Official Document

Privacy Policy Club999 – Malaysian Player Data Protection

Club999 takes your privacy seriously. This document clearly explains how we collect, use, store, and protect the personal information of every Malaysian player on our platform.

Last updated: 1 January 2026 Region: Malaysia Reading time: ±10 minutes Language: Malay (ms-MY)
Version 3.1 – Latest
Privacy Policy Contents
Data Collected
Purpose of Data Use
Data Sharing & Disclosure
Data Security & Storage
Player Rights & Your Choices
Cookies & Tracking Technologies

Quick Summary – What You Need to Know

6 key things about how club999 protects your privacy.

SSL 256-bit
All data encrypted to bank-grade standards
No Data Selling
Your data is not sold to third parties
Controlled Access
Only authorised personnel may access data
Full Rights
You may request access to, amendment of, or deletion of your data
5-Year Retention
Records retained for 5 years in accordance with the law
48-Hour Response
All privacy enquiries are answered within 48 hours

Club999's Privacy Commitment to Malaysian Players

Six pillars of privacy protection that we uphold every day.

Bank-Grade Data Encryption

The same 256-bit SSL encryption technology used by Maybank and CIMB protects every bit of data you send to club999. Whether it's your login credentials, phone number, or payment details via DuitNow or Touch 'n Go eWallet — everything is fully encrypted in transit.

Data Is Never Sold or Traded

Club999 never sells, rents, or trades players' personal data to any third party for marketing or commercial purposes. Your information belongs to you, and we use it solely for the purposes you have consented to — nothing more.

Secure & Controlled Data Storage

All club999 player data is stored on servers protected by strict access controls, intrusion detection systems, and automated backups. Only club999 staff with a legitimate operational need who have undergone background checks are permitted to access this data.

Malaysian Legal Compliance

The club999 Privacy Policy is developed in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010. This means your data protection rights as a Malaysian are fully recognised and upheld — not just an empty promise.

Marketing Communication Controls

You have full control over marketing communications from club999. You can opt in or out of promotions, special offers, and email or SMS notifications at any time through your account settings — no hassle required.

Right to Data Erasure

Club999 players may request deletion of their personal data at any time after their account is closed, subject to mandatory record retention requirements under Malaysian law. Deletion requests will be processed within 30 business days.

1. Introduction & Scope of This Privacy Policy

Club999 ("we", "platform", or "club999") is an online gaming platform operating in Malaysia, fully committed to protecting the privacy of every player who uses our services. This Privacy Policy explains in detail how club999 collects, processes, stores, and safeguards your personal information.

This policy applies to all information collected through the club999 website at club999.run, the club999 mobile app (where applicable), and any interactions you have with our support team, emails, or other official club999 communication channels.

By registering a club999 account or using any part of our platform, you indicate your agreement to this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account and request deletion of your personal data.

Note: This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. Club999 is a "Data User" as defined under the PDPA and bears full responsibility for the processing of our players' personal data.

2. Types of Personal Data Collected

Club999 only collects data that is genuinely necessary to operate our services safely and effectively. The categories of data we collect are as follows:

Data CategorySample InformationRequirement
Identity Information Full name, date of birth, MyKad number Mandatory (KYC)
Contact Information Malaysian phone number, email address Mandatory
Financial Information E-wallet account names (TnG, DuitNow, GrabPay), Malaysian bank account numbers Mandatory (payment)
Game Data Betting records, game history, account balance Automatic
Technical Data IP address, device type, web browser, operating system Automatic
Communication Data Live chat records, support emails, complaints When interacting

Club999 never directly requests your credit or debit card details. All financial transactions are processed through trusted third-party payment providers — including Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks) — each operating under their own strict privacy and security policies.

3. Purposes for Using Your Personal Data

Club999 uses your personal data solely for legitimate purposes directly related to the provision of our online gaming services. Below is the full list of purposes for which your data is used:

  • Registration & Account Management: Creating and maintaining your club999 account, including identity verification (KYC) required for security and legal compliance.
  • Transaction Processing: Securely and accurately processes deposits and withdrawals via your preferred Malaysian payment methods, including Touch 'n Go, DuitNow, and FPX.
  • Gaming Services Provision: Gives you access to all club999 games, including slots, live baccarat, Sports Betting (Malaysia Super League, EPL, badminton), e-sports, cricket, and jackpots.
  • Customer Support: Handling your enquiries, complaints, and support requests promptly and effectively through our 24/7 support team.
  • Security & Fraud Prevention: Detecting and preventing fraud, money laundering, system manipulation, and bonus abuse that could harm the platform and other players.
  • Legal Compliance: Fulfilling club999's legal obligations, including financial reporting requirements, authority-ordered investigations, and compliance with Malaysia's PDPA.
  • Platform Improvements: Analysing aggregated (not individual) usage patterns to improve the interface, speed, and overall experience of the club999 platform.
  • Marketing Communications (with consent): Sending information about club999 promotions, new bonuses, and exclusive offers — only where you have provided consent to receive such communications.

Data Minimisation Principle: Club999 only collects and processes data that is strictly necessary for the purposes stated above. We do not collect excessive or irrelevant data beyond what is required to provide our services to you.

4. Data Sharing & Disclosure to Third Parties

Club999 does not sell, rent, or trade players' personal data to any third party for marketing purposes. Your data may only be shared in the following limited circumstances:

  • Payment Providers: Required transaction information is shared with payment providers — including Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX processors — solely to facilitate financial transactions.
  • Game Providers: The account information required (typically username and player ID only) is shared with third-party game software providers offering games on the club999 platform, subject to strict confidentiality agreements.
  • Legal Authorities: club999 is required to disclose data to Malaysian law enforcement agencies or other authorities when directed by a valid court order or applicable legal provision.
  • Professional Services: Lawyers, accountants, or auditors involved in club999's business operations may have limited access to certain data, subject to their professional confidentiality obligations.
  • With Your Consent: In all other circumstances, club999 will only share your data after obtaining your explicit consent.

All third parties receiving club999 player data are bound by data protection agreements requiring them to handle such information to security and privacy standards at least equivalent to those applied by club999.

5. Data Security – How Club999 Protects Your Information

Club999 is fully invested in cybersecurity infrastructure to ensure the personal data of Malaysian players remains protected at all times. The technical and organisational measures we have implemented include:

  • 256-bit SSL/TLS encryption for all data transmission between your device and club999 servers
  • Data-at-rest encryption for all sensitive information stored in our databases
  • Tiered access controls — only staff with a legitimate operational need may access player data, and all such access is logged and monitored
  • Intrusion detection and prevention systems (IDS/IPS) operating 24/7
  • Regular vulnerability assessments and penetration testing conducted by independent security experts
  • Automated encrypted backups stored across geographically separate locations
  • Detailed security incident response procedures for data breach scenarios

In the Event of a Data Breach: In the unlikely event of a data breach that could affect your rights or freedoms, club999 is committed to notifying affected players and the relevant authorities within the timeframe stipulated by Malaysian law, without undue delay.

6. Data Retention Period

Club999 does not retain players' personal data for longer than necessary. The following are our data retention guidelines:

  • Active Account Records: Throughout the period your club999 account remains active and for an additional period following account closure as specified below.
  • Financial Transaction Records: Minimum 7 years from the transaction date, in compliance with Malaysia's accounting and financial legal requirements.
  • KYC & Identity Verification Records: A minimum of 5 years after account closure, in compliance with Malaysia's anti-money laundering legal requirements.
  • Support Communication Records: 3 years from the date of last interaction.
  • Technical Log Data: 12 months, unless required for an ongoing security investigation.
  • Marketing Data: Until you withdraw consent or request deletion, whichever comes first.

Once the retention period has ended and no legal obligation prevents deletion, club999 will securely delete or anonymise your personal data.

7. Players' Rights Under Malaysia's PDPA

As a club999 player residing in Malaysia, you have important rights under the Personal Data Protection Act (PDPA) 2010, which club999 fully respects:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of receiving your request.

Right to Rectification

If the data we hold is inaccurate or out of date, you have the right to request a correction. You can update basic information directly in your club999 account settings.

Right to Erasure

You may request deletion of your personal data once your account is closed, subject to mandatory legal retention requirements. Requests will be processed within 30 business days.

Right to Object to Marketing

You may opt out of marketing communications from club999 at any time via the "unsubscribe" link in any email or by contacting our support team.

Right to Query Your Data

You have the right to ask how your data is used, who it is shared with, and what protective measures are in place — and we are obliged to answer clearly.

How to Exercise Your Rights: Submit your request to support@club999.run with the subject line "Data Privacy Request", or use the live chat within your club999 account. We will verify your identity before processing your request and will respond within 48 business hours.

8. Cookies & Tracking Technologies

The club999 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform performs optimally. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, game sessions, and security. Cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting information on how pages are used — such as most-visited pages, load times, and errors — to help us improve the club999 platform.
  • Functional Cookies: Remembers your preferences such as language, display settings, and login information for a smoother experience.
  • Analytics Cookies: Used to understand usage patterns in aggregate — this data does not identify you as an individual.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality or your experience on the club999 platform.

9. Cross-Border Data Transfers

In certain circumstances, personal data of club999 players may be transferred to or processed by servers or third parties located outside Malaysia — for example, game software providers or international cloud infrastructure. When such transfers occur:

  • Club999 ensures that recipients of data outside Malaysia are bound by data processing agreements that require protection standards equivalent to Malaysia's PDPA.
  • Data transfers will only be made to jurisdictions or recipients that provide an adequate level of data protection.
  • Club999 will notify players of any material changes to data transfer practices that may affect their privacy.
10. Child Protection

Club999 is a gaming platform open only to individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Should we discover that a minor's data has been collected without the knowledge or consent of a legal guardian, we will delete that data immediately and terminate the account in question.

Parents or guardians who believe their child may have registered on club999 are urged to contact us immediately at support@club999.run so that appropriate action can be taken without delay.

11. Links to Third-Party Platforms

The club999 platform may contain links to or integrations with third-party services, such as game providers, payment providers (Touch 'n Go, GrabPay, DuitNow, FPX), or communication platforms. This Privacy Policy applies solely to the club999 platform itself and does not cover the privacy practices of any third parties.

When you leave the club999 platform and use third-party services, your data privacy and security are governed by those third parties' own privacy policies. Club999 is not responsible for third-party privacy practices and encourages players to read the privacy policies of all platforms they use.

12. Contact Us – Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how club999 handles your personal data, please reach out to us through the following channels:

  • Email: support@club999.run (include "Data Privacy Enquiry" in the subject line)
  • Live Chat: Available 24/7 within your club999 account

Club999 is committed to responding to all privacy-related enquiries within 48 business hours. We will make every effort to resolve any concerns in a manner satisfactory to all parties.

Privacy Policy Amendments: Club999 reserves the right to update this Privacy Policy from time to time. Material changes will be communicated to registered players via email or in-platform notification at least 14 days before taking effect. Continued use of the club999 platform after the effective date constitutes acceptance of the revised policy. The latest version is always available on this page.

Version 3.1 – Effective: 1 January 2026. Supersedes all previous versions of the Club999 Privacy Policy.

Your Privacy Is Protected — Join Club999 with Complete Confidence!

Play safely at club999 — a platform that protects your data with 256-bit encryption, never sells your information, and respects the privacy rights of every Malaysian player.

Bahasa Melayu