Privacy & Security

Privacy Policy 99md — Your Personal Data Protection

Your privacy is our priority. This document clearly explains how 99md collects, uses, stores, and protects your personal data in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last Updated: 1 January 2026

Six Ways 99md Protecting Your Data

From data encryption to strict access controls, here is the comprehensive approach we take to keep your personal information secure at all times.

256-Bit SSL Encryption

All data transmitted between your device and 99md's servers is protected by 256-bit SSL encryption — the same security technology used by leading banking institutions in Malaysia. No one can intercept or read your information during transmission.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered access controls, advanced firewalls, and automated intrusion detection systems. Access to user databases is restricted and continuously monitored by our security team.

Strict Access Controls

Only 99md staff who genuinely require access to your data to perform their authorised duties are permitted to do so — and only after passing a thorough background check. All internal access is logged and periodically audited to ensure compliance.

No Sale of Data to Third Parties

99md has never and will never sell, rent, or trade users' personal data to third parties for marketing purposes. Your data belongs to you — we only use it to deliver better services to you directly.

Full Malaysia PDPA Compliance

The 99md Privacy Policy is drafted and updated regularly to ensure full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We fully respect the rights of data subjects as provided under Malaysian law.

Immediate Breach Notification

In the event of any security incident that may involve your personal data, 99md is committed to notifying affected users in a timely manner and taking appropriate remedial action without delay.

1

Introduction

99md (hereinafter referred to as "we", "the platform" or "99md.vu") values the trust you place in us when using our online sports betting and casino services. This Privacy Policy explains in detail how we manage your personal data from the moment you register until you stop using our platform.

By registering for or using the 99md platform, you consent to the processing of your personal data as described in this Privacy Policy. If you do not agree, you are advised not to use our platform. This Policy should be read together with Terms and Conditions 99md, which forms part of the overall agreement between you and us.

Policy Scope: This Privacy Policy applies to all services offered by 99md through the 99md.vu website, mobile app (where applicable), and all our official communication channels including customer support email.

2

Personal Data We Collect

We collect your personal data through various means — directly from you, automatically as you use our platform, and in some cases, from trusted third-party sources. The following are the categories of data we collect:

Data Category Examples of Information Collection Method
Identity Data Full name, date of birth, MyKad/passport number Registration & KYC
Contact Data Email address, phone number, residential address Registration
Financial Data Bank account details, deposit & withdrawal transaction records Payments & KYC
Technical Data IP address, device type, web browser, session data Automatic (server logs)
Usage Data Betting history, games played, login patterns Automatic (platform)
Communication Data Live chat conversation records, customer support emails Direct communications

Sensitive Data: 99md does not collect sensitive data such as health information, religious beliefs, or political views unless required by law or for specific compliance purposes, of which we will notify you in advance.

3

How We Use Your Personal Data

99md uses your personal data only for legitimate purposes directly related to the provision of our services. All data processing has a clear legal basis under Malaysia's PDPA. The primary purposes for using your data are as follows:

  • Account Management: Create, verify, and maintain your user account, including the mandatory KYC process.
  • Transaction Processing: Process deposits, withdrawals, and payments related to your wagering activity securely and accurately.
  • Legal Compliance: Fulfil our obligations under Malaysia's PDPA, anti-money laundering (AML) laws, and other regulatory reporting requirements.
  • Platform Security: Detect and prevent fraud, money laundering, account abuse, and other unlawful activities.
  • Customer Support: Address your enquiries, complaints, and support requests efficiently and effectively.
  • Service Communications: Send important account-related notifications, terms updates, and relevant security information.
  • Product Improvement: Analyse usage patterns in aggregate and anonymised form to improve the user experience and develop new features.
  • Marketing (with consent): Send promotional information, special offers, and updates on new games — only where you have given explicit consent.
4

Data Sharing with Third Parties

99md does not sell or rent your personal data to any third party. However, in certain limited circumstances, we may share your data with the following categories of parties, and only to the extent necessary for the stated purposes:

  • Payment Service Providers: Payment processors and e-wallet providers used to handle your deposits and withdrawals — subject to strict confidentiality agreements.
  • KYC Verification Providers: Trusted third-party identity verification services that assist us in conducting eligibility checks and AML compliance.
  • Technology Service Providers: Cloud infrastructure and technology partners that help us operate the platform — bound by strict data processing agreements.
  • Legal Authorities: Law enforcement agencies, regulatory bodies, or courts when required by applicable law.

Third-Party Protections: All third parties receiving 99md user data are required to sign data processing agreements compliant with Malaysia's PDPA and are only permitted to use that data for specified purposes.

5

Cookies & Tracking Technologies

99md uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. We use several types of cookies:

  • Essential Cookies: Required for core platform functions such as login sessions, security controls, and language preferences. These cookies cannot be disabled.
  • Performance Cookies: Collect anonymised information on how you use our platform to help us improve performance and usability.
  • Functional Cookies: Remember your preferences such as display settings, preferred language, and login details to streamline repeat use.
  • Analytics Cookies: Helps us understand aggregate user behaviour for continuous product improvement.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of our platform.

6

Data Security Measures

We take data security extremely seriously. 99md implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure:

  • Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
  • Encryption at rest for all sensitive information stored in our databases.
  • Two-factor authentication (2FA) is available and encouraged for all user accounts.
  • Regular internal and external security audits conducted by certified cybersecurity experts.
  • Mandatory data security training programme for all staff with access to user data.
  • Security incident detection and response system operating 24/7.

Shared Responsibility: The security of your account also depends on your own actions. We encourage you to use a strong and unique password, never share your login credentials with anyone, and always log out after using a shared device.

7

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by 99md. To exercise any of these rights, you may contact us via our support email:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will process your request within 21 business days.

Right to Rectification

If your data is inaccurate or outdated, you have the right to request a correction. You can update most information directly in your account settings.

Right to Erasure

You may request the deletion of your personal data under certain circumstances, subject to any applicable legal retention obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time without providing any reason.

Right to Data Portability

You may request your data in a structured, machine-readable format for transfer to another service provider of your choice.

Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your data while awaiting verification or a response to your objection.

8

Data Retention Period

99md retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by law. The following are the retention period guidelines we adhere to:

  • Active Account Data: Retained for the duration your account remains active, plus any additional period required for audit and legal compliance purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years after the transaction takes place, in line with Malaysia's financial and AML legal requirements.
  • KYC Documents: Retained for a minimum of 5 years after the business relationship ends or as required by applicable law.
  • Support Communication Logs: Retained for 2 years after the last interaction for reference and service improvement purposes.
  • Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

When your data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise it using industry-standard methods.

9

Amendments to Privacy Policy

99md reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to our services. Any material amendments will be communicated to you through:

  • In-platform notification on 99md the next time you log in.
  • An email notification to your registered email address at least 14 days before the changes take effect.
  • Updates the "Last Updated" date shown at the top of this page.

Continued use of the 99md platform after the effective date of any changes constitutes your acceptance of the amended Privacy Policy. If you disagree with the amendments made, you have the right to close your account before the changes take effect.

Review Regularly: We encourage you to review this Privacy Policy periodically to stay informed about how we manage your personal data. The latest version is always available at 99md.vu.

10

Contact Us About Privacy

If you have any questions, concerns, or wish to exercise any of your privacy rights, the 99md Data Protection Officer (DPO) team is ready to assist you. Please reach us through the following channels:

  • Privacy Email: [email protected] — dedicated to enquiries regarding personal data protection.
  • Live Chat: Available 24/7 on the 99md platform for general enquiries including privacy issues.
  • FAQ: Visit page FAQ us for answers to the most frequently asked privacy-related questions.

We are committed to responding to all privacy-related enquiries within 14 business days. For more complex requests such as data access or deletion, the response period may take up to 21 business days.

Complaints to Regulatory Authorities: If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Personal Data Protection Department (JPDP) of Malaysia, the regulatory body overseeing PDPA compliance in Malaysia.

Your Privacy Is Protected, Ready to Start Playing?

Now that you understand how 99md protects your personal data, create an account today and enjoy a safe, fair, and responsible wagering experience alongside hundreds of thousands of Malaysian users who have already trusted us.

Bahasa Melayu