Privacy Policy
At m99m, protecting your personal data is not an afterthought — it is a core operating principle. This Privacy Policy explains in plain, structured terms what data we collect, why we collect it, how it is used, and what rights you hold over your information as a player on our platform.
Privacy at a Glance
These highlights summarise our key commitments. Please read the full Policy below for complete details.
256-bit SSL Encryption
All data transmitted between your device and the m99m platform is encrypted using TLS/SSL technology. No personally identifiable data is sent in plaintext at any point.
We Never Sell Your Data
m99m does not sell, rent, or trade your personal information to third-party advertisers or data brokers — ever. Data shared with partners is strictly limited to what is necessary for platform operations.
You Control Your Data
You have the right to access, correct, and request deletion of your personal data at any time. Submit a request via live chat or email and we will respond within the statutory timeframe.
KYC Document Security
Identity documents submitted for KYC verification are stored in encrypted, access-controlled environments. Only authorised compliance personnel may access them — and only for verification purposes.
Transparent Cookie Use
We use cookies strictly for platform functionality, session management, and performance analytics. We do not deploy third-party advertising cookies or behavioural tracking systems.
Opt-Out of Marketing
All marketing communications from m99m are opt-in. You may unsubscribe from promotional emails or SMS messages at any time through your account settings or by contacting support.
Introduction
This Privacy Policy ("Policy") is published by m99m ("the Platform", "we", "us", "our") and applies to all personal data collected from individuals ("you", "User", "Player") who access, register on, or interact with the m99m website at https://m99m.cam and any associated mobile or web applications.
m99m is an online casino and sports betting platform operated under an international gaming licence. In the course of providing gaming services — including live casino, slot games, table games, and sports betting on competitions such as the English Premier League (EPL), Liga Super Malaysia, UFC, and others of interest to Malaysian players — we necessarily collect and process certain personal data in order to operate the platform, comply with our regulatory obligations, and deliver a secure and personalised experience to registered players.
We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection legislation. This Policy sets out, in full, the categories of data we collect, the purposes for which we process it, the legal bases on which we rely, and the rights available to you in respect of your personal data.
Your Consent: By registering an account on m99m or continuing to use the Platform after this Policy has been published, you acknowledge that you have read and understood its terms. Where your consent is required as a legal basis for processing, we will request it separately and explicitly.
Definitions
The following definitions apply throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, date of birth, national identification number, IP address, device identifiers, and financial transaction data. |
| "Data Controller" | m99m, being the entity that determines the purposes and means of processing your personal data. |
| "Data Processor" | A third party engaged by m99m to process personal data on our behalf, acting only on our documented instructions. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure, or destruction. |
| "KYC" | Know Your Customer — the identity and age verification process required under our gaming licence and anti-money laundering (AML) obligations. |
| "Cookies" | Small text files stored on your device by your web browser when you visit the Platform, used to maintain session state, preferences, and analytical data. |
| "Sensitive Personal Data" | A subset of personal data that warrants heightened protection, including government-issued identification numbers, financial account details, and biometric data. |
Data We Collect
m99m collects personal data through multiple channels in the normal course of operating the Platform. The categories of personal data we collect are described below:
3.1 Registration Data
When you create an account on m99m, we collect the information you provide during the registration process, including your chosen username, email address, date of birth, country of residence, and mobile phone number (where provided). This data is essential to establish and maintain your Account.
3.2 Identity Verification (KYC) Data
To comply with our gaming licence conditions and anti-money laundering obligations, we may require you to submit identity documents. These may include a scanned or photographed copy of a valid Malaysian MyKad (IC), Passport, or Driver's Licence (front and back), a proof of address document such as a utility bill from TNB, Syabas, or Indah Water dated within three months, and in some cases a selfie photograph holding your identity document. This data is classified as Sensitive Personal Data and is subject to enhanced access controls.
3.3 Financial Transaction Data
We collect records of all financial transactions processed through your Account, including deposit amounts, withdrawal requests, payment method details (such as the last four digits of a bank account or e-wallet identifier), transaction timestamps, and currency (MYR or cryptocurrency equivalent). We do not store full bank account numbers, card numbers, or e-wallet passwords.
3.4 Technical and Device Data
When you access the Platform, our servers automatically record certain technical data, including your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), referring URL, and session duration. This data is used for security monitoring, fraud prevention, and platform performance optimisation.
3.5 Gameplay and Betting Data
We maintain records of your activity on the Platform, including games played, bets placed, bet outcomes, bonus usage, wager history, and VIP tier progression. This data is used to manage your Account, resolve disputes, comply with regulatory requirements, and personalise your experience.
3.6 Communications Data
If you contact our support team via live chat, email, or any other channel, we retain records of those communications, including the content of messages, timestamps, and resolution outcomes. This data is used to respond to your queries and to improve our support services.
3.7 Marketing Preferences
Where you have opted in to receive marketing communications, we record your preferences and the channel through which consent was obtained (email, SMS, or in-platform notification). You may update or withdraw your marketing preferences at any time.
How We Use Your Data
We use the personal data we collect for the following specific purposes:
| Purpose | Description |
|---|---|
| Account Management | To create, maintain, and administer your registered Account, including processing your login credentials and maintaining your balance and betting history. |
| Identity Verification | To verify your identity and age in compliance with our gaming licence and KYC/AML obligations before processing withdrawals or granting full Account access. |
| Payment Processing | To process deposits and withdrawals through supported Malaysian payment methods including FPX, DuitNow QR, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency. |
| Fraud Prevention & Security | To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct on the Platform. |
| Regulatory Compliance | To meet our obligations under applicable gaming licence conditions, AML regulations, and any mandatory reporting requirements imposed by our licensing authority. |
| Customer Support | To respond to your queries, resolve account issues, process complaints, and provide technical assistance via live chat, email, and other support channels. |
| Responsible Gambling | To monitor patterns of play, identify signs of potentially harmful gambling behaviour, apply deposit and loss limits, and administer self-exclusion requests. |
| Platform Improvement | To analyse aggregated usage data, test new features, and improve the performance, reliability, and user experience of the Platform for Malaysian players. |
| Marketing Communications | Where you have consented, to send you information about promotions, bonuses, new games, and platform updates via your preferred communication channel. |
Legal Bases for Data Processing
We process your personal data on the basis of one or more of the following lawful grounds:
- Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered Player — including Account management, payment processing, and service delivery.
- Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML monitoring, and gaming licence reporting requirements.
- Legitimate Interests: Processing necessary for m99m's legitimate business interests, including fraud prevention, network security, platform performance monitoring, and responsible gambling management — where those interests are not overridden by your rights.
- Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for optional marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Data Sharing & Disclosure
m99m does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients, strictly to the extent necessary and only under appropriate contractual safeguards:
6.1 Service Providers and Data Processors
We engage third-party service providers who process personal data on our behalf in order to deliver the Platform's services. These include payment gateway operators who process FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency transactions; identity verification providers who assist with KYC document checks; cloud infrastructure providers who host platform data; and customer support platform operators. All third-party processors are bound by written data processing agreements and are prohibited from using your data for any purpose other than providing the specified service to m99m.
6.2 Regulatory and Law Enforcement Authorities
We may be required to disclose personal data to our gaming licensing authority, financial intelligence units, tax authorities, law enforcement agencies, or courts of competent jurisdiction where required by applicable law, court order, or regulatory direction. We will, where permitted by law, notify you of such disclosures.
6.3 Fraud Prevention and Industry Sharing
In cases of confirmed or suspected fraud, multi-accounting, money laundering, or match-fixing, we may share relevant Account data with other licensed gaming operators or industry-wide fraud prevention databases for the purpose of preventing further harm across the industry.
6.4 Business Transfers
In the event of a merger, acquisition, reorganisation, or sale of m99m's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to the acquirer providing equivalent privacy protections. You will be notified of any such transfer in advance.
Important: We will never disclose your data to third-party advertisers, data brokers, or commercial marketing organisations. Any transfer to a third party is limited to what is strictly necessary for the operational, legal, or regulatory purpose described above.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:
- Account registration data — retained for the lifetime of your active Account and for a minimum of five (5) years following Account closure, in compliance with AML regulations.
- KYC identity documents — retained for a minimum of five (5) years from the date of submission, or longer if required by applicable regulatory guidance.
- Financial transaction records — retained for a minimum of seven (7) years in accordance with standard financial record-keeping requirements.
- Betting and gameplay history — retained for a minimum of five (5) years for dispute resolution and regulatory audit purposes.
- Customer support communications — retained for two (2) years from the date of resolution, unless the communication relates to an unresolved dispute or legal matter.
- Marketing preferences and consent records — retained until you withdraw consent or close your Account, plus a reasonable period thereafter for record-keeping purposes.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.
Cookies & Tracking Technologies
m99m uses cookies and similar tracking technologies to operate the Platform and enhance your experience. We do not use third-party advertising cookies or behavioural targeting tools.
8.1 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for core platform functionality — session management, login state, and security tokens. The Platform cannot function without these cookies. | Session / Up to 30 days |
| Performance Cookies | Collect anonymised data about how players use the Platform — page load times, error rates, and navigation paths — to help us identify and fix technical issues. | Up to 12 months |
| Functional Cookies | Remember your preferences such as language, currency display (MYR), and notification settings to provide a personalised experience on return visits. | Up to 12 months |
| Security Cookies | Used in fraud detection and bot mitigation to protect the Platform and its users from malicious automated activity. | Session |
You may manage or disable non-essential cookies through your browser settings at any time. Disabling essential cookies may affect your ability to log in or use core Platform features.
User Rights
Subject to applicable law, you hold the following rights in respect of the personal data m99m processes about you. To exercise any of these rights, please contact our support team via live chat or at [email protected]. We will respond within 30 days of receiving your request, and will not charge a fee for reasonable requests.
Right of Access
You have the right to request a copy of the personal data m99m holds about you, along with information about how it is processed. We will provide this in a clear, readable format.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
Right to Erasure
You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected. Note that certain data must be retained to comply with regulatory obligations — in such cases we will explain what can and cannot be deleted.
Right to Restriction of Processing
In certain circumstances — for example, while you dispute the accuracy of data we hold — you may request that we restrict how we process your personal data.
Right to Data Portability
Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transferred directly to another data controller where technically feasible.
Right to Object
You have the right to object to the processing of your personal data where it is based on our legitimate interests. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
Right to Withdraw Consent
Where processing is based on your consent — such as for marketing communications — you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.
Children & Minors
m99m is strictly an adult entertainment platform. The minimum age to register an Account and use any service on the Platform is 21 years old. We do not knowingly collect or process personal data from individuals under the age of 21.
Age verification is a mandatory component of our KYC process. Where we discover that an Account has been registered by a person under the age of 21, we will immediately suspend and close that Account, refund any remaining real-money balance to the original payment source, and securely delete all personal data associated with the minor's Account in accordance with our data retention obligations.
If you believe that a minor has accessed the Platform, please contact us immediately at [email protected] or via live chat so that we can take prompt action.
Security Measures
m99m implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
- Encryption in Transit: All data exchanged between your browser or device and the m99m Platform is encrypted using Transport Layer Security (TLS 1.2 or higher), ensuring that your login credentials, personal details, and financial data cannot be intercepted in transit.
- Encryption at Rest: Sensitive personal data stored on m99m's servers — including KYC documents and financial transaction records — is encrypted at rest using AES-256 encryption standards.
- Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data undergo background checks and data protection training. KYC documents are accessible only to authorised compliance personnel.
- Network Security: The Platform is protected by enterprise-grade firewalls, intrusion detection systems, and real-time threat monitoring. Distributed denial-of-service (DDoS) protection is implemented at the infrastructure level.
- Penetration Testing: m99m conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
- Incident Response: We maintain a documented data breach response procedure. In the event of a security incident affecting your personal data, we will notify you and relevant regulatory authorities within the applicable statutory timeframe.
While we take all reasonable steps to protect your data, no system is entirely immune from security threats. You play an important role in protecting your own data by maintaining a strong, unique password for your m99m Account and by not sharing your login credentials with any third party.
International Data Transfers
m99m operates under an international gaming licence and uses service providers whose infrastructure may be located in jurisdictions outside Malaysia. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that applicable in Malaysia, we ensure that appropriate safeguards are in place prior to the transfer. These safeguards may include:
- Contractual clauses requiring the recipient to protect personal data to an equivalent standard;
- Transfer to recipients located in jurisdictions recognised as providing an adequate level of data protection; or
- Binding corporate rules where the recipient is part of the same corporate group.
If you wish to obtain further information about the specific safeguards applied to any international transfer of your personal data, please contact our support team at [email protected].
Amendments to This Policy
m99m reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our regulatory environment. The date of the most recent revision is displayed at the top of this page.
Where material changes are made to this Policy, we will provide advance notice to registered Players via email notification or a prominent on-site announcement at least 14 days before the changes take effect. Your continued use of the Platform following the effective date of the amended Policy constitutes your acceptance of the revised terms. If you do not agree to the amended Policy, you may close your Account in accordance with the Account closure process described in our Terms & Conditions.
We encourage you to review this Policy periodically to stay informed about how m99m protects your personal data. Previous versions of this Policy are available on request from our support team.
Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way m99m processes your personal data, please contact our Data Protection team through the following channels:
- Live Chat: Available 24/7 on the Platform. Describe your privacy query and request to be connected to the data protection team. Average initial response time: 3–5 minutes.
- Email: [email protected] — mark the subject line "Privacy Policy Enquiry" or "Data Subject Request" for prioritised routing to the relevant team.
- Response Timeframe: We aim to acknowledge all privacy-related requests within 72 hours and to provide a substantive response within 30 calendar days. Complex requests involving data subject access may require additional time, in which case we will notify you of the extended timeline.
- Support Languages: Our data protection team can communicate in English, Bahasa Melayu, and Mandarin, in keeping with m99m's commitment to serving Malaysia's diverse player community.
Have Questions About Your Privacy?
Our team is available 24/7 in English, Bahasa Melayu, and Mandarin. Visit our homepage or read our FAQ for quick answers to common account and privacy questions.
For players aged 21 and above only. Play responsibly. | Responsible Gambling