Your privacy is more than a legal obligation to gb99 online — it is a moral responsibility we take seriously every day. Find out how we protect, use, and store your personal data.
GB99 Online's Privacy Commitment to You
This Privacy Policy explains how GB99 Online collects, uses, stores, and protects your personal information when you use our platform. By registering or using gb99 online, you agree to the practices described in this policy. Please read it carefully — we have written this document in plain language so you can truly understand your rights.
When you register and play at gb99 online, you trust us with fairly sensitive information — your full name, phone number, banking details, and transaction records. We do not take that trust lightly. Since our first day of operations in 2018, gb99 online has built a data protection framework that goes beyond the minimum requirements — not because we have to, but because it is the right thing to do for our Malaysian player community.
Malaysia has the Personal Data Protection Act 2010 (PDPA), which governs how companies handle user data. GB99 Online fully complies with the PDPA and its core principles — including the notice principle, consent principle, purpose principle, access principle, disclosure principle, security principle, retention principle, data integrity principle, and the principle prohibiting transfers outside Malaysia without adequate protection.
This is not just words. Behind the gb99 online that you use every day, there is a data security infrastructure involving multi-layered encryption, strict internal access controls, regular audits, and a dedicated team monitoring data security 24 hours a day. You deserve to know what happens to your data — and we will explain it as clearly as we can.
GB99 Online collects your personal information in a number of different situations. Below is a full breakdown of the types of data we collect and the circumstances in which it is collected:
When you register an account at gb99 online, you are required to provide the following information:
For identity verification (KYC) and withdrawal processing purposes, we may require:
Every time you make a deposit or withdrawal at gb99 online — whether via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX — we record the transaction details, including the amount, payment method, date and time, and transaction status. This information is required for processing, dispute resolution, and compliance with legal requirements.
We record your gaming activity at gb99 online including games played, bet amounts, wins and losses, and session duration. This data is used for technical purposes, customer support, fraud detection, and responsible gambling programme compliance.
Automatically, the gb99 online system logs technical information whenever you access the platform:
| Data Type | Example | Purpose |
|---|---|---|
| IP Address | 192.168.x.x | Security, fraud detection |
| Device type & browser | IPhone 15, Safari 17 | User experience optimisation |
| Operating system | IOS 17, Android 14 | Technical support |
| Session time & duration | Login 10:30, 45 minutes | Security, session time limits |
| Cookie data | Session ID, language preferences | Platform functionality, analytics |
Note: gb99 online does not collect data beyond what is necessary. Every category of data we collect has a clear and legitimate purpose. We adhere to the principle of data minimisation — only data required for the stated purpose is collected.
Personal data collected by gb99 online is used solely for legitimate, stated purposes. We do not use your data for anything unrelated to the services you use. Below is the complete list of purposes for which your data is used:
Right to Opt Out: If you do not wish to receive marketing communications from gb99 online, you may unsubscribe at any time via the "unsubscribe" link in any promotional email, or by contacting our support team. Opting out of marketing communications will not affect important service communications related to your account.
GB99 Online does not sell, rent, or disclose your personal data to third parties for marketing purposes. This is a non-negotiable principle. However, there are limited situations where data sharing is necessary or legally required:
To operate the platform, gb99 online uses carefully selected third-party service providers. These include cloud infrastructure providers (servers), Malaysian e-wallet and bank payment processors, and internal analytics software. All such providers are bound by strict confidentiality agreements and are prohibited from using your data for any purpose other than delivering services to gb99 online.
GB99 Online may be required to disclose your information to the relevant authorities where mandated by Malaysian law, including in cases involving criminal investigations, court orders, or anti-money laundering (AML) compliance requirements. In such situations, gb99 online will comply with its legal obligations while limiting disclosure to the minimum extent necessary.
In the event of any merger, acquisition, or asset transfer involving gb99 online, member data may form part of the transferred assets. In such circumstances, all members will be notified in advance and the receiving party's privacy policy will be assessed to ensure your data receives equivalent protection.
Our Commitment: gb99 online will never sell, transfer, or disclose your personal data to marketing companies, data brokers, or any commercial third party without your explicit consent. This is our absolute commitment to every member in Malaysia.
GB99 Online continuously invests in a comprehensive data security infrastructure. Data security is not a one-off project — it is an ongoing process that demands consistent attention, updates, and improvement.
All data transmitted between your device and gb99 online's servers is protected by 256-bit SSL (Secure Socket Layer) encryption — the same security standard used by major Malaysian banks such as Maybank and CIMB. Sensitive data stored in our databases is also encrypted using industry-recognised encryption algorithms.
Only gb99 online staff with a legitimate business need are permitted to access members' personal data. Every access is logged and monitored. The "least privilege" principle applies — each staff member has access only to the data their role requires, and nothing more.
The gb99 online system is actively monitored 24 hours a day, 7 days a week to detect any suspicious activity, intrusion attempts, or security anomalies. Any confirmed security incident will be managed in accordance with established incident response protocols, including notification to affected members within the timeframe required by law.
Data security infrastructure gb99 online is subject to regular security audits conducted by independent experts. Audit findings are used to identify vulnerabilities and implement necessary improvements. We also conduct periodic penetration testing to simulate attacks and assess the resilience of our systems.
Shared Responsibility: While gb99 online invests heavily in data security, protection is a shared responsibility. You can help by using a strong, unique password, keeping your login credentials private, signing out of your account on shared devices, and reporting any suspicious activity to gb99 online support immediately.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the Privacy Policy of gb99 online, you have the following rights regarding your personal data:
To exercise any of the above rights, please contact the support team at gb99 online via email at support@gb99online.com or through live chat. Please include your full name and registered email address so we can verify and process your request promptly.
GB99 Online uses cookies and similar tracking technologies to enhance platform functionality and user experience. Below is an overview of the types of cookies we use:
These cookies are required for the gb99 online platform to function properly. Without them, core features such as login, session management, and transaction processing will not work. Essential cookies cannot be disabled as they are critical to the platform's security and functionality.
These cookies help gb99 online understand how members use the platform — which pages are visited most frequently, time spent on each, and navigation patterns. This information is used solely for internal purposes to improve the user experience. Analytics data of this nature cannot be used to identify individual users.
These cookies store your preferences such as your chosen language, display settings, and last played game. This allows gb99 online to deliver a more personalised and consistent experience every time you log in.
Most web browsers allow you to manage cookies through your browser settings. However, disabling essential cookies may affect the functionality of the platform gb99 online. For information on how to manage cookies in your browser, please refer to your browser's help documentation.
Important: GB99 Online does not use cookies to track your activity on other websites or for third-party advertising purposes. All cookie data is used exclusively for gb99 online's internal purposes.
Platform gb99 online is intended exclusively for users aged 18 and above. We do not knowingly collect, process, or store personal data of individuals under the age of 18. Should we discover that a child's personal data has been collected without our knowledge, that data will be deleted immediately and the associated account will be closed.
If you believe that someone under the age of 18 has registered an account at gb99 online, please contact our support team immediately at support@gb99online.com so that prompt action can be taken.
GB99 Online retains your personal data only for as long as needed to fulfil the purpose for which it was collected, or to comply with legal requirements. The following are our data retention guidelines:
Once the retention period expires, personal data will be securely deleted or anonymised using methods that ensure the data cannot be recovered or re-linked to you.
GB99 Online reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. You will be notified of any material changes through:
The "Updated" date at the top of this document reflects the date of the latest revision. Continued use of the platform following notification of any changes will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes, please discontinue use of the platform and contact us to close your account.
Current Version: This Privacy Policy is effective from January 2026. Previous versions are available upon request — contact support@gb99online.com.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way gb99 online handles your personal data, we encourage you to reach out to us. We are committed to responding to all privacy-related enquiries within 5 business days.
Contact channels for privacy-related matters:
For formal complaints relating to data protection that cannot be resolved through gb99 online's internal channels, you have the right to contact the Department of Personal Data Protection Malaysia for further guidance on your rights under PDPA 2010.
A summary of the privacy rights granted to every Malaysian member under the gb99 online Privacy Policy
Request a copy of all personal data gb99 online holds about you. Processed within 14 business days at no charge.
Correct inaccurate or incomplete data via your account settings or by contacting gb99 online support.
Request deletion of your data in certain circumstances, subject to legally mandated retention requirements in Malaysia.
Unsubscribe from gb99 online marketing communications at any time using the unsubscribe link.
Receive your data in a structured format for transfer to another service provider, subject to technical requirements.
Lodge a formal complaint with gb99 online or the Department of Personal Data Protection Malaysia if your privacy rights have been violated.
Concrete steps we take every day to keep the personal data of our Malaysian members secure
All communications between your device and the gb99 online platform are protected by 256-bit SSL encryption — the same standard used by Malaysian online banking. Sensitive data in our databases is also stored in fully encrypted form.
GB99 Online has never, and will never, sell, rent, or share your personal data with marketing companies or third-party data brokers. Your data belongs to you — it is not a commodity to be commercialised without your knowledge.
Only gb99 online staff who genuinely need access to your data will be permitted to do so. Every access is logged, monitored, and audited. A "least privilege" system ensures no one has access beyond what their role requires.
The gb99 online security system is monitored around the clock to detect any threats or suspicious activity. Our rapid incident response ensures that any issues are resolved before they affect your data or your experience on the platform.
Gb99 online's Privacy Policy is built on the principles of Malaysia's Personal Data Protection Act 2010 (PDPA). We comply with all nine PDPA principles and continuously update our practices in line with the latest guidelines from the Department of Personal Data Protection.
Once a data retention period has ended, gb99 online deletes your data using methods that ensure it cannot be recovered. This includes closed account data, historical records, and information no longer required for operational purposes.
Answers to the most common questions asked by Malaysian members about privacy and data on our platform
Your data is protected, your transactions are secure, and your privacy is respected. Join over 500,000 Malaysian members who play with confidence at gb99 online today.