Privacy Policy

This Privacy Policy ("Policy") describes how egames99 ("the Company", "we", "us", "our"), the operator of the online gaming platform accessible at https://egames99.cam ("the Platform"), collects, processes, stores, and protects personal data belonging to its users, members, and website visitors ("you", "your", "Data Subject").

egames99 is committed to handling your personal information with care, transparency, and in accordance with applicable data protection legislation. This includes obligations under Malaysia's Personal Data Protection Act 2010 (PDPA), as well as any other relevant data protection framework applicable to our operations.

By registering an account on the Platform, visiting our website, or otherwise providing your personal data to egames99, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, please do not register an account or provide your personal information to the Platform.

For the purposes of this Policy, the following terms carry the meanings defined below:

egames99 collects only the personal data that is necessary and proportionate to the purposes for which it is processed. The categories of personal data we collect are set out in the table below:

egames99 does not collect special categories of personal data (such as racial or ethnic origin, health data, or biometric data) unless explicitly required for regulatory compliance purposes and with appropriate safeguards in place.

egames99 collects personal data through the following methods:

4.1 Direct Collection

You provide data directly to us when you: register an account on the Platform; complete KYC verification by submitting identity documents; make deposits or request withdrawals; contact our support team via live chat, email, or WhatsApp; participate in promotions or respond to surveys.

4.2 Automated Collection

When you access and use the Platform, we automatically collect technical and usage data through server logs, cookies, web beacons, and similar tracking technologies. This includes your IP address, device identifiers, session activity, and gameplay data. This collection is necessary for the secure and optimal operation of the Platform.

4.3 Third-Party Sources

We may receive personal data about you from third-party service providers, including payment processors (such as the operators of Touch 'n Go eWallet, Maybank, CIMB, DuitNow, FPX, and other integrated payment channels), identity verification services used for KYC, and fraud prevention and AML screening services. Data received from third parties is handled with the same level of protection as data you provide directly.

egames99 processes your personal data only for defined, legitimate purposes. The table below sets out our primary processing activities and the legal basis under which each is conducted:

Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

egames99 does not sell your personal data to third parties. We do not share your personal information with external organisations for their own commercial or marketing purposes. We may, however, disclose your data to the following categories of recipients where strictly necessary:

• Payment Service Providers: Financial institutions and e-wallet operators (including but not limited to Maybank, CIMB, Public Bank, Touch 'n Go eWallet, DuitNow, and FPX) that process deposits and withdrawals on your behalf. These providers receive only the data necessary to complete the specific transaction.
• Identity Verification & KYC Partners: Third-party services engaged to verify identity documents and screen against sanctions or watchlists as required by AML regulations. These processors are contractually bound to handle your data securely and may not use it for any other purpose.
• Fraud Prevention Services: Specialist providers that assist egames99 in detecting suspicious activity, preventing account takeover, and identifying money laundering patterns across the Platform.
• Technology & Infrastructure Providers: Cloud hosting, database management, and IT security vendors that process data on our behalf under strict data processing agreements with defined obligations and security standards.
• Regulatory Authorities & Law Enforcement: Where required by applicable law, court order, or regulatory directive, egames99 will disclose personal data to the relevant authority. We will notify you of such disclosure to the extent legally permissible.
• Group Companies: egames99 may share data with affiliate companies within its corporate group where necessary for operational or compliance purposes, subject to the same data protection standards applied under this Policy.

egames99 uses cookies and similar technologies on the Platform to ensure it functions correctly, to enhance your experience, and to gather analytics data that informs Platform improvements. The following types of cookies may be used:

7.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled without affecting core functionality. They include session management cookies that keep you logged in during an active session and security cookies that protect against cross-site request forgery.

7.2 Analytics Cookies

We use analytics cookies to understand how visitors interact with the Platform — which pages are visited most frequently, how long sessions last, and where users navigate from. This data is aggregated and anonymised and is used solely to improve Platform performance and user experience.

7.3 Functional Cookies

Functional cookies store your preferences, such as display settings and language, so that the Platform can provide a more personalised experience on subsequent visits.

7.4 Managing Cookies

You may manage or disable cookies through your browser settings at any time. Please note that disabling certain categories of cookies may impair the functionality of the Platform and prevent you from accessing some features. Strictly necessary cookies cannot be disabled via browser settings as they are essential to service delivery.

egames99 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Our general retention guidelines are as follows:

• Account Data: Retained for the duration of the active Account relationship, plus a minimum of seven (7) years from Account closure — in accordance with AML record-keeping obligations under Malaysian law.
• Transaction Records: Financial transaction data, including deposit and withdrawal histories, is retained for a minimum of seven (7) years to satisfy AML, audit, and tax compliance requirements.
• KYC Documents: Identity documents submitted for verification are retained for the period of Account activity plus five (5) years post-closure, or longer where required by a specific regulatory obligation or ongoing investigation.
• Customer Support Communications: Chat transcripts and email correspondence are retained for two (2) years from the date of interaction, unless the communication relates to a dispute, complaint, or legal matter — in which case it is retained until final resolution plus the applicable limitation period.
• Technical & Analytics Data: Server logs and anonymised usage analytics are typically retained for thirteen (13) months and then deleted or fully anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original information.

egames99 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• Encryption in Transit: All data transmitted between your device and the egames99 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive data stored on our servers — including identity documents, financial information, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to egames99 staff and authorised processors on a strict need-to-know basis, enforced through role-based access control (RBAC) systems.
• Two-Factor Authentication: Members are encouraged to enable two-factor authentication (2FA) on their Accounts. Internal egames99 systems require mandatory 2FA for staff accessing production data environments.
• Penetration Testing: Our Platform and infrastructure are subject to periodic penetration testing and vulnerability assessments conducted by qualified security professionals.
• Incident Response: egames99 maintains a documented data breach incident response plan. In the event of a confirmed personal data breach that poses a risk to your rights, we will notify affected Members without undue delay and in accordance with our regulatory obligations.

Under applicable data protection legislation, including Malaysia's Personal Data Protection Act 2010 (PDPA), you hold the following rights with respect to your personal data held by egames99:

To exercise any of the rights listed above, please submit a written request to our support team using the contact details in Section 14 of this Policy. We will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) days of receipt. We may require identity verification before processing certain requests to protect against unauthorised access to another person's data.

Given the international nature of online gaming infrastructure, your personal data may be processed by third-party service providers whose servers are located outside Malaysia. egames99 takes all reasonable steps to ensure that any cross-border transfer of your personal data is conducted in accordance with applicable data protection standards.

Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection as Malaysia, egames99 implements contractual safeguards — including standard contractual clauses — to ensure your data remains protected to the standard described in this Policy. We do not transfer personal data to jurisdictions subject to international sanctions or which lack any meaningful data protection framework without implementing compensating controls.

The egames99 Platform is strictly restricted to persons aged 21 years and above. We do not knowingly collect, process, or store personal data belonging to persons under the age of 21. All registration attempts are subject to age verification as part of our KYC process.

If egames99 becomes aware that it has inadvertently collected personal data from an individual under the age of 21, we will promptly delete that data and close the associated Account. If you believe that a minor has registered an Account or provided personal data to egames99, please contact our support team immediately via the details in Section 14 so that appropriate action can be taken without delay.

egames99 reserves the right to revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legislation, regulatory guidance, or Platform functionality. The date of the most recent revision is displayed at the top of this document.

Where amendments involve a material change to how we process your personal data, we will provide prominent notice on the Platform and, where appropriate, communicate the change directly to registered Members at the email address on file. Your continued use of the Platform following the publication of a revised Policy constitutes acceptance of the updated terms.

We encourage you to review this Policy periodically to remain informed about how egames99 protects your personal information. If you disagree with any material change, you should cease using the Platform and may request Account closure in accordance with Section 9.1 of our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by egames99, please contact our support team using the details below. All data-related enquiries are handled with priority and treated with strict confidentiality.

When submitting a data subject request, please include your registered Account username (do not include your password), a clear description of your request or concern, and a copy of a valid identity document for verification purposes. Requests submitted without sufficient identification may be declined to protect the integrity of our verification process.