Privacy Policy — Payung99
Your privacy matters to us. This Privacy Policy explains exactly what personal data Payung99 collects from Malaysian players, how that data is used and protected, and what rights you have in relation to your information. We are committed to handling your data with transparency, care, and in accordance with applicable data protection principles.
Privacy Commitments at a Glance
Data Minimisation
We collect only the personal data that is strictly necessary to operate your account, process transactions, verify your identity, and provide our gaming services.
256-Bit SSL Encryption
All data transmitted between your device and the Payung99 platform is protected by industry-standard TLS/SSL encryption. Your payment details and personal information are never transmitted in plain text.
No Sale of Personal Data
Payung99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Full stop.
Secure Payment Processing
Payment data — including Touch 'n Go eWallet, DuitNow, FPX bank details, and cryptocurrency wallet addresses — is handled through encrypted channels and stored only as required for KYC and fraud prevention.
Your Data Rights
You have the right to access, correct, and request deletion of your personal data. Requests are handled within 30 days and can be submitted via our support team at any time.
Defined Retention Periods
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, or resolve disputes — after which it is securely deleted or anonymised.
- 1 Introduction
- 2 Definitions
- 3 Data We Collect
- 4 How We Collect Data
- 5 Purposes of Processing
- 6 Legal Basis for Processing
- 7 Data Sharing & Disclosure
- 8 International Data Transfers
- 9 Data Retention
- 10 Cookies & Tracking
- 11 Security Measures
- 12 Your Rights
- 13 Children & Minors
- 14 Policy Updates
- 15 Contact Us
Introduction
This Privacy Policy ("Policy") is published by Payung99 ("we", "our", "us", "the Platform") and applies to all personal data collected from individuals ("you", "the Player", "the User") who access, register on, or interact with the Payung99 website and associated services available at payung99.cam.
Payung99 operates as an internationally licensed online gaming and sports betting platform. As part of providing our services — which include online casino games, live dealer tables, sports betting, cryptocurrency deposits and withdrawals, and customer support — we necessarily collect and process certain categories of personal data. We take this responsibility seriously and are committed to processing your data lawfully, fairly, and transparently.
This Policy sets out the categories of data we collect, the purposes for which it is used, the parties with whom it may be shared, the measures we take to keep it secure, and the rights available to you as a data subject. By using the Payung99 platform, you acknowledge that you have read and understood this Policy.
Definitions
For the purposes of this Policy, the following terms have the meanings set out below:
- "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, identity document number, payment details, and IP address.
- "Processing" — Any operation performed on personal data, including collection, storage, use, disclosure, transfer, deletion, or any combination thereof.
- "Data Controller" — Payung99, as the entity that determines the purposes and means of processing your personal data.
- "Data Processor" — Any third party that processes personal data on behalf of Payung99, such as payment processors, KYC verification providers, and analytics platforms.
- "KYC" — Know Your Customer. The identity and age verification process required before a Player may withdraw funds from the Platform.
- "Cookies" — Small text files stored on your device by the Platform to recognise returning visitors, maintain session state, and support analytics functions.
- "Third Party" — Any individual or entity other than Payung99 and the registered Player to whom personal data may be disclosed in accordance with this Policy.
Categories of Personal Data We Collect
Payung99 collects personal data in the following categories, depending on how you interact with the Platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, MyKad or passport number, selfie or photograph | Registration and KYC verification |
| Contact Data | Email address, phone number, residential address (for Malaysian players — city, postcode) | Registration and account management |
| Financial Data | Payment method type (e.g., Touch 'n Go eWallet, Boost, DuitNow, FPX, USDT wallet address), transaction history, deposit and withdrawal amounts in MYR or cryptocurrency | Deposits, withdrawals, KYC |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session timestamps | Each platform visit |
| Usage Data | Pages visited, games played, bet history, session duration, bonus activity, login frequency | Active platform use |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Responsible Gambling Data | Deposit limit settings, self-exclusion status, session time preferences, reality check settings | Responsible gambling tool usage |
We do not knowingly collect special categories of sensitive personal data (such as health information, racial or ethnic origin, religious beliefs, or biometric data beyond what is strictly required for identity verification) unless explicitly required by applicable law or regulatory obligation.
How We Collect Your Data
Personal data is collected through the following means:
- Direct Collection: Information you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
- Automated Collection: Technical and usage data collected automatically through cookies, server logs, and analytics tools when you visit or interact with the Platform.
- Third-Party Sources: Identity verification data from KYC service providers and fraud prevention bureaus; device and fraud signals from our security partners; and, where you have given consent, data from marketing attribution partners who help us understand how you found Payung99.
- Payment Providers: Transaction confirmation data from payment processors including FPX, DuitNow network operators, and cryptocurrency exchange or custodial services, as required to confirm the status of deposits and withdrawals.
Purposes of Data Processing
Payung99 processes your personal data for the following purposes:
- Account Administration: Creating, maintaining, and securing your Player account, including authentication and password management.
- Identity and Age Verification (KYC): Verifying that you are who you say you are and that you are aged 21 or above, as required by our licensing obligations and responsible gambling commitment.
- Transaction Processing: Processing deposits and withdrawals via your selected payment method, whether that is Touch 'n Go eWallet, Boost, GrabPay, Maybank via FPX, DuitNow, USDT, BTC, ETH, or other supported options.
- Service Delivery: Enabling you to access and play casino games, place sports bets, participate in promotions, and use all features of the Payung99 platform.
- Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, money laundering, and other prohibited activities.
- Anti-Money Laundering Compliance: Meeting our AML and KYC obligations under applicable international licensing requirements, including transaction monitoring and suspicious activity reporting where required.
- Customer Support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance and compliance purposes.
- Responsible Gambling: Operating our responsible gambling tools — including deposit limits, self-exclusion, session reminders, and reality checks — and identifying patterns of play that may indicate problem gambling behaviour.
- Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may withdraw consent at any time.
- Platform Improvement: Analysing aggregated, anonymised usage data to improve the performance, usability, and content of the Payung99 platform.
- Legal and Regulatory Compliance: Retaining and disclosing data as required by applicable law, court orders, regulatory investigations, or licensing obligations.
Legal Basis for Processing
Payung99 processes personal data on the following legal bases:
- Contractual Necessity: Processing required to perform our contract with you — including account management, game access, payment processing, and customer support.
- Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including AML/KYC obligations under our operating licence and applicable international standards.
- Legitimate Interests: Processing carried out in pursuit of Payung99's legitimate business interests, including fraud prevention, platform security, and improving our services — where such interests do not override your fundamental rights and freedoms.
- Consent: Processing for which you have given your freely provided, specific, informed, and unambiguous consent — primarily in relation to marketing communications and optional analytics. You may withdraw consent at any time by contacting our support team or adjusting your account preferences.
Data Sharing & Third-Party Disclosure
Payung99 does not sell your personal data to third parties. We may share personal data with the following categories of recipients, strictly on a need-to-know basis:
- Payment Service Providers: Entities that process deposits and withdrawals on our behalf, including e-wallet operators (such as Touch 'n Go eWallet, Boost, and GrabPay), Malaysian bank networks (for DuitNow and FPX transactions), and cryptocurrency exchange and custodial platforms. These providers receive only the data necessary to process the specific transaction.
- KYC and Identity Verification Providers: Third-party KYC platforms that assist in verifying the identity and age of Players. These providers are contractually bound to process data solely for verification purposes and in accordance with applicable data protection requirements.
- Fraud Prevention and Security Services: Specialised providers that assist Payung99 in detecting and preventing fraud, account takeover, and money laundering, including device fingerprinting and IP analysis services.
- IT Infrastructure and Hosting Providers: Cloud infrastructure, server hosting, and data storage providers who process data on our behalf under contractual data processing agreements.
- Customer Support Platforms: Live chat and ticketing system providers used to deliver 24/7 player support. Support transcripts and associated account data are shared with these providers as necessary to deliver the service.
- Regulatory Authorities and Law Enforcement: Where required by applicable law, court order, or regulatory obligation, Payung99 may disclose personal data to relevant authorities, including our licensing regulator and competent law enforcement bodies.
- Legal Advisers and Auditors: Professional advisers including lawyers, accountants, and auditors who are bound by confidentiality obligations and who assist Payung99 in meeting its legal and compliance obligations.
International Data Transfers
As an internationally operating platform, Payung99 may transfer personal data to countries outside Malaysia, including to jurisdictions where our servers, infrastructure providers, and third-party service partners are located. Such transfers may include countries in Southeast Asia, Europe, and other regions.
Where personal data is transferred outside Malaysia or the originating jurisdiction, Payung99 ensures that appropriate safeguards are in place to protect such data. These safeguards may include contractual clauses that impose data protection obligations on the recipient, or reliance on the adequacy of data protection laws in the destination country as recognised by applicable international standards.
If you would like further information about the specific safeguards applied to international transfers of your data, please contact us using the details in Section 15 of this Policy.
Data Retention
Payung99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Identity Data | Duration of account + 5 years post-closure | Legal and regulatory obligation |
| KYC Documents | 5 years from submission or account closure | AML/KYC compliance |
| Financial Transaction Records | 5 years from transaction date | Legal and regulatory obligation |
| Customer Support Communications | 2 years from last interaction | Legitimate interests (dispute resolution) |
| Marketing Preferences and Consent Records | Until consent is withdrawn + 2 years | Consent |
| Technical and Usage Logs | Up to 12 months | Legitimate interests (security, analytics) |
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual. Where data is anonymised, it may be retained indefinitely for aggregated statistical or research purposes.
Cookies & Tracking Technologies
Payung99 uses cookies and similar tracking technologies to operate and improve the Platform, maintain your session state, and understand how Players interact with our services. The following types of cookies are used:
- Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable you to log in, maintain your session, and use core features. These cookies cannot be disabled without affecting your ability to use the Platform.
- Functional Cookies: These cookies remember your preferences — such as your preferred display language, currency setting (MYR), and responsible gambling tool configurations — to provide a more personalised experience.
- Performance and Analytics Cookies: These cookies collect anonymised information about how visitors use the Platform, including which pages are visited most frequently and how long users spend on each section. This data helps us improve the Platform.
- Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking, account takeover attempts, and suspicious access patterns.
You can manage your cookie preferences through your browser settings. Please note that disabling cookies beyond strictly necessary ones may affect some Platform functionality. We do not use cookies to serve third-party advertising on the Payung99 platform.
Security Measures
Payung99 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. These measures include:
- Industry-standard TLS/SSL (256-bit) encryption for all data transmitted between your device and the Platform.
- Two-factor authentication (2FA) available for all Player accounts to provide an additional layer of access security.
- Secure, access-controlled data storage environments with strict internal access policies — personal data is accessible only by authorised personnel with a legitimate operational need.
- Regular third-party security audits and penetration testing to identify and remediate vulnerabilities in the Platform's infrastructure.
- Real-time fraud and anomaly detection to identify and respond to suspicious account or transaction activity as it occurs.
- Comprehensive staff training on data protection and privacy obligations for all personnel who handle personal data.
- A documented data breach response procedure to ensure that any security incident is identified, contained, and — where required — reported to relevant authorities and affected individuals in a timely manner.
Your Data Rights
Subject to applicable law, you have the following rights in relation to the personal data Payung99 holds about you. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all valid requests within 30 days.
Right of Access
You have the right to request a copy of the personal data Payung99 holds about you, together with information about how it is processed.
Right to Rectification
You have the right to request that inaccurate or incomplete personal data held by Payung99 be corrected or updated. For identity data, correction requests are subject to re-verification.
Right to Erasure ("Right to be Forgotten")
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, and where no overriding legal obligation requires its retention. Note that AML/KYC regulations require us to retain certain data for a minimum period.
Right to Restrict Processing
You may request that Payung99 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
Right to Data Portability
Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object
You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to marketing, we will stop sending you promotional communications immediately.
Right to Withdraw Consent
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
Children & Minors
The Payung99 platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21.
Age verification is a mandatory step in the KYC process. Any account found to be registered by a person under 21 will be immediately suspended, and any associated personal data will be deleted in accordance with our retention policy — except where retention is required by applicable law or to process any outstanding legitimate claims.
Parents and guardians are encouraged to use parental control and content filtering software to prevent minors from accessing online gambling platforms. If you believe a minor has registered on the Platform or submitted personal data without appropriate consent, please contact us immediately using the details in Section 15 and we will take prompt action.
Updates to This Privacy Policy
Payung99 reserves the right to update or amend this Privacy Policy at any time, including to reflect changes in applicable law, regulatory requirements, our business practices, or the services we offer. When material changes are made, we will update the "Last Updated" date at the top of this document.
Where changes are significant — particularly those that affect how we collect or use personal data in ways that may materially impact your rights — we will endeavour to notify registered Players by email or through a prominent notice on the Platform prior to the changes taking effect.
Your continued use of the Payung99 platform after any amendment constitutes your acknowledgement of the updated Policy. If you do not agree with any change, you should stop using the Platform and may request account closure by contacting support.
Contact Us
If you have any questions, concerns, or requests in relation to this Privacy Policy or the way Payung99 processes your personal data, please contact our Data Protection team through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week directly through the Payung99 platform. This is the fastest channel for time-sensitive matters.
- Email: [email protected] — For formal data subject requests, privacy complaints, and enquiries relating to this Policy. Please include "Privacy Request" in the subject line. We aim to respond within 5 business days for general enquiries and within 30 days for formal data subject access and erasure requests.
For responsible gambling support, self-exclusion requests, or deposit limit changes, please visit our Responsible Gambling page or contact support directly.
Your Privacy, Our Priority 🔐
Payung99 is built on transparency. If you have any questions about how your data is handled, our support team is available 24/7 to help.