Your privacy is a fundamental right, not a formality. This Privacy Policy explains in plain terms what personal data rg99 collects, why we collect it, how we protect it, and the rights you hold over your own information.
At a Glance — Key Privacy Principles
RG99 ("rg99", "we", "us", "our") operates the online gaming platform accessible at rg99.cam (the "Platform"). As the operator of this Platform, rg99 acts as the data controller responsible for the personal data of all registered Members and Platform visitors.
This Privacy Policy ("Policy") sets out how rg99 collects, processes, stores, shares, and protects the personal data of individuals who interact with the Platform ("Users", "Members", "you"). It applies to all personal data collected through the Platform, our support channels, and any associated digital communication.
This Policy is incorporated by reference into rg99's Terms & Conditions and should be read alongside them. By creating an account on or otherwise using the rg99 Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
Plain Language Summary: rg99 collects only the data it genuinely needs to operate your account safely and in compliance with applicable legal obligations. We do not sell your personal data. We do not share it for marketing purposes without your explicit consent. You can request access to, correction of, or deletion of your data at any time.
The following definitions apply throughout this Policy:
rg99 collects personal data through several channels: directly from you during account registration and KYC submission; automatically through your use of the Platform (device, session, and activity data); and from third-party service providers involved in payment processing and identity verification. The categories of data collected are set out below.
Full legal name, preferred username, email address, date of birth, country and city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru, Shah Alam, Petaling Jaya), mobile contact number, and account password (stored in hashed form — never in plain text).
Copies of valid Malaysian government-issued identity documents (MyKad, Driver's Licence, or Passport), proof of address documentation (utility bill or bank statement dated within three months), and in some cases, a selfie photograph for liveness verification. This data is collected solely for fraud prevention, anti-money laundering compliance, and age verification purposes.
Deposit and withdrawal transaction histories, payment method details (e-wallet account identifiers for Touch 'n Go eWallet, Boost, GrabPay; bank account references for Maybank, CIMB, Public Bank, Hong Leong Bank, RHB Bank via DuitNow and FPX; cryptocurrency wallet addresses for BTC and USDT transactions), and transaction timestamps. Full card or bank account numbers are not stored by rg99 — payment processing is handled by certified third-party payment processors.
IP address, browser type and version, operating system, device type and identifiers, session duration, pages visited, game activity logs, betting history, and clickstream data. This data is collected automatically via server logs and analytics tools and is used for Platform security, fraud detection, and service improvement.
Records of your communications with rg99's support team across all channels — live chat transcripts, WhatsApp message records, and support email correspondence — retained for quality assurance, dispute resolution, and compliance purposes.
rg99 processes personal data only for legitimate, defined purposes. The primary purposes for which your data is used are summarised in the table below.
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration data, technical data | Contractual necessity |
| Identity verification (KYC) | KYC data, registration data | Legal obligation |
| Processing deposits and withdrawals | Financial data, KYC data | Contractual necessity |
| Fraud prevention and security monitoring | Technical data, transaction data | Legitimate interests |
| Anti-money laundering (AML) compliance | Financial data, KYC data | Legal obligation |
| Customer support and dispute resolution | Communications data, account data | Contractual necessity |
| Responsible gambling monitoring | Betting history, account data | Legitimate interests / Legal obligation |
| Platform analytics and improvement | Technical data, usage data | Legitimate interests |
| Promotional communications (where consented) | Registration data, betting history | Consent |
rg99 does not use automated decision-making processes that produce legally significant effects for Users without human review, except where required by applicable law (e.g., automated transaction screening for AML compliance).
rg99 processes personal data on the following legal bases, consistent with applicable data protection frameworks:
You may withdraw consent for consent-based processing at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal, nor does it affect processing conducted on other legal bases.
rg99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data sharing is limited to the following categories of recipients, each bound by appropriate contractual data protection obligations:
In the event that rg99 undergoes a business acquisition, merger, or restructuring, Member personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations. Affected Members will be notified in advance where practicable.
rg99 uses cookies and similar tracking technologies to operate the Platform, maintain session security, and analyse usage patterns. The categories of cookies deployed are as follows:
You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use core Platform features, including account login and payment processing.
rg99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal obligation (AML) |
| KYC / identity documents | 5 years from submission or account closure | Regulatory requirement |
| Transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Support communications | 3 years from last interaction | Dispute resolution, quality assurance |
| Technical / session logs | 90 days from collection | Security and fraud monitoring |
| Marketing consent records | Duration of consent + 1 year | Consent management compliance |
Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with rg99's data lifecycle management procedures. Anonymised data that can no longer be linked to an individual may be retained indefinitely for statistical and research purposes.
rg99 implements comprehensive technical and organisational security measures proportionate to the risk associated with the personal data we process. These measures include, but are not limited to:
While rg99 takes rigorous steps to protect your personal data, no internet-based system is entirely immune from security incidents. In the event of a personal data breach that poses a material risk to Members' rights and freedoms, rg99 will notify affected individuals in accordance with applicable notification obligations, without undue delay.
As a data subject, you hold the following rights with respect to your personal data held by rg99. To exercise any of these rights, please contact us using the details in Section 14.
Request a copy of the personal data rg99 holds about you, along with information about how it is processed.
Request correction of inaccurate or incomplete personal data held in your rg99 Account or our records.
Request deletion of your personal data where continued retention is no longer necessary or lawful, subject to applicable retention obligations.
Request that rg99 restrict the processing of your personal data in certain circumstances, such as during an accuracy dispute.
Receive a copy of your personal data in a structured, commonly used, machine-readable format where processing is carried out by automated means.
Object to processing based on legitimate interests, including direct marketing and profiling, at any time and without providing a reason for marketing objections.
rg99 will acknowledge all data rights requests within 5 business days and provide a substantive response within 30 days of receipt. Where requests are complex or numerous, this period may be extended by a further 30 days with prior notification.
Please note that certain rights are subject to limitations where processing is required to comply with a legal obligation, fulfil a contract, or where exercising the right would adversely affect the rights and freedoms of others.
The rg99 Platform is strictly intended for individuals aged 21 years and above. rg99 does not knowingly collect personal data from individuals below the age of 21.
During account registration, rg99 requires all applicants to confirm their date of birth. Where a Member's age cannot be verified through the registration declaration alone, rg99 reserves the right to require documentary proof of age as part of the KYC process before activating full account privileges.
If rg99 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete such data and close the relevant Account. If you believe that an individual under the age of 21 has created an account on the rg99 Platform, please notify us immediately at [email protected].
Age Restriction Notice: rg99 is for players aged 21 and above only. By creating an account, you represent and warrant that you are at least 21 years of age. Providing a false date of birth constitutes a material breach of rg99's Terms & Conditions and may result in immediate Account closure and forfeiture of associated balances.
rg99's primary data infrastructure is hosted in secure facilities serving the Southeast Asian region. In certain operational contexts — including the use of certified payment processors and KYC verification providers — your personal data may be transferred to, or accessed by entities located in other jurisdictions.
Where personal data is transferred outside of Malaysia, rg99 ensures that appropriate safeguards are in place to protect the data at a standard equivalent to Malaysian data protection requirements. Such safeguards may include contractual data processing agreements incorporating appropriate data protection clauses, or reliance on the receiving jurisdiction's adequacy status where applicable.
rg99 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing the protective measures described above. rg99 does not sell or transfer personal data to international third parties for independent marketing or commercial exploitation.
rg99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or rg99's data processing practices. The effective date at the top of this document will be updated upon each revision.
Where material changes are made to this Policy — particularly changes that affect the purposes for which your data is processed or your rights as a data subject — rg99 will provide notice to affected Members via their registered email address or through a prominent notice on the Platform, with reasonable advance notice where practicable.
Your continued use of the rg99 Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the amended Policy, you should discontinue use of the Platform and may request Account closure in accordance with rg99's Terms & Conditions.
The current version of this Policy is permanently accessible at rg99.cam/privacy-policy.
If you wish to exercise any of your data rights, have a question about this Privacy Policy, or wish to raise a concern about how rg99 processes your personal data, please contact our Data Protection team through any of the following channels:
rg99 takes all data privacy concerns seriously and is committed to resolving queries professionally and within the timeframes specified. If you are unsatisfied with rg99's handling of your privacy concern, you retain the right to seek independent recourse through applicable data protection regulatory channels in your jurisdiction.
These are the practical measures behind rg99's privacy commitments — not just policy language, but operational standards we hold ourselves to every day.
Every connection to rg99 is protected by 256-bit SSL/TLS encryption — the same standard used by Malaysian banks and major financial institutions. Data transmitted through FPX, DuitNow, and e-wallet payment channels benefits from the same protection as your online banking sessions.
rg99 does not sell, rent, or trade your personal data to third parties for marketing purposes under any circumstances. Any data shared with third-party service providers — such as payment processors or KYC verification partners — is strictly limited to what is necessary for that specific service.
rg99 Members hold meaningful rights over their personal data: access, rectification, erasure, restriction, portability, and objection. Data rights requests are acknowledged within 2 business days and resolved within 30 days — with no bureaucratic runaround.
rg99's security team monitors Platform activity 24/7 for signs of unauthorised access, fraud, and data anomalies. Regular penetration testing and third-party security audits ensure that vulnerabilities are identified and remediated before they can be exploited.
rg99 collects only the personal data genuinely required to operate your account and comply with applicable regulations. We do not collect data speculatively or build behavioural profiles beyond what is needed for responsible gambling monitoring and fraud prevention.
Personal data is not held indefinitely. rg99 applies published retention schedules to all data categories, with secure deletion or anonymisation applied upon expiry. You can request details of the retention period applicable to your specific data at any time.
If any aspect of this Privacy Policy is unclear or you'd like to exercise a data right, our multilingual support team is available around the clock. You can also explore our FAQ for common privacy-related questions.
For players aged 21 and above only. Please gamble responsibly. Responsible Gambling Policy