Official Privacy Policy

Privacy Policy 99 Laju — Our Commitment to Protecting Your Data

At 99 laju, your privacy is more than a legal obligation — it is a responsibility we take seriously. This document clearly sets out how we collect, store, protect, and use the personal data of our Malaysian members. All our practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA).

Document Information
Version v3.1 (2026)
Updated 1 January 2026
Compliance Malaysia PDPA 2010
Encryption 256-bit SSL
Malaysia PDPA Compliant
Act 709 — In Force Since 2013
Estimated reading time: 7–9 minutes 10 Sections Updated: 1 January 2026 Bahasa Melayu (ms-MY)

Key Principles of 99 laju's Privacy Policy

Six core commitments that define how 99 laju handles our members' personal data.

Bank-Grade Data Protection
All personal data and transaction information of 99 laju members is encrypted using 256-bit SSL encryption — the same security standard used by Malaysia's leading commercial banks. Your data is never stored in plain text that can be read without decryption.
No Sale of Data to Third Parties
99 laju does not sell, rent, or share your personal data with any third party for marketing purposes without your explicit consent. Your data belongs to you alone — it is not a commodity we trade in. This is our absolute promise to every Malaysian member.
Full Compliance with Malaysia's PDPA 2010
All of 99 laju's data protection practices comply with Malaysia's Personal Data Protection Act 2010 (Act 709). You have the right to access, correct, and request deletion of your personal data at any time in accordance with Malaysian law.
Minimum Necessary Data Collection
99 laju only collects data that is strictly necessary to deliver our services — name, email, phone number, account details, and transaction data. We do not collect data beyond what is required to operate the platform. Data minimisation is a core principle of our privacy policy.
Full Control in Your Hands
You have full control over your personal data at 99 laju. You have the right to access your data, correct inaccurate information, request a copy of your data, and request deletion of your account along with all associated data. The request process is straightforward and will be responded to within 14 business days.
Marketing Communications Opt-Out Options
You are free to choose what types of communications you receive from 99 laju. Every marketing email or message includes an easily accessible unsubscribe link. You can manage your notification preferences directly from your account settings without needing to contact customer support.
Table of Contents
Important Notice to Users

This Privacy Policy outlines the data collection and management practices of 99 laju. By registering or using the 99 laju platform, you agree to this Privacy Policy. If you do not agree, please do not use our platform. For privacy enquiries, contact us at support@99laju.click.

1 99 Laju Privacy Introduction & Commitment

99 laju takes our responsibility to protect the privacy and personal data of every member on our platform seriously. As an online casino, Sports Betting, slots, and lottery platform operating for the Malaysian market, we process various types of personal data in the course of delivering our services.

We believe that the trust of Malaysian players is 99 laju's most valuable asset — and that trust can only be maintained through privacy practices that are transparent, responsible, and legally compliant. This Privacy Policy is written in clear, plain language, not confusing legal jargon.

All personal data processing by 99 laju complies with Personal Data Protection Act 2010 (PDPA, Act 709) Malaysia in force since 15 November 2013. We respect your rights as a data subject and are committed to ensuring your data is processed lawfully, fairly, and transparently.

Our Promise to You

99 laju will never sell your personal data. We do not share it with third-party advertisers. Your data is used solely to provide, improve, and protect 99 laju's services for you.

2 Types of Personal Data We Collect

99 laju collects the following personal data from our members during and after the registration process:

Data Category Sample Information Requirement
Personal Identity Full name, date of birth, MyKad number Mandatory
Contact Information Malaysian phone number, email address Mandatory
Financial Data E-wallet and bank account details, MYR transaction records Mandatory
Game Data Betting records, winnings, game history Automatic
Technical Data IP address, device type, browser, access time Automatic
Preference Data Game settings, language preferences, notification preferences Optional

99 laju does not collect sensitive data such as health information, religious beliefs, or political views. We also do not store credit/debit card details directly — payments are processed through secure e-wallet and banking platforms including Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX.

3 How 99 Laju Collects Data

Your personal data is collected through several channels when you interact with the 99 laju platform:

  • Registration Form — information you provide when opening a new account with 99 laju, including your name, phone number, and email.
  • KYC Verification Process — identity documents such as MyKad requested for account verification before withdrawals exceed a specified limit.
  • Financial Transactions — records of deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, or other local Malaysian banks.
  • Platform Usage — data automatically generated when you play blackjack, roulette, poker, baccarat, slots, place Sports Betting or lottery wagers on 99 laju.
  • Customer Support Interactions — records of live chat conversations, emails, and WhatsApp messages when you contact the 99 laju support team.
  • Cookies & Tracking Technologies — technical information collected automatically through your web browser (see Section 7).
4 Purposes of Personal Data Use

99 laju uses the personal data collected for the following legitimate and necessary purposes:

  • Account Management — creating, verifying, and maintaining your member account on the 99 laju platform.
  • Transaction Processing — processing deposits in Malaysian Ringgit (RM) and withdrawal winnings securely and accurately.
  • Security & Fraud Prevention — detecting and preventing fraud, money laundering, and platform abuse.
  • Identity Verification (KYC) — complying with Malaysia's anti-money laundering (AML) legal requirements.
  • Service Improvement — analysing usage patterns to improve the playing experience on 99 laju.
  • Service Communications — sending important notifications related to your account, transactions, and security.
  • Marketing Communications — sending you promotional information, bonuses, and 99 laju offers (subject to your preferences).
  • Legal Compliance — fulfilling legal obligations, court orders, or regulatory requirements.
Legal Basis for Processing

Your data is processed by 99 laju on the basis of: (a) contract performance (the Terms & Conditions you agreed to upon registration); (b) legitimate interests (platform security and fraud prevention); (c) legal obligations (PDPA and AML law compliance); and (d) your consent (for marketing communications).

5 Data Storage, Security & Retention Period

99 laju implements comprehensive technical and organisational measures to safeguard your personal data:

  • 256-bit SSL Encryption on all communications between your device and 99 laju's servers.
  • Data-at-Rest Encryption — sensitive data is stored in encrypted format on our servers.
  • Strict Access Controls — only authorised staff with a legitimate business need may access member data.
  • Regular Security Audits — vulnerability assessments and penetration testing conducted by independent security experts.
  • Two-Factor Authentication (2FA) available to members who want an additional layer of security on their account.

Data Retention Period: 99 laju retains your personal data for as long as your account is active and for 7 years after account closure to meet Malaysia's financial and tax legal obligations. After this period, data will be securely deleted or anonymised.

Security Incident Response

In the event of a data breach affecting your personal data, 99 laju is committed to notifying you and the Malaysian Personal Data Protection Commissioner within the timeframe required by law. We will explain the nature of the breach, the data potentially affected, and the steps we have taken in response.

6 Data Sharing with Third Parties

99 laju does not sell your personal data to anyone. However, we may share necessary data with the following parties in limited and controlled circumstances:

  • Payment Providers — Malaysian e-wallet platforms (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and banks (Maybank, CIMB, Public Bank, RHB, and others) to process your MYR deposit and withdrawal transactions.
  • Technical Service Providers — hosting, cybersecurity, and analytics companies that assist us in operating the 99 laju platform. They are bound by strict confidentiality agreements.
  • Game Providers — live casino and slots game software providers who require minimal data to deliver games within the 99 laju platform.
  • Legal Authority — where required by Malaysian law, court order, or to prevent serious financial crime.
  • Audit Body — the audit body that verifies 99 laju's compliance and game fairness.
Data Sharing Commitment

All third parties that receive data from 99 laju are bound by strict data protection agreements. They may only use that data for specific purposes directly related to the services they provide to us — nothing beyond that.

7 Cookies & Tracking Technologies

99 laju uses cookies and similar tracking technologies to enhance the user experience on our platform. The following are the types of cookies we use:

  • Essential Cookies — required for core platform functions such as login authentication, session security, and language preferences. Cannot be disabled.
  • Performance & Analytics Cookies — helping us understand how members use the 99 laju platform so we can continuously improve it. Data is collected anonymously and in aggregate.
  • Functional Cookies — remembering your preferences such as your chosen betting limits, favourite games, and display settings.
  • Marketing Cookies — used to personalise relevant 99 laju promotions and offers for you (with your consent only).

You can manage or disable cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality of the 99 laju platform. We adhere to responsible cookie practices and do not use cookies to monitor your activity outside of the 99 laju platform.

8 Your Rights Under Malaysia's PDPA

As a 99 laju platform user, you hold the following data protection rights under Malaysia's Personal Data Protection Act 2010:

Right of Access
Request a copy of the personal data we hold about you
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request deletion of data under certain circumstances
Right to Object
Object to the processing of data for direct marketing
Right to Portability
Receive your data in a structured, machine-readable format
Right to Restrict
Restrict data processing while a dispute is being resolved

To exercise any of the above rights, please contact 99 laju's Data Protection Officer (DPO) at support@99laju.click with the subject line "PDPA Rights Request". We will respond within 14 business days.

Important to Know

The right to deletion may be limited in situations where we are legally required to retain certain records (such as financial records for a period of 7 years). In such cases, we will inform you of this limitation when processing your request.

9 Children's Privacy Protection

The 99 laju platform is intended for individuals aged 18 years and above only. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

If we discover that personal data has been collected from anyone under the age of 18, we will take immediate action to delete that data and close the account in question. Parents or guardians who believe their child has registered on 99 laju without permission are urged to contact us immediately at support@99laju.click.

Age Verification

99 laju conducts age verification procedures during registration and may request additional verification documents (such as MyKad) at any time. Age verification is a protective measure to ensure the platform is used only by eligible adults.

10 Privacy Policy Amendments & Contact Us

99 laju reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or the services we offer.

  • Members will be notified of material changes to this Privacy Policy by email at least 14 days before taking effect.
  • Minor amendments (such as spelling corrections or clarifications) may take effect without prior notice.
  • The "Updated" date at the top of this document will always reflect the most current version.
  • Continued use of the platform after the effective date of any amendment constitutes your acceptance.

For any questions, concerns, or complaints regarding this Privacy Policy or 99 laju's data protection practices, please contact:

99 laju Data Protection Officer (DPO)
Response Time: Within 14 business days
Live Chat: Available 24/7 on the 99 laju platform
Privacy Policy Updated: 1 January 2026 — Version 3.1
Supersedes all previous versions of the 99 laju Privacy Policy. Enquiries: support@99laju.click
Your Data Is Safe With Us

Join 99 Laju with Confidence — Your Privacy is Protected

We've been transparent about how we protect your data. Now play with peace of mind alongside over 250,000 Malaysian members who trust 99 laju.

256-bit SSL  •  Malaysia PDPA Compliant  •  No data selling  •  24/7 Support
Bahasa Melayu