Privacy at a Glance
How We Protect Your Data
Below are the six core pillars of our approach to data privacy at Perdana99. Full details are set out in the sections that follow.
SSL-Encrypted Transmission
All data exchanged between your browser and Perdana99's servers is encrypted using 256-bit SSL/TLS protocols. Your registration details, payment information, and KYC documents are never transmitted in plain text.
No Data Selling
Perdana99 does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is used exclusively for account operation, verification, and service improvement.
Minimal Data Collection
We collect only the data necessary to operate your account, comply with KYC requirements, process payments, and provide support. If we don't need it, we don't collect it.
Defined Retention Periods
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected — or as required by applicable regulations. Account data is deleted upon verified account closure requests.
Your Rights, Respected
You have the right to access, correct, and request deletion of your personal data. You may also object to certain types of processing and request data portability. We respond to all valid requests within 30 days.
Transparent Cookie Use
We use cookies to maintain session security, analyse platform performance, and personalise your experience. You are informed of cookie use upon first visit and may manage your preferences through browser settings.
Contents
Introduction
This Privacy Policy ("Policy") describes how Perdana99 ("we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "Player", "User") who access or use the Perdana99 online gaming platform at https://perdana99.cam and all related subdomains and digital services (collectively, the "Platform").
Perdana99 is committed to handling personal data responsibly and in accordance with applicable data protection principles. This Policy applies to all personal data collected from players located in Malaysia, including residents of Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions across the country.
By registering an account on Perdana99, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions.
Note: If you do not agree to this Privacy Policy, you must not register an account or submit any personal data to Perdana99. For queries about your data rights, please contact us at [email protected].
Definitions
The following terms shall carry the meanings assigned below throughout this Policy:
- "Personal Data" means any information relating to an identified or identifiable natural person — including name, identification number, contact details, financial data, and online identifiers such as IP address or cookie data.
- "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, erasure, or destruction.
- "Data Controller" means Perdana99, which determines the purposes and means of processing your personal data.
- "Data Processor" means any third party that processes personal data on behalf of Perdana99 — such as payment service providers, identity verification services, and cloud infrastructure providers.
- "KYC" means Know Your Customer — the mandatory identity and address verification process required for account withdrawal authorisation.
- "Cookie" means a small data file stored on your device by a website that enables session management, preference retention, and usage analytics.
- "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data.
Personal Data We Collect
Perdana99 collects personal data in the categories set out below. We apply the principle of data minimisation — collecting only what is necessary for each specific purpose.
| Category | Types of Data | Collection Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad / Passport / Driver's License number | Account registration, KYC verification, age verification |
| Contact Data | Email address, Malaysian mobile number, residential address | Account communications, support, withdrawal verification |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay, DuitNow / FPX), transaction history | Payment processing, withdrawal authentication, fraud prevention |
| Technical Data | IP address, device type, browser information, session data, login timestamps | Security monitoring, fraud detection, platform analytics |
| Usage Data | Pages visited, games played, bets placed, session duration, features accessed | Platform improvement, responsible gambling monitoring, personalisation |
| Document Data | Scans or photographs of identity documents, utility bills, selfies with ID | KYC compliance, withdrawal authorisation |
| Communications Data | Live chat transcripts, support email content, survey responses | Support resolution, quality assurance, dispute records |
Sensitive Data: Perdana99 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or political opinions. If any such data is incidentally included in documents submitted for KYC, it will not be processed for any purpose other than identity verification.
How We Collect Personal Data
Personal data is collected through the following channels and interactions:
- Direct Registration: Information you provide when creating your Perdana99 account, including name, email, contact number, and date of birth.
- KYC Submission: Identity documents and proof-of-address submitted through the account verification portal.
- Payment Processing: Financial data exchanged when making deposits or requesting withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency channels.
- Platform Activity: Automated collection of usage data, session information, and device/browser technical data as you navigate and play on the platform.
- Support Interactions: Information shared during live chat conversations or via email correspondence with our support team.
- Cookies & Analytics: Technical data collected via cookies, web beacons, and similar tracking technologies embedded in the platform.
Purpose of Data Processing
Perdana99 processes your personal data only for the specific, legitimate purposes listed below. Data will not be used for purposes incompatible with those stated without obtaining fresh consent or establishing a separate lawful basis.
- Account Management: Creating, maintaining, and administering your Perdana99 player account.
- Identity & Age Verification: Confirming that all players are aged 21 or above and that account details match submitted documentation.
- Payment Processing: Facilitating MYR deposits and withdrawals through your chosen Malaysian payment method, including DuitNow, FPX, e-wallets, and bank transfers.
- Fraud Prevention & Security: Detecting and preventing unauthorised access, bonus abuse, money laundering, and other fraudulent or prohibited activities.
- Regulatory Compliance: Meeting applicable legal and regulatory obligations, including anti-money-laundering (AML) and counter-terrorism financing (CTF) requirements.
- Responsible Gambling: Monitoring player behaviour to identify potential problem gambling patterns and applying appropriate responsible gambling interventions where necessary.
- Customer Support: Responding to queries, resolving disputes, and providing account assistance.
- Platform Improvement: Analysing usage patterns to improve platform stability, game performance, and user experience.
- Marketing Communications: Sending promotional notifications and personalised offers to players who have opted in to receive such communications. You may withdraw consent at any time.
Legal Basis for Processing
Perdana99 relies on one or more of the following lawful bases when processing your personal data:
- Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — such as account administration, payment processing, and support delivery.
- Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and CTF obligations.
- Legitimate Interests: Processing for fraud prevention, platform security, and responsible gambling monitoring — where our interests do not override your rights and freedoms.
- Consent: Processing for marketing communications and non-essential cookies — where you have given explicit, informed consent and retain the right to withdraw it at any time.
Data Sharing & Disclosure
Perdana99 does not sell, rent, or trade your personal data. We may share personal data only in the following limited and controlled circumstances:
Payment Service Providers
Financial data is shared with our payment processing partners — including providers facilitating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency transactions — for the sole purpose of processing your deposits and withdrawals. These partners are contractually bound to handle data securely and in accordance with applicable data protection standards.
Identity Verification Services
KYC document data may be shared with licensed identity verification service providers to confirm the authenticity of submitted documents. These providers process data only as directed by Perdana99 and are not permitted to retain or use the data for any independent purpose.
Regulatory & Law Enforcement Authorities
Perdana99 may disclose personal data to competent regulatory bodies or law enforcement agencies where required by applicable law, court order, or to protect the rights and safety of players and third parties. Such disclosures will be limited to what is strictly necessary.
Technology & Infrastructure Providers
Cloud hosting, analytics, and platform infrastructure providers may have access to certain technical or usage data in the course of providing services to Perdana99. All such providers are engaged under data processing agreements that impose appropriate technical and contractual safeguards.
No Third-Party Advertising: Perdana99 does not share your personal data with advertising networks, data brokers, or any third party for the purpose of targeting you with advertisements on external platforms.
International Data Transfers
Some of our service providers and infrastructure partners operate data processing facilities outside of Malaysia. Where personal data is transferred internationally, Perdana99 takes appropriate steps to ensure that the receiving party applies equivalent levels of data protection — including contractual safeguards, standard contractual clauses, and security certifications where applicable.
Where transfers occur to jurisdictions without an adequacy determination, Perdana99 implements appropriate safeguards to protect your data in transit and at rest, including encryption and access controls.
Data Retention
Perdana99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of account plus 5 years following account closure (regulatory minimum) |
| Financial & Transaction Data | 7 years from the date of transaction (AML/CTF compliance requirement) |
| KYC Documents | Duration of account plus 5 years following account closure |
| Technical & Usage Data | Up to 24 months from collection, or until account closure |
| Support & Communication Records | 3 years from the date of interaction |
| Marketing Consent Records | Until consent is withdrawn, plus 1 year for audit purposes |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.
Cookies & Tracking Technologies
Perdana99 uses cookies and similar tracking technologies to operate the platform effectively, maintain session security, and analyse usage patterns. Cookies are small text files stored on your device that enable the platform to recognise you between visits.
- Essential Cookies: Required for core platform functionality — including session management, login persistence, and secure payment flows. These cannot be disabled without affecting platform operation.
- Analytical Cookies: Used to collect anonymised data about how players use the platform — page visits, session lengths, and feature engagement — to inform platform improvements.
- Functional Cookies: Store your preferences such as language settings, game display options, and notification preferences.
- Security Cookies: Assist in detecting and preventing fraudulent activity and unauthorised account access.
Managing Cookies: You may configure your browser to refuse non-essential cookies or to alert you when cookies are being set. Please note that disabling essential cookies may impair your ability to log in, make deposits, or access certain features of the Perdana99 platform.
Your Data Rights
Subject to applicable law, you hold the following rights in relation to the personal data that Perdana99 holds about you. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within 30 days.
Right of Access
Request a copy of the personal data we hold about you, along with information about how it is used.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your account.
Right to Erasure
Request deletion of your personal data where there is no longer a lawful basis for continued processing.
Right to Restrict Processing
Request that we limit how we use your data while a complaint or accuracy dispute is being resolved.
Right to Data Portability
Request a structured, machine-readable copy of your personal data for transfer to another service.
Right to Object
Object to processing based on legitimate interests, including direct marketing and profiling activities.
Verification Requirement: For security purposes, we may require you to verify your identity before we action any data rights request. This is to protect against unauthorised access to your account information.
Data Security Measures
Perdana99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction.
- 256-bit SSL/TLS encryption for all data transmitted between your device and Perdana99 servers.
- Encrypted storage for all KYC documents and financial records at rest.
- Role-based access controls ensuring only authorised personnel can access player data.
- Continuous security monitoring and intrusion detection on all production systems.
- Regular security assessments and penetration testing of the platform infrastructure.
- Documented incident response procedures ensuring prompt action in the event of a data breach.
In the event of a personal data breach that is likely to result in a high risk to your rights, Perdana99 will notify affected players without undue delay, in accordance with applicable data breach notification requirements.
Minors & Age Restriction
The Perdana99 platform is strictly for use by individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21.
During registration, players are required to confirm their date of birth and consent to age verification. Where Perdana99 reasonably suspects that a player is under 21, the account will be suspended and the matter investigated. Any personal data found to belong to an underage individual will be deleted promptly upon confirmation.
Parental Notice: If you believe a minor has registered a Perdana99 account using false information, please contact our support team immediately at [email protected]. We will investigate and take appropriate action, including deletion of any data collected.
Third-Party Links & Services
The Perdana99 platform may contain references to third-party services such as licensed payment processors and game content providers. These third parties operate under their own privacy policies, which are independent of this Policy.
Perdana99 is not responsible for the privacy practices of third-party service providers. We encourage you to review the privacy policies of any external service you interact with in connection with your Perdana99 account.
Updates to This Policy
Perdana99 may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable regulations. Material updates will be communicated to registered players via the email address associated with their account and through a prominent notice on the platform, with at least seven (7) days' advance notice where practicable.
The date of the most recent revision is displayed at the top of this page. Continued use of the Perdana99 platform following the effective date of any update constitutes your acceptance of the revised Policy. We recommend reviewing this page periodically to stay informed of how your data is handled.
Contact Us — Data Queries & Requests
For questions, concerns, or requests relating to this Privacy Policy or the personal data Perdana99 holds about you, please contact our support team through the channels below. All data rights requests will be acknowledged within 5 business days and actioned within 30 days.
Live Chat
Available 24/7 on the platform
Average response: under 5 minutes
When submitting a data rights request, please include your registered email address and account username (if applicable) so we can locate your data efficiently and verify your identity before processing the request.