Official Data Protection

Privacy Policy ss99 — Your Personal Data Security

Ss99 is committed to protecting the privacy and personal data security of every user. This policy clearly explains how we collect, use, store, and protect your information — in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026 Complying with Malaysia's PDPA 256-bit SSL Protected
Latest Version: 2026

Six Ways of ss99 Protecting Your Data

Privacy is more than words — it is a real responsibility that ss99 takes seriously every day.

256-bit SSL Encryption

All data transmitted between your device and ss99 servers is protected with bank-grade 256-bit SSL encryption. No external party can intercept or read your information in transit.

Full PDPA Compliance

Ss99 fully complies with Malaysia's Personal Data Protection Act 2010. Every aspect of your data collection and processing is conducted in accordance with the seven PDPA principles stipulated by the Malaysian government.

No Data Sales to Third Parties

Your personal data has never been and will never be sold, rented, or traded to any third party for commercial or marketing purposes without your explicit consent.

Secure & Isolated Servers

Your data is stored on integrated servers protected by layered firewalls, an intrusion detection system (IDS), and strict access controls that permit only authorised personnel.

User Data Controls

You have full control over your personal data. Through your SS99 account settings, you can access, amend, or request deletion of your data at any time in accordance with your rights under the PDPA.

24/7 Anti-Fraud Monitoring

Ss99's automated monitoring system operates 24 hours a day to detect any suspicious activity on your account. Any unauthorised access will be blocked immediately and you will be notified.

Privacy Policy ss99 Complete

At SS99, we understand that your trust is the foundation of our relationship. Every time you register, make a deposit, or simply browse our platform, you are entrusting us with valuable personal information. We do not take that trust lightly.

This Privacy Policy is written in plain language so you know exactly what happens with your data — not just confusing legal jargon. We believe in full transparency: no hidden language, no undisclosed practices.

This policy applies to all users of the SS99 platform, including the website, mobile app, and any related services provided by SS99. It should be read together with the Terms and Conditions and Responsible Gaming Policy us.

Effective Date: This Privacy Policy takes effect on 1 January 2026 and supersedes all previous versions. Any amendments will be communicated to registered users at least 7 days before taking effect.

1 Information We Collect

Ss99 only collects information that is genuinely necessary to provide services, comply with legal requirements, and ensure platform security. We do not collect excessive or irrelevant data.

A. Information You Provide Directly:

  • Full name as it appears on your official identification document.
  • National identity card number (MyKad) or passport number for KYC identity verification purposes.
  • Date of birth for age verification — we only accept users aged 18 and above.
  • An active email address for account communications and notifications.
  • Mobile phone number for two-factor authentication (2FA) and important alerts.
  • Current residential address for verification and legal compliance purposes.
  • Bank account or digital wallet information for processing deposits and withdrawals.
  • Copies of identity documents, bank statements, or proof of address during the KYC process.

B. Information Collected Automatically:

  • Your IP address and network information when you access the SS99 platform.
  • Device type, operating system, and web browser version you are using.
  • Login session data including the date, time, and duration of each session.
  • Transaction history of deposits, withdrawals, and wagering activity on the platform.
  • Usage data such as pages visited, buttons clicked, and time spent on each page.
  • Cookie and related tracking technology information (see Section 7).

Important Note: ss99 does not collect unnecessary information. All data collected has a clear purpose as stated in this policy. We do not collect sensitive data such as health information, political views, or religious affiliations.

2 How We Use Your Data

Every piece of data collected is used for a specific and legitimate purpose. Below is a detailed explanation of how ss99 uses your personal information in the platform's day-to-day operations.

Purpose of Use Description Data Used
Account Management Registering, verifying, and managing your ss99 user account. Name, email, phone number
KYC Identity Verification Meeting anti-money laundering (AML) requirements and age verification. IC/Passport, date of birth, address
Financial Processing Processing deposits, withdrawals, and other financial transactions securely. Bank/digital wallet information
Platform Security Detecting and preventing fraud, money laundering, and unauthorized access. IP address, session data, activity logs
Customer Support Resolving inquiries, complaints, and technical issues efficiently. Email, transaction history
Communications & Promotions Sending bonus notifications, promotions, and important updates (with your consent). Email, phone number
Responsible Gaming Monitoring gameplay patterns to detect signs of problem gambling and offer assistance. Gaming activity data
Platform Improvement Analyzing aggregated usage data to improve the user experience. Anonymised usage data

3 Legal Basis for Data Processing

Ss99 processes your personal data on valid legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA). There are four primary bases we rely on depending on the type of processing carried out.

  • Contract Performance: Processing required to provide ss99 services to you — including account management, transaction processing, and customer support.
  • Legal Obligation: Processing required to comply with legal obligations such as KYC verification, AML reporting, and financial records mandated by Malaysian authorities.
  • Legitimate Interests: Processing for platform security, fraud prevention, and service improvement purposes — where ss99's interests do not override your fundamental privacy rights.
  • Consent: For marketing communications, delivery of promotions, and any optional processing beyond contractual requirements — we request your explicit consent, which you may withdraw at any time.

Your Rights: Where data processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4 Data Sharing & Disclosure

Ss99 does not sell or trade your personal data. However, in certain limited situations, we may need to share your information with the following parties — and this is done solely to enable the platform to function properly or to comply with the law.

  • Payment Service Providers: Minimal financial data is shared with the payment gateways and banks used to process your deposit and withdrawal transactions. These providers are bound by strict confidentiality agreements.
  • KYC Service Providers: Identity verification documents are shared with authorized third-party KYC services for automated verification purposes only — not for any other purpose.
  • Game Providers: Minimal game session data is shared with game platform providers partnering with ss99 for technical purposes only.
  • Statutory Authorities: ss99 will disclose information to Malaysian authorities (such as BNM, PDRM, or SPRM) when required by law or a valid court order.
  • Cloud Services & Infrastructure: Data is stored using cloud infrastructure services that comply with international security standards, subject to binding data processing agreements.

Our Guarantee: All third parties receiving your data through ss99 are contractually bound to use that data only for the stated purposes and to protect it in accordance with the security standards set by ss99.

5 Data Security Measures

Protecting your data is a core technical priority at ss99. We continuously invest in the latest security infrastructure to keep your data safe from increasingly sophisticated cyber threats.

  • 256-bit SSL/TLS encryption for all data transmitted between your device and ss99 servers.
  • Encryption at rest using AES-256 for data stored in databases.
  • Two-factor authentication (2FA) recommended for all user accounts.
  • 24/7 security monitoring with AI-powered automated threat detection systems.
  • Regular security audits conducted by independent internationally accredited parties.
  • Role-based access control (RBAC) that restricts staff access to only the data required.
  • A comprehensive security incident response plan to address any data breaches swiftly.
  • Periodic penetration testing conducted to identify and remediate vulnerabilities.

Shared Responsibility: While SS99 takes all reasonable measures to protect your data, account security also depends on your own actions — such as using a strong password, not sharing your login credentials, and enabling 2FA.

6 Data Retention Period

Ss99 does not retain your personal data indefinitely. We have a clear data retention policy that complies with Malaysian legal requirements regarding financial records and identification retention periods.

  • Active Account Data: Retained for the entire duration your account remains active and in good standing.
  • Financial Transaction Data: Retained for a minimum of 7 years after the transaction date, in line with the Companies Act and Malaysian financial regulations.
  • KYC Documents: Retained for a minimum of 6 years after the termination of the business relationship, in line with the requirements of the Anti-Money Laundering Act 2001.
  • Security Logs: Retained for 12 months for security investigation and digital forensics purposes.
  • Marketing Data: Deleted within 30 days after you withdraw consent to receive marketing communications.
  • Account Closed: Core data is retained for 5 years after account closure for legal compliance purposes before being permanently deleted.

Once the retention period expires, ss99 will securely delete or anonymise your data in accordance with approved data deletion procedures. Anonymised data can no longer be linked to your identity and may be retained for internal analytics purposes.

7 Cookies & Tracking Technologies

Ss99 uses cookies and similar tracking technologies to enhance your experience on our platform. This section explains the types of cookies we use and how you can control them.

  • Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled.
  • Performance Cookies: Collecting aggregated and anonymized usage data to help us understand how users interact with the platform and identify areas for improvement.
  • Functional Cookies: Saving your preferences such as display settings, preferred language, and auto-login for a more convenient experience.
  • Analytics Cookies: Used to analyse platform traffic and usage patterns for internal service improvement purposes.

You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality and user experience of the SS99 platform. For guidance on managing cookies in popular browsers, refer to the relevant browser's official documentation.

No Third-Party Cookies for Advertising: ss99 does not use third-party tracking cookies for advertising purposes that track your activity on other websites outside the ss99 platform.

8 Your Rights as a Data Subject

Under Malaysia's PDPA, you have certain rights regarding your personal data that SS99 fully respects. Below are your rights and how to exercise them.

1

Access Rights

You have the right to request a copy of the personal data SS99 holds about you. We will provide this information within 21 business days.

2

Right to Rectification

If your data is inaccurate or outdated, you have the right to request a correction. You can update most information directly through your account settings.

3

Right to Erasure

You may request deletion of your data in certain circumstances — such as when the data is no longer needed or processing was based on consent that has since been withdrawn.

4

Right to Object

You have the right to object to the processing of your data for certain purposes, such as direct marketing. Your objection will be processed promptly.

5

Right to Data Portability

You may request your data in a machine-readable format for transfer to another service provider — subject to technical requirements.

6

Right to Withdraw Consent

For consent-based processing, you may withdraw your consent at any time without affecting any processing that has already taken place.

How to Exercise Your Rights: To submit any request relating to your data rights, contact our Privacy Officer team via email [email protected] or via live chat. We will verify your identity before processing any request to ensure the security of your data.

9 Cross-Border Data Transfers

In certain circumstances, your personal data may be processed or stored outside Malaysia — for example, when we use cloud service providers or internationally certified technical infrastructure.

  • Any cross-border data transfers are conducted in accordance with Section 129 of Malaysia's PDPA and only to countries with an equivalent or higher level of data protection.
  • Ss99 ensures that appropriate data protection agreements — such as Standard Contractual Clauses (SCC) — are in place before any data transfer is permitted.
  • Our cloud service providers comply with international security standards such as ISO 27001 and SOC 2 Type II.
  • You may request further information about cross-border data transfers involving your data by contacting our Privacy Officer.

10 Children's Privacy

Ss99 is a platform exclusively for individuals aged 18 and above. We take seriously our responsibility to prevent minors from accessing online gambling platforms.

  • The ss99 platform strictly does not accept registrations from individuals under the age of 18.
  • The KYC verification process is specifically designed to detect and reject registrations from underage users.
  • Should ss99 discover that a minor's personal data has been collected inadvertently, we will delete that data immediately and close the relevant account.
  • Parents or guardians concerned about their children's use of the platform are encouraged to contact us via customer support.

Complaints Relating to Children: If you become aware that a minor is using the ss99 platform, please contact us immediately at [email protected]. We will investigate and take action within 24 hours.

11 Amendments to This Privacy Policy

Ss99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform technology developments.

  • Any significant amendments will be communicated to all registered users via email at least 7 days before the amendment takes effect.
  • Amendment notices will also be clearly displayed on the ss99 website homepage throughout the notice period.
  • The effective date of the latest version will always be stated at the top of this document.
  • Continued use of the ss99 platform after the effective date of any amendment constitutes acceptance of the updated terms.
  • If you disagree with any amendments, you have the right to close your account before the amendments take effect.

Previous Version: Copies of previous versions of the Privacy Policy are available upon request. Contact [email protected] to obtain a copy of the version you need.

12 Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding how ss99 handles your personal data, our Privacy Officer team is ready to assist. We are committed to resolving every inquiry transparently and in a timely manner.

  • Privacy Email: [email protected] — for specific enquiries regarding our privacy policy and data rights.
  • General Support: [email protected] — for general enquiries about your account and services.
  • Live Chat: Available 24/7 via the chat icon at the bottom corner of the SS99 platform.
  • Response Time: We aim to respond to all privacy-related inquiries within 3 business days and complex inquiries within 21 business days.

Complaints to Regulatory Authorities: If you are dissatisfied with how ss99 has handled your privacy complaint after going through our internal channels, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.

Questions About SS99 Privacy Policy

Absolutely not. SS99 has never sold, rented, or traded your personal data to any third party for commercial purposes. Any data sharing that occurs is limited to operational necessities such as payment providers and KYC services, and only under strict contractual safeguards.

You may submit a data access request by emailing [email protected] or contacting customer support via live chat. Include your full name and registered email address in your request. We will verify your identity and provide a copy of your data within 21 business days.

Following account closure, ss99 retains basic data for 5 years for legal compliance purposes. Financial transaction data is retained for a minimum of 7 years in line with Malaysian legal requirements. Once the stipulated retention period expires, your data will be permanently deleted or securely anonymised.

Yes, you have the right to request data deletion in certain circumstances. However, there are lawful grounds under which we are required to retain certain data to comply with Malaysian law, including financial record-keeping and AML requirements. We will clearly explain which data can be deleted and which must be retained for legal reasons when you submit a request.

ss99 only uses your data to send promotions and offers related to our own platform — and only with your consent. We do not use your data for third-party advertising or to target you with ads on other platforms. You may opt out of marketing communications at any time via your account settings or by contacting us.

In the event of a data breach affecting your personal data, ss99 is committed to notifying affected users within 72 hours of becoming aware of the breach. We will also report to the relevant authorities in accordance with legal requirements. The notice will contain information about the nature of the breach, the data involved, and the steps we are taking to address it.

Your Privacy Is Protected. Now. Enjoy ss99 With Peace of Mind.

Now that you have a full understanding of how ss99 protects your personal data, register a free account today and experience a safe, fair, and transparent online gaming platform — built specifically for Malaysian players.

Your data is protected in accordance with Malaysia's PDPA. SS99 is committed to full transparency in every aspect of handling your personal data.

Bahasa Melayu