gtr99 Privacy Policy

1Introduction

This Privacy Policy ("Policy") describes how gtr99.asia ("gtr99," "we," "us," "our") collects, uses, discloses, and safeguards personal data obtained from individuals ("you," "Player") who register for and use the gtr99 online gaming platform, including all associated games, betting markets, promotions, and support services.

gtr99 operates in accordance with applicable data protection legislation and is committed to handling personal data responsibly, transparently, and in a manner consistent with the trust Malaysian players place in us. This Policy should be read in conjunction with the gtr99 Terms & Conditions.

By registering a gtr99 account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not register or continue to use the Platform.

2Data We Collect

2.1 Registration Data

When you create a gtr99 account, we collect the following information which you provide directly:

• Full legal name as it appears on your government-issued identification document
• Date of birth (used for age verification — you must be 21 or older)
• Email address
• Mobile phone number
• Username and encrypted password
• Residential address
• Preferred currency (Malaysian Ringgit, MYR)

2.2 Identity Verification (KYC) Data

Prior to processing withdrawals, gtr99 may request the following documents to fulfil Know Your Customer (KYC) obligations:

• Government-issued photo identification (MyKad, Malaysian passport, or driving licence)
• Proof of address (utility bill, bank statement, or official correspondence dated within 3 months)
• Proof of payment method ownership (screenshot or statement confirming the payment method belongs to the account holder)

2.3 Transaction Data

gtr99 records all financial transactions associated with your account, including deposit amounts and methods, withdrawal requests and processing status, bonus credits and wagering progress, and game results and bet history. This data is retained for audit, fraud prevention, and regulatory compliance purposes.

2.4 Technical & Usage Data

gtr99 automatically collects certain technical information when you access the Platform, including your IP address, device type and operating system, browser type and version, session timestamps and duration, pages visited and features used, and geolocation data (country/region level only, derived from IP address).

2.5 Communications Data

When you contact gtr99 customer support, we retain records of those communications — including live chat transcripts, email correspondence, and any attachments — for quality assurance, dispute resolution, and training purposes.

3How We Use Your Data

gtr99 uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, maintain your profile, and communicate important account notifications.
• Transaction processing: To process deposits and withdrawals via your chosen Malaysian payment method (FPX, Touch n Go eWallet, Boost, Maybank2u, CIMB Clicks, Public Bank, and others), verify payment ownership, and maintain accurate financial records.
• Platform operation: To deliver game content, calculate outcomes, apply bonuses, enforce wagering limits, and provide technical support.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct described in the gtr99 Terms & Conditions.
• Legal and regulatory compliance: To comply with anti-money laundering (AML) obligations, KYC requirements, and any other applicable legal or regulatory requirements.
• Responsible gaming: To monitor gaming patterns, identify potential indicators of problem gambling behaviour, enforce self-imposed limits, and contact Players where our responsible gaming obligations require us to do so.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive marketing communications. You may withdraw consent at any time through your account settings or by contacting support.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the gtr99 user interface, game library, and customer experience.

4Legal Basis for Processing

gtr99 processes personal data on the following legal grounds:

• Contract performance: Processing necessary to fulfil our obligations under the account agreement with you, including operating your account and processing transactions.
• Legal obligation: Processing required to comply with applicable law, including AML legislation, KYC requirements, and regulatory reporting obligations.
• Legitimate interests: Processing necessary for gtr99's legitimate interests in fraud prevention, platform security, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, primarily in relation to marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5Cookies & Tracking Technologies

5.1 gtr99 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyse aggregate usage patterns.

5.2 The following types of cookies are used on gtr99.asia:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without severely impairing your ability to use gtr99. They include session authentication cookies and security tokens.
• Functional cookies: Enable the Platform to remember your preferences such as language settings, display preferences, and previously visited game categories.
• Analytics cookies: Used internally by gtr99 to understand how players interact with the Platform in aggregate. Data is anonymised and used solely to improve the gtr99 experience.

5.3 gtr99 does not use third-party advertising cookies or permit third-party ad networks to place tracking technologies on the Platform.

5.4 You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair Platform functionality including your ability to log in to your gtr99 account.

6Data Sharing & Disclosure

gtr99 does not sell, rent, or trade personal data to third parties. We may share data in the following limited circumstances:

6.1 Service Providers

gtr99 engages third-party service providers to assist in operating the Platform, including payment processors (for FPX, Touch n Go eWallet, Boost, and other Malaysian payment methods), identity verification providers, IT infrastructure and hosting providers, fraud detection service providers, and customer support technology providers. These parties process data only as instructed by gtr99, under data processing agreements that prohibit any use beyond the specified purpose.

6.2 Legal & Regulatory Disclosure

gtr99 may disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies where required by applicable law, court order, or regulatory directive. gtr99 will notify affected Players of such disclosures where permitted by law.

6.3 Business Transfers

In the event of a merger, acquisition, or transfer of all or part of gtr99's business, personal data held by gtr99 may be transferred to the acquirer as part of that transaction. Players will be notified of any such transfer and given an opportunity to request account closure before the transfer takes effect.

7International Data Transfers

7.1 gtr99 may process or store personal data on servers located outside of Malaysia. Where data is transferred to countries that do not provide a level of data protection equivalent to Malaysian standards, gtr99 implements appropriate safeguards including contractual protections with the receiving party.

7.2 By registering a gtr99 account, you consent to the transfer of your personal data to jurisdictions outside Malaysia where necessary to operate the Platform, subject to the safeguards described in this Policy.

8Data Retention

8.1 gtr99 retains personal data for as long as your account remains active plus a minimum period of five (5) years following account closure, in order to comply with legal and regulatory obligations including AML record-keeping requirements.

8.2 Transaction records are retained for a minimum of seven (7) years in accordance with applicable financial record-keeping obligations.

8.3 Where you withdraw consent for marketing communications, your contact details will be removed from marketing lists promptly. Core account data is retained for the periods described above regardless of marketing consent status.

8.4 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with gtr99's data destruction procedures.

9Your Rights

Subject to applicable law, you have the following rights regarding your personal data held by gtr99:

• Right of access: You may request a copy of the personal data gtr99 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. For standard account details (email, phone number, address), corrections can be made directly in your gtr99 account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to gtr99's legal retention obligations.
• Right to restrict processing: You may request that gtr99 restrict the processing of your data in certain circumstances, for example where you contest the accuracy of the data.
• Right to data portability: You may request a copy of the personal data you have provided to gtr99 in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time, with immediate effect.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact gtr99 customer support via live chat or email at [email protected]. Requests will be responded to within 30 days.

10Security Measures

10.1 gtr99 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption on all data transmissions between your device and gtr99 servers
• Encryption of sensitive data fields (passwords, payment details) at rest
• Access controls limiting internal data access to authorised personnel on a need-to-know basis
• Regular security assessments and penetration testing of the gtr99 platform
• Two-factor authentication available for all player accounts
• Automated monitoring for unusual account access patterns and suspicious transaction behaviour

10.2 While gtr99 implements reasonable security measures, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your gtr99 login credentials and should contact support immediately if you suspect unauthorised access to your account.

11Children's Privacy

11.1 gtr99 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Registration requires confirmation that the applicant is 21 or older, and age verification is conducted prior to withdrawal processing.

11.2 If gtr99 discovers that an account has been registered by an individual under 21, the account will be immediately closed and any funds handled in accordance with the gtr99 Terms & Conditions. Any personal data collected from an underage individual will be deleted promptly.

11.3 If you believe that a minor has registered a gtr99 account, please notify us immediately at [email protected].

12Changes to This Privacy Policy

12.1 gtr99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will notify registered Players by email and display a prominent notice on gtr99.asia at least 7 days before the updated Policy takes effect.

12.2 Minor clarifications or non-material edits may be made without advance notice. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.

12.3 Your continued use of gtr99 following the effective date of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the updated Policy, you should cease using the Platform and request account closure.

13Contact & Complaints

If you have questions, concerns, or complaints regarding this Privacy Policy or gtr99's data processing practices, please contact us:

• Live chat: Available 24/7 after logging in to your gtr99 account
• Email: [email protected]

gtr99 will acknowledge privacy-related enquiries within 5 business days and provide a substantive response within 30 days. Where you are not satisfied with gtr99's response to a privacy complaint, you may escalate the matter to the relevant data protection or gaming authority in the jurisdiction where gtr99 is licensed.