🔒 Official Privacy Policy

Fly99 Privacy Policy – Malaysian Personal Data Protection

Last updated: January 2026 Language: English

Fly99 takes the privacy of every member seriously. This Privacy Policy explains the types of data we collect, why we need it, how we protect it, and your rights as a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA). Please read this document carefully.

Privacy Policy
fly99.life
PDPA Compliant 2026
Data Stored Securely

All fly99 members' personal data is encrypted using 256-bit SSL and stored on secure servers. No unauthorised third party can access your information.

Your Data Rights

You have the right to access, correct, or request deletion of your personal data at any time. fly99 respects your rights as a data subject under Malaysia's PDPA.

No Data Sales

Fly99 has never sold and will never sell your personal data to advertisers or data brokers. Your data is used solely for platform operational purposes that you agreed to at the time of registration.

Full PDPA Compliance

All of fly99's data handling practices comply with Malaysia's Personal Data Protection Act 2010. We review and update this policy periodically to ensure ongoing compliance.

Minimum Data Collection

Fly99 only collects data that is strictly necessary to deliver our services. We do not collect irrelevant or excessive information from our members.

Marketing Communications Control

You may withdraw your consent to receive marketing communications from fly99 at any time, either through your account settings or by contacting our customer support team.

Important Note: This Privacy Policy forms part of fly99's Terms & Conditions and applies to all users of the fly99 platform, including the fly99.life website and fly99 mobile app. By using the fly99 platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please discontinue your use of fly99's services.

1

Introduction – fly99's Privacy Commitment

Fly99 ("we", "the platform") is fully committed to protecting the privacy of every member and user on our platform. We understand that your trust is the foundation of the relationship we build together — and that trust begins with transparency about how we handle your personal data.

This Privacy Policy is drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the collection, processing, and storage of personal data in Malaysia. fly99 complies with all seven data protection principles set out in the PDPA: the General Principle, the Notice and Choice Principle, the Disclosure Principle, the Security Principle, the Retention Principle, the Data Integrity Principle, the Access Principle, and the Principle on Transfers of Personal Data to Places Outside Malaysia.

As an online Sports Betting and casino platform operating exclusively for users in Malaysia, fly99 handles sensitive data including financial information and transaction records. We take this responsibility very seriously. Our data security systems are designed to ensure your information is protected at the highest level technically and organisationally achievable.

Effective Date: This Privacy Policy is effective from January 2026. Members will be notified of any material amendments via an in-platform notice or email. Continued use of the fly99 platform after any amendments constitutes acceptance of the updated policy.

2

Types of Personal Data We Collect

Fly99 collects several categories of personal data necessary to provide a comprehensive, secure, and legally compliant online Sports Betting and casino service. Below is a full overview of the data we collect:

Data Category Sample Information Requirements
Identity Information Full name, date of birth, identification card number (MyKad), gender, nationality Mandatory – KYC verification
Contact Information Email address, mobile phone number, residential address in Malaysia Mandatory – account communications
Financial Information Digital wallet account numbers (TnG, GrabPay, Boost, ShopeePay, DuitNow), bank account numbers (FPX), deposit & withdrawal records Mandatory – transaction processing
Betting Data Betting records, game types, wager amounts, wins and losses, selected markets Mandatory – platform operations
Technical Data IP address, device type, web browser, operating system, login session data Essential – security & fraud prevention
Usage Data Pages visited, time spent, game preferences, in-platform click records Optional – experience enhancement
Communication Data Live chat conversation records, customer support emails, feedback and complaints Mandatory – supporting records

Fly99 does not collect sensitive personal data such as medical information, religious beliefs, or political views. Biometric data is only collected if you use the fingerprint or facial recognition login feature on your own device — this data is processed locally on your device and is not transmitted to fly99's servers.

3

How Personal Data Is Collected

Fly99 collects your personal data through several different methods throughout your interactions with our platform:

  • Account Registration: When you register a fly99 account, you provide basic information such as your name, email address, phone number, date of birth, and password. This information is required to create a valid account.
  • KYC Verification: For AML compliance and fraud prevention purposes, fly99 may request a copy of your identity document (MyKad), proof of address, or other documents during the identity verification process.
  • Financial Transactions: Every time you make a deposit or withdrawal via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, the relevant transaction details are automatically recorded by fly99's system.
  • Betting Activity: Every bet you place — whether on Malaysia Super League football, Malaysia Open badminton, MPL Malaysia esports, live baccarat, or slots — is recorded as part of your account history.
  • Customer Support Interactions: When you contact the fly99 support team via live chat or email, conversation records are retained for service quality and complaint resolution purposes.
  • Cookies and Tracking Technologies: The fly99 platform uses cookies and similar technologies to automatically collect usage data when you browse our website or use our app. Further details are provided in section 8 of this document.
  • Third Parties: In certain circumstances, fly99 may receive information about you from third-party service providers we engage — such as identity verification providers or payment processors — solely for verification and security purposes.
4

Purposes for Using Personal Data

Fly99 uses collected personal data only for legitimate, stated purposes listed below. We do not use your data for any other purpose without first obtaining your additional consent:

4.1 Platform Operations Purpose (Contractual Basis)

  • Creating and managing fly99 member accounts
  • Processing deposits and withdrawals in MYR via Malaysian local payment methods
  • Verifying member identity in accordance with KYC and AML requirements
  • Facilitating all Sports Betting and casino activities
  • Managing and processing bonus programmes and VIP rewards
  • Providing 24/7 customer support services

4.2 Legal Compliance Purposes (Statutory Obligations)

  • Compliant with Malaysia's Personal Data Protection Act 2010 (PDPA)
  • Compliant with anti-money laundering (AML) procedures
  • Reporting to relevant authorities when required by law
  • Maintaining records of financial transactions as required under Malaysia's financial regulations

4.3 Legitimate Interests Purposes

  • Detecting and preventing fraud, account abuse, and unlawful activity
  • Ensuring platform security and the integrity of the betting system
  • Improving the functionality and user experience of the fly99 platform
  • Analysing usage patterns for product development purposes

4.4 Marketing Purposes (Consent-Based)

With your consent, fly99 uses your contact information to send you details about promotions, new bonuses, and exclusive fly99 offers via email or SMS. You may withdraw this consent at any time through the unsubscribe link in any marketing email or via the communication settings in your fly99 account.

Data Minimisation Principle: fly99 adheres to the PDPA's purpose limitation principle — data collected for one purpose is not used for an unrelated purpose without your consent. For example, your betting records are not used for marketing profiling without your explicit consent.

5

Sharing Data with Third Parties

Fly99 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are certain situations where fly99 may need to share your data with other parties for legitimate operational purposes:

Data Recipients Data Shared Purpose
Payment Processors
(TnG, DuitNow, GrabPay, FPX, etc.)
Transaction details, amounts, member name Processing MYR deposits and withdrawals
Identity Verification Provider MyKad copy, KYC information Member identity verification (AML/KYC)
Cloud & Infrastructure Service Providers Account data, transaction records (encrypted) Platform data storage and processing
Third-Party Game Providers Member ID, betting records for related games Providing Live Casino games and slots
Malaysian Authorities
(Police, MACC, BNM, etc.)
Data relevant to the investigation Malaysian legal compliance (where required)
Legal Advisors & Auditors Data required for advisory purposes or audits Legal compliance and financial audits

All third-party service providers with whom fly99 shares data are bound by data processing agreements that require them to handle your information in accordance with data protection standards comparable to Malaysia's PDPA. fly99 is not responsible for the privacy practices of third-party providers who maintain their own independent privacy policies.

In the event of a company merger, acquisition, or asset sale, members' personal data may be transferred to the successor entity as part of the business assets. Members will be notified of such changes and their data rights within a reasonable timeframe.

6

Data Security – fly99's Protection Measures

Fly99 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or unintended disclosure. These measures include:

256-bit SSL Encryption

All data transmitted between your browser or app and fly99's servers is encrypted using TLS 1.3 with 256-bit encryption — the same security standard used by leading financial institutions.

Two-Factor Authentication (2FA)

2FA is available for all fly99 accounts. When enabled, an additional verification code is required at login, providing a significant extra layer of security for your account.

Strict Internal Access Controls

Access to members' personal data by fly99 staff is restricted to individuals who require it to perform their duties (least privilege principle). All access is logged and monitored.

Regular Security Testing

Fly99 conducts regular penetration testing and vulnerability assessments carried out by independent third parties to identify and address potential security weaknesses before they can be exploited.

While fly99 takes all reasonable steps to protect your data, no digital security system can be guaranteed 100% secure. In the event of a data breach affecting your information, fly99 will notify you and the relevant authorities within the timeframe required by law, and will take immediate steps to contain the impact.

7

Data Retention & Deletion

Fly99 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. fly99's data retention policy is as follows:

  • Active Account Data: Retained for as long as your account is active and for 5 years following account closure for AML compliance and financial record-keeping purposes.
  • Financial Transaction Records: Retained for a minimum of 6 years in accordance with Malaysian financial regulations (including deposit and withdrawal records via TnG, DuitNow, GrabPay, Boost, ShopeePay, and FPX).
  • KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with AML requirements.
  • Customer Support Communication Records: Retained for 2 years for service quality and complaint resolution purposes.
  • Cookie & Technical Log Data: Technical log data is retained for a maximum of 12 months. Session cookies are deleted when you close your browser.
  • Marketing Data: Retained until you withdraw your marketing consent. Once withdrawn, marketing data is deleted within 30 days.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally. The deletion process uses methods that ensure the data cannot be recovered.

8

Cookies & Tracking Technologies

The fly99 platform uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how members interact with our services. The following are the types of cookies we use:

Essential Cookies (Cannot Be Disabled)

These cookies are essential for the basic operation of the fly99 platform and cannot be disabled. They include session cookies that keep you logged in, security cookies that prevent CSRF attacks, and cookies that store your language preferences. Without these cookies, the fly99 platform cannot function properly.

Performance & Analytics Cookies (Can Be Disabled)

These cookies help fly99 understand how users interact with the platform — which pages are visited most, how long sessions last, and where users encounter difficulties. This information is used to continuously improve the platform. Analytics data is collected in aggregate and does not directly identify individuals.

Functional Cookies (Can Be Disabled)

These cookies allow fly99 to save your preferences, such as your preferred odds format (decimal, fractional), favourite sports, and display settings. Disabling these cookies does not affect core platform functionality, but it does mean you will need to reset your preferences each time you visit.

Cookie Management: You can manage or disable cookies through your web browser settings. However, disabling all cookies may affect the functionality of the fly99 platform. For detailed instructions on managing cookies in Chrome, Firefox, Safari, or Edge, please refer to the help documentation of the respective browser.

9

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding your personal data held by fly99. Below is a summary of those rights and how to exercise them:

Right of Access

You have the right to obtain a copy of the personal data fly99 holds about you. Access requests will be fulfilled within 21 business days.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data. Corrections will be made within 21 business days.

Right to Erasure

You may request the deletion of your data under certain circumstances. This right is subject to applicable legal retention requirements.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.

Right to Restriction

In certain circumstances, you may request that fly99 restrict how we process your personal data while your request is being investigated.

Withdrawal of Consent

For processing based on consent (such as marketing), you may withdraw your consent at any time without affecting the validity of any processing carried out prior to withdrawal.

To exercise any of the above rights, contact fly99's Data Protection Officer by email at support@fly99.life with the subject line "PDPA Data Rights Request". Please include your fly99 account number and a description of your request. fly99 will acknowledge receipt within 3 business days and complete the request within 21 business days. In complex cases, this period may be extended to up to 30 days, with notice provided to you.

10

Children's Data & Special Protection

Fly99 services are intended for individuals aged 18 and above only. fly99 does not knowingly collect or process personal data of anyone under the age of 18. Account registration by minors is strictly prohibited.

Should fly99 discover that we have inadvertently collected personal data from someone under the age of 18, we will take immediate steps to delete that information and close the account in question. Parents or guardians who believe their child has registered a fly99 account without authorisation should contact us immediately at support@fly99.life.

Fly99 uses an age verification system at registration and reserves the right to request identity document verification (MyKad) at any time. Accounts that fail to verify a valid age (18 and above) will be suspended and all funds in the account will be frozen until verification is completed or returned to the original deposit method.

11

Transfer of Personal Data Outside Malaysia

As an online platform, some of the infrastructure service providers used by fly99 may store or process data on servers located outside Malaysia. Where the transfer of personal data overseas is necessary, fly99 ensures it is only carried out to countries or entities that provide a comparable level of data protection to Malaysia's PDPA, in line with Part VIII of the PDPA 2010.

The safeguards fly99 applies to international data transfers include standard data processing agreements that bind service providers to equivalent data protection standards, encryption of data in transit, and strict access controls based on operational need.

Although data may be stored on servers outside Malaysia, your rights under Malaysia's PDPA remain fully intact and fly99 remains fully responsible for the protection of your personal data regardless of where it is physically stored.

12

Contact Us – Privacy Enquiries

If you have any questions, concerns, or complaints regarding how fly99 handles your personal data, or if you wish to exercise any of your PDPA rights, please contact us through the following channels:

Official Email
support@fly99.life
Subject: "Privacy Policy Inquiry"
Live Chat Platform
Available 24 hours a day, 7 days a week
Response within 2–3 minutes

Fly99 aims to respond to all privacy enquiries within 3 business days. For formal PDPA data rights requests, we will fulfil the request within 21 business days as outlined in section 9 of this document.

If you are dissatisfied with fly99's response to your privacy inquiry or complaint, you have the right to escalate the matter to the Department of Personal Data Protection (JPDP) Malaysia, which is the regulatory authority overseeing PDPA compliance in Malaysia.

FAQ – fly99 Privacy Policy

Frequently asked questions about privacy and data protection at fly99.

No. fly99 never sells, rents, or shares members' personal data with advertisers or third-party marketing companies for their own advertising purposes. Your data is only shared with service providers directly involved in the operation of the fly99 platform — such as Malaysian local payment processors (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX) and technical infrastructure providers bound by strict confidentiality agreements.

You may submit a Subject Access Request by emailing support@fly99.life with the subject line "PDPA Data Access Request". Please include your fly99 account number and a copy of your identity card for verification purposes. fly99 will acknowledge receipt of your request within 3 business days and provide a copy of the requested data within 21 business days. The data will be sent in a readable and secure format to the email address registered to your fly99 account.

After your account is closed, fly99 will retain your personal data for the periods required by Malaysian law — financial transaction records are kept for a minimum of 6 years, and KYC documents are kept for a minimum of 5 years after account closure, in accordance with anti-money laundering (AML) regulatory requirements. Once these mandatory retention periods expire, your data will be securely deleted or anonymised. During this retention period, your data will not be used for any marketing or commercial purposes.

Yes, fly99 uses members' betting activity records as part of its ongoing platform risk assessment. This is standard practice in the online betting industry and represents fly99's legitimate interest in maintaining platform integrity. For example, unusual betting patterns may trigger a security review or additional KYC verification. This is not discrimination — it is part of fly99's security system to protect all members from fraud. You have the right to request an explanation of any decision made based on your data by contacting fly99 customer support.

fly99 does not directly store your full digital wallet or bank account details. When you make a deposit or withdrawal via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, you are redirected to the respective provider's secure payment page, or the transaction is processed through an encrypted API. fly99 only receives transaction confirmation and the amount necessary to record the payment — not your full financial account details. This means the risk of your financial data being exposed to fly99 is minimal.
🔐

Your Data Is Safe. Join fly99 With Confidence

Fly99 protects your privacy with 256-bit SSL encryption, full PDPA compliance, and a firm no-data-sale policy. Register now and enjoy a safe, trusted Malaysian Sports Betting & casino platform.

PDPA Compliant
SSL 256-bit
No Data Sales
Full Data Control
Officially Licensed
SSL 256-bit
Fast Payments
24/7 Support
Local Payments
Bahasa Melayu