At s99may, your privacy is fundamental — not an afterthought. This Privacy Policy explains precisely what personal data we collect from Malaysian players, why we collect it, how we use and protect it, and what rights you have over your own information.
Last Updated: 1 January 2026s99may ("we", "us", "our", or "the Platform") operates the online casino and sports betting platform at s99may.cam, providing services to registered players primarily based in Malaysia, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, Bangsar, and across all regions of Malaysia.
We are committed to protecting the privacy and personal data of every individual who interacts with the s99may platform. This Privacy Policy has been prepared in accordance with applicable data protection principles and sets out, in plain and accessible language, how s99may handles personal information across the full lifecycle of the player relationship — from first visit through to account closure.
This Policy should be read alongside our Terms and Conditions, which govern the overall relationship between s99may and registered Members. In the event of any inconsistency between this Policy and the Terms and Conditions with respect to data handling, this Policy shall take precedence.
We may update this Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform functionality. Material changes will be communicated to registered Members via email or in-platform notification. The "Last Updated" date at the top of this page reflects the most recent revision.
For the purposes of this Privacy Policy, the following definitions apply:
s99may collects Personal Data across several categories. The following table summarises the types of data collected, along with the context in which each category is gathered:
| Data Category | Specific Data Points | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (MyKad or passport) | Account registration and KYC verification |
| Contact Data | Email address, mobile phone number, residential address | Account registration, support interactions |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), cryptocurrency wallet addresses, transaction history | Deposit and withdrawal processing |
| KYC Documents | Scanned copies of Malaysian MyKad, passport, utility bills, bank statements | Identity and address verification |
| Account Activity Data | Login history, betting history, game preferences, session duration, bonus claims | Ongoing platform use |
| Technical Data | IP address, device type, browser type and version, operating system, device fingerprint | Platform access (automatic collection) |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
We collect only the Personal Data that is reasonably necessary for the purposes outlined in Section 5. We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, or biometric data) unless expressly required for regulatory compliance purposes, in which case such collection will be explicitly disclosed.
s99may collects Personal Data through the following channels and mechanisms:
Data you provide directly to us when you:
Data collected automatically when you access or use the platform, including:
In limited circumstances, s99may may receive Personal Data about you from third parties, including:
s99may processes your Personal Data for the following specific and legitimate purposes:
s99may processes Personal Data on one or more of the following legal bases, depending on the specific processing activity involved:
s99may does not sell, rent, or trade your Personal Data. We may disclose your Personal Data to the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:
We engage carefully selected third-party service providers to assist in operating the s99may platform. These providers act as data processors under our instruction and are contractually bound to process data only for the purposes we specify. Categories of third-party processors include:
s99may may be required by law to disclose certain Personal Data to regulatory bodies, financial intelligence units, law enforcement agencies, or courts, where such disclosure is required by a valid legal obligation, court order, or regulatory direction. In all such cases, s99may will disclose only the minimum data required to satisfy the legal obligation and will notify the affected Member where permissible to do so under applicable law.
In the event of a merger, acquisition, restructuring, or sale of all or part of s99may's business, Personal Data held by s99may may be transferred to the acquiring entity as part of the transaction. We will notify affected Members of any such transfer and the privacy terms applicable to their data following the transfer.
s99may retains Personal Data for the period reasonably necessary to fulfil the purposes for which it was collected, subject to the following retention principles:
When Personal Data is no longer required for any of the above purposes and no legal obligation to retain it remains, s99may will securely delete or anonymise the data in a manner that prevents reconstruction of the original information.
s99may employs industry-standard technical and organisational security measures to protect your Personal Data from unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:
In the event of a data breach that is likely to result in a high risk to your rights and freedoms, s99may will notify affected individuals without undue delay and in accordance with applicable notification requirements.
The s99may platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and gather platform usage analytics. Cookies are small text files stored on your device when you visit the platform.
You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the s99may platform. Instructions for managing cookies are available in the help documentation of all major browsers.
s99may does not use cross-site tracking technologies for advertising purposes, and no behavioural advertising cookies are placed on your device without your explicit consent.
Subject to applicable law and certain limitations, you have the following rights with respect to your Personal Data held by s99may:
You may request a copy of the Personal Data we hold about you, along with information about how it is processed. We will respond to verified access requests within 30 days.
You may request correction of any inaccurate or incomplete Personal Data we hold about you. Account profile details can be updated via the account settings page or by contacting support.
You may request deletion of your Personal Data where it is no longer necessary for the purposes collected, subject to legal retention obligations that may require us to retain certain records.
You may request that we temporarily restrict the processing of your data while an accuracy dispute or objection is under review, or where you require data retained for legal claims.
Where processing is based on your consent or contractual necessity, you may request your data in a structured, machine-readable format suitable for transfer to another service provider.
You may object to processing based on legitimate interests at any time. You also have an absolute right to object to processing your data for direct marketing purposes, which we honour immediately.
To exercise any of the above rights, please contact s99may's support team via email at [email protected] or via live chat, clearly stating the right you wish to exercise and providing sufficient information to verify your identity. We aim to respond to all verified data rights requests within thirty (30) calendar days. Complex requests may require additional time, in which case we will notify you of the extended timeline.
The s99may platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory part of the account registration and KYC process, and accounts found to belong to underage individuals will be immediately closed and any associated funds returned to the extent legally required.
If you believe that s99may may have inadvertently collected Personal Data from an individual under the age of 21, please contact us immediately at [email protected]. We will investigate and, if confirmed, delete the relevant data without delay.
The s99may platform may integrate with, or make reference to, third-party services including payment processors (such as FPX, DuitNow, and e-wallet providers like Touch 'n Go), game content providers, and identity verification services. When your data is transferred to these third parties in connection with a transaction or service, that transfer is governed by the third party's own privacy policies in addition to our data sharing obligations described in Section 7.
s99may is not responsible for the privacy practices of third-party payment providers, banking institutions, or other external platforms. We encourage you to review the privacy policies of any third-party service you interact with in connection with your s99may account. In particular, when depositing via Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, or any e-wallet platform, you should be aware that those transactions are governed in part by the terms of those respective providers.
s99may reserves the right to update or amend this Privacy Policy at any time. We will update the "Last Updated" date at the top of this page when material changes are made and, where practicable, we will notify registered Members of significant changes via email to the address on file or via an in-platform notification.
We encourage you to review this Privacy Policy periodically to remain informed of how we handle your data. Your continued use of the s99may platform following the publication of any revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised terms, you must cease using the platform and may request account closure as described in our Terms and Conditions.
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your Personal Data by s99may, please contact our support team through the following channels:
When contacting us about a data rights request or privacy concern, please provide your registered email address and, where applicable, your Member username to enable efficient identification and processing of your request. Do not include full payment card numbers or KYC document scans in email or chat communications — these should be submitted only through the designated secure verification portal within your account.
Our Privacy Policy is backed by real technical and organisational measures. Here are six of the most important protections in place for every s99may player.
All data transmitted between your device and s99may's platform is protected by TLS encryption. Sensitive data at rest — including KYC documents and financial records — is encrypted using AES-256 or equivalent standard.
s99may does not sell, rent, or trade your personal data to any third-party advertiser, data broker, or marketing company — ever. Your data exists solely to operate your account and keep you safe on the platform.
Identity documents submitted for verification are stored on access-controlled infrastructure, segregated from general platform data. Only authorised verification staff can access KYC documents, under strict audit logging.
You can request a copy of your data, ask for corrections, or request deletion at any time at no charge. Our support team processes all data rights requests within 30 days, consistent with applicable privacy principles.
All data processing at s99may is conducted in accordance with applicable AML obligations. Where legal disclosure to authorities is required, s99may limits disclosure to the minimum required and notifies affected Members where permitted.
s99may keeps your data only as long as legally necessary — typically five years post-closure for financial and KYC records. When retention obligations expire, data is securely deleted or anonymised, never accumulated indefinitely.
⚠️ For players aged 21 and above only — s99may is committed to player safety
s99may collects and processes your personal data to keep your account secure and to protect you as a player. Your privacy is fundamental to that commitment. For information on player protection tools, please visit our Responsible Gambling page.
s99may was built on transparency — from how we handle your bets to how we handle your data. Over 520,000 Malaysian players trust s99may because we earn that trust every day. Visit our homepage to learn more about what we offer.
For players aged 21 and above only. s99may promotes responsible gambling. All data handled in accordance with this Privacy Policy.