Privacy Policy

best99 ("Company", "we", "us", "our") operates the online gaming platform accessible at https://best99.cam. In the course of providing our services to registered players and visitors, best99 collects and processes personal data. This Privacy Policy ("Policy") explains what data we collect, why we collect it, how it is used, who it may be shared with, and what rights you hold in relation to your personal information.

This Policy applies to all data subjects who interact with best99, including: individuals who register an account on the Platform; visitors who access the Platform without registering; individuals who contact our customer support team; and any other person whose personal data is processed in connection with the Platform's operation.

By accessing the best99 Platform, registering an account, or submitting any personal data to us, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not access or use the Platform.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" means the entity that determines the purposes and means of the processing of personal data — in this context, best99.
• "Data Processor" means any third-party entity that processes personal data on behalf of best99 under a written data processing agreement.
• "Data Subject" means the individual to whom personal data relates — in this context, primarily, a registered player or Platform visitor.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the data subject's wishes, by which they signify agreement to the processing of their personal data.
• "Cookies" means small text files placed on a user's device by a website to store session information, preferences, and behavioural data for analytics or personalisation purposes.

best99 is the data controller responsible for the personal data collected through the Platform at https://best99.cam. As data controller, best99 determines the purposes for which your personal data is collected and the means by which it is processed.

best99 operates under an international gaming licence and is subject to regulatory obligations that govern data handling practices alongside standard data protection principles. In jurisdictions where separate data protection regulatory bodies have jurisdiction, best99 complies with applicable local data protection law to the extent required.

best99 collects personal data through several channels, including: account registration forms, KYC document uploads, payment transaction processing, gameplay activity, customer support interactions, and automated technical data collection from your device and browser. The categories of personal data we collect include the following:

best99 processes personal data only for defined, legitimate purposes. The specific purposes for which we process your data are as follows:

• Account Creation and Management: To register your account, authenticate your identity at login, and maintain accurate account records throughout your relationship with best99.
• Payment Processing: To process deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Visa/Mastercard, and cryptocurrency; to execute withdrawal requests to your verified payment method.
• KYC and Regulatory Compliance: To verify your identity and age (21+) in accordance with anti-money-laundering obligations and our gaming licence conditions; to conduct source-of-funds checks where required.
• Platform Security and Fraud Prevention: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, and other integrity risks to the Platform and to other players.
• Responsible Gambling Obligations: To monitor gameplay patterns for signs of problem gambling behaviour; to apply self-exclusion, deposit limits, and session restrictions as requested by players or required under responsible gambling policy.
• Customer Support: To respond to enquiries, resolve disputes, and manage complaints submitted through any support channel.
• Marketing Communications: To send promotional offers, bonus notifications, and product updates to players who have opted in to receive such communications. Players may opt out at any time.
• Platform Analytics and Improvement: To analyse usage patterns, identify technical issues, and improve the overall performance and user experience of the best99 Platform.
• Legal and Regulatory Obligations: To comply with applicable laws, respond to lawful regulatory requests, and maintain records as required by our licensing authority.

best99 processes personal data under one or more of the following lawful bases, depending on the specific processing activity:

• Contractual Necessity: Processing necessary to perform the contract between best99 and the player — including account management, payment processing, and gameplay services.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money-laundering, KYC obligations, and gaming licence conditions.
• Legitimate Interests: Processing for best99's legitimate interests in maintaining Platform security, preventing fraud, improving services, and managing business operations — where those interests are not overridden by the data subject's rights and interests.
• Consent: Processing based on your freely given consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

best99 does not sell, rent, or trade personal data to third parties for commercial purposes. However, in the normal course of providing our services, we may share personal data with the following categories of recipients:

• Payment Processors and Banking Partners: Including Touch 'n Go eWallet, Boost, DuitNow, FPX operators, Maybank, CIMB, Public Bank, Hong Leong Bank, Visa/Mastercard networks, and cryptocurrency processing partners — solely to process and settle financial transactions.
• KYC and Identity Verification Providers: Third-party identity verification service providers who assist in verifying the accuracy of KYC documents and conducting AML screening — bound by strict data processing agreements.
• Game Technology Providers: Software developers and game studios who provide the casino and sports betting products featured on the best99 Platform, where necessary for gameplay integrity and RNG certification.
• IT Infrastructure and Cloud Service Providers: Server hosting, cloud storage, and cybersecurity service providers who maintain the technical infrastructure underpinning the Platform, bound by contractual data protection obligations.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or lawful government request, best99 may disclose personal data to competent authorities without prior notice to the data subject.
• Professional Advisers: Legal, compliance, audit, and financial advisers engaged by best99 in the course of managing legal or regulatory matters, subject to confidentiality obligations.

As best99 operates with an international gaming licence and partners with global service providers, your personal data may be transferred to and processed in countries outside Malaysia. Such countries may not maintain the same level of data protection as Malaysia's Personal Data Protection Act 2010.

Where personal data is transferred internationally, best99 implements appropriate safeguards to ensure that your data remains protected to an equivalent standard, including: contractual protections through data processing agreements with international processors; technical security measures including end-to-end encryption; and periodic review of cross-border data flows.

By registering an account and using the best99 Platform, you acknowledge and consent to the transfer of your personal data to international jurisdictions as described in this section, subject to the safeguards outlined herein.

best99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligation. The following general retention periods apply:

• Active Account Data: Retained for the duration of the account relationship and for up to 7 years following account closure, in compliance with anti-money-laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of 5 years following account closure or the end of the business relationship, as required by AML regulations.
• Transaction and Financial Records: Retained for a minimum of 7 years following the transaction date for tax, accounting, and regulatory audit purposes.
• Support and Communications Records: Retained for up to 3 years following the resolution of the relevant matter, unless a longer period is required for legal dispute purposes.
• Marketing Preferences and Consent Records: Retained for the period of the marketing relationship plus 3 years, to evidence consent where required.
• Technical and Log Data: Retained for up to 12 months for security analysis and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that renders it permanently non-identifiable. Anonymised data may be retained indefinitely for statistical and analytical purposes.

best99 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between user devices and best99 servers.
• AES-256 encryption for sensitive data stored at rest in our databases and file storage systems.
• Two-factor authentication (2FA) available for all player accounts as an additional login security layer.
• Role-based access controls limiting staff access to personal data on strict need-to-know basis.
• Regular independent penetration testing and security audits of Platform infrastructure.
• Real-time fraud detection and anomaly monitoring systems operating 24 hours a day.
• Dedicated security incident response procedures with defined escalation and notification protocols.

Notwithstanding these measures, no method of electronic transmission or storage is 100% secure. best99 cannot guarantee absolute security but is committed to maintaining appropriate safeguards proportionate to the risk associated with the data we process. Players are advised to use strong, unique passwords and to enable2FA on their accounts.

best99 uses cookies and similar tracking technologies to enhance Platform functionality, remember your preferences, maintain session security, and collect aggregated analytics data. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session authentication, security tokens, and load balancing. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, game volume preferences, and previously viewed game categories. These cookies persist between sessions.
• Analytics Cookies: Used to collect anonymised usage data — such as pages visited, session duration, and click patterns — to help us understand how players interact with the Platform and identify areas for improvement.
• Marketing Cookies: Used, with your consent, to deliver promotional content relevant to your interests and to measure the effectiveness of marketing campaigns. You may opt out of marketing cookies at any time.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the availability or performance of some Platform features. For full details of the cookies deployed on the best99 Platform, please refer to our Cookie Notice available within the Platform.

Subject to applicable law and regulatory restrictions, you hold the following rights in relation to your personal data held by best99. These rights may be exercised at any time by contacting our support team [email protected] with the subject line "Data Rights Request".

best99 will respond to all verified data rights requests within 30 calendar days of receipt. Where a request is complex or voluminous, we may extend this period by a further 30 days and will notify you accordingly. We reserve the right to request identity verification before actioning any data rights request.

The best99 Platform is strictly intended for adults aged 21 years and above. best99 does not knowingly collect, store, or process personal data relating to individuals under the age of 21. If best99 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted promptly and the associated account will be closed.

Where a parent or guardian becomes aware that their child under the age of 21 has submitted personal data to best99, they are requested to contact us immediately at [email protected] so that appropriate action can be taken without delay.

best99 employs age verification procedures as part of its KYC process to minimise the risk of underage access. Players who provide false date-of-birth information to circumvent age restrictions are in material breach of our Terms and Conditions, and any funds held in accounts found to belong to underage players will be handled in accordance with applicable regulatory guidance.

The best99 Platform does not contain links to external third-party websites or services for general browsing purposes. Where references to third-party payment providers (such as Touch 'n Go eWallet, Boost, Maybank, or CIMB) appear in the context of payment processing, these providers operate under their own independent privacy policies and terms of service.

best99 is not responsible for the privacy practices, data handling standards, or content of any third-party service provider's platforms. Players are encouraged to review the privacy policies of any third-party services they use in connection with their best99 account, including e-wallet providers and banking institutions.

best99 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this document reflects the date of the most recent revision.

Where amendments to this Policy are material — meaning they significantly affect how we process your personal data or your rights as a data subject — best99 will provide advance notice to registered players via in-platform notification or email at least 7 days before the changes take effect.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of those changes. If you do not agree to the revised Policy, you must cease using the Platform and request account closure prior to the effective date.

The current version of this Privacy Policy is always available on this page. Previous versions are available upon request to our compliance team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which best99 handles your personal data, please contact us using the details below. All privacy-related enquiries are handled by our compliance team and will be acknowledged within 3 business days.

We encourage players to contact best99 directly in the first instance, as we are committed to resolving all data protection concerns promptly and without requiring escalation to regulatory bodies where possible.