GGC99 Privacy Policy for Malaysian Players

GGC99 respects the privacy of every visitor and registered player. This Privacy Policy applies to personal data processed through ggc99.cam and the related casino, sportsbook, customer support, payment, security and account-management services made available by GGC99.

By using GGC99, you acknowledge that your information will be processed as described in this policy. This acknowledgement does not remove any rights granted to you by applicable data protection law. Where consent is legally required for a particular activity, GGC99 will request it separately and allow it to be withdrawn, subject to lawful limitations.

The GGC99 platform targets adults aged 21 and above. We do not knowingly permit minors to register, deposit or gamble. Identity and age checks form part of our account verification process.

• “Personal data” means information that identifies or can reasonably be linked to an individual.
• “Processing” includes collecting, recording, organising, storing, consulting, using, sharing, restricting, deleting or anonymising personal data.
• “Account data” means information connected with your GGC99 registration, identity verification, preferences and account activity.
• “Transaction data” means records concerning deposits, withdrawals, payment instruments, MYR values, cryptocurrency wallet references and transaction status.
• “Service provider” means a party that processes data to support GGC99, such as hosting, payment, identity-verification, security or customer-service providers.
• “KYC” means Know Your Customer checks used to confirm identity, age, payment ownership and other compliance information.

Depending on how you use GGC99, we may collect the following categories:

GGC99 may also derive risk indicators from account, device, transaction and betting patterns. Such indicators help identify suspected account takeovers, payment fraud, collusion, bonus abuse and indicators of harmful gambling.

We collect data directly when you create a GGC99 account, complete KYC checks, deposit or withdraw funds, place a wager, claim a bonus, set a deposit limit, request self-exclusion, contact support or update account preferences.

Data is also collected automatically when you access GGC99. This may include device identifiers, IP address, browser characteristics, login times, pages viewed, session information and error reports. These records support website functionality, security monitoring and service improvement.

GGC99 may receive data from payment providers, identity-verification services, fraud-prevention services and game or sportsbook systems. For example, a Maybank, CIMB, Public Bank, DuitNow or FPX transaction may generate confirmation and reconciliation records. Touch 'n Go eWallet, Boost, GrabPay, Bitcoin and USDT transactions may similarly generate payment status, reference and value information.

GGC99 processes personal data for legitimate and clearly identified purposes, including:

• registering, authenticating and administering your account;
• confirming that you are aged 21 or above and completing KYC checks;
• providing casino games, live dealer tables and sports betting markets, including EPL, Liga Super Malaysia, UFC and live football;
• processing deposits, withdrawals, chargebacks and cryptocurrency transfers;
• calculating bonuses, wagering requirements, loyalty status and eligible rewards;
• detecting fraud, collusion, money laundering, account misuse and security threats;
• providing English-language support and resolving account or betting disputes;
• applying deposit limits, session controls, cooling-off periods and self-exclusion requests;
• maintaining records required for regulatory, tax, accounting or legal purposes;
• analysing service performance and fixing technical faults; and
• sending optional marketing communications where permitted and selected by you.

Depending on the relevant activity and applicable law, GGC99 relies on one or more lawful grounds. Processing may be necessary to perform the contract governing your account, including accepting wagers, settling outcomes and processing payments.

GGC99 may process information to comply with legal or licensing obligations involving age verification, KYC, anti-money laundering controls, transaction records and player protection. We may also rely on legitimate interests where processing is proportionate and does not improperly override your rights, including network security, fraud prevention, service improvement and legal claim management.

Consent may be used for optional direct marketing, non-essential technologies or other activities where consent is required. You may withdraw consent at any time, although this will not affect processing lawfully completed before withdrawal.

GGC99 processes transaction data to accept deposits, approve withdrawals, investigate discrepancies and protect players against unauthorised activity. This may include the account holder's name, payment type, partially masked account information, transaction reference, currency, amount and status.

Payment credentials may be handled by specialist processors rather than stored directly by GGC99. We do not need to retain a complete card security code after authorisation. For Bitcoin and USDT activity, blockchain transactions may remain publicly visible on the relevant distributed ledger even though a wallet address does not necessarily display your civil identity.

Players must use payment methods held in their own name. Transaction information may be compared with identity records to prevent third-party payments, money laundering, fraud and unauthorised withdrawals.

GGC99 may disclose information only where there is an appropriate operational, contractual, legal or security reason. Recipients may include:

• payment processors and financial service providers that handle deposits and withdrawals;
• KYC, age-verification and fraud-prevention service providers;
• hosting, cybersecurity, analytics and technical support providers;
• casino game and sportsbook systems where records are needed to deliver and settle services;
• professional advisers, auditors and insurers subject to confidentiality duties;
• competent authorities where disclosure is lawfully required; and
• a successor entity in connection with a legitimate merger, restructuring or transfer, subject to appropriate safeguards.

Service providers are expected to use personal data only for agreed purposes, apply suitable security controls and respect confidentiality. GGC99 does not authorise processors to use player information for unrelated purposes.

Because GGC99 provides an internationally operated service, personal data may be processed in jurisdictions outside Malaysia. Privacy laws in those locations may differ from Malaysian requirements.

Where appropriate, GGC99 uses contractual obligations, access restrictions, security measures and service-provider reviews to protect internationally transferred information. Transfers are limited to data reasonably required for platform hosting, game delivery, payment processing, identity verification, customer support, fraud prevention and compliance.

GGC99 applies administrative, technical and organisational safeguards appropriate to the nature of the information and the associated risk. Measures may include encrypted communications, access controls, authentication procedures, network monitoring, audit logs, secure development practices, staff confidentiality obligations and incident-response processes.

No internet service can promise absolute security. You are responsible for choosing a strong, unique password, keeping login details confidential and promptly informing GGC99 if you suspect unauthorised account access. Do not share one-time codes or passwords with anyone.

GGC99 retains personal data for as long as necessary to operate your account and satisfy the purposes described in this policy. Retention periods vary according to the record type, legal obligations, licensing requirements, dispute risk, fraud-prevention needs and responsible gambling controls.

Closing an account does not always permit immediate deletion. Identity, transaction, self-exclusion and security records may need to be retained for a legally required period, to defend claims, prevent duplicate registrations, enforce an exclusion or comply with financial crime obligations. Once retention is no longer justified, GGC99 will delete or anonymise the relevant data using reasonable procedures.

GGC99 may use cookies and similar technologies to keep sessions active, remember settings, protect logins, prevent fraud, measure platform performance and understand how features are used. Essential cookies support functions such as authentication, cashier continuity and security and may be necessary for the service to operate.

Non-essential technologies, where used, may support preferences, analytics or optional marketing. Browser controls can block or delete cookies, but disabling essential cookies may affect account login, wagering, payments or other platform functions.

Technical analytics are evaluated in aggregate where practical. GGC99 uses these insights to identify errors, improve mobile performance and maintain a stable experience for Malaysian players across common browsers and devices.

Subject to applicable law and relevant exemptions, you may ask GGC99 to provide information about the personal data held about you, correct inaccurate or incomplete data, delete data that no longer has a lawful retention basis, restrict certain processing, or provide eligible information in a portable format.

You may object to certain processing based on legitimate interests and may opt out of optional direct marketing. Where processing relies on consent, consent can be withdrawn. Essential account, security, payment and legal notices cannot be treated as optional marketing.

How to Make a Request

Submit a clear request to the support email listed below. GGC99 may ask for information reasonably necessary to verify your identity and protect your account. We will respond within a reasonable period and explain if a lawful restriction prevents us from completing all or part of your request.

GGC99 may analyse gaming and communication records to identify patterns that could indicate harmful gambling. Relevant factors can include unusually long sessions, repeated deposit attempts, rapid increases in stakes, frequent limit changes or statements made to customer support.

Where an indicator is identified, GGC99 may provide a safer-gambling message, request a welfare interaction, apply an account restriction, recommend a cooling-off period or enforce self-exclusion. Such processing supports player safety and GGC99's responsible gambling obligations.

Self-exclusion records may be retained after account closure so that GGC99 can prevent re-registration during the exclusion period. For more information about limits, cooling-off tools and self-exclusion, read our Responsible Gambling guidance. Gambling services are strictly for adults aged 21 and above.

GGC99 may revise this Privacy Policy to reflect changes in services, technologies, security practices, legal requirements or operational procedures. The latest effective date will appear near the top of this page.

Where a change materially affects how personal data is processed, GGC99 will take reasonable steps to provide notice through the platform or available account contact details. Continued use of the service after an updated policy takes effect will be subject to the revised notice, without limiting any consent or statutory requirements that apply.

If you have a question, concern, complaint or rights request concerning this Privacy Policy or the handling of your personal data, contact the GGC99 privacy support team using the plain-text details below:

• Email: [email protected]
• Email support hours: 08:00–23:00 MYT daily
• Live chat: Available 24 hours a day, 7 days a week
• Supported languages: English, Bahasa Melayu and Mandarin Chinese

Please describe your request clearly and avoid sending unnecessary sensitive information in your initial message. GGC99 may require identity verification before disclosing, correcting or deleting account information.