Official Documents

Privacy Policy 99sl — Your Data Protection

99sl is committed to protecting the privacy and security of your personal information. Learn how we collect, use, and safeguard your data in a transparent and responsible manner.

Last updated: 1 January 2026

Commitment Our Privacy

Six core data protection principles that form the foundation of your trust in the 99sl platform.

256-bit SSL Encryption
All data transmitted between your browser and 99sl servers is protected by high-security 256-bit SSL encryption. No third party can intercept your information during transmission.
Strict Access Control
Access to player personal information is granted only to 99sl staff who require that data for legitimate operational purposes. All access is logged and audited on a regular basis.
Secure & Redundant Servers
Your data is stored in internationally certified data centres with multi-layered physical and digital protection. Automated backup systems ensure your data is never lost due to technical disruptions.
No Data Sales
99sl has never and will never sell, rent, or transfer your personal information to any third party for marketing purposes without your explicit consent.
PDPA Compliance
Our Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act (PDPA) and international data protection standards applicable to our platform's operations.
Guaranteed Player Rights
You have the right to access, correct, delete, or withdraw consent for the processing of your data at any time. Requests will be processed within 30 business days at no charge.

1 Information We Collect

When you interact with the platform 99sl — whether via the website 99sl.vu or our mobile app — we collect several categories of information to ensure a safe, seamless, and personalised gaming experience for you.

Registration & Identity Information

When you open a new account, we collect your full name, date of birth, identity card or passport number, email address, mobile number, and residential address. This information is required for the identity verification (KYC) process to ensure our platform is only used by eligible individuals aged at least 18 years.

Financial Information

To process deposits and withdrawals, we collect your payment method details such as bank account number, bank name, e-wallet account number (Touch 'n Go, Boost, GrabPay), and FPX or DuitNow information. We does not store credit or debit card numbers directly — card transactions are processed through a PCI-DSS certified encrypted payment gateway.

Usage & Technical Data

Automatically, our system logs your IP address, browser type, device operating system, pages visited, session duration, game logs, and wagering patterns. This data is used solely to detect fraud, improve platform performance, and deliver relevant game recommendations.

Communication & Support

When you contact our support team via live chat, email, or in-app messaging, we retain a record of those conversations. This allows us to provide more effective support and resolve any issues more efficiently in the future.

Minimum Collection Principle: 99sl only collects information that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant data beyond what is required to operate our platform.

2 How We Use Your Information

Every piece of information we collect from you is used for a clear and lawful purpose. 99sl uses your data responsibly for the following purposes:

Purpose of Use Data Types Used Legal Basis
Identity verification (KYC) Name, IC/passport, date of birth Legal obligation
Deposit & withdrawal processing Financial information, bank account Contract performance
Fraud detection & security IP, activity logs, wagering patterns Legitimate interest
Customer Support Email, phone, conversation records Contract performance
Promotional & bonus communications Email, phone number User consent
Platform improvement Usage data, feedback Legitimate interest
Anti-money laundering regulation compliance Financial & identity information Legal obligation

We will not use your data for any purposes other than those stated in the table above without obtaining your prior consent. Should the purpose of processing change, you will be notified via email or in-platform notification.

3 Data Encryption & Security

99sl invests seriously in cybersecurity infrastructure to ensure your data is always protected against unauthorised access, breaches, or misuse.

Encryption of Data in Transit

All communications between your device and 99sl servers use TLS 1.3 protocol with AES-256 encryption. This means every piece of information transmitted — including passwords, payment details, and personal data — cannot be read by any third party even if the data traffic is intercepted.

Encryption of Data at Rest

Sensitive data such as passwords is stored in hashed form using the bcrypt algorithm. Financial and identity information is encrypted using AES-256 before being stored in our database. Encryption keys are stored separately from the encrypted data.

Two-Factor Authentication (2FA)

99sl supports two-factor authentication for all player accounts. We encourage you to enable 2FA through your account security settings to add an extra layer of protection against unauthorized access.

Regular Security Audits

Our security infrastructure is regularly audited by independent cybersecurity firms. Penetration testing is conducted at least twice a year to identify and address any vulnerabilities before they can be exploited.

Security Reminder: While 99sl employs the best available protection, the security of your account also depends on you. Never share your password with anyone and enable 2FA for maximum protection.

4 Information Sharing & Disclosure

99sl does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, there are limited situations where we may need to share your data with the following parties:

Trusted Service Providers

We work with carefully selected third-party providers to support our platform operations — including payment gateway providers, KYC service providers, cloud infrastructure providers, and analytics companies. All these providers are bound by strict data protection agreements and may only use your data for purposes we have specified.

Legal Obligation

99sl may be required to disclose your information to government authorities or law enforcement where mandated by applicable law, court order, or valid legal process. In such situations, we will disclose only the minimum information necessary.

Business Transfer

In the event of a merger, acquisition, or sale of 99sl assets, player information may be transferred as part of the business assets. Should this occur, you will be notified in advance and a new privacy policy will be presented for your approval.

Cross-Border Transfers: If your data is transferred outside Malaysia, we ensure such transfers are carried out under recognised data protection mechanisms that meet a level of protection equivalent to Malaysia's PDPA.

5 Cookies & Tracking Technologies

Platform 99sl uses cookies and similar tracking technologies to enhance your experience, analyse platform usage, and deliver relevant content.

Types of Cookies Used

  • Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
  • Performance Cookies: Collects aggregated data on how players use the platform to help us improve the overall user experience.
  • Functional Cookies: Remembers your preferences such as language, display theme, and account settings to give you a more personalised experience.
  • Analytics Cookies: Helps us understand which pages are most popular, how long players spend on the platform, and commonly used navigation paths.

Cookie Management

You can manage or delete cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality of our platform. For non-essential cookies, you may opt out without losing access to the core features of 99sl.

Our platform may also use web beacons and similar technologies in email communications to determine whether emails we send have been opened. You can disable this feature by turning off image display in your email settings.

6 Your Privacy Rights

As a user 99sl based in Malaysia, you have certain rights regarding the personal information we hold about you. We are committed to respecting and facilitating the exercise of these rights.

Right of Access Request a copy of all personal data we hold about you.
Right to Rectification Update any inaccurate or outdated information in your account.
Right to Erasure Request deletion of your data subject to our legal obligations.
Right to Object Object to the processing of your data for direct marketing purposes.
Right to Portability Receive your data in a machine-readable format for portability.
Right to Restrict Processing Request that we restrict data processing under certain circumstances.

To exercise any of the above rights, contact our privacy team via live chat or email at [email protected]. We will acknowledge your request within 3 business days and resolve it within 30 business days.

7 Data Retention Period

99sl retains your personal information only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable law.

Retention Period by Category

  • Active account data: Retained for the duration of your active account plus any legally required retention period.
  • Financial & Transaction Records: Stored for a minimum of 7 years in accordance with anti-money laundering requirements and financial regulations.
  • Support communication logs: Stored for 3 years from the date of last interaction.
  • Analytics cookie data: Stored for 12 months before being deleted or anonymised.
  • KYC Records: Stored for 5 years after account closure in accordance with legal requirements.

Once the prescribed retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked to your identity. Deletion is carried out using procedures that meet industry security standards to ensure the data cannot be recovered.

Inactive Account: Accounts showing no activity for 24 consecutive months will be categorized as inactive. 99sl will send you a notification before any action is taken on that account's data.

8 Changes to This Privacy Policy

99sl reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes in platform operations.

When material changes are made to this Privacy Policy, we will notify you via:

  • Notifications displayed on our website's home page.
  • Email to your registered address at least 14 days before the changes take effect.
  • Pop-up notifications within the 99sl mobile app.

The last updated date will always be clearly displayed at the top of this page. Continued use of the platform 99sl after the effective date of such changes will be considered as your acceptance of the updated Privacy Policy.

If you disagree with any changes made, you have the right to close your account and request deletion of your data in accordance with the procedure outlined in Section 6 above. For any enquiries regarding our Privacy Policy, please refer to the page FAQ us or contact our support team directly.

Contact Us: If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your data, please contact our Data Protection Officer at [email protected]. We are committed to handling every inquiry seriously and within a reasonable timeframe.

Questions Common

The most frequently asked questions about the 99sl Privacy Policy.

Absolutely not. 99sl has never and will never sell, rent, or trade your personal information to any third party for their marketing purposes. We only share data with carefully selected service providers who are bound by strict data protection agreements, solely to support the operation of our platform.

You may submit a data access request via live chat on the platform or by emailing [email protected] with "Data Access Request" in the subject line. Please include your full name and registered account number. We will verify your identity and provide a copy of your data in a readable format within 30 business days.

Upon account closure, we will immediately cease using your data for marketing or promotional communications. However, your financial and KYC records will be retained for the period required by law (minimum 5–7 years) before being securely deleted. This is a mandatory requirement under Malaysia's anti-money laundering laws.

Yes. 99sl does not store your credit or debit card details directly in our systems. All card transactions are processed through a PCI-DSS certified payment gateway with full encryption. For deposits and withdrawals, we use FPX, DuitNow, and e-wallet methods that are secure and recognised by Bank Negara Malaysia.

Yes, you may withdraw consent to receive promotional emails at any time. Click the "unsubscribe" link at the bottom of any of our promotional emails, or log in to your account and adjust your communication preferences under Account Settings. Unsubscribe requests will be processed within 3–5 business days.

Play With Safe & Confident

Your data is protected, your identity is encrypted, and your privacy is respected. Join millions of Malaysian players who have trusted 99sl as their digital entertainment platform of choice.

Bahasa Melayu