Win9999 is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you hold as a data subject. Please read this document carefully before registering an account.
Win9999 (hereinafter referred to as "Win9999", "we", "us", or "the Company") operates the online casino and sports betting platform accessible at https://win9999.casa (the "Platform"). Win9999 is committed to processing the personal data of its registered users ("Players", "you", "your") in a manner that is transparent, lawful, and consistent with applicable data protection principles.
This Privacy Policy (the "Policy") describes the categories of personal data Win9999 collects from Players and prospective Players; the purposes and legal bases for which that data is processed; the circumstances under which it may be disclosed to third parties; the security measures applied to protect it; the periods for which it is retained; and the rights available to data subjects in connection with their personal information.
This Policy forms part of Win9999's overall legal framework and should be read in conjunction with our Terms & Conditions. By creating a Win9999 account or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
For the purposes of this Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, including by reference to a name, identification number, location data, or one or more factors specific to that person. |
| "Processing" | Any operation performed on Personal Data, whether or not by automated means — including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | Win9999, the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | A third-party entity that processes Personal Data on behalf of Win9999 under a written data processing agreement. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their Personal Data. |
| "Cookie" | A small text file placed on a user's device by a web server to enable the Platform to recognise that device and retain session or preference information. |
| "KYC" | Know Your Customer — the regulatory identity verification process requiring Players to submit identification documents to confirm their identity and age before withdrawal privileges are granted. |
Win9999 collects Personal Data through multiple channels in the course of providing its services. The categories of data collected are set out below, organised by collection method.
When you create a Win9999 account, we collect the following information:
In order to comply with our regulatory obligations and process withdrawal requests, we collect the following documents and associated data:
Win9999 processes your Personal Data on one or more of the following legal grounds:
| Legal Basis | Application |
|---|---|
| Contractual Necessity | Processing required to open and maintain your account, process transactions, and deliver the services you have requested under our Terms & Conditions. |
| Legal Obligation | Processing required to comply with applicable regulatory requirements, including identity verification (KYC), anti-money laundering obligations, and age verification. |
| Legitimate Interests | Processing necessary for fraud prevention, security monitoring, platform analytics, abuse detection, and responsible gambling oversight — where those interests are not overridden by your rights. |
| Consent | Processing for optional marketing communications (email newsletters, promotional offers) where you have explicitly opted in. You may withdraw consent at any time. |
Win9999 uses the Personal Data it collects for the following purposes:
Win9999 does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own independent marketing or commercial purposes. Your data may be shared in the following limited circumstances:
Win9999 engages third-party service providers who process Personal Data on our behalf under written data processing agreements that impose equivalent data protection obligations. These providers include payment processors for Malaysian payment methods (including gateway providers for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX), KYC and identity verification service providers, cloud hosting and infrastructure providers, cybersecurity and fraud prevention partners, and customer support platform operators.
Win9999 may disclose Personal Data to regulators, law enforcement agencies, courts, or government bodies where required to do so by applicable law, court order, or regulatory direction. We will not make such disclosures beyond what is strictly required by the applicable legal obligation.
In the event of a merger, acquisition, restructuring, or sale of all or a material portion of Win9999's assets, Personal Data held by Win9999 may be transferred to the acquiring or successor entity as part of that transaction. Players will be notified of any such transfer and any resulting material change to this Policy.
Win9999 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyse usage patterns. The categories of cookies we deploy are described below:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Required for the Platform to function — session management, login authentication, security tokens. Cannot be disabled without impairing Platform functionality. | Session / 24 hours |
| Functional | Remember your language preference, game history, and display settings to personalise your experience. | Up to 12 months |
| Analytics | Aggregate usage data to help us understand how Players navigate the Platform and where improvements can be made. Data is anonymised or pseudonymised where possible. | Up to 24 months |
| Security / Fraud Prevention | Detect and prevent fraudulent account activity, unusual login patterns, and bot traffic. | Up to 12 months |
You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect Platform functionality. Win9999 does not deploy third-party advertising or retargeting cookies without explicit user consent.
Win9999 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory or legal obligations. The following indicative retention periods apply:
Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with Win9999's data destruction procedures.
Win9999 implements a range of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:
While Win9999 takes all reasonable precautions, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. You are encouraged to protect your account by using a strong, unique password and by notifying our support team immediately if you suspect unauthorised access to your account.
As a data subject, you hold the following rights with respect to Personal Data that Win9999 holds about you. To exercise any of these rights, please contact our Data Protection contact (see Section 15):
Win9999 will respond to valid data subject rights requests within thirty (30) calendar days of receipt. Where a request is complex or voluminous, we may extend this period by a further two (2) months with notification. There is no fee for exercising your rights under normal circumstances.
Win9999's Platform is strictly intended for individuals aged 21 years and older. We do not knowingly collect Personal Data from persons under the age of 21. Age verification is a mandatory component of the account registration and KYC process.
If Win9999 discovers or is notified that a registered account is held by a person under the age of 21, the account will be immediately suspended, all associated funds returned (less any bonus credits) to the payment source, and all Personal Data associated with the account deleted or anonymised in accordance with our data destruction procedures.
If you are a parent or guardian and believe that a person under your care may have registered on the Platform without your knowledge, please contact our support team immediately at the contact details provided in Section 15 of this Policy.
The Win9999 Platform may contain references to or integration with third-party services — including game providers, payment processors (such as gateway services for Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and other Malaysian payment channels), and customer support tools. These third parties operate under their own privacy policies and data processing terms, which are independent of this Policy.
Win9999 is not responsible for the privacy practices or data processing activities of third-party services integrated into the Platform. We strongly recommend that you review the privacy policies of any third-party service you interact with in connection with your Win9999 account.
In the course of providing its services, Win9999 may transfer Personal Data to servers or service providers located in jurisdictions outside Malaysia. Where such transfers occur, Win9999 ensures that appropriate safeguards are in place to protect Personal Data to a standard equivalent to or exceeding that applicable in Malaysia — including the use of contractual data protection clauses with Data Processors and the selection of service providers in jurisdictions with adequate data protection frameworks.
Win9999 reserves the right to update or revise this Privacy Policy at any time. Material changes — including changes to the categories of data collected, the purposes for which data is processed, or the rights available to data subjects — will be communicated to registered Players via email notification or a prominent notice on the Platform at least seven (7) calendar days before the change takes effect.
The most current version of this Policy is always available at https://win9999.casa/privacy-policy and is identified by the "Last Updated" date shown at the top of this document. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact Win9999 through any of the following channels. All contact details are provided for informational reference; email addresses are displayed as plain text and are not clickable links.
Win9999 aims to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within 30 calendar days. For urgent data security concerns, Live Chat is the fastest channel for initial contact.
Six ways Win9999 actively protects the personal data of every registered Malaysian player on our platform.
All data transmitted between your device and Win9999 is protected by 256-bit SSL encryption — the same standard used by Malaysia's major banks including Maybank and CIMB. Your payment details and personal information travel encrypted at all times.
Win9999 does not sell, rent, or trade your Personal Data to unaffiliated third parties for their commercial purposes. Your information exists to operate your account and comply with our legal obligations — nothing more.
Our KYC process verifies that every account belongs to the person who created it — protecting you from account takeover and ensuring that your winnings are paid to you and nobody else. We enforce the 21+ age requirement on every account.
We keep your data only for as long as necessary. Regulatory records are held for five years as required by law; other data categories are deleted or anonymised at the end of their defined retention windows under our formal data destruction procedures.
Access, rectify, erase, restrict, port, or object to the processing of your data — all requests are handled within 30 days at no charge. Simply contact our support team via Live Chat or email to exercise any of your data subject rights.
Our trilingual support team — available in English, Bahasa Melayu, and Chinese — can assist with any privacy query, data subject rights request, or account security concern around the clock via Live Chat and WhatsApp.
Our support team is available 24/7 in English, Bahasa Melayu, and Chinese to answer any privacy or data protection questions. You can also review our full Terms & Conditions or visit the FAQ for quick guidance. For players aged 21 and above only.