Your personal data matters to us. This Privacy Policy explains exactly what information s99 collects, why we collect it, how it is used, and the rights you hold as a valued player based in Malaysia.
From the moment you create your s99 account to every transaction you make — these six principles guide how we handle your information.
All data transmitted between your browser and s99's servers is protected with TLS 1.3 / 256-bit SSL encryption — the same standard used by Maybank2u and CIMB Clicks. Your login credentials, payment details, and personal information never travel in plain text.
We collect only the minimum personal data required for identity verification, responsible gaming compliance, and payment processing. We do not sell, rent, or trade your data to third-party marketers under any circumstances.
Your records are stored in access-controlled, encrypted data centres operating under international ISO security standards. Access is restricted to authorised s99 compliance and operations personnel on a strict need-to-know basis.
s99 does not share your browsing behaviour, betting history, or personal profile with advertising networks. Any analytics tools we use operate under data processing agreements that prohibit secondary use of player data.
You may request a full export of your personal data, ask us to correct inaccuracies, or initiate an account closure at any time by contacting support. We process all such requests within 30 calendar days of receipt.
Our privacy practices align with international online gaming licensing requirements and applicable data protection frameworks. Malaysian players benefit from additional safeguards reflecting local regulatory expectations and PDPA-aligned principles.
s99 ("we", "us", "our", "the Platform") is an online casino and sportsbook platform accessible at s99.lat, offering a wide range of gaming and betting products — including slots, live dealer casino games, sports betting, Dragon Tiger, and more — primarily to players based in Malaysia. s99 operates under international online gaming licensing standards and is committed to maintaining transparent, lawful, and fair data processing practices.
This Privacy Policy governs the collection, processing, storage, and disclosure of personal information obtained from visitors and registered users of the s99 platform, including players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, and across Malaysia. By accessing or using the s99 platform, you acknowledge that you have read and understood this Privacy Policy in full.
Data Controller: s99 Platform Operations. For all data-related enquiries, contact us at [email protected]. We aim to respond to all privacy-related correspondence within 5 business days.
s99 collects personal data through several channels: directly from you when you register or interact with the platform, automatically when you browse or use our services, and in limited circumstances from third-party identity verification or payment processing partners. The categories of data we may collect include:
| Data Category | Legal Basis | Purpose |
|---|---|---|
| Identity & KYC data | Legal obligation / Contractual necessity | Account verification, fraud prevention, age gating |
| Financial & payment data | Contractual necessity | Processing deposits, withdrawals, MYR reconciliation |
| Gaming activity | Contractual necessity / Legitimate interest | Service delivery, responsible gaming monitoring |
| Technical & device data | Legitimate interest | Security, fraud detection, platform optimisation |
| Marketing preferences | Consent | Promotional communications (opt-in only) |
s99 uses personal data only for the purposes described below. We do not process your information for any purpose that is incompatible with the reasons for which it was originally collected.
We use your registration data to create and maintain your s99 account, authenticate your logins, process your gaming activity, and deliver the core platform services you have contracted with us for. This includes managing your MYR wallet balance, processing FPX and DuitNow transactions, and applying cashback bonuses or promotional credits to your account.
To comply with our licensing obligations and protect the integrity of the platform, s99 conducts Know Your Customer (KYC) checks on all accounts. This involves verifying that you are who you say you are, that you meet the minimum age requirement of 21 years, and that your account is not being used for money laundering, fraudulent chargebacks, or other prohibited activities.
Your gaming activity data — including deposit frequency, bet sizes, session duration, and self-exclusion settings — is monitored by our responsible gaming systems. We may use this data to proactively flag potentially harmful gambling behaviour, enforce player-set limits, or contact you with support resources if our systems detect risk indicators.
When you contact our support team via live chat at s99, your account details and interaction history are used to resolve your enquiry efficiently. Support conversations may be recorded for quality assurance and training purposes, with records retained as described in Section 6.
If you have explicitly opted in to receive promotional communications, s99 may send you information about bonuses, new game releases, sporting events relevant to Malaysian players (such as the Malaysia Super League, EPL fixtures, and UFC cards), and platform updates. You may withdraw your consent at any time by updating your notification preferences in your account settings.
Important: s99 will never send you unsolicited promotional emails or SMS messages if you have not opted in. We do not use your data to serve you third-party advertisements on external websites or apps.
s99 uses cookies and similar technologies to keep you securely logged in, remember your preferences, and understand how players interact with the platform. We do not use cookies to track your activity across unrelated third-party websites.
These are strictly necessary for the platform to function. They manage your authenticated session, enforce CSRF protection, and maintain your MYR wallet state. These cookies cannot be disabled without breaking core functionality.
We use privacy-respecting, first-party analytics to understand which features players use, page load performance, and error rates. This data is aggregated and does not identify individual players by name or account number.
These cookies remember your language preference, game lobby display settings, and notification preferences so you do not need to reconfigure them on each visit.
Cookie Control: You can manage your cookie preferences through your browser settings. Blocking essential cookies will prevent you from logging in to your s99 account. Analytics and preference cookies can be disabled without affecting platform access.
s99 retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, including our legal, accounting, and regulatory reporting obligations. The general retention periods that apply are:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & identity records | Duration of account + 5 years | AML / regulatory compliance |
| Financial transaction logs | 7 years from transaction date | Accounting and audit requirements |
| Gaming activity logs | 3 years from activity date | Responsible gaming & dispute resolution |
| Support interaction records | 2 years from interaction date | Quality assurance & dispute resolution |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of lawful marketing basis |
| Technical / session logs | 90 days from session | Security monitoring & fraud detection |
Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.
s99 implements a layered security architecture to protect your personal data against unauthorised access, loss, destruction, or alteration. Our technical and organisational measures include, but are not limited to:
Data Breach Notification: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, s99 will notify affected players without undue delay and will cooperate fully with relevant regulatory authorities as required by applicable law.
As a player on the s99 platform, you hold a number of rights in relation to your personal data. s99 is committed to honouring these rights promptly and without undue restriction. Your rights include:
You may request a copy of all personal data that s99 holds about you, along with information about how it is being used. We will provide this in a structured, commonly used format within 30 days of receiving your verified request.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details directly through your account settings, or contact support for assistance with documents and other records.
In certain circumstances, you may request the deletion of your personal data. Please note that where we are legally required to retain data (for example, financial transaction records for AML compliance), we may not be able to fulfil an erasure request in full. We will clearly explain any such limitation when responding to your request.
You may request that we restrict the processing of your personal data in situations where, for example, you contest the accuracy of the data or have objected to our processing while we evaluate your objection.
Where processing is based on your consent or is necessary for the performance of a contract, you may request that we provide your personal data in a machine-readable format suitable for transfer to another service provider.
You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, in which case we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
How to Exercise Your Rights: Submit your request in writing to [email protected] with the subject line "Data Rights Request" and your registered account email address. We will verify your identity before processing any request and respond within 30 calendar days.
The s99 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 21. Our registration process includes date-of-birth verification and KYC identity checks specifically designed to prevent underage access.
If s99 becomes aware that personal data has been collected from a person under 21 years of age without valid parental or guardian consent, we will take immediate steps to delete that data and close the associated account. Any funds deposited to such an account will be returned via the original payment method after identity verification.
Parent or Guardian Notice: If you believe that a minor in your care has registered an account on s99, please contact us immediately at [email protected] so we can investigate and take appropriate action without delay.
s99 operates on infrastructure that may involve the transfer of personal data to servers located outside Malaysia. Where such transfers occur, s99 ensures that appropriate safeguards are in place to protect the data to a standard that is equivalent to the protections afforded in Malaysia. These safeguards may include:
Players who wish to obtain further information about the specific safeguards in place for international transfers of their personal data may submit a written request to our support team.
s99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the services we offer. When we make material changes to this Privacy Policy, we will notify registered players via email to their registered address and/or through a prominent notice on the s99 platform no later than 14 days before the changes take effect.
The "Effective Date" displayed at the top of this document and in the document version tag PP-2026-v1.0 will be updated to reflect the date on which the revised policy comes into force. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
Your continued use of the s99 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the platform and contact support to initiate account closure.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by s99, please reach out to our support team. We are committed to addressing all privacy-related enquiries with care and within the timeframes stated in this document.
24 / 7 / 365
Under 90 seconds average first response time
When contacting us about a data rights request, please include your registered email address and a brief description of your request. To protect your privacy and prevent unauthorised access to account data, we will verify your identity before acting on any request.
Join thousands of Malaysian players who trust s99 for a secure, transparent, and responsible gaming experience — with MYR payments, local support, and bank-grade privacy protection built in from day one.