This Privacy Policy explains what personal information m99win collects from you, how we use it, who we may share it with, how long we retain it, and what rights you hold over your data. By registering an account or using any m99win service, you acknowledge that you have read and understood this Policy.
m99win's approach to data privacy is built on six principles that govern every decision we make about how your information is collected, processed, and stored.
We collect only the personal data that is strictly necessary to provide our services, verify your identity, process your transactions, and meet our legal obligations. We do not collect data speculatively or for purposes we have not disclosed to you.
m99win does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. Your data is used solely to deliver and improve the services you have signed up for.
All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Stored personal data is encrypted at rest and access is restricted to authorised personnel on a strictly need-to-know basis.
This Policy clearly describes every category of data we collect, the specific purpose for collecting it, the legal basis on which we rely, and who we may share it with. There are no hidden uses of your data that are not disclosed here.
Personal data is retained only for as long as necessary for the purpose it was collected or as required by applicable AML and regulatory obligations. Account data is typically retained for five years following account closure.
You hold substantive rights over your personal data, including the right to access, correct, restrict processing, and in certain circumstances request erasure. We will respond to all valid data subject requests within 30 days of receipt.
This Privacy Policy ("Policy") is issued by m99win ("m99win", "we", "us", "our") and governs the collection, use, storage, sharing, and protection of personal data relating to users ("you", "User", "Player") of the m99win website at https://m99win.cam and all associated services, features, mobile interfaces, and support channels (collectively, the "Platform").
m99win is committed to handling personal data responsibly and transparently. This Policy has been prepared in accordance with the principles of internationally recognised data protection frameworks, including but not limited to the General Data Protection Regulation (GDPR) as a baseline standard of good practice, and applicable requirements under the gaming licences held by m99win's operating entity.
For Malaysian users, we note that Malaysia's Personal Data Protection Act 2010 (PDPA) governs the processing of personal data in commercial transactions in Malaysia. Where m99win's practices engage Malaysian data subjects, we endeavour to align with PDPA principles including notice, consent, and purpose limitation. However, m99win is not a Malaysian-incorporated entity and regulatory jurisdiction over the Platform is held by our international licensing authorities.
By creating a m99win Account or continuing to use the Platform after the "Last Updated" date shown above, you confirm your acknowledgement of and consent to the practices described in this Policy. If you do not consent, you must not use the Platform and should close your Account in accordance with the Terms and Conditions.
This Policy applies to all personal data processed by m99win in connection with:
This Policy does not apply to personal data processed by third-party service providers on their own behalf, or to third-party websites linked from the Platform. Please refer to the relevant third party's own privacy notice for information about their data practices.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, location data, and online identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | m99win, as the entity that determines the purposes and means of processing your personal data. |
| "Data Processor" | A third party that processes personal data on m99win's behalf and under m99win's instructions. |
| "KYC" | Know Your Customer — the process of verifying the identity of a User by reviewing government-issued identification documents before processing withdrawals. |
| "AML" | Anti-Money Laundering — regulatory obligations requiring m99win to monitor transactions and report suspicious activity. |
| "Cookie" | A small text file placed on your device when you visit the Platform, used to remember preferences, maintain session state, and collect analytics data. |
m99win collects personal data in the following categories, through the methods described below:
4.1 Data You Provide Directly
4.2 Data Collected Automatically
4.3 Data From Third Parties
m99win processes your personal data on one or more of the following legal bases, as applicable to each specific processing activity:
| Legal Basis | When We Rely On It |
|---|---|
| Contract Performance | Processing necessary to fulfil our obligations to you under the Terms and Conditions, including account management, transaction processing, and game delivery. |
| Legal Obligation | Processing required to comply with AML regulations, KYC requirements, regulatory reporting obligations, and responses to lawful requests from competent authorities. |
| Legitimate Interest | Processing for fraud prevention, platform security, responsible gambling monitoring, and improvement of our services, where our interests are balanced against your rights and freedoms. |
| Consent | Processing for non-essential cookies, marketing communications, and any other activity where we have obtained your explicit consent. You may withdraw consent at any time without affecting prior lawful processing. |
m99win uses your personal data for the following specific purposes:
Marketing opt-out: You may opt out of promotional communications at any time by contacting m99win support at [email protected] (plain text — not a clickable link). Opting out of marketing does not affect the delivery of transactional or service communications necessary for Account operation.
m99win does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
Sub-processors: All third-party data processors engaged by m99win are subject to written data processing agreements that impose data protection obligations equivalent to those applicable to m99win. We conduct due diligence on all processors before engagement.
m99win retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to applicable legal retention requirements. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of Account + 5 years following closure | AML regulatory obligation |
| KYC identity documents | 5 years following Account closure | AML / gaming licence requirement |
| Transaction records | 5 years from transaction date | AML / financial record-keeping |
| Support communications | 2 years from last interaction | Dispute resolution / legitimate interest |
| Marketing preferences | Until opt-out or Account closure | Consent management |
| Cookie / analytics data | 13 months from collection (session cookies expire on browser close) | Platform improvement / consent |
Upon expiry of applicable retention periods, personal data is securely destroyed or irreversibly anonymised in accordance with m99win's data lifecycle management procedures.
m99win implements technical and organisational security measures appropriate to the risk level of the personal data we process. These measures include but are not limited to:
No security system is completely impenetrable. m99win cannot guarantee absolute security of data transmitted over the internet. You should also take steps to protect your own Account by using a strong, unique password and enabling two-factor authentication (2FA).
Depending on your jurisdiction of residence and the legal basis on which we process your data, you may hold some or all of the following rights. To exercise any of these rights, contact m99win's support team in writing at [email protected]. We will respond to all valid requests within 30 days.
m99win's services are strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. All Account registrations are subject to mandatory date-of-birth verification, and KYC processes include documentary age confirmation prior to withdrawal processing.
If m99win becomes aware, or has reasonable grounds to believe, that personal data has been collected from a person under the age of 21 years, that Account will be immediately suspended and all associated personal data will be deleted from our active systems, subject to any mandatory retention obligations under AML regulations.
If you are a parent or guardian and believe that a minor in your care has registered an Account on m99win, please contact us immediately at [email protected] so that we can take appropriate action.
m99win operates on an international basis and your personal data may be transferred to, stored in, and processed in countries other than Malaysia. This includes countries where m99win's hosting infrastructure, data processors, or game platform providers are located.
Where personal data is transferred outside the jurisdiction of its collection, m99win ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that required in its jurisdiction of origin. These safeguards may include:
By using the Platform, you acknowledge that your personal data will be processed in the manner and locations described in this Policy.
The m99win Platform may contain references to, or integration with, third-party services including payment gateways and game delivery platforms. This Policy applies only to personal data processed directly by m99win. Any personal data that you submit to, or that is collected directly by, third-party platforms or services is governed by those parties' own privacy policies.
m99win is not responsible for the privacy practices of third parties and recommends that you review the privacy policies of any third-party services you interact with in connection with your use of the Platform.
m99win reserves the right to amend this Privacy Policy at any time. Where changes are material — for example, where a new category of personal data is collected, a new sharing arrangement is introduced, or rights are substantively altered — m99win will provide at least 14 days' prior notice via a notice on the Platform or by email to your registered email address.
The "Last Updated" date displayed at the top of this Policy indicates the date on which the most recent amendments took effect. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the Platform and request Account closure.
For all data privacy enquiries, including requests to exercise your data subject rights, questions about this Policy, or to report a concern about m99win's data handling practices, please contact us through the following channels:
m99win will acknowledge all formal data subject requests within 5 business days and provide a substantive response within 30 days of receipt. Where a request is particularly complex or where a large number of requests are received simultaneously, this period may be extended by a further 60 days, with notification to the requester.
If you are not satisfied with m99win's response to your data privacy concern, you may escalate the matter to the data protection supervisory authority in your country of residence. For Malaysian users, the relevant authority is the Personal Data Protection Department (JPDP) of Malaysia — however, note that m99win's regulatory jurisdiction is held by international gaming authorities, and JPDP's direct enforcement jurisdiction over m99win may be limited.
This Privacy Policy was last updated on 1 January 2026. It supersedes all previous versions. Please check this page periodically to stay informed of any changes to m99win's data handling practices.
Now that you understand how m99win handles your data, feel free to explore everything the platform has to offer. If you have any remaining questions, our 24/7 support team is here to help in English, Bahasa Melayu, or Mandarin.