Official Policy

Mykad99 Privacy Policy – Data Protection Malaysian Member Personal

Mykad99 takes your privacy seriously. This Privacy Policy clearly explains how we collect, use, store and protect your personal information when you use our online betting platform. We are committed to full transparency in how we handle member data.

Last Updated: 1 January 2026
SSL
256-bit Encryption
PDPA
Malaysia Compliance
0
Third-Party Data Sales
24/7
Secure Monitoring
12
Policy Sections
AES-256
Encryption Standards
PDPA
Data Protection Act
Jan 2026
Effective Date

Mykad99's Privacy Commitment to Malaysian Members

Six core principles that underpin how personal data is handled on the mykad99 platform

End-to-End 256-Bit SSL Encryption

All data transmitted between your device and mykad99's servers is protected by 256-bit SSL encryption — the same security standard used by major banking institutions such as Maybank and CIMB. This covers login credentials, payment details via Touch 'n Go, DuitNow, and FPX, as well as all account activity.

No Sale of Data to Third Parties

Mykad99 has never sold, rented, or transferred members' personal data to any third party for marketing or commercial purposes, and we never will. Your data belongs to you — we use it solely for the platform operational purposes stated in this Privacy Policy, and nothing beyond that.

Compliance with the Personal Data Protection Act (PDPA)

Mykad99 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means we collect only the data that is necessary, use it solely for the stated purposes, store it securely, and delete it when it is no longer needed. PDPA compliance is not merely a legal obligation — it is a core value of mykad99.

Your Data, Your Control

As a mykad99 member, you have the full right to access your personal data, request corrections to inaccurate information, and under certain circumstances request the complete deletion of your data. We believe you should remain in full control of your own personal information.

Trained Staff & Restricted Access

Access to mykad99 members' personal data is restricted to staff who require that information to carry out legitimate operational duties. All employees involved in handling personal data are trained in privacy procedures and bound by strict confidentiality agreements.

Immediate Data Breach Notification

In the event of any security incident that may compromise members' personal data, mykad99 is committed to notifying affected members as promptly as practicable, and no later than 72 hours after we become aware of the incident, in line with data protection best practices.

01

Introduction & Scope of Privacy Policy

Policy Foundations

This Privacy Policy ("Policy") is published by mykad99 ("we", "the platform" or "mykad99") and applies to all individuals who access, register for or use the mykad99 online betting platform, accessible via mykad99.site and all subdomains, mobile applications and related services that we operate.

We understand that your trust is mykad99's most valuable asset. When you register an account, make a deposit via Touch 'n Go eWallet, DuitNow or FPX, or simply browse our website — you are entrusting us with your personal information. We take that responsibility seriously, and this Privacy Policy is written to explain transparently how we honour that trust.

Quick Summary: mykad99 only collects data that is necessary for the platform to operate. We do not sell your data to anyone. You have the right to know what data we hold about you, and you may request corrections or deletion under certain circumstances. Your data is protected with 256-bit SSL encryption.

This Policy should be read together with Terms & Conditions and policies Responsible Gaming mykad99. By using the mykad99 platform, you agree to the data collection and usage practices set out in this Policy.

02

Types of Personal Data Collected

Data Categories

Mykad99 collects various types of personal data depending on how you interact with our platform. The following are the main categories of data we collect:

Data Categories Example Information Requirements
Identity Data Full name, MyKad/passport number, date of birth, gender Mandatory (KYC)
Contact Data Phone number, email address, residential address Mandatory
Financial Data Bank account number, account holder name, MYR transaction records Mandatory (payment)
Technical Data IP address, device type, web browser, operating system, approximate location data Automatic
Usage Data Betting records, games played, deposit & withdrawal history Automatic
Communication Data Live Chat session records, support emails, feedback Where applicable

Mykad99 does not collect sensitive data categories such as health information, religious beliefs, political views, or biometric data, unless specifically stated and with your prior consent.

03

How We Collect Personal Data

Collection Methods

Mykad99 collects your personal data through several different methods, depending on how you interact with the platform:

  • Direct account registration: When you register a new mykad99 account, you provide us directly with basic information such as your name, phone number and email address.
  • KYC (Know Your Customer) Process: When you complete identity verification prior to your first withdrawal, you will submit a copy of your MyKad, passport or other supporting documents to mykad99.
  • Financial transactions: Every time you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, the transaction details are automatically recorded by the mykad99 system.
  • Platform usage: Your activity on the mykad99 platform – from Liga Super and EPL Sports Betting records to live casino roulette sessions and lottery ticket purchases – is automatically logged for operational and security purposes.
  • Devices and technologies: When you access mykad99, technical information such as your IP address, device type and browser is automatically collected through standard web mechanisms including cookies and server logs.
  • Communication with the support team: When you contact the mykad99 support team via Live Chat or email, records of those communications are retained for reference and service improvement purposes.
  • Authorised third parties: In certain circumstances, mykad99 may receive identity-related information from payment service providers for the purpose of transaction verification.

mykad99 does not purchase or obtain personal data lists from data brokers or any third-party sources unrelated to our platform operations.

04

Purpose of Personal Data Use

Basis for Processing

Mykad99 only uses your personal data for legitimate, stated purposes as outlined below. We will not process your data for any other purpose without notifying you in advance or obtaining your consent where required:

  • Account management: Creating, maintaining, and managing your mykad99 account, including password recovery and profile information updates.
  • Transaction processing: Processing deposits and withdrawals you make via supported Malaysian payment methods, ensuring funds are directed to the correct destination.
  • Identity verification (KYC): Meeting legal requirements related to anti-money laundering and age verification to ensure that only eligible individuals use the mykad99 platform.
  • Platform security: Detecting and preventing fraud, system abuse, multi-account usage, and any security threats that could affect the platform or other members.
  • Customer support: Handling enquiries, complaints and support requests submitted to the mykad99 support team.
  • Service communications: Sends important notifications related to your account, such as deposit confirmations, betting results, security alerts, and system update information.
  • Legal compliance: Fulfilling applicable legal and regulatory obligations, including the Personal Data Protection Act (PDPA) 2010 of Malaysia.
  • Platform improvements: Analysing aggregate usage patterns (not individual data) to improve the user experience, platform performance and various mykad99 features.
  • Responsible gambling: Monitoring betting patterns to identify members who may need support related to responsible gaming, in line with mykad99's commitment to member well-being.

Marketing: mykad99 may send you marketing communications about promotions, bonuses and new features based on the consent you provided at registration. You may opt out of marketing communications at any time by contacting support@mykad99.site or through the settings in your account.

05

Data Sharing with Third Parties

Data Disclosure

Mykad99 does not sell, rent or transfer your personal data to third parties for their own marketing purposes. However, there are limited situations where mykad99 needs to share your data with certain parties to enable the platform to operate correctly:

  • Payment service providers: To process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and other Malaysian payment methods, the necessary transaction information is shared with the respective providers. These providers are bound by strict data protection agreements.
  • Game software providers: Third-party game providers that supply Live Casino games, roulette, table games and e-sports within the mykad99 platform may process the minimum session data required to operate those games. They do not receive your full personal data.
  • Technology service providers: Companies that provide mykad99 with technical infrastructure, cloud services, fraud detection and cybersecurity may process certain data as part of their services, subject to strict confidentiality agreements.
  • Legal authorities: mykad99 will disclose personal data to authorities or regulatory bodies where required to do so under applicable Malaysian law or by a valid court order.
  • Business transfers: If mykad99 is involved in any merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. You will be notified before your data becomes subject to a different privacy policy.

In all data-sharing arrangements, mykad99 ensures that only the minimum necessary data is shared, and all recipients are bound by data protection obligations that are equivalent to or stricter than the standards we ourselves adhere to.

06

Data Security Measures

Technical Protection

Mykad99 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction:

  • Encryption in transit: All communications between your device and mykad99 servers are protected with TLS 1.3 protocol and 256-bit SSL encryption — ensuring your data cannot be intercepted in transit.
  • Storage encryption: Sensitive data stored within mykad99's systems, such as financial information and KYC documents, is encrypted using AES-256 standards when at rest.
  • Role-based access control: Only mykad99 staff who require access to specific data to carry out their job responsibilities are authorised to access it. All access is logged and monitored.
  • Two-factor authentication (2FA): mykad99's internal systems require 2FA for all staff access to user data. We also encourage members to enable 2FA on their own accounts.
  • Real-time threat monitoring: Intrusion detection systems (IDS) and intrusion prevention systems (IPS) continuously monitor the mykad99 platform to identify and block any security threats.
  • Regular security audits: mykad99 conducts regular internal security assessments and engages independent penetration testing to identify and address any system vulnerabilities.
  • Data backup and recovery: mykad99 data is regularly backed up to separate data centres to ensure service continuity and data recovery in the event of an unexpected incident.

Important Note: While mykad99 takes all reasonable steps to protect your data, no digital security system can be guaranteed to be 100% impenetrable. You also play an important role in securing your account – use a strong password, enable 2FA, and never share your login credentials with anyone.

07

Data Retention Period

Data Lifecycle Management

Mykad99 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. Our guiding principle is: keep it for as long as needed, delete it when it is no longer relevant.

The general guidelines for data retention periods at mykad99 are as follows:

  • Active account data: For as long as your account remains active on the mykad99 platform, your personal data will be retained to enable ongoing account operations.
  • Data after account closure: After an account is closed, mykad99 retains minimum personal data for 7 years to meet legal requirements related to anti-money laundering and financial record-keeping as required under Malaysian law.
  • Financial transaction records: All deposit and withdrawal records in Malaysian Ringgit (RM) are retained for a minimum of 7 years, in line with Malaysia's accounting and tax requirements.
  • Security logs: System access logs and security logs are retained for 12 months for the purpose of security incident investigation if required.
  • Support communication records: Live Chat sessions and support emails are retained for 2 years for reference and service quality improvement purposes.
  • Cookie data: Depending on the type of cookie, the retention period ranges from the current session (session cookies) to a maximum of 2 years (persistent cookies).

Once the relevant retention period has expired, personal data will be securely deleted or anonymised so that it can no longer be linked to any specific individual. The deletion process is carried out in accordance with security standards that ensure data cannot be recovered once removed.

08

Cookies, Tracking & Similar Technologies

Web Technologies

Mykad99 uses cookies and similar web tracking technologies to enhance the user experience, maintain platform security, and understand how members use our services. Cookies are small text files stored on your device when you visit a website.

The types of cookies used by mykad99 include:

  • Essential cookies (strictly necessary): Required for core mykad99 platform functions such as login authentication, session management and security. Without these cookies, the platform will not function properly. These cookies do not require your consent and cannot be disabled.
  • Performance cookies: Collects information on how you use the mykad99 platform — which pages are visited most frequently, any error messages encountered, and so on. This information is used to improve platform performance. The data collected is aggregated and does not identify you as an individual.
  • Functional cookies: Allows the mykad99 platform to remember your preferences, such as your preferred language, display settings, and saved login details for your convenience.
  • Analytics cookies: mykad99 uses analytics tools to understand overall platform usage patterns. This data helps us make better decisions about features and content that need to be added or improved.

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the mykad99 platform — particularly essential cookies required for login and session security.

Mykad99 does not use cookies to track your activity on other websites or for third-party targeted advertising. Our use of cookies is strictly to enhance your experience within the mykad99 platform itself.

09

Your Personal Data Rights

Data Subject Rights

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and the privacy principles adopted by mykad99, you have several rights regarding the personal data we hold about you. We are committed to respecting and facilitating the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data mykad99 holds about you. We will provide this information in a readable format within 30 days of your request.

Right to Rectification

If your personal data in the mykad99 system is inaccurate or incomplete, you have the right to request a correction. We will update the information within a reasonable timeframe following verification of your identity.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data. This right is not absolute – we may be required to retain certain data to fulfil legal obligations, such as KYC records and financial transaction records.

Right to Restrict Processing

You may request that mykad99 restrict the processing of your data in certain situations — for example, if you dispute the accuracy of the data or object to specific processing while mykad99 evaluates your request.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing for other purposes in certain circumstances based on your personal situation.

Right to Data Portability

Under certain circumstances, you have the right to receive the personal data you have provided to mykad99 in a structured, machine-readable format, and to transfer it to another data controller if you wish.

To exercise any of the above rights, please contact mykad99 by email at support@mykad99.site by stating the right you wish to exercise and providing sufficient information for us to verify your identity. We will respond within 30 days from the date the request is received.

10

Protection of Children's Data

Children's Policy

The mykad99 platform is exclusively for individuals aged 18 years of age and above. We do not knowingly collect, process, or store the personal data of any individual under the age of 18.

Mykad99 employs multiple mechanisms to prevent underage individuals from registering and accessing the platform:

  • Mandatory age declaration during the registration process.
  • The KYC process requires verification of an official identity document.
  • Age verification based on information provided during registration.
  • Ongoing monitoring to identify accounts that may be used by underage individuals.

If mykad99 discovers that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to delete that data and close the account in question. If you believe a minor has registered a mykad99 account, please contact us at support@mykad99.site immediately.

11

Amendments to the Privacy Policy

Policy Updates

Mykad99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in how we handle personal data, applicable legal requirements, or changes in our platform's operations.

When we make material changes to this Policy, we will notify you through one or more of the following methods:

  • A clear notification within the mykad99 platform upon your next login.
  • Email to the address registered to your mykad99 account.
  • Announcements in the platform's news or announcements section.

The "Last Updated" date shown at the top of this page will be updated whenever an amendment is made. We encourage you to review this page periodically. Your continued use of the mykad99 platform after any amendment takes effect constitutes your acceptance of the revised Privacy Policy.

If any amendments we make materially reduce your privacy rights, we will provide notice of at least 14 days before the amendment takes effect, giving you sufficient time to make an informed decision about your continued use of the mykad99 platform.

12

Contact Us About Privacy

Contact Information

If you have any questions, concerns or complaints regarding this Privacy Policy or how mykad99 handles your personal data, our team is here to help.

Privacy Email: support@mykad99.site
Live Chat: Available on the mykad99 platform after logging in
Email Subject: Please state "Privacy Enquiry" or "Data Request" in the subject line
Response Time: Within 30 business days for data rights requests; 48 hours for general privacy enquiries

For requests relating to data access, rectification, deletion, or other rights outlined in Section 9, please include sufficient identity information in your email so we can securely verify your identity before processing the request. This is a protective measure to ensure your personal data is not disclosed to unauthorised parties.

All privacy-related complaints will be taken seriously and responded to within a reasonable timeframe. If you are not satisfied with how we have handled your complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant authority.

Why Data Privacy Matters on Malaysia's Online Betting Platform

In today's digital landscape, personal data is among the most valuable — and most vulnerable — assets you have. When you use an online betting platform like mykad99 — one that involves real financial transactions in MYR, personal identity information and gaming activity records — the importance of data protection becomes far more critical than on most everyday digital platforms. mykad99 understands this, which is why we invest seriously in robust security infrastructure and rigorous privacy practices.

One of the most common concerns among mykad99 members is the security of their payment information. When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX through Maybank2u and CIMB Clicks, you are entrusting mykad99 with access to the same payment methods you use to pay bills, shop, and manage your day-to-day finances. We take that trust seriously – protecting it with the same 256-bit SSL encryption technology used by Malaysia's major banks, along with additional security layers such as payment tokenisation, which ensures your full account number is never stored directly in mykad99's systems.

Regarding the KYC (Know Your Customer) process that you may need to complete during your first withdrawal or upon reaching certain limits — many mykad99 members ask why it is necessary. There are two reasons. First, it is a legal requirement under Malaysian anti-money laundering (AML) regulations that we must comply with as a digital financial platform. Second, and just as importantly, the KYC process protects you personally. By verifying your identity before processing large withdrawals, mykad99 ensures that no other party can withdraw funds from your account even if they somehow gain access to your login credentials. This is an additional layer of protection that works in your favour as a member.

Mykad99 wants to make our position on digital marketing absolutely clear. We do not sell or share members' personal data with advertising companies, data aggregators, or any third party for marketing purposes unrelated to mykad99. If you receive a promotional email from mykad99, it is because you opted in to receive such communications during registration — and you can unsubscribe at any time. We do not believe in monetising user data through third-party marketing channels. Your data exists to improve your experience on mykad99, not to be sold to others.

Finally, it is worth acknowledging that digital privacy is an ever-evolving field — technology changes, new threats emerge, and laws are updated from time to time. mykad99 is committed to staying ahead of these developments by periodically reviewing our privacy practices, training staff on the importance of data privacy, and continuously looking for ways to provide better protection for our members. If you have suggestions or questions about how we can improve your privacy protection, we always welcome feedback at support@mykad99.site.

Frequently Asked Questions – mykad99 Privacy Policy

Detailed answers to the privacy questions most frequently asked by mykad99 members

No. mykad99 does not sell, rent, or share members' personal data with any marketing companies, advertisers, or third-party data brokers for their own marketing purposes. The only marketing communications you may receive from mykad99 are notifications about our own platform promotions and bonuses — and only if you agreed to receive them during registration. You may opt out of marketing communications at any time by contacting support@mykad99.site or through the notification settings in your account.

mykad99 uses payment tokenisation, which means your full bank account or digital wallet details are never stored directly in our systems. When you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX through Maybank2u and CIMB Clicks, the transaction is processed through a secure payment provider, and only a unique token — not your actual payment data — is stored by mykad99 for transaction reference purposes. All payment communications are encrypted with 256-bit SSL in transit. This means that even in an unforeseen security incident, your full payment information remains protected.

Yes, you may request the deletion of your personal data, though certain limitations apply. mykad99 is legally required under Malaysian law to retain specific records for prescribed periods – in particular, KYC records and financial transaction records necessary for anti-money laundering compliance (for 7 years). These records cannot be deleted earlier without breaching our legal obligations. However, for data not subject to mandatory retention requirements – such as marketing data, older usage history and technical data – we will honour your deletion request. To submit a request, contact support@mykad99.site with "Data Deletion Request" stated in the email subject line.

If your mykad99 account has been inactive for more than 12 consecutive months, it may be classified as dormant in accordance with our Terms & Conditions. mykad99 will attempt to contact you via your registered email before taking any action on an inactive account. Your personal data will not be deleted immediately after the inactivity period — it will be retained for at least the minimum retention period specified in our policy (7 years for financial records, 2 years for communication records). If you wish to actively delete your account and data, please contact the mykad99 support team directly.

In the event of a suspected security incident involving members' personal data, mykad99 has a comprehensive Incident Response Plan in place. The first step is to isolate and contain the threat to prevent further exposure. Our technical and security teams will conduct a thorough investigation into the scope of the incident. Members who may be affected will be notified within 72 hours of our confirming the incident, with details on what data may have been exposed and the steps you should take to protect yourself. We will also report the incident to the relevant authorities in accordance with legal requirements. While we take every reasonable precaution, full transparency to our members remains our commitment should such an incident occur.
Mykad99 Privacy Policy, Terms & Responsible Gaming

This Privacy Policy should be read in conjunction with Terms & Conditions and policies Responsible Gaming mykad99. All members' personal data is protected in accordance with the Personal Data Protection Act (PDPA) 2010 of Malaysia. The mykad99 platform is for users aged 18 and above only. Betting involves financial risk — play wisely and responsibly.

Your Data Is Safe with mykad99

Play with Confidence at mykad99 – A Secure & Transparent Platform

Register for free, enjoy a bonus of up to RM1,000, and start a safe, fair, and enjoyable online betting experience. Your privacy and data security are our top priority.

256-bit SSL Encryption Malaysia PDPA Compliance No Third-Party Data Sales

For users aged 18 and above only. Gamble responsibly. Find out more.

Bahasa Melayu