Privacy Policy – mykad99

Last Updated: 1 January 2026  |  Applies to: mykad99.win

1. Who We Are

This Privacy Policy applies to the mykad99 Platform, accessible at mykad99.win, and to all services provided thereunder (collectively, the "Platform"). For the purposes of this Privacy Policy, "mykad99", "we", "us", or "our" refers to the operator of the mykad99 Platform. By accessing or using the mykad99 Platform, you acknowledge that you have read and understood this Privacy Policy.

mykad99 acts as the data controller in respect of personal data collected through the Platform. As data controller, mykad99 is responsible for determining the purposes and means of processing your personal data.

2. Data We Collect

mykad99 collects the following categories of personal data from registered players and, where applicable, site visitors:

• Identity Data: Full legal name, date of birth, gender, and copies of identity documents submitted for Know Your Customer (KYC) verification, including MyKad (Malaysian national identification card) or passport.
• Contact Data: Email address, Malaysian mobile phone number, and residential address (including postcode and state).
• Financial Data: Bank account details (for withdrawals), e-wallet identifiers (Touch 'n Go eWallet, DuitNow, Boost), transaction history, deposit and withdrawal records, and wallet balance information.
• Account Data: Username, encrypted password, account creation date, login history, session timestamps, and security settings including two-factor authentication status.
• Gaming Data: Bets placed, game outcomes, wagering history, bonus claims and usage, game preferences, and responsible gaming tool settings (deposit limits, self-exclusion status).
• Technical Data: IP address, browser type and version, device type, operating system, screen resolution, referring URL, and time zone.
• Behavioural Data: Pages visited on the Platform, time spent on each page, click patterns, game lobby navigation, and search queries within the Platform.
• Communications Data: Records of live chat interactions with mykad99 customer support, email correspondence, and any feedback or dispute submissions.

3. How We Collect Data

mykad99 collects personal data through the following means:

• Direct provision: Data you provide when registering a mykad99 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or submitting a responsible gaming request.
• Automated technical collection: Data collected automatically when you access the mykad99 Platform, including through cookies, server logs, and analytics tools.
• Third-party sources: Data received from payment processors (for transaction verification), identity verification service providers, and, where applicable, fraud prevention databases.

4. How We Use Your Data

mykad99 uses the personal data it collects for the following purposes:

• To create, verify, and maintain your mykad99 account and login credentials.
• To process deposits and withdrawals in MYR via supported Malaysian payment methods including Maybank, CIMB, Public Bank, Touch 'n Go eWallet, DuitNow, and Boost.
• To conduct identity verification (KYC) and age verification in compliance with applicable gaming regulations. mykad99 is strictly an 18+ platform with a 21+ access policy enforced on all accounts.
• To administer bonuses, promotions, and loyalty programme benefits applicable to your mykad99 account.
• To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct.
• To provide customer support and resolve disputes related to your mykad99 account or gaming transactions.
• To enforce our Terms & Conditions and comply with legal and regulatory obligations.
• To administer responsible gaming tools, including deposit limits, session monitoring, and self-exclusion requests.
• To improve the mykad99 Platform through analysis of aggregated and anonymised usage data.
• To send service-related communications to your registered email address or mobile number, including transaction confirmations, security alerts, and account notifications. mykad99 will only send promotional communications where you have expressly opted in to receive them.

5. Legal Basis for Processing

mykad99 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to operate your mykad99 account, process financial transactions, and deliver platform services as described in our Terms & Conditions.
• Legal obligation: Processing required to comply with applicable gaming regulations, anti-money laundering obligations, and identity verification requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where these interests are not overridden by your individual rights.
• Consent: Processing for optional promotional communications, where you have provided explicit opt-in consent.

6. Data Sharing

6.1 mykad99 does not sell, rent, or trade your personal data to any third party. Data is shared only in the following limited circumstances and only to the extent strictly necessary:

• Payment processors: Financial data is shared with licensed payment service providers to process MYR deposits and withdrawals via Touch 'n Go eWallet, DuitNow, Maybank, CIMB, and other supported channels.
• Identity verification providers: Identity data is shared with KYC and age verification service providers to comply with gaming authority requirements.
• Game software providers: Gaming data (session details, bet amounts) is shared with licensed game suppliers — including Evolution Gaming, Pragmatic Play, and others — for game delivery and outcome verification purposes.
• Fraud prevention and security: Technical and financial data may be shared with fraud detection services or law enforcement authorities where there is a legitimate legal basis to do so.
• Legal compliance: mykad99 may disclose personal data to regulatory bodies, courts, or government authorities where required by applicable law or in response to a valid legal process.

6.2 All third parties with whom mykad99 shares personal data are contractually required to process that data only for the specified purpose and to maintain appropriate security standards.

7. Cookies & Tracking Technologies

7.1 The mykad99 Platform uses cookies and similar tracking technologies to ensure the proper functioning of the site, maintain your logged-in session, and collect anonymised analytics data to improve the user experience.

7.2 The following categories of cookies are used on the mykad99 Platform:

• Essential cookies: Required for core Platform functionality including session management and mykad99 login authentication. These cannot be disabled.
• Analytics cookies: Used to collect anonymised data about how players navigate the mykad99 Platform — which pages are visited most, session duration, and navigation paths. This data is used in aggregate form only and does not identify individuals.
• Preference cookies: Store your Platform preferences, such as language or display settings, to improve your mykad99 experience across sessions.

7.3 You may adjust your browser settings to decline non-essential cookies. Note that disabling certain cookies may affect the functionality of some Platform features.

8. Data Retention

8.1 mykad99 retains personal data for as long as your account remains active and for a period thereafter as required by applicable gaming regulations and anti-money laundering obligations. Retention periods vary by data category:

• Account and identity data is retained for a minimum of five (5) years following account closure.
• Financial transaction records are retained for a minimum of seven (7) years for regulatory compliance.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Technical and log data is retained for up to twelve (12) months unless retention is required for ongoing fraud investigations.

8.2 Where data is no longer required for the purposes for which it was collected, mykad99 will securely delete or anonymise it.

9. Data Security

mykad99 implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and mykad99 servers.
• Encrypted storage of sensitive personal data including passwords (stored as salted hashes — never in plaintext) and financial identifiers.
• Access controls restricting internal access to personal data on a strict need-to-know basis.
• Regular security audits and penetration testing of Platform infrastructure.
• Two-factor authentication (2FA) available to all registered mykad99 accounts as an additional layer of login protection.

Notwithstanding the above, no data transmission over the internet can be guaranteed as completely secure. mykad99 cannot warrant the absolute security of data transmitted to or from the Platform and accepts no liability for unauthorised interception beyond what is within our reasonable control.

10. Your Rights

Subject to applicable law, you have the following rights in respect of the personal data mykad99 holds about you:

• Right of access: You may request a copy of the personal data mykad99 holds about your account.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: In certain circumstances you may request deletion of your personal data, subject to our legal retention obligations.
• Right to restrict processing: You may request that mykad99 restricts the processing of your personal data in specific circumstances.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request that your data be provided in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., promotional communications), you may withdraw that consent at any time.
• Right to object: You may object to processing carried out on the basis of legitimate interests, subject to mykad99's overriding legitimate grounds.

To exercise any of the above rights, please contact mykad99 customer support via live chat or email. mykad99 will respond to all valid requests within thirty (30) days. Verification of identity will be required before any data access or deletion request is processed.

11. Children's Privacy

The mykad99 Platform is strictly for adults aged 21 and above. mykad99 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person below this age threshold, the account will be immediately suspended and all associated data will be deleted. If you believe a minor has registered on the mykad99 Platform, please notify us immediately via [email protected].

12. Policy Updates

mykad99 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform functionality. When material changes are made, mykad99 will notify registered players by email to their registered address or via a prominent notice on the Platform. The effective date of the current version is displayed at the top of this page. Continued use of the mykad99 Platform following notification of any update constitutes acceptance of the revised Privacy Policy.

13. Contact Us

For any queries, concerns, or requests related to this Privacy Policy or the personal data mykad99 holds about you, please contact our Data Protection team via:

[email protected]

Alternatively, you may contact us through the live chat function available on the mykad99 Platform, which is staffed from 10:00 AM to 2:00 AM MYT, seven days a week.

This Privacy Policy was last reviewed and updated on 1 January 2026. The most current version is always available at mykad99.win/privacy-policy.