At Gaya99, your privacy is not a compliance checkbox — it is a core commitment. This Privacy Policy explains what personal data we collect from Malaysian players, how we use it, who we share it with, and the rights you hold over your own information. Please read this document carefully alongside our Terms & Conditions.
Six commitments that guide how Gaya99 handles every piece of data we collect from our players.
We collect only the data we genuinely need to provide gaming services, process payments, and comply with applicable regulations. We do not collect data for any other purpose without your explicit consent.
All personal data is stored on encrypted servers protected by industry-standard security measures, including256-bit SSL encryption and access controls. Security is built into our systems, not added as an afterthought.
You have genuine, enforceable rights over your personal data — including the right to access, correct, and in certain circumstances request deletion of your information. We process these requests promptly.
Gaya99 does not sell, rent, or trade your personal information to third-party marketers under any circumstances. Your data is used exclusively to serve you as a player on our platform.
We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Outdated data is securely deleted.
This Privacy Policy is written in clear, accessible English. We update it whenever our data practices change, and we notify registered users of material updates via their registered email address.
This Privacy Policy ("Policy") issued by Gaya99 ("we", "usour", "the Platform") and applies to all personal data collected from individuals ("you", "User "Player") who access or use the online gaming and sports betting services available at gaya99.cam and any associated web or mobile applications.
Gaya99 is committed to protecting the privacy of all players, including the significant portion of our user base located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia. We recognise that trust is the foundation of every player relationship, and that trust begins with responsible data handling.
This Policy is designed to comply with applicable international data protection standards and should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which form part of your agreement with Gaya99.
Your acceptance: By registering an Account or continuing to use the Gaya99 Platform after this Policy has been updated, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.
Throughout this Policy, the following terms carry the meanings defined below:
Gaya99 collects the following categories of Personal Data from and about our players:
| Category | Specific Data Elements | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (MyKad / Passport / Driver's License) | Registration & KYC verification |
| Contact Data | Email address, mobile phone number, residential address | Registration & KYC verification |
| Financial Data | Payment method details (e.g., Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank account identifiers), transaction history, deposit and withdrawal records | Deposits, withdrawals, KYC |
| Gaming Activity Data | Game history, bet amounts, win/loss records, session durations, preferred game categories | During platform use |
| Technical Data | IP address, device type, browser type and version, operating system, time zone setting, screen resolution | Automatically on platform access |
| Usage Data | Pages visited, links clicked, features used, search terms, referal source | Automatically during browsing |
| Communications Data | Contents of support chat transcripts, emails, and WhatsApp messages sent to Gaya99 | When you contact support |
| KYC Document Images | Photographs of identity documents, selfie verification images, proof of address documents | KYC verification process |
We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required for a regulatory compliance purpose, in which case you will be separately informed.
Gaya99 collects Personal Data through the following methods:
Information you provide directly to us when you: register an Account; complete KYC verification; make a deposit or withdrawal; contact our support team via live chat, email, or WhatsApp; participate in a promotion; or update your Account settings.
As you navigate the Platform, we automatically collect Technical Data and Usage Data through cookies, web beacons, server logs, and similar technologies. This collection occurs irespective of whether you are logged in to your Account.
We may receive Personal Data about you from third-party service providers, including:
We process your Personal Data only where we have a lawful basis to do so. The table below sets out our primary processing purposes and the legal basis applicable to each:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your Account | Performance of contract |
| Processing deposits and withdrawals | Performance of contract |
| Verifying your identity and age (KYC) | Legal obligation & performance of contract |
| Preventing fraud and money laundering | Legal obligation & legitimate interest |
| Administering bonuses and promotions | Performance of contract |
| Providing customer support | Performance of contract |
| Sending transactional communications (deposit/withdrawal confirmations, security alerts) | Performance of contract & legitimate interest |
| Sending marketing communications (promotions, offers) | Consent (opt-in required) |
| Improving Platform features and user experience | Legitimate interest |
| Complying with gaming licensing requirements | Legal obligation |
| Responsible gambling monitoring and intervention | Legal obligation & legitimate interest |
Gaya99 shares Personal Data with carefully selected third-party service providers who process data on our behalf strictly under written contractual agreements that require them to maintain confidentiality and implement appropriate security measures. Categories of service providers include: payment processing companies, identity verification platforms, cloud hosting providers, cybersecurity services, and customer support software vendors.
We may disclose Personal Data to our gaming licensing authority, law enforcement agencies, regulatory bodies, or courts where we are legally required to do so — for example, in connection with anti-money laundering obligations, tax reporting, or pursuant to a valid court order. Gaya99 will notify you of any such disclosure where permitted by law to do so.
In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of Gaya99's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified via email or a prominent notice on the Platform prior to any such transfer, and you will have the opportunity to exercise your rights over your data in connection with the transfer.
Gaya99 does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing companies. Your information is used solely for the purposes described in this Policy.
Gaya99 uses cookies and similar tracking technologies to operate the Platform, maintain your session state, remember your preferences, and collect analytics data. The following categories of cookies are used:
You can manage cookie preferences through your browser settings. Disabling certain cookie categories may affect Platform functionality. Most modern browsers also support a "Do Not Track" signal — Gaya99 will honour such signals where technically feasible.
Gaya99 retains Personal Data for no longer than is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by law. Our general retention guidelines are as follows:
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.
As an internationally operated platform, Gaya99 may transfer Personal Data to countries outside Malaysia for storage, processing, or service delivery purposes. Where such transfers occur, we implement appropriate safeguards to ensure that the receiving jurisdiction provides an adequate level of data protection, including:
By using the Gaya99 Platform, Malaysian players acknowledge and consent to the transfer of their Personal Data to countries outside Malaysia where Gaya99's hosting infrastructure or service providers are located. We take all reasonable steps to ensure your data remains protected during any such transfer.
Subject to applicable law and any legitimate overiding interests of Gaya99 (such as legal obligations to retain certain records), you have the following rights with respect to your Personal Data:
Request a copy of the Personal Data Gaya99 holds about you and information about how it is processed.
Request correction of any inaccurate or incomplete Personal Data held about you.
Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Request that we restrict the Processing of your data in certain circumstances — for example, while a dispute regarding accuracy is resolved.
Request receipt of your Personal Data in a structured, machine-readable format, and the right to transmit it to another data controller where technically feasible.
Object to the Processing of your Personal Data for direct marketing purposes at any time, with immediate effect.
Where Processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior Processing.
Not be subject solely to automated decision-making — including profiling — that produces significant legal effects, without human review available upon request.
To exercise any of the above rights, please contact our Data Privacy team at [email protected] with your request. We will acknowledge your request within 5 business days and endeavour to respond fully within 30 calendar days, or notify you if a longer period is required.
The Gaya99 Platform is strictly intended for individuals aged 21 and above. We do not knowingly collect Personal Data from anyone under the age of 21. If we become aware that we have inadvertently collected Personal Data from an underage individual, we will take immediate steps to delete that information and permanently close the associated Account.
If you believe that a person under the age of 21 has registered an Account on Gaya99, please notify us immediately at [email protected] so that we can take appropriate action.
Gaya99 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:
Despite these measures, no system is entirely immune to security threats. In the event of a data breach that poses a significant risk to your rights and freedoms, Gaya99 will notify affected users without undue delay in accordance with applicable requirements.
The Gaya99 Platform may, from time to time, contain references to third-party services (for example, payment service providers). Where you follow a link or are redirected to a third-party platform, Gaya99's Privacy Policy ceases to apply and the privacy practices of that third party will govern. We strongly recommend reviewing the privacy policies of any third-party service before submitting personal information.
Gaya99 is not responsible for the privacy practices, data security standards, or content of any third-party website or service, even where access is facilitated through the Platform.
Gaya99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the structure of our organisation. When material changes are made, we will:
Your continued use of the Platform following the effective date of any update constitutes your acknowledgement of and agreement to the revised Policy. We recommend reviewing this page periodically to remain informed of how Gaya99 handles your data.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way Gaya99 handles your Personal Data, please contact our Privacy team through the following channels:
Our support team is available in English, Bahasa Melayu, and Mandarin to serve players across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, Shah Alam, and beyond. We take every privacy-related inquiry seriously and are committed to resolving your concerns promptly and fairly.
We built Gaya99 on a foundation of trust — and that includes the way we handle your personal information. If you have questions about your data or want to exercise your privacy rights, our support team is ready to help.
This Privacy Policy is read alongside our Terms & Conditions and Responsible Gambling page.