Official Document – 99kopitiam

99kopitiam Privacy Policy – Personal Data Protection for Malaysian Members Under PDPA 2010

Your privacy is our priority. This document explains exactly how 99kopitiam collects, uses, stores, and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010.

Updated: January 2026 Bahasa Melayu (ms-MY) PDPA 2010 Compliance
Privacy Policy
99kopitiam Malaysia
12 Key Sections
Types of Data Collected
Purpose of Data Use
User Rights (PDPA 2010)
Security & Encryption

Privacy Commitment 99kopitiam to You

Six core principles that govern how 99kopitiam handles the personal data of every member.

Bank-Grade Security

All personal and financial data of 99kopitiam members is protected with 256-bit SSL encryption — the same standard used by leading Malaysian banking institutions. Data is stored on servers secured with multi-layered firewalls and round-the-clock monitoring.

Your Data, Your Control

You have the full right to access, correct, transfer, and request the deletion of your personal data held by 99kopitiam, in accordance with the provisions of the Malaysian Personal Data Protection Act (PDPA) 2010. Requests are processed within 14 business days.

No Sale of Data to Third Parties

99kopitiam does not sell, rent, or commercialise members' personal data to any third party for marketing or any other purposes. Your data is used solely for platform operations and to improve the user experience.

Full Transparency

This Privacy Policy is written in plain language, free from confusing legal jargon. We believe our members have the right to know exactly what we do with their information — not just lengthy terms that no one reads.

PDPA 2010 Compliance

99kopitiam operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010). Our compliance team monitors all relevant legislative changes and ensures our data handling practices remain current at all times.

Data Breach Notification

In the event of any security breach involving members' personal data, 99kopitiam is committed to notifying affected members within 72 hours via their registered email address and in-platform notifications, in line with industry best practices.

This Privacy Policy takes effect from 1 January 2026. By registering for or continuing to use the 99kopitiam platform, you agree to the terms set out in this Privacy Policy. Please read it carefully and contact us if you have any questions.

Related Documents: This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy 99kopitiam. Together, these three documents form the complete agreement between you and 99kopitiam.

1Introduction

99kopitiam ("we", "platform", "99kopitiam.xyz") take our responsibility to protect the privacy and personal data of every member who uses our services seriously. This Privacy Policy has been prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and international best practices in data protection.

This policy applies to all personal information collected by 99kopitiam through our website at 99kopitiam.xyz, the 99kopitiam mobile app, all services and products offered on the platform, and any communications between you and our team — including customer support via live chat, WhatsApp, and email.

The term "personal data" in the context of this policy refers to any information that can be used to identify you, directly or indirectly, as an individual — from your name and phone number to financial information and platform usage data.

Important Note: This Privacy Policy is written in Malay for the convenience of Malaysian members. In the event of any conflict or ambiguity in interpretation, the Malay version shall be the definitive and binding version.

2Personal Data We Collect

99kopitiam collects various types of personal data depending on how you interact with our platform. Below is a detailed breakdown of the data categories we collect:

Data Category Example Information Requirements
Identity Data Full name, MyKad/passport number, date of birth, gender Mandatory (KYC)
Contact Data Email address, mobile number, mailing address Mandatory
Financial Data E-wallet account numbers, FPX details, deposit & withdrawal records Mandatory (transactions)
Usage Data Betting history, markets browsed, login frequency, active session duration Automatic
Technical Data IP address, device type, operating system, browser version, cookie data Automatic
Communication Data Live chat session records, support emails, complaint tickets Optional
Location Data General location based on IP address (state/region) Automatic

We do not collect data that is unnecessary for platform operations. Each category of data collected has a clear and legitimate purpose as described in Section 4 below.

3How We Collect Personal Data

99kopitiam collects your personal data through several key channels:

A. Information You Provide Directly:

  • The 99kopitiam account registration form (name, email, phone number, date of birth).
  • KYC identity verification process (MyKad copy, proof of address, bank statement).
  • Payment method details when making deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX, Maybank2u, or CIMB Clicks.
  • Communications with our customer support team via live chat, WhatsApp, or email.
  • Profile update information that you provide voluntarily.

B. Automatically Collected Data:

  • Technical data from your device and browser when you access the platform.
  • IP address and general location information for security and compliance purposes.
  • Usage data including pages visited, time spent, and interaction patterns.
  • Cookies and similar tracking technologies (see Section 9 for further details).
  • System logs and activity records for fraud detection and security purposes.

C. Data from Trusted Third Parties:

  • Identity verification information from KYC service providers licensed in Malaysia.
  • Payment verification information from local e-wallet and banking service providers.
  • Information relating to problem gambling blacklists from relevant agencies (for responsible gaming purposes).

Our Commitment: 99kopitiam does not purchase email lists or phone numbers from third parties for marketing purposes. All data we hold is obtained directly from your interactions with our platform or through verification processes to which you have given consent.

4How We Use Your Personal Data

99kopitiam uses your personal data solely for the following legitimate purposes:

  • Account Operations: Creating and managing your 99kopitiam account, processing logins, and verifying your identity.
  • Transaction Processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX and local banking, as well as withdrawal of winnings.
  • KYC/AML Compliance: To fulfil legal obligations relating to identity verification (Know Your Customer) and anti-money laundering (Anti-Money Laundering) as required under Malaysian law.
  • Platform Security: Detecting and preventing fraud, unauthorised access, account misuse, and other security threats.
  • Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance to 99kopitiam members.
  • Responsible Gaming: Monitoring usage patterns to identify signs of problem gambling and activating appropriate self-control tools.
  • Platform Improvements: Analysing usage data in aggregate (without identifying individuals) to improve the user experience, introduce new features, and optimise platform performance.
  • Service Communications: Sending important notifications relating to your account, such as transaction confirmations, security updates, and policy changes.
  • Marketing (with consent): Sending 99kopitiam promotional information and bonus offers only to members who have given explicit consent. You may withdraw this consent at any time.

Data Minimisation Principle: 99kopitiam only collects data that is genuinely necessary for the stated purposes. We do not collect sensitive personal data such as medical information, religious beliefs, or political views unless specifically required by law.

5Sharing Data with Third Parties

99kopitiam does not sell or commercialise members' personal data. However, there are limited circumstances where we need to share data with trusted third parties for platform operational purposes:

Authorised Service Providers:

  • Payment Providers: DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX, Maybank2u, CIMB Clicks – only the information required to process transactions is shared.
  • KYC Provider: Licensed identity verification service providers in Malaysia for processing member verification documents.
  • Cloud Infrastructure Provider: Server hosting services that process data under strict data processing agreements and high security standards.
  • Analytics Provider: Analytics tools that process usage data in anonymised and aggregated form for platform improvement purposes.

Legally Required Disclosures:

  • Lawful requests from the Royal Malaysia Police (PDRM), Bank Negara Malaysia (BNM), the Inland Revenue Board (LHDN), or any authority with legal jurisdiction.
  • A valid court order issued in Malaysia.
  • Reporting obligations under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA).

Data Processing Agreement: All third parties that receive personal data from 99kopitiam members are bound by data processing agreements that prohibit them from using such data for any purpose beyond what is authorised. They are also required to maintain security standards on par with those of 99kopitiam.

6Personal Data Security

99kopitiam invests seriously in security infrastructure to ensure members' personal data remains protected at all times. The technical and organisational security measures we implement include:

Technical Security Measures:

  • 256-bit SSL/TLS Encryption: All communications between your device and 99kopitiam's servers are encrypted using the latest TLS 1.3 protocol — the same standard used by major Malaysian banks.
  • Secure Password Storage: Member passwords are never stored in plain text. We use the bcrypt hashing algorithm with a unique salt value for each account.
  • Two-Factor Authentication (2FA): Available and encouraged for all members as an added layer of protection during login.
  • 24/7 Security Monitoring: An intrusion detection system (IDS/IPS) that monitors abnormal traffic and prevents cyberattacks in real time.
  • Regular Penetration Testing: Security audits and penetration testing are conducted on a regular basis by independent security experts to identify and address vulnerabilities.
  • Data Deletion: Data that is no longer required is securely deleted using industry-recognised data disposal procedures.

Organisational Security Measures:

  • Access to members' personal data is restricted to staff who genuinely require it to carry out their duties (principle of least privilege).
  • All 99kopitiam staff with access to personal data are subject to strict confidentiality agreements.
  • Privacy and security awareness training is conducted regularly for all staff.

7Data Retention & Deletion

99kopitiam retains members' personal data only for as long as it is needed for the purpose for which it was collected, or as required under applicable Malaysian law. The following are the key data retention period guidelines:

  • Active Account Data: Retained for the duration of your active membership with 99kopitiam.
  • Closed Account Data: Basic identity information and transaction records are retained for 7 years after account closure, in line with Malaysian tax and AML legal requirements.
  • Support Communication Data: Live chat session records and support emails are retained for 3 years for complaint resolution and service improvement purposes.
  • Security Logs: Activity and security logs are retained for 2 years to facilitate security incident investigations if required.
  • Cookie Data: Depends on cookie type — session cookies are deleted when you close your browser; persistent cookies are retained for the duration stated in Section 9.

Once the designated retention period expires, your personal data will be securely deleted or anonymised in accordance with industry-recognised data disposal procedures. Anonymised data (where no individual can be identified) may be retained for longer periods for analytics and aggregate reporting purposes.

8Your Rights Under PDPA 2010

As a 99kopitiam member based in Malaysia, you have the following rights under the Personal Data Protection Act 2010 regarding your personal data that we hold:

Right of Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 business days.

Right to Rectification

You have the right to correct any inaccurate or incomplete personal data in your 99kopitiam account at any time.

Right to Erasure

You may request the deletion of your personal data, subject to any legal retention obligations applicable to 99kopitiam.

Right to Object

You have the right to object to the processing of your personal data for direct marketing or profiling purposes at any time.

Right to Data Portability

You may request a copy of your data in a machine-readable format for transfer to another platform as needed.

Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your data while a complaint or enquiry is being resolved.

To exercise any of the rights above, please contact our Data Protection Officer by email at privacy@99kopitiam.xyz or through 99kopitiam's support channels. Requests will be acknowledged within 3 business days and resolved within 14 business days.

Limitations on the Right to Erasure: The right to data erasure is subject to legal retention obligations. Certain records, such as financial transaction records and KYC documents, must be retained for periods prescribed under Malaysian law regardless of any erasure request.

9Cookies & Tracking Technologies

99kopitiam uses cookies and similar tracking technologies to enhance the user experience, analyse usage patterns, and maintain platform security. Below are the types of cookies we use:

  • Session Cookies (Required): Technical cookies required for the basic operation of the platform — including login authentication, session management, and form security. These cookies are deleted when you close your browser and cannot be disabled without affecting core platform functionality.
  • Preference Cookies (Functional): Stores your preferences such as language, display settings, and login information ("Remember Me"). These cookies are stored for up to 30 days.
  • Analytics Cookies: Collects anonymised usage data to help us understand how members use the platform and identify areas for improvement. This data does not contain any personally identifiable information. These cookies are stored for up to 12 months.
  • Security Cookies: Used to detect suspicious activity, identify unrecognised devices, and prevent unauthorised access to your account. These cookies are stored for up to 90 days.

You can manage your cookie settings through your browser at any time. However, disabling mandatory (session) cookies may affect the functionality of the 99kopitiam platform. For more information on how to manage cookies in popular browsers, refer to your browser's help documentation.

99kopitiam does not use third-party cookies for advertising or cross-site tracking purposes. We do not share cookie data with advertising networks.

10Protection of Children's Data

The 99kopitiam platform is strictly for users aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

99kopitiam performs age verification during the registration process and KYC procedures. If we find that an account is held by a minor, the account will be terminated immediately and all associated personal data will be securely deleted.

To Parents & Guardians: If you believe that your child under the age of 18 has registered for or used the 99kopitiam platform, please contact us immediately at privacy@99kopitiam.xyz. We will take prompt action to resolve the matter.

11Changes to This Privacy Policy

99kopitiam reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or changes in how our platform operates.

For material changes — that is, changes that significantly affect how we process your personal data — we will:

  • Sending notifications via email to the registered address on your account at least 14 days before the changes take effect.
  • Displaying a clear notice on the 99kopitiam platform's main page.
  • Displaying an in-app notification the next time you log in.

For non-material changes — such as language corrections or clarifications that do not alter the meaning — we may update this Privacy Policy without prior notice. The "Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the 99kopitiam platform after any changes to the Privacy Policy take effect constitutes your acceptance of the updated policy. If you do not agree with any of the changes, you have the right to close your account before the effective date.

Current Version: This Privacy Policy is the version in effect from 1 January 2026. Archived versions of previous policies are available upon request by emailing privacy@99kopitiam.xyz.

12Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 99kopitiam handles your personal data, please contact our Data Protection Officer:

  • Privacy Email: privacy@99kopitiam.xyz (response within 3 business days)
  • General Support Email: support@99kopitiam.xyz (response within 2 hours)
  • Live Chat: Available on the 99kopitiam platform, 24 hours a day, 7 days a week
  • WhatsApp: Number available in the platform's support section after logging in

When contacting us regarding a data rights request, please include:

  • Your full name and 99kopitiam account number
  • Type of request (access, correction, deletion, etc.)
  • Specific details of the data you are referring to (where applicable)
  • Proof of identity for verification purposes (not required for general enquiries)

If you are dissatisfied with how 99kopitiam has handled your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, which operates under the Ministry of Communications & Multimedia Malaysia.

This Privacy Policy is governed by the laws of Malaysia, in particular the Personal Data Protection Act 2010 (Act 709). Any privacy-related disputes will be resolved under the jurisdiction of Malaysian courts.

Question Common – 99kopitiam Privacy Policy

The most frequently asked questions about privacy and data protection at 99kopitiam.

99kopitiam does not sell or commercialise members' personal data to any third party. We only share data as necessary with service providers that help us operate the platform — such as local payment providers (DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX, Maybank2u, CIMB Clicks) and licensed KYC providers. All such third parties are bound by strict data protection agreements. We may also share data where required by Malaysian law or a valid court order.

You can request a copy of your personal data by emailing privacy@99kopitiam.xyz with the subject line "Data Access Request", along with your full name and 99kopitiam account number. We will verify your identity and process the request within 14 business days. Your data will be sent securely to your registered email address. No fees are charged for reasonable data access requests.

Yes, you have the right to request deletion of your personal data. However, this right is subject to legal retention obligations. Financial transaction records and KYC documents must be retained for 7 years under Malaysian tax and AML laws — these records cannot be deleted upon request. Other data not subject to legal obligations will be securely deleted. Submit your deletion request to privacy@99kopitiam.xyz with full details.

When you close your 99kopitiam account, your access to the platform is deactivated immediately. However, certain personal data must be retained for periods required under Malaysian law — financial records and identity documents are kept for 7 years in accordance with tax and AML requirements. Once the mandatory retention period ends, your data will be securely deleted or anonymised. Support communication logs are retained for 3 years. Data not subject to legal obligations will be deleted within 30 days of account closure.

You can opt out of receiving marketing and promotional emails from 99kopitiam at any time in two ways: first, click the "Unsubscribe" link found at the bottom of any promotional email you receive from us; second, log in to your 99kopitiam account, go to Account Settings, and disable the marketing notifications option. Requests will be processed within 5 business days. Please note that you will still receive important transactional emails such as deposit confirmations, withdrawal notices, and account security alerts — these are not marketing emails and cannot be disabled as they form part of our core service.

Your Data Is Safe With Us

Bet with Confidence at 99kopitiam – Your Privacy, Protected

Over 200,000 active members trust 99kopitiam not only for the best odds and fast payouts, but also because we take the privacy and security of their data seriously.

256-bit SSL PDPA 2010 Compliance No Data Sales 18 Years and Above Only
Bahasa Melayu