Official Data Protection Document

Gaya99 Privacy Policy – Personal Data Protection for Malaysian Members

Your privacy is not merely a legal obligation to us — it is part of the trust you place in Gaya99. This document clearly explains what data we collect, how it is used, and your rights as the owner of that data.

Updated: January 2026  |  Applicable to all Malaysian members

gaya99's Commitment: gaya99 complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We will not sell, rent, or disclose your personal data to third parties for marketing purposes without your explicit consent.

1

Introduction to the Privacy Policy

This Privacy Policy ("Policy") describes how Gaya99 ("we", "platform", "Gaya99") collects, uses, stores, discloses, and protects the personal information you provide when registering for and using our services on the gaya99.bet website.

Gaya99 is committed to protecting the privacy of every Malaysian member on our platform. We understand that your trust is our most valuable asset — and we work hard to ensure your information stays secure, is handled ethically, and is used only for legitimate purposes.

By registering an account or using any gaya99 service, you are deemed to have read, understood, and agreed to this Privacy Policy. If you do not agree with any provision herein, please contact us before continuing to use the platform.

This Policy may be updated from time to time. Any material changes will be communicated via your registered email or through an in-platform notification on gaya99. The latest version is always available on this page.


2

Personal Data We Collect

Gaya99 collects personal data through several channels — directly from you during registration and platform use, automatically via tracking technologies, and in limited cases, from trusted third-party sources.

Data Category Example Information Collected? Shared?
Identity Full name, date of birth, identity card number (KYC) Yes Limited
Relationship Malaysian phone number, email address Yes No
Financial Deposit/withdrawal records, payment methods (TnG, DuitNow, etc.) Yes Limited
Technical IP address, device type, browser, location (state) Yes No
Usage Game records, bets, login history Yes No
Optional Language, notification settings, favourite games Yes No
Communications Customer support logs, feedback, and complaints Yes No

We does not collect and does not require your credit or debit card number directly. All financial transactions are processed through licensed and secure third-party payment providers such as Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), Boost, and ShopeePay — each with their own privacy policies compliant with Malaysian security standards.


3

How Gaya99 Uses Your Data

Every piece of data collected by gaya99 has a specific, lawful, and limited purpose. We do not use your data for any purpose beyond what is stated below without obtaining your separate consent.

Your identity and contact data are used to create and manage your Gaya99 account, verify your identity during the KYC process, process deposits and withdrawals, and confirm that you meet the minimum age requirement (18 years). These are fundamental requirements to ensure platform security and compliance with applicable laws.

Your usage data and preferences help gaya99 understand how Malaysian members use our platform — which games are most popular, which slots are played most often, or which sporting events (such as the Malaysia Super League or BWF badminton) attract the most interest. This information is used to improve the platform's design, add new games, and deliver a more relevant experience.

Technical data such as IP addresses, login records, and transaction patterns are used to detect suspicious activity, prevent unauthorised access, and protect all Gaya99 members from fraud. Our monitoring system operates 24/7 to keep the platform safe for all users.

With your consent, gaya99 uses your contact information to send notifications about bonus offers, new game promotions, and important platform updates. You may opt out of marketing communications at any time through your account settings or by contacting our support team.

gaya99 complies with Malaysian legal requirements, including the Personal Data Protection Act 2010 (PDPA), anti-money laundering (AML) requirements, and Know Your Customer (KYC) procedures. Your data may be disclosed to the relevant authorities when required by law.

4

Data Sharing & Disclosure

Gaya99 do not sell, rent, or trade your personal data to any third party for commercial purposes. However, there are limited situations where we need to share data with certain parties to keep our platform running securely and in compliance with the law:

  • Payment Service Providers: Minimal transaction data is shared with licensed payment processors such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX solely to facilitate the secure processing of deposits and withdrawals.
  • Game Software Providers: Anonymised game statistics may be shared with providers such as Pragmatic Play or Evolution Gaming for technical maintenance and game audit purposes.
  • Legal Authorities: Data will be disclosed to the Royal Malaysia Police (PDRM), Bank Negara Malaysia (BNM), or any relevant authority when required by court order or statutory provision.
  • Security & Fraud Prevention Providers: Limited technical information (such as IP address patterns) may be shared with cybersecurity providers to detect and prevent fraudulent activity.

Warning: Gaya99 will never request your personal information via unsolicited emails, phone calls, or social media platforms. If you receive any communication appearing to be from Gaya99 that asks for your password or sensitive information, please disregard it and report it to support@gaya99.bet immediately.


5

Gaya99 Data Security Measures

Gaya99 continuously invests in security infrastructure to ensure the personal data of all Malaysian members is protected at all times. Below are the layers of protection we have in place:

1
256-bit SSL Encryption

All communications between your browser and gaya99's servers are protected by 256-bit SSL encryption — the same security standard used by Maybank, CIMB, and other major Malaysian banks. Your data cannot be intercepted in transit.

2
Two-Factor Authentication (2FA)

Gaya99 members are encouraged to enable two-factor authentication (2FA) via SMS to their Malaysian phone number. This adds an extra layer of security beyond your password, making it significantly harder for unauthorised parties to access your account.

3
24/7 Activity Monitoring

Gaya99's automated monitoring system operates around the clock to detect unusual login activity, access attempts from new locations, or suspicious transaction patterns. You will be notified immediately if any abnormal activity is detected on your account.

4
Strict Internal Access Controls

Only Gaya99 staff with a legitimate business need may access members' personal data. All access is logged and audited regularly. No employee may export or print personal data without management approval.

5
Secure Data Backup

Your data is stored on secure servers with regular backups to ensure swift recovery in the event of a technical disruption. All backups use the same encryption to ensure your data is never exposed under any circumstances.


6

Cookies & Tracking Technologies

The Gaya99 platform uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage, and secure your login session. Below are the types of cookies we use:

You may manage or delete cookies through your browser settings at any time. Please note, however, that removing essential cookies may affect the core functionality of the gaya99 platform and your overall gaming experience.


7

Your Rights as a Data Subject

As a gaya99 member residing in Malaysia and subject to the Personal Data Protection Act 2010 (PDPA), you have several rights that you may exercise at any time:

Right of Access

You may request a copy of all personal data we hold about you. We will provide this information within 21 days of receiving your request.

Right to Rectification

If any of your data is inaccurate or out of date, you have the right to request a correction. Basic information can be updated directly in your account settings.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data. Such requests are subject to data retention obligations required by law.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time. Objections to other forms of processing are subject to assessment on a case-by-case basis.

Right to Portability

You may request your personal data in a machine-readable format (JSON or CSV) for transfer to another service provider if required.

Right to Restrict Processing

Under certain circumstances (for example, during a complaint investigation), you may request that Gaya99 temporarily restrict the processing of your data.

To exercise any of the above rights, please contact us at support@gaya99.bet with the subject line "Data Rights Request" and specify the particular right you wish to exercise along with your account information for identity verification.


8

Data Retention Period

Gaya99 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy, or for the period required under Malaysian law.

  • Active account data: Retained for the duration your account remains active and for a period of 7 years following account closure, in line with Malaysian financial and tax legal requirements.
  • Financial transaction records: Retained for a minimum of 7 years from the transaction date, in line with the requirements of the Income Tax Act 1967 and AML regulations.
  • Security and access logs: Retained for 12 months for security investigation and fraud prevention purposes.
  • Support communication logs: Retained for 3 years after the last interaction for reference and service quality purposes.
  • Marketing data (with consent): Retained until you withdraw your consent or close your account.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. Records containing data that must be retained for legal reasons will be archived separately with restricted access.


9

Child Protection

The gaya99 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors.

If you are a parent or guardian who discovers that your minor child has registered an account on gaya99 without your consent, please contact us immediately at support@gaya99.bet. We will investigate the matter, close the account, and delete all data associated with your child within 5 business days.

Gaya99 employs multiple age verification measures during registration, including KYC document checks, to ensure our platform remains inaccessible to underage individuals. Misuse of the platform by minors is a shared responsibility — please help us protect young people by supervising your children's internet use.


10

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how Gaya99 handles your personal data, our privacy team is ready to assist. We are committed to responding within 5 business days for all privacy-related enquiries.

Privacy Email
support@gaya99.bet
Subject: "Privacy Policy Enquiry"
Live Chat
Available 24/7 within the platform
Response time < 5 minutes
Response Time
5 business days (email)
Urgent cases prioritised
Support Languages
Bahasa Malaysia & English
Local Malaysian team

Summary of Gaya99's Privacy Commitments

256-bit SSL at All Times

All data transmitted between you and gaya99 is protected with bank-grade encryption — the same standard used by Maybank and CIMB.

Malaysia PDPA Compliant

Gaya99 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) — your rights as a data subject are fully respected.

No Data Selling

Gaya99 does not sell, rent, or trade your personal data to third parties for any commercial purpose.

Restricted Internal Access

Only staff who require access for work purposes may view your data. All access is logged and audited on a regular basis.

You Control Your Data

Access, correct, delete, or restrict the use of your data at any time. Contact our privacy team to initiate the process.

24/7 Privacy Support

The Gaya99 privacy team is available to assist you in Bahasa Malaysia via live chat and email, 24 hours a day, 7 days a week.

🛡️

Privacy Assured. A Platform You Can Trust. Join gaya99 Today.

Your data is safe with us. Over 500,000 Malaysian members have trusted Gaya99 with their information and funds — now it's your turn to enjoy a secure, fair, and rewarding gaming experience.

256-bit SSL encrypted data Compliant with Malaysia's PDPA No sale of personal data
Bahasa Melayu