Contents of This Privacy Policy
Six Privacy Principles That Guide dn99c
High-Level Encryption
All data transmitted between your device and dn99c servers is protected by 256-bit SSL encryption. Sensitive data such as passwords and payment information is never stored in plain text.
Data Minimisation Principle
Dn99c only collects data that is genuinely necessary to provide our services. We do not collect irrelevant or excessive information purely for the sake of data collection.
Control Is in Your Hands
You have the right to access, correct, download, or request deletion of your personal data. These requests are handled by the dn99c team within the designated timeframe.
Legal Compliance
Dn99c complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We treat legal compliance as a baseline, not the highest bar.
Data Storage Security
Dn99c user data is stored on servers protected by strict access controls, regular security audits, and continuous threat monitoring to detect and respond to threats quickly.
Full Transparency
We are committed to keeping you informed of any material changes to how we handle your personal data. You will never be caught off guard by dn99c's privacy practices — everything is clearly stated here.
Personal Data We Collect
Dn99c collects various categories of data depending on how you interact with our platform. Generally, the data we collect falls into three main categories:
Data You Provide Directly
This is data you enter directly when registering or using the dn99c platform:
- Full name as shown on your identity document
- Email address and mobile number
- Date of birth for age verification
- Residential address for verification and compliance purposes
- Identity documents (IC or passport) uploaded during the KYC process
- Bank account or digital wallet details for payment processing
Automatically Collected Data
When you use the dn99c platform, our system automatically records certain technical information:
- IP address and geographic location data (city/state level, not exact address)
- Device type, operating system, and browser version
- Login and logout history with timestamps
- Game activity data includes games played, session duration, and transaction records
- Mobile app usage data such as features used and navigation patterns
Data from Third-Party Sources
In certain cases, dn99c may receive data from third-party sources for verification and security purposes. This includes identity verification information from our KYC partners, and compliance-related information from relevant authorities when required by law.
Summary of Data Collected and Its Purposes
| Data Type | Primary Purpose | Retention Period |
|---|---|---|
| Registration Information | Account management, identity verification | Full account lifetime + 5 years |
| KYC Documents | Legal compliance, fraud prevention | 5 years after account closure |
| Transaction Records | Financial records, auditing, verification | 7 years (legal requirement) |
| Game Activity Data | Service improvements, responsible gaming | 3 years |
| Technical Logs | Security, technical troubleshooting | 90 days |
| Cookie Data | User experience, analytics | Up to 24 months |
Purpose of Data Collection and Use
Dn99c uses collected data for legitimate and specific purposes. We do not use your data for purposes not stated here without obtaining your consent first.
Service Provision
The primary purpose of data collection is to manage your account, process deposits and withdrawals, verify your identity during the KYC process, and deliver a personalised gaming experience tailored to your preferences.
Security and Fraud Prevention
Technical data and account activity are continuously analysed to detect suspicious activity, unauthorised login attempts, bonus abuse, multiple account ownership, and any form of fraud that compromises platform fairness for all users.
Legal Compliance
As a platform operating in Malaysia, dn99c has legal obligations to maintain financial transaction records, conduct financial background checks for anti-money laundering purposes, and provide information to authorities when required by court order or applicable law.
Service Improvements
Aggregated usage data (not individually identifiable data) is used to understand platform usage patterns, identify areas for improvement, and develop new features relevant to the needs of Malaysian users.
Communications
Dn99c uses your contact information to send important account notifications, transaction confirmations, security alerts, and in certain cases, promotional information about dn99c services that may interest you. You can opt out of marketing communications at any time through your account settings.
How We Protect Your Data
User data security is the highest priority at dn99c. We continuously invest in security infrastructure and industry best practices to ensure your personal data is always protected.
- Transit Encryption: All data transmitted between your device and dn99c servers is protected by TLS 1.3 with 256-bit SSL encryption — the highest standard used by world-class financial institutions.
- Storage Encryption: Sensitive data stored in the dn99c database is encrypted using AES-256 encryption, meaning the data cannot be read even by individuals who gain physical access to the servers.
- Strict Access Control: Only dn99c staff with a legitimate operational need are permitted to access user data, and all access is logged for audit purposes.
- 24/7 Monitoring: dn99c's security system monitors all platform activity in real time to detect and respond to cyber threats swiftly.
- Regular Security Audits: Independent security assessments are conducted periodically to identify and address any system vulnerabilities before they can be exploited.
- Two-Factor Authentication: An additional security layer through two-factor authentication is available for all dn99c accounts to prevent unauthorised access.
Data Sharing with Third Parties
Dn99c does not sell, rent, or trade users' personal data to any third party for marketing or commercial purposes. This is an unwavering commitment.
However, there are limited situations where dn99c needs to share data with other parties to keep the platform operating properly:
Payment Service Providers
To process your deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay, transaction information must be shared with the relevant payment providers. This sharing is kept to a minimum — only the data required to complete the transaction is shared.
KYC Service Providers
To verify your identity for legal compliance purposes, documents you upload may be processed by third-party KYC service providers who have signed strict data protection agreements with dn99c.
Legal Authorities
Dn99c will disclose required information to Malaysian government authorities or law enforcement when compelled by a valid court order, warrant, or applicable written law. We do not voluntarily disclose user information to authorities without a valid legal order.
Technical Service Providers
Some technical service providers, such as cloud hosting and database management systems, may have limited access to user data as part of delivering their services. All such providers are bound by strict confidentiality agreements and may only use that data for the specified technical purposes.
Cookies and Tracking Technologies
The dn99c platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit a website.
Types of Cookies We Use
These cookies are required for the core functions of the dn99c platform, such as maintaining your login session, saving language preferences, and ensuring financial transactions are processed securely. The platform will not function properly without these cookies and they cannot be disabled.
These cookies remember your preferences and settings, such as favourite games, your usual bet sizes, and display preferences. While not mandatory, they significantly improve your comfort when using the platform.
These cookies help us understand how users engage with the dn99c platform in aggregate — which pages are visited most, which features are used most often, and where users encounter difficulties. Analytics data is anonymised and cannot be linked to any specific individual.
How to Manage Cookies
You can manage and delete cookies through your web browser settings. Please note that disabling essential cookies will affect the functionality of the dn99c platform and may prevent you from accessing certain features. Detailed instructions for managing cookies vary depending on the browser you use.
Your Rights Regarding Personal Data
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the dn99c privacy policy, you have the following rights regarding your personal data:
Right to Access Your Data
You have the right to request a copy of the personal data we hold about you. This request can be made through dn99c customer support and will be processed within 14 working days.
Right to Correct Data
If you find that any personal data we hold about you is inaccurate or outdated, you have the right to request a correction. We will update the data within a reasonable time after the request is received.
Right to Withdraw Consent
For data processed based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the validity of any processing that took place before the withdrawal.
Right to Object to Processing
You have the right to object to the processing of your data for specific purposes, particularly for direct marketing. Once you object, dn99c will stop using your data for that purpose.
Right to Data Portability
You have the right to receive your personal data in a structured, machine-readable format and transfer it to another platform if you wish to do so, to the extent technically feasible.
Right to Data Deletion
In certain circumstances, you have the right to request deletion of your personal data. However, this right is subject to data retention obligations under Malaysian law, particularly financial records and KYC records that must be retained for compliance purposes.
Data Retention and Deletion
Dn99c retains your personal data for as long as necessary to fulfil the purpose for which it was collected, unless the law requires or permits a longer retention period.
In general, personal data related to your active account is retained for the lifetime of that account. After account closure, the retention period depends on the type of data:
Financial and transaction records are retained for 7 years in accordance with Malaysia's tax and financial legal requirements. KYC documents are retained for 5 years after account closure in accordance with anti-money laundering requirements. Technical log data is typically deleted after 90 days. Data collected solely on the basis of your consent (such as marketing data) will be deleted once you withdraw that consent.
When data is no longer needed and there is no legal obligation to retain it, dn99c will securely delete or anonymise that data using methods that ensure it cannot be recovered or reused.
Privacy Policy Amendments and Contact Us
Amendments to This Policy
Dn99c reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. The "Last updated" date at the top of this document indicates when it was last reviewed.
For significant changes to how we handle your personal data, dn99c will provide clear notice via email or in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make an informed decision.
Privacy Complaints & Enquiries
If you have any questions, concerns, or complaints regarding this Privacy Policy or how dn99c handles your personal data, please contact our privacy team through the following methods:
- 24/7 live chat available within the dn99c platform
- Email [email protected] with the subject line "Privacy Enquiry"
- Referring page FAQ us for frequently asked questions related to privacy.
We are committed to responding to all privacy inquiries within 14 working days. For more complex complaints requiring detailed investigation, this period may be extended, but we will keep you updated on progress throughout the process.