Official Document – Data Protection

Club 999 Privacy Policy – Personal Data Protection for Malaysian Members

Club 999 respects your privacy. This document clearly and transparently explains how we collect, use, store, and protect your personal information as a member of our platform.

Last Updated: January 2026 Applicable in Malaysia 256-bit SSL Protected
Encryption: SSL 256-bit
Right of Access: Members only
Legislation: Malaysia PDPA
Data Sales: Never
Plain-Language Summary

This Privacy Policy describes how Club 999 handles your personal information. In short: we collect only the data that is necessary, we protect it rigorously, and we never sell or hand over your data to third parties for marketing purposes without your consent. This document is the privacy agreement between you ("Member") and Club 999 ("Platform").

1

Introduction & Scope of This Privacy Policy

Club 999 is an online entertainment platform serving users in Malaysia, offering a wide range of products including slots, live casino, poker, lottery, jackpot, live matches, and Sports Betting. As part of running this platform, we need to collect and process personal information from our members.

This Privacy Policy applies to all registered members and visitors of the Club 999 platform, covering the website, mobile app, and all associated digital channels. By using the Club 999 platform, you agree to the terms of this Privacy Policy. If you do not agree, please stop using the platform and close your account.

Club 999 operates in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and all applicable data protection regulations in force in Malaysia. We take these legal compliance obligations with the utmost seriousness.

2

Types of Personal Data We Collect

Club 999 collects your personal data through several means: directly when you complete a registration form or contact us, automatically when you use our platform, and occasionally from trusted third-party sources for verification purposes. The following are the categories of data we collect:

Data Category Example Information Primary Purpose
Personal Identification Data Full name, MyKad number, date of birth, gender Identity Verification KYC Compliance
Contact Data Phone number, email address, residential address Account Communications Notifications
Financial Data E-wallet details (TnG, GrabPay, Boost), bank account numbers, transaction records Payment Processing Anti-Fraud
Platform Usage Data Game records, Sports Betting history, login activity Services Responsible Gaming
Technical Data IP address, device type, web browser, operating system Security Platform Improvements
Communication Data Support chat records, inbound emails, feedback Service Quality Complaint Resolution

Types of data we collect:

Personal Data Financial Data Gaming Data Device Data Location Data Communication Data
Sensitive Data

Club 999 does not collect sensitive data such as medical records, religious beliefs, or political views. The only data that may be considered sensitive is your financial information, which we protect to the highest standard using 256-bit SSL encryption.

3

How We Use Your Personal Data

Every piece of data we collect has a clear and legitimate purpose. Club 999 does not collect data for irrelevant or unnecessary reasons. The following are the primary purposes for which Club 999 uses your data:

  • Managing Your Account: Processing registration, verifying identity, enabling login, and managing your account settings on the Club 999 platform.
  • Processing Financial Transactions: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as processing winnings withdrawals to your account.
  • Providing Gaming Services: Giving you access to all Club 999 products — slots, Live Casino, poker, lottery, Jackpot, live matches, and Sports Betting.
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, unauthorised access, and other security breaches.
  • Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and sending support notifications to members who may need assistance.
  • Customer Support: To enable the Club 999 support team to assist you effectively with enquiries, complaints, or technical issues.
  • Legal Compliance: To fulfil legal and regulatory obligations under Malaysia's PDPA and related regulations.
  • Platform Improvements: Analysing usage patterns (in aggregated and anonymised form) to improve the user experience on the Club 999 platform.
4

Data Sharing & Disclosure to Third Parties

Club 999 never sells members' personal data to any third party. This is a core principle we will never compromise on. However, there are limited circumstances in which we may need to share your data with specific parties:

Permitted Sharing
  • Payment providers (Touch 'n Go, GrabPay, FPX) to process transactions
  • Game software providers that supply the gaming platform
  • Law enforcement authorities if ordered by a court
  • Financial anti-fraud body for legitimate investigations
  • Affiliated companies within the Club 999 group for internal operations
Prohibited Sharing
  • Selling data to advertisers or marketing companies
  • Sharing data for third-party marketing purposes
  • Disclosing data to unrelated parties without consent
  • Transferring data to countries without equivalent protection
  • Sharing data with industry competitors
International Data Transfers

In cases where data needs to be transferred to servers outside Malaysia (for example, for backup or cloud service providers), Club 999 ensures that such transfers comply with Malaysia's PDPA requirements and that the data recipients maintain a level of protection equivalent to or higher than that required under Malaysian law.

5

Our Data Security Measures

Protecting the personal data of Club 999 members is a responsibility we take extremely seriously. We have implemented multiple layers of technical and organisational security to ensure your data is always safeguarded against unauthorised access, alteration, disclosure, or destruction.

256-bit SSL Encryption

All communications between your device and Club 999 servers are encrypted using SSL 256-bit — the same technology used by Malaysia's leading banks.

Layered Access Controls

Only authorised personnel with a legitimate business need have access to member data. All access is logged and reviewed regularly by our security team.

Data Masking

Sensitive information such as identification card numbers and financial details is stored in masked form within our systems to minimise the risk of exposure.

24/7 Monitoring

Our automated monitoring system operates around the clock to detect any suspicious activity, attempted security breaches, or anomalies in data access patterns.

6

Data Retention Period

Club 999 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by Malaysian law. The following are our general data retention guidelines:

  • Active account data: Retained for as long as your account remains active and in use.
  • Financial transaction records: Minimum 7 years from the transaction date, in line with Malaysian financial regulatory requirements.
  • Gaming and betting records: 3 years from the date of activity for audit and dispute resolution purposes.
  • Support communication data: 2 years from the date of last communication.
  • Closed account data: Deleted or anonymised within 90 days of account closure, unless a longer retention period is required by law.

Once the retention period expires, your data will be securely deleted or anonymised in a manner that can no longer be linked back to you personally.

7

Cookies, Pixels & Tracking Technologies

The Club 999 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

Your Cookie Controls

You can manage your cookie settings through the Privacy Settings section in your account portal, or via your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the Club 999 platform.

8

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights regarding your personal data held by Club 999:

Access Rights

Request a copy of the personal data we hold about you at any time.

Right to Rectification

Correct inaccurate or incomplete data through your account portal.

Right to Erasure

Request the deletion of your personal data (subject to legal obligations).

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Portability

Receive your data in a structured, machine-readable format that can be used by other parties.

Right to Restriction

Request a restriction on the processing of your data in certain situations recognised under the PDPA.

How to Exercise Your Rights

To exercise any of the rights above, contact the Club 999 Data Protection team by email at privacy@club999.onl or via live chat on the platform. We will respond within 14 business days. We may require identity verification before processing your request to ensure the security of your information.

9

Children's Privacy & Age Restrictions

The Club 999 platform is exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18. This is not merely a privacy policy — it is our most fundamental social responsibility commitment.

If we become aware or have reason to believe that a person under the age of 18 has provided us with their personal data through the registration process or by any other means, we will take immediate action to:

  • Immediately close and delete the associated account.
  • Delete all personal data belonging to that individual from our systems.
  • Returning any funds to their rightful owners.
  • Implement security reviews to prevent similar incidents from occurring.

If you are a parent or guardian who believes that a child under your care has registered on the Club 999 platform, please contact us immediately at support@club999.onl for prompt action.

10

Amendments to This Privacy Policy

Club 999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technology we use. We are committed to notifying members of any material changes via registered email or in-platform notification at least 14 days before the changes take effect.

The "Updated" date at the top of this page will always reflect the date of the most recent amendment. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the Club 999 platform after any amendments take effect will be considered acceptance of the updated terms.

11

Contact Our Data Protection Officer

If you have any questions, concerns, or complaints about how Club 999 handles your personal data, you may contact our Data Protection Officer (DPO) through the following channels:

DPO Email
privacy@club999.onl
Response within 14 business days
Live Chat
Available 24/7
For general privacy enquiries
FAQ
Visit the FAQ page
Instant response

🔐 Club 999's Privacy Commitment

Six ways Club 999 keeps your personal data safe at all times.

Bank-Grade Encryption

All data and transactions on Club 999 are protected by 256-bit SSL encryption — the same standard used by Malaysia's leading financial institutions, including Maybank and CIMB. Your data cannot be intercepted in transit.

Strict Access Controls

Only a limited team with legitimate job requirements may access member data. All access is logged and periodically audited. No staff member may view your sensitive information without a valid operational need.

No Data Sales

Club 999 has never and will never sell members' personal data to any third party for marketing purposes. Your data is not our product — your best possible gaming experience is.

Malaysia PDPA Compliance

All data handling practices at Club 999 are designed and audited to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We work with local lawyers and privacy specialists to ensure ongoing compliance.

Full Transparency

We don't hide what we do with your data. The Club 999 Privacy Policy is written in plain language that every Malaysian can understand — not in confusing, jargon-filled legalese.

Ongoing Review & Improvement

Club 999's privacy practices are reviewed regularly by our internal security team and independent external parties to ensure they remain aligned with the latest threats and developments in Malaysian privacy law.

📄 Related Policy Documents

This Privacy Policy forms part of Club 999's comprehensive data protection framework.

Your Data Is Safe. Play with Peace of Mind.

Club 999 takes your privacy seriously. Register today and enjoy Malaysia's finest entertainment experience — with complete confidence that your information is always in safe hands.

SSL 256-bit protected Malaysia PDPA Compliance No data sales
Bahasa Melayu