At m99, we treat your privacy as a top priority. This document details how we collect, use, store, and protect your personal information while you use our platform.
This is the foundation of how m99 handles every piece of information you entrust to us.
All data transmitted between your browser and m99 servers is protected by 256-bit SSL encryption. Sensitive information such as banking details and KYC documents is never stored in plain text.
Only authorised personnel may access user data, and only for purposes strictly required. Every access is automatically logged and monitored to detect any unusual activity.
M99 never sells, rents, or trades your personal data to any third party for marketing purposes. Your data is used solely for platform operational purposes.
Our operations are fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). All our data collection and processing practices are aligned with local legal requirements.
You have the right to access, correct, delete, or object to the processing of your personal data. All requests will be processed within 14 business days at no additional charge.
Your personal data is retained only for as long as necessary for the stated purposes. Once the retention period expires or an account is closed, data will be securely deleted or anonymised.
This Privacy Policy describes m99's privacy practices regarding the collection and use of your personal information. Please read it carefully before using our platform. By registering or using any m99 service, you confirm that you have read and agreed to this Privacy Policy.
M99 is an online entertainment platform operating under the domain m99.bz, offering a wide range of services including Slot Games, Live Casino, Sports Betting, and table games to users in Malaysia. We understand that your trust is our most valuable asset, and protecting your personal data is a responsibility we take seriously.
This Privacy Policy outlines the types of information we collect, the purposes for collection, how we process and store data, who may receive your data, and the rights you hold regarding your personal data. This Policy applies to all m99 platform users, regardless of whether you are a casual visitor or a registered member.
Our operations comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related legislation. If you do not agree with any part of this policy, we advise you not to use the m99 platform.
M99 collects several categories of personal information depending on your interaction with our platform. This data collection is necessary to enable us to provide you with a secure, compliant, and high-quality service.
When you register an account, complete the KYC process, or contact our customer support, you may provide the following information:
| Data Categories | Example Information | Primary Purpose |
|---|---|---|
| Personal Identity | Full name, date of birth, IC or passport number | Identity Verification & KYC |
| Contact Information | Email address, phone number, residential address | Communication & Account Verification |
| Financial Information | Bank account number, bank name, account holder name | Deposit & Withdrawal Processing |
| Supporting Documents | Photos of ID card, bank statements, utility bills | Identity & Address Verification |
| Login Information | Username, password (encrypted) | Account Security |
When you browse or use the m99 platform, our systems automatically record the following technical information:
Security Note: Your password is never stored in plain text. We use a robust one-way hashing algorithm (bcrypt) to keep your password secure even in the event of an unexpected data breach.
Every piece of data we collect has a clear and lawful purpose. m99 does not process personal data without a solid legal basis — whether that is your consent, contractual necessity, a legal obligation, or our legitimate interests as a platform operator.
Your identity and contact data are used to create and manage your account, verify your identity through the KYC process, ensure only eligible individuals access the platform, and enable account recovery if you forget your password or experience access issues.
Your financial information is processed solely to facilitate deposits and withdrawals. m99 requires this data to verify bank account ownership, ensure withdrawals are processed to the correct account, and comply with financial reporting and Anti-Money Laundering (AML) requirements.
Technical data such as IP addresses, device information, and activity patterns are analysed by our security systems to detect suspicious activity, prevent unauthorised access, identify fraud attempts, and protect all platform users from external threats.
As a legally operating platform, m99 is required to retain certain records to satisfy regulatory obligations, comply with valid court orders, report suspicious transactions to the relevant authorities, and verify the age and eligibility of all users.
Activity and session data are used in aggregated and anonymised form to understand platform usage patterns, improve the interface and game functionality, personalise game recommendations based on your preferences, and continually enhance our customer support system.
We use your email and phone number to send important account notifications such as transaction confirmations, security alerts, updates to terms and policies, and promotional offers — but only if you have given consent to receive marketing communications.
M99 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data is only shared in the following limited and lawful circumstances:
Certain m99 platform functions are carried out with the assistance of third-party service providers who have undergone rigorous security assessments. These include payment processors that facilitate deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, and GrabPay, identity verification providers for the KYC process, and server infrastructure providers that store data with full encryption. All such providers are bound by strict data protection agreements and are only permitted to process your data for the stated purposes.
M99 may be required to disclose user data to authorities such as law enforcement agencies, tax authorities, or regulatory bodies in the event of:
In all such cases, m99 will endeavour to notify you in advance, unless such notification is prohibited by law or court order.
If m99 is involved in a merger, acquisition, or sale of business assets, user data may be transferred to the new entity. In such cases, we will notify all affected users via their registered email and in-platform notification at least 30 days before the transfer takes place.
Our Commitment: In all of the data sharing scenarios above, m99 ensures that an equivalent or higher level of data protection is maintained by the data recipient. We will not share your personal data without a lawful basis.
Protecting your data from unauthorised access, loss, or misuse is among m99's highest technical priorities. We implement multiple layers of security controls covering technical, organisational, and procedural aspects.
The technical security measures we implement include 256-bit SSL encryption for all data communications, AES-256 encryption for sensitive data in our database, two-factor authentication (2FA) for staff access, intrusion detection systems (IDS/IPS) operating 24/7, regular security audits by independent cybersecurity experts, and encrypted data backups stored at geographically separate locations.
While we take all reasonable precautions, no online system can guarantee 100% absolute security. In the event of a data security breach affecting your personal information, m99 will notify you and the relevant authorities within 72 hours of detecting the breach, in line with international best practices.
M99 uses cookies and similar tracking technologies to enhance the user experience, ensure smooth platform functionality, and understand aggregate usage patterns.
You can manage your cookie preferences through your web browser. Most modern browsers allow you to view, delete, or block cookies via the settings menu. Please note that disabling essential cookies may affect the functionality of the m99 platform and your overall user experience.
Under the Malaysian Personal Data Protection Act 2010 (PDPA) and m99's privacy policy, you hold the following rights regarding your personal data:
You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 business days.
If your data is inaccurate or incomplete, you have the right to request a correction, which will be carried out within 7 business days.
You may request the deletion of your personal data, subject to record-keeping obligations required by law.
You may object to the processing of your data for specific purposes, such as marketing communications, at any time.
You have the right to receive your personal data in a machine-readable format for transfer to another service provider.
Under certain circumstances, you may request that we restrict the processing of your data while an assessment or appeal is pending.
To exercise any of the above rights, please contact our privacy team via live chat or email at [email protected], stating the right you wish to exercise and your account details. We will verify your identity before processing any request to ensure the security of your data.
The m99 platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.
If we discover that personal data of a minor has been collected without the knowledge or consent of a parent or legal guardian, we will take immediate action to delete that data and close the account in question. If you believe your child has registered on our platform, please contact our support team immediately.
M99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or technological developments. Any amendments take effect immediately upon publication of the latest version on this page.
For changes deemed significant — such as changes to how we use your data or disclosures to new parties — we will notify users via their registered email or in-platform notification at least 14 days before the changes take effect. It is your responsibility to review this page periodically.
The "Last Updated" date at the top of this page indicates when this Privacy Policy was last revised. Your continued use of the m99 platform after any amendments constitutes full acceptance of the latest version of this policy.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the m99 privacy team is ready to assist you.
You can reach us through:
We are committed to addressing every privacy inquiry and complaint with seriousness and transparency. If you are not satisfied with our response, you have the right to escalate your complaint to Malaysia's Personal Data Protection Department (PDPD) as the relevant authority.
We're Here to Help: The m99 support team can be reached in both Malay and English. Do not hesitate to contact us if you need further clarification on how we protect your personal data.
Answers to the most frequently asked questions about data protection and privacy at m99.