Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how pop99.cam ("pop99", "we", "us", "our") collects, uses, stores, discloses, and protects personal information provided by users ("User", "Player", "you") when accessing or using the pop99 online gaming platform at https://pop99.cam and any associated services, applications, or features.

pop99 takes the privacy of its users seriously. We are committed to handling your personal data with transparency, integrity, and care, in accordance with internationally recognised data protection principles. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

3. Data Controller

The Data Controller responsible for your Personal Data in connection with pop99.cam is the operator of the pop99 platform, operating under its applicable international gaming licence. All data-related enquiries, access requests, and complaints may be directed to our support team using the contact details set out in Section 17 of this Policy.

pop99 does not hold a Malaysian gaming licence, as no such licensing framework exists in Malaysia for online gambling operators. Players in Malaysia access the platform at their own discretion and in accordance with applicable local laws. Pop99 processes personal data in connection with its international operations and licensing requirements.

4. Personal Data We Collect

pop99 collects the following categories of personal data from Players:

pop99 applies the principle of data minimisation — we collect only the data that is necessary for the identified purposes. We do not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health information) unless specifically required for responsible gambling assessment purposes, and only with your explicit consent.

5. How Personal Data Is Collected

pop99 collects personal data through the following means:

• Direct interactions: Information you provide when creating an account, completing KYC verification, making deposits or withdrawals via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, or other payment partners, contacting our support team, or filling in any form on the platform.
• Automated technologies: As you interact with the platform, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies. See Section 11 for details.
• Third-party sources: We may receive identity and fraud-screening information from KYC verification providers, payment processors, and fraud-prevention services to supplement data you have provided directly.
• Publicly available sources: In limited circumstances, where required for AML compliance, we may collect data from publicly available registers or sanctions lists.

6. Purposes & Legal Basis for Processing

pop99 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account registration, payment processing, gameplay, and customer support.
• Legal obligation: Processing required to comply with applicable law — including KYC identity verification, anti-money laundering (AML) procedures, and responsible gambling age verification (21+ enforcement).
• Legitimate interests: Processing in pop99's legitimate business interests — including fraud prevention, platform security, technical performance monitoring, and responsible gambling risk assessment — where these interests do not override your fundamental rights.
• Consent: Where we rely on your consent for processing (such as sending marketing communications or placing non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

7. Sharing of Personal Data

pop99 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following circumstances and only to the extent necessary for each purpose:

• Payment processors: To process deposits and withdrawals through your chosen method (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and Malaysian banking partners including Maybank, CIMB, Public Bank, RHB, and Hong Leong Bank).
• KYC and identity verification providers: To verify your identity, age, and documentation as part of our mandatory KYC process.
• Fraud and AML screening services: To screen transactions and account activity against sanctions lists and fraud databases, as required under applicable AML obligations.
• Platform infrastructure and technology providers: Including cloud hosting, customer support software, and analytics services that process data solely on pop99's behalf under data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory instruction, pop99 will disclose personal data to the relevant authority.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of pop99's business, personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third-party Data Processors engaged by pop99 are subject to binding data processing agreements and are required to process data only for the specified purpose and in accordance with applicable data protection standards.

8. International Data Transfers

pop99 operates internationally, and your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, pop99 ensures that appropriate safeguards are in place — including standard contractual clauses, data processing agreements, or reliance on the receiving jurisdiction's adequacy determination — to provide a level of data protection equivalent to that described in this Policy.

By using pop99.cam, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia as described above.

9. Data Retention

pop99 retains personal data for as long as your account remains active and for a further period thereafter, as determined by the following principles:

• Active accounts: Personal data is retained for the duration of your account relationship with pop99.
• Closed accounts: Following account closure, personal data (including identity, financial, and transaction records) is retained for a minimum of five (5) years, in compliance with anti-money laundering legislation and responsible gambling record-keeping obligations.
• Legal proceedings: Where personal data is relevant to an ongoing legal dispute or regulatory investigation, it will be retained until that matter is fully resolved.
• Marketing data: Data used solely for marketing communications is deleted promptly upon withdrawal of consent.

Where data is no longer required for its original purpose and no legal retention obligation applies, it will be securely deleted or anonymised.

10. Security Measures

pop99 implements technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers.
• Encryption of sensitive data (including payment credentials) stored in our databases.
• Role-based access controls restricting internal access to personal data to authorised personnel with a legitimate operational need.
• Multi-factor authentication requirements for staff accessing data management systems.
• Regular penetration testing and vulnerability assessments of platform infrastructure.
• Incident response procedures to address and notify affected parties of any confirmed data breaches in a timely manner.

11. Cookies & Tracking Technologies

pop99 uses cookies and similar tracking technologies to operate the platform, maintain your session, detect fraud, and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional cookies: Store your preferences (such as language settings and deposit defaults) to improve your experience across sessions.
• Analytical cookies: Collect aggregated, anonymised data about how users interact with the platform to help us identify areas for improvement. No personally identifiable information is transmitted to analytics services without your consent.
• Security and fraud-detection cookies: Detect and prevent fraudulent account activity, including bot detection and anomalous login behaviour.

You may manage non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of parts of the pop99 platform.

12. Minors & Age Policy

pop99 enforces a strict minimum age of 21 years for all registered players. pop99 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the mandatory KYC process at account registration and prior to the first withdrawal.

If pop99 becomes aware that it has inadvertently collected personal data from a person under 21 years of age, it will immediately suspend the relevant account, delete the data (except where required for regulatory reporting), and return any deposited funds net of any withdrawals already made.

If you have reason to believe that a person under 21 has registered on pop99.cam, please contact us at [email protected] immediately.

13. Your Data Rights

Subject to applicable law and any legal retention obligations, you hold the following rights in respect of your personal data held by pop99:

• Right of Access: You may request a copy of the personal data pop99 holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Where possible, corrections will be applied within 14 days of a verified request.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that we are unable to delete data we are legally required to retain.
• Right to Restrict Processing: You may request that we limit the way we use your data in certain circumstances — for example, where you contest the accuracy of data while we investigate.
• Right to Data Portability: You may request a copy of data you have provided to us in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data based on legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our support team at [email protected]. We may require identity verification before actioning certain requests. Where we are unable to comply with a request, we will provide a written explanation.

14. Marketing Communications

With your consent, pop99 may send you promotional communications about bonuses, new games, platform features, and special events relevant to players in Malaysia — via email, SMS, or in-platform notification.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences within your account settings dashboard.
• Clicking the unsubscribe link included in any marketing email.
• Contacting our support team at [email protected] and requesting removal from marketing lists.

Withdrawal of marketing consent will not affect the delivery of service-related communications that are necessary for the operation of your account (such as withdrawal confirmations, KYC notices, or security alerts).

15. Third-Party Links

pop99.cam may contain links to third-party websites or services for informational purposes. pop99 is not responsible for the privacy practices or content of any third-party sites. We encourage you to read the privacy policy of any site you visit via a link on our platform. This Policy applies only to data processed by pop99.cam.

16. Changes to This Privacy Policy

pop99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated to registered Players via email or a prominent notice on the platform prior to taking effect.

The "Effective Date" at the top of this Policy indicates when it was last revised. Your continued use of pop99.cam following the posting of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must cease using the platform and may request account closure in accordance with our Terms & Conditions.

17. Contact Us

For any queries, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the pop99 data team using the following channels:

For responsible gambling enquiries, including self-exclusion or deposit limit requests, please visit our dedicated Responsible Gambling page. For general terms of service questions, please refer to our Terms & Conditions.