At 99 Rebate, we take our responsibility to protect every player's personal information seriously. This Privacy Policy clearly explains how we collect, use, store, and safeguard your data — all in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010.
Six core principles that guide how we handle your personal data every day
All data handling practices at 99 Rebate fully comply with the Malaysia Personal Data Protection Act (PDPA) 2010. This means we only collect data that is strictly necessary, use it solely for the stated purposes, and do not retain it longer than needed. For us, PDPA compliance is not merely a legal obligation — it is part of our commitment to respecting every player's privacy.
99 Rebate has never and will never sell, rent, or trade players' personal data to any third party for marketing or commercial purposes. Your information belongs to you — we hold it solely for platform operations, account security, and applicable legal compliance. This is an absolute, non-negotiable commitment at 99 Rebate.
All data transmitted between your device and 99 Rebate's servers is protected by 256-bit SSL encryption — the same security standard used by major Malaysian banking institutions such as Maybank and CIMB. This ensures that your login credentials, payment details for Touch 'n Go, GrabPay or DuitNow, and personal data cannot be intercepted by any third party during transmission.
Every 99 Rebate player has the full right to access their personal data, request corrections to inaccurate information, obtain a copy of the data we hold, and request deletion under certain circumstances. These requests can be submitted to our support team at any time and will be processed within the timeframes stipulated by Malaysia's PDPA.
99 Rebate only collects data that is strictly necessary to provide our services — nothing more, nothing less. We do not collect information that is irrelevant to platform operations. This principle of data minimisation ensures your digital footprint on our platform is kept as small as possible, while still allowing us to deliver a safe and personalised gaming experience.
In the unlikely event of a data breach that may affect players' personal information, 99 Rebate is committed to notifying affected players within the timeframe prescribed by Malaysian law. We will also take immediate steps to contain the damage and prevent similar incidents from occurring in the future.
Important Note: This Privacy Policy outlines 99 Rebate's privacy practices and your rights as a player. By using our platform, you agree to the collection and use of information as described here. Please read it carefully and reach out to us if you have any questions.
99 Rebate collects two main categories of information: information you provide directly to us, and information collected automatically through your use of our platform. We only collect information that is strictly necessary to provide and improve our services.
Information you provide directly:
Information collected automatically:
Note: 99 Rebate does not directly collect credit card numbers or sensitive banking information. All financial transactions are processed through licensed third-party payment providers such as Touch 'n Go, GrabPay, and DuitNow, each of which maintains its own privacy and security policies.
Information collected by 99 Rebate is used for the purposes set out below. We will not use your data for any other purpose without notifying you first and, where required, obtaining your consent.
| Purpose of Use | Types of Data Used | Requirement |
|---|---|---|
| Account Management | Name, phone number, password | Mandatory |
| Identity Verification (KYC) | MyKad, date of birth, photo | Mandatory |
| Payment Processing | Digital wallet details, transaction records | Mandatory |
| Security & Fraud Prevention | IP address, activity logs, usage patterns | Mandatory |
| Customer Support | Communication history, account records | Mandatory |
| Personalise Your Experience | Gaming history, player preferences | Preference |
| Promotional Communications | Phone number, email address (if provided) | Optional (opt-out available) |
Specifically, 99 Rebate uses your gaming activity history to accurately calculate your daily automatic rebate and credit it to your account every day. This data is also used to determine your VIP membership tier and offer relevant promotions. The use of data for rebate purposes forms part of our service contract with you and does not require separate consent.
All personal data processing carried out by 99 Rebate is based on a valid legal ground under Malaysia's PDPA 2010. The legal bases we rely on are as follows:
You have the right to withdraw your consent at any time for processing based on consent, without affecting the validity of any processing carried out before the withdrawal. However, withdrawing consent for processing that is necessary to fulfil a contract (such as data required for account management) may mean we are no longer able to provide our services to you.
99 Rebate does not sell, rent, or trade your personal data to third parties for marketing purposes. However, there are limited situations where we need to share your data with certain parties for legitimate purposes:
All third parties that receive 99 Rebate player data are required to maintain the confidentiality of that information and use it only for the stated purposes. We assess our partners' privacy practices before entering into any data-sharing arrangement.
Important: If 99 Rebate receives a request from authorities to disclose player data, we will, to the extent permitted by law, notify the player concerned before disclosing that information, unless such notification is expressly prohibited by law.
99 Rebate implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our key security measures include:
While we take all reasonable steps to protect your data, no security system is perfect. Players also play an important role in keeping their accounts secure — choose a strong password, never share your login credentials, and enable 2FA from your account settings page.
99 Rebate retains your personal data for as long as necessary to fulfil the purposes described in this policy, or as required under applicable Malaysian law. Once the relevant retention period has ended, your data will be securely deleted or anonymised.
If you request deletion of your account, we will process the request and remove all data not required for legal compliance within 30 days of the request date. Data that must be retained for legal purposes will be anonymised to minimise personal identification.
99 Rebate uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. We use several types of cookies:
You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the 99 Rebate platform. For guidance on managing cookies in common browsers such as Chrome, Safari, or Firefox, please refer to your respective browser's help section.
Note: 99 Rebate does not use third-party advertising cookies or cross-site tracking tools. We do not share your browsing behaviour data with advertising networks.
As a 99 Rebate player subject to Malaysia's PDPA, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights.
You have the right to request a copy of the personal data we hold about you. We will provide this information within 21 days of your request.
If the data we hold is inaccurate or outdated, you have the right to request a correction. Update your profile information directly from your account settings, or contact our support team.
Under certain circumstances, you have the right to request the deletion of your personal data. Such requests are subject to our legal obligations to retain certain records.
You may object to the processing of your data for specific purposes such as marketing communications. Contact us to withdraw your marketing consent at any time.
You have the right to receive your personal data in a machine-readable format for transfer to another service provider, should you wish to do so.
In certain circumstances, you may request that we restrict how we process your data while a query or appeal from your side is being resolved.
99 Rebate is an entertainment platform strictly for individuals aged 18 and above. We do not knowingly collect or process the personal data of anyone under the age of 18.
If we discover that we have collected personal data from someone under the age of 18 without proper age verification, we will take immediate steps to delete that data and close the account in question. If you believe a minor has registered an account on our platform, please contact our support team immediately via live chat or email at support@99rebate.com.
Parents & Guardians: If you discover that your child has accessed or registered on 99 Rebate, please contact us immediately. We will close the account, refund any deposited funds, and delete all associated data within 48 hours.
99 Rebate reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. The date of the most recent revision will always be displayed at the top of this document.
When we make significant changes to this Privacy Policy — particularly changes that affect how we use your data or your rights — we will notify you via an in-platform notification or through the phone number registered to your account. For minor changes, a notice on the website is sufficient.
Your continued use of the 99 Rebate platform following any changes to this Privacy Policy constitutes acceptance of the updated terms. It is your responsibility to review this policy periodically to ensure you remain informed of the latest version.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact the 99 Rebate privacy team through the following channels:
We are committed to responding to all privacy-related enquiries within 14 days of receipt. For more complex requests such as comprehensive data access requests or deletion requests, we will keep you updated on progress within 14 days even if the full process takes longer.
Official Complaints: If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body for PDPA in Malaysia.
99 Rebate's concrete commitments to all Malaysian players regarding your data privacy
99 Rebate players' personal data is never sold, rented, or traded to advertisers or third-party data brokers.
Marketing communications are only sent with your consent. You may unsubscribe at any time without any hassle.
No data is shared with third parties without a valid legal basis or your consent, except where required by law.
All privacy-related requests are responded to within 14 days. Urgent requests via live chat are addressed within 3 minutes.
99 Rebate is fully compliant with the Malaysian Personal Data Protection Act 2010 in every aspect of player data handling.
SSL 256-bit encryption, two-factor authentication, and regular security audits — data security is an ongoing investment, not a one-time feature.
Answers to the most frequently asked questions about privacy and data protection at 99 Rebate
Your privacy is our priority. Register for a free account today and enjoy an entertainment platform that is safe, transparent, and fully compliant with Malaysia's PDPA — with automatic daily rebates, no conditions, from day one.