GT99 Privacy Policy – Data Protection & Personal Information of Malaysian Players

GT99 is an online betting and casino platform operating under the website gt99-vip.net, serving Malaysian players with a wide range of gaming options including Malaysia Super League and EPL Sports Betting, live baccarat, Live Casino, lottery, blackjack, roulette, and more. As a company that stores and processes the personal data of hundreds of thousands of members across Malaysia, we understand that your trust in us goes beyond game integrity — it also extends to how we handle your most personal information.

This Privacy Policy is written in clear, straightforward language because we believe every Malaysian player has the right to know exactly what happens to their information when they register and use the platform. GT99. We dislike confusing legal language and do our best to explain our privacy practices in a way that anyone can understand — from newer players just getting started to long-time gt99 veterans.

This policy applies to all personal information collected through the GT99 website, any associated mobile applications, email communications, customer support live chat and all other touchpoints between you and the GT99 platform. This policy should be read alongside GT99's Terms & Conditions and our Responsible Gaming Guidelines, which together form the complete user protection framework for the platform.

GT99 collects various categories of personal data from members. The table below outlines the data collected, its source and its purpose:

GT99 does not collect special category data such as health data, biometric data, criminal records or political views unless required by law in very specific contexts. We also do not request information that is irrelevant to the platform's operational purposes.

Data collected by GT99 used solely for the following lawful and specific purposes:

• Account Management: Creating and maintaining your member account, processing registration, verifying your identity, and enabling secure login.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX, as well as handling fund withdrawals to your payment account in Malaysian Ringgit (MYR).
• Gaming Services Provision: Granting access to all gt99 games — including Sports Betting, live baccarat, Live Casino, lottery and slots — and recording your gaming activity history.
• VIP Programme & Promotions: Calculating and crediting VIP cashback, deposit bonuses, festive promotions, and loyalty programme rewards based on your playing activity.
• Customer Support: Handling enquiries, complaints and support requests submitted to the GT99 team via live chat, email or WhatsApp.
• Security & Fraud Prevention: Detecting and preventing unauthorised access, fraud, money laundering and violations of the Terms & Conditions, including the detection of duplicate accounts.
• Legal Compliance: Fulfilling KYC (Know Your Customer), AML (Anti-Money Laundering) and reporting obligations as required under applicable laws.
• Platform Improvement: Analyzing aggregated usage data (not individual-level) to understand how players interact with the platform, for the purpose of improving the user experience.
• Marketing Communications: Sending you promotional information, new bonuses and platform updates – you may withdraw this consent at any time via your account settings or by contacting GT99 support.

Gt99 processes your personal data on one or more lawful legal bases. It is important that you understand these bases, as they determine your rights in the context of each processing purpose:

• Performance of Contract: Processing necessary to fulfil the agreement between you and GT99 — namely the Terms & Conditions you agreed to upon registration. This covers account management, payment processing, and the provision of gaming services.
• Legitimate Interest: Processing necessary for GT99's legitimate interests that do not override your privacy rights — such as fraud prevention, platform security, and usage analytics for service improvement.
• Legal Compliance: Processing required by applicable law — such as KYC and AML requirements for financial regulatory compliance.
• Consent: For specific purposes such as marketing communications, GT99 relies on your explicit consent, which may be withdrawn at any time without any negative impact on your core services.

GT99 does not sell your personal data. However, in the course of normal platform operations, gt99 may share your data with selected third parties under limited and controlled circumstances as follows:

• Payment Providers: The transaction information required is shared with Malaysian payment providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX banks (Maybank, CIMB, RHB, Public Bank) solely for the purpose of processing your deposits and withdrawals.
• Game Software Providers: Required game session data is shared with Live Casino and slots platform providers to ensure game functionality operates correctly.
• Technical Service Providers: Server hosting vendors, email service providers, and analytics tools that help GT99 operate the platform securely and efficiently. All such vendors are bound by strict data confidentiality agreements.
• Regulatory Bodies & Law Enforcement: GT99 will disclose personal data where required by law, a valid court order or a lawful request from authorities for criminal investigation or regulatory compliance purposes.
• Third-Party Identity Verification: KYC verification services used to verify member identities for AML compliance purposes.

All third parties that receive data from GT99 are required to maintain data protection standards equal to or exceeding those we uphold ourselves. GT99 does not permit any third party to use shared data for their own marketing purposes.

As an online platform operating on global infrastructure, your personal data may be processed or stored on servers located outside Malaysia. This occurs primarily in the context of cloud services and international casino software providers used by GT99.

Where cross-border data transfers occur, GT99 ensures that adequate and appropriate levels of protection are in place through mechanisms such as standard data transfer agreements, recognised contractual clauses and appropriate supplementary safeguards. GT99 only engages service providers in jurisdictions with adequate data protection laws or those that have entered into data processing agreements meeting the required standards.

If you have specific questions about cross-border data transfers involving your information, please contact the GT99 privacy team at support@gt99-vip.net and we will provide further details upon request.

Protecting your personal data is a core technical and operational priority for GT99. We implement multiple layers of security to keep your data safe at all times:

• Strict Access Controls: Only GT99 staff who genuinely require access to specific data in order to carry out their duties are permitted to do so. The principle of least privilege access is enforced across the organisation.
• Periodic Security Audits: The GT99 platform undergoes regular independent penetration testing and security audits to identify and address vulnerabilities before they can be exploited.
• Intrusion Detection: Active intrusion detection and prevention systems (IDS/IPS) monitor network traffic and suspicious activity in real time, 24 hours a day.
• Secure Data Backup: Periodic data backups are stored at separate locations and protected with the same level of encryption as the primary data, ensuring operational continuity in the event of any technical disruption.
• Staff Training: All GT99 staff who handle personal data receive comprehensive data protection training and are required to sign binding confidentiality agreements.

GT99 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law. The following are general retention period guidelines for key data categories:

• Active Account Data: For as long as your GT99 account remains active and in use. This data is necessary for the platform to function properly for you.
• Financial & Transaction Data: A minimum of 7 years from the date of transaction, or longer where required by applicable KYC and AML obligations. This includes records of all deposits and withdrawals in MYR.
• Game Records: A minimum of 90 days for Live Casino session recordings, and up to 3 years for betting history records for dispute resolution purposes.
• Customer Support Data: 2 years from the date of last interaction, to allow us to reference your communication history when handling follow-up inquiries.
• Log & Technical Data: Up to 12 months for access logs and technical data used for security monitoring and troubleshooting.
• Closed Account Data: Following account closure, identity and financial data are retained for a minimum of 5 years for legal compliance purposes before being deleted or anonymized.

Once the relevant retention period has ended, gt99 will either securely delete your data or convert it into an anonymised format that can no longer be linked to your identity.

As a data subject, you have certain rights regarding the personal data held by GT99. Below is an explanation of each right and how to exercise it:

To exercise any of the rights above, contact the gt99 team by email at support@gt99-vip.net, stating the right you wish to exercise along with your account details. We will respond within 30 days of receiving your request. For complex cases, this period may be extended to 60 days, with prior notice to you. gt99 does not charge any fee for the first rights request made within any 12-month period.

The GT99 website uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies used by GT99:

You can manage or disable cookies through your web browser settings. Please note, however, that disabling essential cookies may affect the functionality of the GT99 platform and your ability to log in or carry out transactions.

The GT99 platform is not intended for anyone under the age of 18. GT99 does not knowingly collect personal data from individuals under 18. If we discover that we have collected personal data from someone under 18 without appropriate age verification, we will take immediate steps to delete that information from our records and close the associated account.

Parents or guardians who believe their child or underage dependent may have provided information to GT99 without their knowledge are advised to contact the GT99 support team immediately at support@gt99-vip.net. We will handle such cases promptly and in strict confidence.

Gt99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or developments in how the gt99 platform operates. When any material changes occur, we will:

• Publishing the updated version of the Privacy Policy on this page with a clearly stated revision date.
• Notifying all registered GT99 members via email or in-platform notification at least 14 days before the changes take effect.
• In cases of highly material changes that affect how we use your existing data, we may seek fresh consent from you before those changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about GT99's current privacy practices. Your continued use of the GT99 platform after any changes are published will be deemed as acceptance of the updated terms, unless you have explicitly raised an objection with us regarding those changes.

If you have any questions, concerns or requests regarding this Privacy Policy or the way GT99 handling your personal data, we encourage you to reach out to us directly. Our team is committed to providing clear and helpful responses within the stated timeframe.

• Privacy Email: support@gt99-vip.net – please include "Privacy Policy Inquiry" in your email subject line.
• Live Chat: Available 24/7 within the gt99 platform for quick privacy and data inquiries.
• Response Time: Privacy and data rights enquiries will be responded to within 30 business days of receipt.

We value all feedback from our members regarding GT99's privacy practices. Your views and concerns help us continually improve the way we protect the personal data of Malaysian players who trust our platform.