

vip99 may request identity verification before acting on a privacy request. This protects account information from disclosure to an unauthorised person. Some requests may be limited where records must be retained for payment reconciliation, fraud prevention, legal compliance, dispute handling or self-exclusion enforcement.

A privacy request should clearly identify the account concerned and the action being requested. vip99 aims to acknowledge a complete request within a reasonable period and will explain if additional verification or information is required.

12. Communications and Preferences

vip99 may send essential account messages concerning security, verification, payments, material policy changes or responsible gambling controls. These operational messages cannot always be disabled while an account remains active.

Promotional communication, where offered, should respect recorded user preferences and applicable requirements. A user may request that optional marketing messages stop. A marketing preference does not prevent vip99 from sending necessary security or service notices.

13. Age Restrictions

vip99 is available only to adults aged 21 and above. vip99 may request proof of age during registration, before a withdrawal or whenever eligibility requires confirmation. If information indicates that a person is below the required age, vip99 may restrict the account, investigate the activity and delete information where retention is not legally or operationally required.

Parents and guardians should use appropriate device controls and avoid saving gambling account credentials on shared devices. Anyone who believes a person below 21 has supplied information to vip99 should notify the support team.

14. Changes to This Privacy Policy

vip99 may revise this Privacy Policy to reflect changes in services, technology, security practices or applicable requirements. The revised version will display an updated date. Where a change materially affects the way existing information is used, vip99 may provide an additional account or platform notice where reasonably appropriate.

Users should review this page periodically. Continued use of vip99 after an update means the revised policy will apply to subsequent processing, subject to any consent or notice requirement imposed by applicable law.

15. Contact Us

Questions about this Privacy Policy, personal information or a privacy request may be directed to the vip99 support team. To protect user information, vip99 may require account verification before discussing specific records.

Website email: [email protected]

The email address is displayed as plain text for reference. A request should include enough information to identify the matter but should not include a password, complete payment card number or one-time security code.