FA99 OFFICIAL DOCUMENT

Privacy Policy FA99 – Malaysia Personal Data Protection

Your privacy matters to us. Learn how FA99 collects, uses, and protects your personal information in accordance with Malaysian law.

Last updated: 1 January 2026
PDPA 2010 Compliant
256-bit
SSL Encryption
No Data Sales
24/7
Privacy Support

1. Introduction & Purpose of This Policy

This Privacy Policy sets out FA99's commitment to protecting the personal data of all users on our platform. It has been drafted in compliance with the Personal Data Protection Act 2010 (PDPA) Malaysia and reflects FA99's core values — transparency and accountability in every aspect of our operations.

When you register an account at FA99, make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, play at a Live Casino table, or simply browse our platform, certain information about you may be collected. This Privacy Policy explains exactly what data we collect, how it is used, who can access it, and how you can control your own information.

We understand that privacy is ultimately a matter of trust. Many fa99 players share sensitive information during the verification process — including Malaysian phone numbers, bank account details, and ID card information — and we don't take the responsibility that comes with that trust lightly. Our goal is to be a platform you can use with confidence, without having to wonder what happens to your information behind the scenes.

Note: This Privacy Policy applies to all FA99 services, including the web platform, mobile app, and any communications relating to your account. By using the FA99 platform, you agree to the terms of this Privacy Policy.

2. Personal Data We Collect

FA99 only collects data that is strictly necessary to provide a safe and fully functional online casino service. We do not collect excessive data or data that is irrelevant to a legitimate purpose.

Data provided directly by you:

  • Full name as stated on your Malaysian MyKad
  • An active Malaysian phone number (used for OTP and account communications)
  • Email address (if registered)
  • Date of birth (for 18+ age verification)
  • MyKad copy or other identity documents submitted during the KYC process
  • Payment method details (Touch 'n Go, DuitNow, FPX, GrabPay, Boost, or ShopeePay account numbers)

Data collected automatically while you use the platform:

  • IP address and general location information (state/city within Malaysia)
  • Device type, operating system, and web browser version used
  • Platform activity logs including games played, bets placed, and session duration
  • Deposit and withdrawal transaction history
  • Session cookies and platform preference cookies
  • Communication records with the FA99 support team via live chat

We do NOT collect: Full credit/debit card numbers (only secure payment tokens are used), passwords in plain text (stored as irreversible hashes), or any biometric data.

Types of Data We Retain

Name & Identity Phone Number Date of Birth Email Address Payment Methods Game History Transaction Records Location (State/City) Device Information Support Logs

3. How We Use Your Data

Every piece of data FA99 collects has a clear and legitimate purpose. We do not use your data in ways you would not expect, or in any manner not described in this Privacy Policy.

  • Account Management: Creating and maintaining your FA99 account, processing logins, and securing your account against unauthorised access
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX; and handling withdrawals securely and accurately
  • Identity Verification (KYC): Verifying that account holders are 18 years of age or older and confirming identity in compliance with anti-money laundering procedures
  • Service Provision: Grants access to all FA99 games, Live Casino tables, Sports Betting, and other platform features
  • Customer Support: Enabling the FA99 support team to assist you effectively with any enquiries or technical issues
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, or platform abuse
  • Platform Improvements: Analysing usage patterns in aggregate (not at an individual level) to improve the FA99 user experience
  • Service Communications: Sending important notifications related to your account, changes to terms, or security matters

FA99 does not use your personal data for third-party advertising purposes or sell it to other companies. Any analytics we conduct are solely for the improvement of FA99's own services.

4. Sharing Data with Third Parties

FA99 does not sell, rent, or trade your personal data to any third party for their own purposes. This is a non-negotiable commitment. That said, in the course of legitimate platform operations, FA99 may need to share certain data with the following parties under limited circumstances:

  • Payment Processors: Transaction information required to process your deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, FPX, Boost, and ShopeePay. Data shared is kept to the minimum necessary and used solely for transaction processing purposes
  • Game Software Providers: Game session information required by world-class game providers (such as Pragmatic Play and Playtech) to operate games correctly. No personal identifying information is shared beyond what is strictly necessary
  • Malaysian Authorities: FA99 will disclose required information to Malaysian authorities where mandated by law — including in cases of criminal investigations, court orders, or lawful requests from law enforcement agencies.
  • Technical Service Providers: Technical vendors who assist FA99 in operating the platform infrastructure, all of whom are bound by strict confidentiality agreements and are not permitted to use your data for their own purposes

Our Commitment: Every third party that receives any FA99 player-related data is contractually bound to protect that data to the same or higher security standards as FA99 itself.

5. Data Security & Protection Measures

FA99 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, or breaches. This is not merely a policy document — it represents a genuine technical investment we have made to keep your information secure.

  • 256-bit SSL Encryption: All communications between your browser or app and FA99's servers are encrypted using TLS 1.3 — the same standard used by Malaysia's major banks, including Maybank and CIMB
  • Hashed Passwords: Your password is never stored in plain text. FA99 uses a one-way, irreversible hashing algorithm to store account credentials
  • Two-Factor Authentication (2FA): FA99 supports two-factor authentication via SMS OTP to your Malaysian phone number to protect your account from unauthorised access
  • 24/7 Activity Monitoring: FA99's automated monitoring system continuously watches for suspicious activity and will take immediate action if any abnormal access attempts are detected
  • Internal Access Controls: Only FA99 staff who require access to specific data to carry out their authorised duties are permitted to do so — the principle of least privilege is strictly observed
  • Regular Security Audits: FA99 conducts regular security audits to identify and address vulnerabilities in our systems before they can be exploited

While FA99 takes all reasonable steps to protect your data, no security system in the world is 100% foolproof. We also encourage you to play your part in keeping your FA99 account secure — use a strong password, never share your login credentials with anyone, and always log out on shared devices.

6. Cookies & Tracking Technologies

FA99 uses cookies and similar tracking technologies to keep the platform running smoothly and to deliver a better experience for you. Here are the types of cookies FA99 uses:

  • Session Cookies (Required): Required to keep you logged in during your gaming session, ensure bets are processed correctly, and prevent security issues. These cookies are automatically deleted when you close your browser.
  • Preference Cookies: Saving your preferences such as interface language, your usual table limits at Live Casino, and FA99 platform display settings
  • Analytics Cookies (Aggregate): Helping FA99 understand how players use the platform as a whole — for example, which sections are visited most frequently or where players commonly encounter issues. This data is analysed in aggregate and cannot be used to identify any individual
  • Security Cookies: Used to detect suspicious login attempts and protect your account from attacks

You can manage your cookie settings through your web browser. However, disabling essential session cookies may affect the functionality of the FA99 platform and cause issues during your gaming session.

7. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data FA99 holds about you. FA99 fully respects these rights and will process any valid request within a reasonable timeframe.

Your Rights What This Means
Right of Access You may request a copy of all personal data FA99 holds about you at any time.
Right to Rectification If any of your data is inaccurate or outdated, you have the right to request FA99 to correct it promptly.
Right to Restriction You may request that FA99 restrict how we use your data in certain circumstances as provided under the PDPA.
Right to Erasure You may request that FA99 delete your account and all associated personal data, subject to FA99's legal obligations to retain certain records.
Right to Object You may object to the processing of your data for specific purposes, including receiving marketing communications from FA99.
Right to Data Portability You have the right to receive a copy of your data in a machine-readable format for transfer to another service provider.

To exercise any of the above rights, contact the FA99 support team via live chat or email at support@fa99-bangla.com. Requests will be processed within 14 business days. FA99 reserves the right to verify your identity before processing any personal data request.

8. Data Retention Period

FA99 does not retain your personal data for longer than is necessary for the purposes stated in this Privacy Policy, or longer than required under Malaysian law.

  • Active Account Data: Retained for as long as your FA99 account remains active and you continue using the platform
  • Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and anti-money laundering legal requirements
  • Gaming Session Logs: Retained for 2 years for dispute resolution and audit purposes
  • KYC Documents: Retained for the duration of the active account plus 5 years after account closure
  • Customer Support Logs: Retained for 2 years to ensure continuity of service
  • After Account Closure: Data no longer required for legal purposes will be deleted or anonymised within 90 days of account closure

9. Changes to This Privacy Policy

FA99 may update this Privacy Policy from time to time to reflect changes in our services, the technologies we use, or evolving legal requirements. The "Last Updated" date at the top of this document will always reflect the most current version.

For any material changes to how we use or share your personal data, FA99 will proactively notify you via an in-platform notification or by email to the address registered in your account, at least 14 days before the changes take effect. Continued use of the FA99 platform after the notification period is considered acceptance of the updated terms.

If you do not agree with any changes to this Privacy Policy, you have the right to close your FA99 account and request deletion of your personal data in accordance with the rights set out in Section 7.

10. Contact Us About Privacy

If you have any questions, concerns, or requests regarding FA99's Privacy Policy or the handling of your personal data, please do not hesitate to reach out. FA99's support team is fluent in Bahasa Malaysia and ready to assist you.

  • Live Chat: Available 24/7 directly from the FA99 platform — the fastest way to get a response in under two minutes
  • Email: support@fa99-bangla.com — for detailed enquiries or requests that require supporting documents
  • Operating Hours: The FA99 support team operates 24 hours a day, every day of the year, including Malaysian public holidays

For formal PDPA-related requests such as data access, correction, or deletion, please clearly state the type of request in your message and include your FA99 account number to help us process it faster. FA99 will acknowledge receipt of your request within 3 business days and resolve it within 14 business days.

Malaysia PDPA Compliant

FA99 operates in full compliance with the Personal Data Protection Act 2010 (PDPA) Malaysia — the local legislation that safeguards the privacy rights of every Malaysian.

Your rights under the PDPA:
  • Access to personal data
  • Correction of inaccurate data
  • Data deletion (upon request)
  • Objection to processing
Related Documents
Contact FA99
24/7 Live Chat
Response < 2 minutes. Bahasa Malaysia & English.
Email
support@fa99-bangla.com

Six Ways FA99 Protects Your Privacy

Data protection is not just a policy document for FA99 — it is a daily practice embedded at every level of our operations.

256-bit SSL Encryption

All data transmitted between your device and FA99's servers — including login details, payment information, and game history — is protected with TLS 1.3 encryption, the same standard used by Malaysia's leading banks.

Malaysia PDPA Compliance

FA99 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). This means you have legal rights that you can exercise against FA99 if your data is not handled properly — and we take these legal responsibilities seriously.

No Sale of Personal Data

FA99 has never and will never sell, rent, or share your personal data with third parties for marketing purposes. Your data is used solely to operate the FA99 services you use — nothing more.

OTP & Two-Factor Authentication

Your FA99 account is protected by two-factor authentication via OTP sent to your registered Malaysian phone number. Even if someone knows your password, they cannot log in without the OTP from your phone.

Strict Internal Access Controls

Only FA99 staff who genuinely require access to your data to perform their authorised duties are permitted to do so. The "least privilege" principle ensures that internal access to player data is strictly limited and audited.

Regular Audits & Updates

FA99 conducts regular security and privacy audits to ensure our data protection practices remain current and effective. This Privacy Policy is also reviewed periodically to reflect changes in law and technology.

FAQ – Privacy & Data at FA99

The most frequently asked questions from FA99 players about privacy and personal data protection.

No. FA99 does not store your full bank account or e-wallet number in our systems. When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, the transaction is processed through a secure payment gateway and FA99 only receives an encrypted transaction token — not your full account details. This is the same security standard used by Malaysia's major online banking platforms.

Yes, you have the right to request deletion of your personal data under Malaysia's PDPA. However, there are some practical limitations: FA99 is legally required to retain financial transaction records for a minimum of 7 years, and KYC documents for 5 years after account closure — these are mandatory requirements under Malaysia's anti-money laundering laws that we are unable to waive. Data not subject to any legal retention obligation will be deleted within 90 days of your request. To submit a data deletion request, contact the FA99 support team via live chat or email.

Not under normal circumstances. Your betting history and gaming activity on FA99 are confidential and are not shared with any third party for their own purposes. FA99 will only disclose your activity history in two situations: first, to Malaysian authorities when required by a court order or a lawful request from a law enforcement agency; and second, in aggregated, non-identifiable form for internal service improvement purposes. Your gaming records are never sold to marketing companies, data brokers, or any external parties.

When you close your FA99 account, your access to the platform will be terminated immediately. Personal data not subject to any legal retention obligations will be deleted or anonymised within 90 days. Financial transaction records and KYC documents will be retained for the periods stipulated under Malaysian law — financial records for 7 years and KYC documents for 5 years — before being permanently deleted. After account closure, you will not receive any marketing communications from FA99, except where communication is necessary to resolve any outstanding transactions.

FA99 employs multiple layers of technical protection including 256-bit SSL encryption for all communications, irreversible password hashing, 24/7 security threat monitoring, strict internal access controls, firewalls and intrusion detection systems, and regular security audits. That said, we are always transparent that no security system is entirely perfect. Should FA99 detect any data breach affecting your information, we will notify you as quickly as possible in accordance with the procedures set out under Malaysia's PDPA.

FA99 only sends marketing communications to members who have consented to receive them during registration or later through their account settings. You may unsubscribe from marketing communications at any time via the "Unsubscribe" link in any FA99 email, or through the notification settings in your account. However, FA99 will continue to send essential service communications — such as password change notifications, transaction confirmations, and terms updates — which cannot be opted out of, as they form part of your active account service.

Your Data Is Safe. Play with Peace of Mind at FA99.

FA99 takes your privacy seriously — from SSL encryption to full PDPA compliance. Register today and enjoy 500+ games with complete confidence that your information is always protected.

Malaysia PDPA Compliant 256-bit SSL No data sales 24/7 BM Support

Subject to Terms & Conditions. For players aged 18 and above only. Play responsibly.

Bahasa Melayu