GO99 PERSONAL DATA PROTECTION

Privacy Policy go99 – How We Protect Your Personal Data

Go99 takes our responsibility to protect the privacy and personal data security of every Malaysian member seriously. This document clearly and transparently explains how go99 collects, uses, stores, and safeguards your information — in full compliance with the Personal Data Protection Act 2010 (PDPA) Malaysia.

Updated: 1 January 2026  |  Estimated reading time: 10 minutes

Go99's Privacy Commitment to You

Six core principles that guide how go99 handles the personal data of every Malaysian member.

256-bit SSL Encryption at All Times

All data transmitted between your device and go99's servers is protected by 256-bit SSL encryption — the same highest-grade security standard used by Malaysia's leading banking institutions such as Maybank and CIMB. Your information is never in transit without full protection.

Your Data Is Never Sold to Any Party

Go99 has never sold, rented, or traded members' personal data to any third party for commercial purposes, and never will. Your data belongs to you — not to us. This is an absolute commitment from go99 that will never change.

Full PDPA Malaysia Compliance

Go99's Privacy Policy is designed and enforced in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means you have clear and enforceable rights over your data, including the rights of access, correction, and erasure.

Strict Internal Data Access Controls

Only go99 staff who genuinely require access to your data — such as the customer support or verification teams — are authorised to view it. All access is logged and periodically audited to ensure no internal misuse occurs.

Right to Erasure upon Request

You have the right to request that go99 delete your personal data. Once your account is closed and all financial obligations are settled, your personal data will be removed from go99's active systems within 30 days, except where retention is required by law.

Immediate Notification in the Event of a Breach

In the event of any security breach that may involve your data, go99 is committed to notifying you within 72 hours via your registered email address. Transparency in critical situations is the foundation of our trust with you.

1Information We Collect

Go99 collects various types of information from you when you use our platform. Understanding what data is collected allows you to make more informed decisions about your use of go99's services.

Information You Provide Directly:

  • Full name as per MyKad or passport
  • MyKad number or passport number
  • Date of birth and gender
  • Active email address and mobile number
  • Residential address in Malaysia
  • Payment method details — Touch 'n Go eWallet account name, GrabPay, Boost, ShopeePay, DuitNow, or FPX account (Maybank2u, CIMB Clicks)

Information Collected Automatically:

  • Your device's IP address
  • Type and version of web browser used
  • Your device's operating system
  • Gaming history and betting activity within the go99 platform
  • Login session data, including time and duration
  • Cookies and similar tracking technologies

go99 Note: go99 does not collect credit or debit card numbers directly. All payment processing is handled by licensed payment providers that comply with international payment security standards (PCI-DSS).

2How We Use Your Data

Go99 uses the data collected solely for legitimate purposes necessary to operate the platform. We do not use your data for purposes unrelated to go99's services without your explicit consent.

Purpose of Use Data Used Legal Basis
Identity verification & account registration Name, MyKad, email, phone Contract & Legal Compliance
Processing deposits & withdrawals Payment information and account balance Contract
Fraud prevention & security IP address, login sessions, account activity Go99's legitimate interests
Customer support Account history and transactions Contract
Regulatory compliance & AML All related data Legal Obligation
Marketing (with your consent) Email, phone number Consent
Analytics & platform improvement Anonymised usage data Go99's legitimate interests

Go99 uses your gaming activity data in aggregated, anonymised form to improve the user experience, refine the platform interface, and identify the most popular games among our Malaysian players. No individual data is shared in this analytics process.

3Legal Basis for Data Processing

Go99 only processes your personal data where a valid legal basis exists under Malaysia's PDPA. The legal bases applicable to go99's data processing are as follows:

  • Contract: Processing required to fulfil the service contract between you and go99 — such as verifying your identity, processing deposits via DuitNow or Touch 'n Go eWallet, and managing your account.
  • Legal Obligation: Processing required under Malaysian law, including anti-money laundering (AML) requirements and reporting obligations to regulatory authorities.
  • Legitimate Interests of go99: Processing required for the legitimate business interests of go99, such as fraud prevention, platform security, and service improvement – provided this does not override your fundamental rights.
  • Consent: Processing such as sending marketing communications that you have explicitly consented to receive. You may withdraw this consent at any time.

4Sharing Data with Third Parties

Go99 does not sell or trade your personal data to any party. However, in the course of operating the platform, go99 may share data with a limited set of third-party categories as follows:

  • Licensed Payment Providers: Payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX processors, which require minimal data to process your transactions.
  • Game Providers: Companies such as Evolution Gaming, Pragmatic Play Live, and Playtech that provide live casino gaming platforms – they receive the session data necessary to operate the games.
  • Technology Service Providers: Companies providing go99's technical infrastructure, such as server hosting and cybersecurity services – subject to strict confidentiality agreements.
  • Authorities and Regulatory Bodies: go99 will disclose data where required by court order, regulatory authority directive, or applicable Malaysian law.

All third parties that receive data from go99 are bound by strict data processing agreements and are required to maintain the same or higher data security standards as those applied by go99. go99 is responsible for ensuring this compliance.

5go99 Data Security

The security of your personal data is go99's foremost technical and operational priority. We invest continuously in the latest security infrastructure to ensure your data remains protected at all times.

The security measures implemented by go99 include:

  • 256-bit SSL/TLS encryption for all data communications between you and go99's servers
  • Passwords are stored using one-way hashing algorithms that cannot be decrypted
  • Two-factor authentication (2FA) for access to sensitive account functions
  • 24/7 security monitoring by go99's dedicated IT team
  • Regular security audits conducted by independent third-party cybersecurity firms
  • Data segregation between production and testing environments
  • Role-based access control (RBAC) for go99's internal staff
  • Security incident response plan reviewed and updated every 6 months

Shared Responsibility: While go99 takes every necessary measure to protect your data on the platform side, you are also responsible for keeping your login credentials secure. Please use a strong password, do not share your go99 account details, and contact go99 immediately if you suspect any unauthorised activity on your account.

6Use of Cookies

Go99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the go99 platform.

Essential cookies cannot be disabled as they are required for the go99 platform to function properly — including maintaining login sessions and transaction security. Analytical and preference cookies can be managed through your web browser settings. However, disabling certain cookies may affect some platform functionality.

Go99 does not use cookies for third-party advertising purposes or to track your activity on websites outside the go99 platform.

7Data Storage & Retention Period

Go99 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under Malaysian law. General retention periods are as follows:

  • Active Account Data: Retained for the duration of the active account and up to 7 years after account closure to meet anti-money laundering legal requirements.
  • Transaction Records: All financial transaction records are retained for a minimum of 7 years in accordance with Malaysia's tax reporting requirements and financial regulations.
  • Security Log Data: Access and security logs are retained for 12 months for the purpose of investigating security incidents should they arise.
  • Support Communications: Customer support communication records are retained for 3 years for reference and quality training purposes.
  • Marketing Data: Retained until you withdraw your marketing consent or close your go99 account.

Once the retention period expires, your personal data will be securely deleted or permanently anonymised across all go99 systems.

8Your Rights as a Data Subject

As a go99 member in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA) Malaysia:

Right of Access

You may request a copy of the personal data go99 holds about you. go99 will provide this information within 21 days.

Right to Rectification

You have the right to correct any inaccurate or incomplete personal data held in your go99 account.

Right to Erasure

You may request go99 to delete your personal data under certain circumstances, subject to legal obligations.

Right to Restriction

You may request that go99 temporarily restrict the processing of your data in certain circumstances, such as while a dispute is being resolved.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time — no reason required.

Right to Portability

You may request go99 to provide your data in a machine-readable format for transfer to another provider.

9Cross-Border Data Transfers

In the context of operating a global online casino platform, go99 may need to transfer your personal data to servers or entities located outside Malaysia – particularly to international live casino game providers such as Evolution Gaming.

When cross-border data transfers occur, go99 ensures that a level of protection equivalent to or higher than Malaysia's PDPA is upheld through:

  • Legally binding Data Processing Agreements
  • Confirmation that recipients comply with equivalent data protection standards
  • Use of internationally recognised standard contractual clauses

Data transferred across borders is limited to only what is strictly necessary to provide the gaming services you use. go99 does not transfer sensitive data such as your MyKad number to overseas game providers.

10Children's Privacy

The go99 platform is strictly for individuals aged 21 and above. go99 does not knowingly collect or process any personal data from minors.

Should go99 discover that personal data has been collected from an individual under the age of 21 without proper age verification, we will take immediate steps to delete that data, close the relevant account, and refund any funds held in it. Parents or guardians who suspect their child has registered a go99 account without authorisation may contact us directly at support@go99-khelo.net.

11Privacy Policy Amendments

Go99 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes to the services we offer. The date of the most recent revision will always be noted at the top of this document.

For material or significant changes, go99 will notify you via in-platform notifications, an email to your registered address, or a prominent notice on the go99 homepage before the changes take effect. Your continued use of the go99 platform after the amendments take effect will be deemed as your acceptance of the updated policy.

12How to Contact go99 for Privacy Matters

For any questions, concerns, or requests relating to your privacy and data protection at go99, you may reach us through:

  • Dedicated Privacy Email: support@go99-khelo.net (please state "Privacy Enquiry" in the email subject)
  • Live Chat: Available 24/7 via the chat icon on the go99 platform – select the "Privacy & Data" category
  • Language of Service: Bahasa Melayu and English

Go99 is committed to responding to all privacy enquiries within 3 business days. Requests involving data access or deletion may take up to 21 business days to be fully processed, depending on the complexity of the request.

Useful Links: To learn more about your rights, please also read the go99 Terms & Conditions and go99 Responsible Gaming Guide.

How to Submit a Data Request to go99

Four simple steps to submit a personal data request to the go99 privacy team.

1
Identify the Type of Request

Specify the type of data request you are making – access, correction, deletion, restriction, or portability.

2
Contact go99 via Email

Send an email to support@go99-khelo.net with the subject line "Personal Data Request", including your name and go99 account number.

3
Identity Verification

Go99 will request basic identity verification to confirm that the request is being made by the legitimate account owner.

4
Processing Within 21 Days

Go99 will process your request and respond within 21 business days from the date your identity is verified.

🔒

Your Data Is Safe with go99 — Register with Confidence!

Go99 protects your privacy to the highest security standards. Register a free account today and enjoy 500+ of Malaysia's best online casino games with complete peace of mind that your data is always safe.

256-bit SSL Protected PDPA Malaysia Compliant Data Not Sold 72-Hour Breach Notification
Bahasa Melayu