Your personal data belongs to you. This Privacy Policy explains exactly what information 99laju collects, why we collect it, how we use it, who we share it with, and what rights you hold as a data subject — in plain, transparent language.
This Privacy Policy ("Policy") issued by 99laju ("we", "us", "our", or "the Platform"), the operator of the online casino and sports betting services available at 99laju.cam. It sets out how we collect, process, store, share, and protect personal data belonging to registered users, visitors, and prospective players ("you" or "the User").
We are committed to handling your personal data responsibly and in a manner consistent with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) and its equivalents, as applicable to our licensing jurisdiction.
By registering an account, accessing the platform, or using any of our services — including placing sports bets, playing casino games, or contacting customer support — you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
For the purposes of this Policy, the following terms carry the meanings assigned below:
We collect personal data across several categories depending on your level of interaction with the platform. The table below summarises the categories of data, specific data points collected, and the primary reason for collection.
| Category | Data Points | Primary Purpose |
|---|---|---|
| Registration Data | Full legal name, date of birth, email address, mobile number, residential address, username, password (hashed) | Account creation, identity establishment, communications |
| KYC / Verification Data | Copy of MyKad / Passport / Driver's Licence, proof of address document, selfie photograph with ID | Age verification, identity confirmation, AML compliance |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), transaction history, deposit/withdrawal amounts in MYR | Payment processing, fraud prevention, payout settlement |
| Activity & Gameplay Data | Games played, bets placed, amounts wagered, win/loss history, session duration, active bonus status | Service delivery, responsible gambling monitoring, personalisation |
| Technical Data | IP address, device type and OS, browser type and version, screen resolution, referring URL, session timestamps | Security, fraud detection, platform optimisation |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, survey responses | Customer support, quality assurance, dispute resolution |
| Responsible Gambling Data | Deposit limits set, self-exclusion requests, session time reminders, problem gambling indicators flaged by the system | Player protection, regulatory compliance, duty of care |
We do not collect data that is not necessary for the purposes described in this Policy. We do not collect biometric data (other than a selfie for KYC comparison purposes), political opinions, religious beliefs, or social media profile data unless voluntarily provided by the User.
99laju collects personal data through the following channels:
We process your personal data only where we have a lawful basis to do so. The applicable legal bases under our processing framework are as follows:
99laju uses your personal data for the following specific purposes:
99laju does not sell your personal data. We share your data only where necessary and only with the categories of recipient described below:
99laju uses cookies and similar tracking technologies to operate the platform effectively, maintain your login session, and understand how users navigate the site. The following categories of cookies are in use:
You may manage cookie preferences through your browser settings at any time. Please note that disabling cookies beyond the strictly necessary category may impair certain platform features, including automatic login and deposit method memory.
We retain your personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our licensing conditions. The following retention periods apply:
Upon expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual. Deletion is carried out through certified data destruction procedures appropriate to the medium on which the data is held.
99laju implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. These measures include:
Notwithstanding the above, no digital transmission or storage system is entirely immune to risk. In the event of a data breach affecting your rights and freedoms, 99laju will notify you and, where required, the relevant supervisory authority within the timeframes prescribed by applicable law.
99laju operates under an international online gaming licence and may store and process personal data on servers located outside of Malaysia. Where personal data is transferred across international borders, we ensure that appropriate safeguards are in place, including:
Malaysian users acknowledge that personal data may be processed in jurisdictions outside Malaysia. By using the platform, you consent to this transfer where it is necessary to deliver the services you have requested.
Subject to applicable law and our legitimate processing requirements, you hold the following rights in relation to your personal data. These rights may be exercised by contacting our support team at the details set out in Section 16.
You may request a copy of all personal data we hold about you, along with information on how it is used and with whom it has been shared. We will respond within thirty (30) days.
If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Updates to account details can be made via your account dashboard or support team.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected. Note that we are legally required to retain certain data (KYC, transaction records) for a minimum period regardless of erasure requests.
You may request that we restrict processing of your personal data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
You may object to the processing of your data where it is carried out on the basis of our legitimate interests — including direct marketing, where we will cease processing immediately upon receipt of a valid objection.
Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
To exercise any of the rights above, please contact us using the details in Section 16. We may require verification of your identity before fulfilling any data rights request. We will respond within thirty (30) calendar days unless the request is complex, in which case we will notify you of an extended response timeline.
99laju's services are strictly intended for adults aged twenty-one (21) years and above. We do not knowingly collect personal data from individuals under the age of 21. Registration and access to all services requires confirmation of eligibility and completion of KYC identity verification including date-of-birth validation.
If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to deactivate the associated account, void any transactions made from that account, and securely delete the personal data in question, subject to any legal record-keeping obligations.
Parents or guardians who believe their child may have registered on the platform are encouraged to contact our support team immediately via live chat or the email address in Section 16.
The 99laju platform may contain references to third-party services, including payment providers such as Touch 'n Go eWallet, Boost, GrabPay, and the FPX banking network. These third parties operate under their own independent privacy policies and data processing practices.
When you transact through a third-party payment provider, your interaction with that provider is governed by that provider's privacy policy. 99laju accepts no responsibility for the data practices of third-party services. We encourage you to review the privacy policies of any third-party service you engage with in connection with your use of the platform.
99laju reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users via email or an in-account notification.
Your continued use of the platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should stop using the platform and request account closure.
We encourage you to review this Privacy Policy periodically to remain informed about how we protect your data.
For any questions relating to this Privacy Policy, exercise your data rights, or to raise a concern about how your personal data has been handled, please contact 99laju through the following channels:
All data rights requests must be verified by confirming your identity via your registered account details or KYC-verified documentation before we can proceed with disclosure or deletion.
For further information on our data practices in context, please review our Terms & Conditions and our Responsible Gambling page.
Six concrete commitments we make to every Malaysian player on this platform — not just on paper, but in practice.
Your personal information is never sold, rented, or traded to third parties for marketing or any other commercial purpose. Full stop. Your data belongs to you.
Every byte of data transmitted between your device and our servers is protected by industry-standard 256-bit SSL encryption. KYC documents and financial records are encrypted at rest using AES-256.
Internal staff access to player data is restricted by role and logged in full. No one at 99laju can access your personal data without a documented operational reason and valid access authorisation.
We hold your data only for as long as the law and our licensing obligations require. After the applicable retention period, data is securely deleted or anonymised — not kept indefinitely on the off-chance it might be useful.
Access, rectification, erasure, portability — all GDPR-aligned data rights are respected. Submit a request, verify your identity, and we will respond within 30 days. No bureaucratic runaround.
If you have consented to marketing communications, you can withdraw that consent at any moment — from your account settings or by contacting support. We will stop sending marketing messages within 24 hours of your request.
Your personal data is handled with the same care we put into every withdrawal and every game result. Transparent policies, real encryption, and a team that actually responds. For players aged 21 and above only.
21+ only. Play responsibly. Questions about your data? Contact [email protected] (plain text — not a link).