🔒 Member personal data POP99 fully protected under Malaysia PDPA 2010 🛡️ Encryption SSL 256-bit for all transactions and communications on the pop99 platform 🚫 pop99 never sells or share members' personal data with third parties without consent 👤 You have the right to access, correct and delete your personal data in your pop99 account at any time 📧 Privacy enquiries: support@pop99.click – answered in under 5 minutes 🔒 Member personal data POP99 fully protected under Malaysia PDPA 2010 🛡️ Encryption SSL 256-bit for all transactions and communications on the pop99 platform 🚫 pop99 never sells or share members' personal data with third parties without consent 👤 You have the right to access, correct and delete your personal data in your pop99 account at any time 📧 Privacy enquiries: support@pop99.click – answered in under 5 minutes
🔒 POP99 Official Document

POP99 Privacy Policy – Personal Data Protection for Malaysian Members

Pop99 takes member privacy very seriously. This document clearly outlines the types of data we collect, how we use it, who can access it, and your rights as a pop99 member under Malaysia's Personal Data Protection Act (PDPA) 2010.

Updated: 1 July 2026
POP99's Privacy Commitment to Malaysian Members

Six core principles that shape how pop99 protects and handles your personal data

PDPA 2010

Full Compliance with Malaysia's PDPA 2010

All personal data handling practices at pop99 are in full compliance with the Malaysia Personal Data Protection Act 2010. This means your data is protected under recognised Malaysian law — not merely a platform's verbal assurance. Pop99 is among the online entertainment platforms operating with strict PDPA compliance in Malaysia.

256-bit SSL Encryption for All Data

Every piece of information you submit to pop99 — from registration details and deposit information to betting records — is encrypted using SSL 256-bit technology. This is the same encryption standard used by Malaysia's major banking institutions. Your data cannot be read by any unauthorised party while in transit.

GUARANTEE

We Don't Sell Your Data — Never Have

Pop99 has never and will never sell, rent, or transfer members' personal data to third parties for marketing or commercial purposes. Your data is collected solely for the operation of the pop99 platform and is not used for any other purpose without your explicit and informed consent.

Full Data Access & Control Rights

As a pop99 member, you have the full right to access the personal data we hold about you, correct any inaccurate information, request clarification on how your data is used, and in certain circumstances, request the deletion of your data. All such requests can be submitted to support@pop99.click and will be processed within 14 business days.

Transparent Cookies & Tracking Technologies

Pop99 uses cookies and similar tracking technologies to enhance the user experience on the platform — such as remembering language preferences, maintaining login sessions, and improving page load times. The use of these cookies is clearly disclosed, and you can manage your cookie preferences through your web browser settings.

24/7

Continuous Data Security Monitoring

The pop99 information security team monitors all systems continuously, 24 hours a day, 7 days a week, to detect and prevent any unauthorised access attempts, data breaches, or suspicious activity. Should a security incident affecting member data occur, pop99 is committed to notifying affected members within 72 hours.

Important Notice: This Privacy Policy explains how pop99 (pop99.click) collects, uses, stores, and protects the personal data of our members. By using the pop99 platform, you agree to the practices described in this policy. Please read this document carefully. If you have any questions, contact us at support@pop99.click and we will respond in under 5 minutes.

Section 1
Introduction & Scope of Privacy Policy

This Privacy Policy is published by pop99 and applies to all registered members, visitors to pop99.click, and any individual who interacts with the pop99 platform in any capacity. pop99 is committed to protecting the privacy of every individual who entrusts their personal data to us.

All data protection practices at pop99 comply with Personal Data Protection Act (PDPA) Malaysia 2010, which is the principal legislation governing the processing of personal data in Malaysia. We regard PDPA compliance not merely as a legal obligation, but as a moral responsibility to the members who trust us.

This policy applies to all data collection methods, including account registration, deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX, Sports Betting and lottery activities, slots and Live Casino gameplay, customer support interactions, and general use of the pop99.click website.

Effective Version: This Privacy Policy is the latest version and takes effect from 1 July 2026. Any changes will be clearly indicated alongside the most recent update date at the top of this document.

Section 2
Types of Personal Data We Collect

Pop99 only collects personal data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant data beyond what is needed to operate the platform. The following are the categories of data we collect:

Data Category Type of Information How It's Collected
Identity Data Full name, date of birth, identification number (where required for verification) Account registration
Contact Information Malaysian phone number, email address Account registration
Financial Data Deposit and withdrawal records, payment methods used (e-wallet/bank name), account balance In-platform transactions
Activity Data Sports betting, slots, live casino, lottery betting records; gaming history; wins and losses Platform usage
Technical Data IP address, device type, web browser, operating system, session cookie data Automatically collected while browsing
Communication Data Live chat records, emails with pop99 support, feedback submitted Customer support interactions

Pop99 does not collect sensitive information such as biometric data, health information, or data relating to religious beliefs and political views. We also do not collect credit or debit card numbers directly — all payments are processed through authorised third-party payment providers such as Touch 'n Go eWallet, GrabPay and FPX operators, each of which maintains its own security standards.

Section 3
How We Use Your Personal Data

Pop99 uses member personal data only for legitimate and reasonable purposes directly related to the provision of platform services. These purposes are as follows:

  • Account management: Creating and managing your pop99 account, verifying your identity, and securely processing registration and login
  • Transaction processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay and FPX, and managing withdrawals to your account
  • Provision of gaming services: Managing Sports Betting, slots, Live Casino, lottery and all gaming activities, including automated winnings calculation and payouts
  • VIP Rewards Program: Calculating and updating your VIP progress, and automatically crediting daily cashback, monthly rewards, sports rebates and loyalty points
  • Service communications: Sending notifications regarding deposits, withdrawals, terms changes, account security updates, and other important operational information related to your account
  • Fraud prevention: Detecting and preventing fraud, money laundering, multiple account registrations, and any activity that violates pop99's terms
  • Customer support: Providing 24/7 technical support and customer service in Bahasa Melayu when you contact the pop99 support team
  • Legal compliance: Meeting applicable legal and regulatory obligations, including anti-money laundering (AML) requirements and Malaysia PDPA compliance

Marketing: Pop99 may send promotional communications about new offers, festive promotions and exclusive VIP programmes via in-platform notifications, email or SMS. You may opt out of marketing communications at any time through your account settings or by submitting a request to support@pop99.click — without affecting the core services you receive.

Section 4
Sharing Personal Data with Third Parties

Pop99 does not sell, rent, or disclose member personal data to third parties for their own marketing or commercial purposes. However, in the normal course of operating the platform's services, pop99 may share necessary data with the following categories of third parties:

  • Payment providers: Required transaction information is shared with providers such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX providers to process your deposits and withdrawals. These providers maintain their own privacy policies and are subject to Malaysia's financial security standards
  • Game software developers: Minimum data required to run game sessions is shared with third-party game developers who supply slots, live casino and other games on the pop99 platform. This sharing is limited strictly to the necessary technical data
  • Technical infrastructure providers: Hosting, CDN and cybersecurity services used by pop99 may process technical data as part of their service delivery
  • Legal authority: Pop99 will disclose personal data to Malaysian authorities if required to do so by law, court order, or for the purpose of preventing serious crime

All third parties handling pop99 member data are required to comply with data protection standards equivalent to or exceeding Malaysia's PDPA requirements. Pop99 enters into data processing agreements with all relevant third-party processors.

Business Transfers: In the event of a merger, acquisition, or sale of pop99's assets, member personal data may be transferred as part of the business assets. In such circumstances, members will be notified in advance and equivalent privacy protections will be maintained.

Section 5
Data Security Measures

Pop99 implements multiple layers of technical and organisational security to protect member personal data from unauthorised access, loss, alteration, or disclosure. The key security measures we have in place are:

  • Transit encryption: All data transmitted between your web browser and pop99's servers is encrypted using TLS 1.3 with 256-bit SSL — the highest available security standard
  • Encryption at rest: Sensitive data stored in pop99's databases is encrypted using industry-grade encryption algorithms — meaning that even if an unauthorised party were to gain access to the servers, the data cannot be read without the encryption key
  • Internal access controls: Only pop99 staff who require access to specific personal data in order to carry out their duties will be granted such access — in accordance with the principle of least privilege. All internal access is logged and monitored
  • 24/7 Monitoring: Intrusion detection (IDS) and intrusion prevention (IPS) systems operate around the clock to detect and block any suspicious activity
  • Regular security audits: Pop99 conducts regular internal and external security audits to identify and address potential vulnerabilities before they can be exploited
  • Two-factor authentication: Two-factor authentication (2FA) is available on all pop99 accounts to provide an additional layer of security

While pop99 takes all reasonable steps to protect your data, no security system is entirely foolproof. In the event of a security incident affecting member personal data, pop99 is committed to notifying affected members within 72 hours of becoming aware of the incident, in line with industry best practices and applicable legal requirements.

Section 6
Cookies, Analytics & Tracking Technologies

Pop99 uses cookies and similar tracking technologies to enhance platform functionality and user experience. The following outlines the categories of cookies we use and their purposes:

Cookie Type Purpose Duration
Session Cookies Maintaining your login session while you browse the pop99 platform so you don't need to log in again each time you navigate to a new page Expires when the browser is closed
Preference Cookies Remembering your preferences such as language, display settings and platform preferences to personalise your experience on future visits 30 days
Security Cookies Helping detect suspicious login activity, prevent CSRF attacks, and protect your account session from hijacking Session only
Analytics Cookies Collecting aggregated (anonymised) information about how members use the platform — helping pop99 identify areas for improvement 90 days

You can manage and delete cookies through your web browser settings at any time. Please note, however, that disabling certain cookies — particularly session cookies and security cookies — may affect the functionality of the pop99 platform and prevent you from logging in or using certain features correctly.

Third-Party Cookies: Some third-party game providers on the pop99 platform may set their own cookies for technical purposes. These third-party cookies are subject to the respective developer's privacy policy and are not under pop99's direct control.

Section 7
Member Rights Regarding Personal Data

Under Malaysia's PDPA 2010 and pop99's privacy commitments, every member has the following rights regarding their personal data. These rights may be exercised at any time by contacting the pop99 privacy team.

Right of Access

You have the right to request and receive a copy of all personal data that pop99 holds about you, including account records, transaction history, and gaming activity logs.

Right to Rectification

If the personal data in your pop99 account is inaccurate or outdated, you have the right to request a correction — typically processed within 7 business days.

Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time — including promotional emails and pop99 offer notifications.

Right to Erasure

Under certain circumstances — such as voluntary account closure — you may request the deletion of your personal data, subject to pop99's legal record-keeping obligations.

Right to Data Portability

You have the right to request your personal data in a machine-readable format (such as CSV) for transfer or storage according to your own needs.

Right to Restrict Processing

In certain situations during an investigation or dispute, you may request that pop99 restrict the processing of your data to storage only while the matter is being resolved.

How to Exercise Your Rights: Send a written request to support@pop99.click stating the right you wish to exercise and your pop99 account details. We will respond within 14 business days. No fee is charged for reasonable requests. We may require identity verification before processing certain requests to protect the security of your account.

Section 8
Personal Data Retention Period

Pop99 retains members' personal data for as long as necessary to fulfil the purposes stated in this privacy policy, or for as long as required under Malaysian law. General data retention guidelines are as follows:

  • Active account data: Retained for the duration of the active account period plus 5 years after account closure, to meet legal compliance requirements
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and anti-money laundering legal requirements
  • Support communication records: Retained for 2 years after the relevant support case is closed
  • Analytics data and technical logs: Retained for a maximum of 12 months before being anonymised or deleted
  • Cookie data: As per the retention periods stated in the cookie schedule in Section 6 above

Once the relevant retention period has ended, pop99 will securely delete or anonymise the personal data so it can no longer be linked to any individual. Secure deletion is carried out in accordance with industry standards to ensure the data cannot be recovered.

Section 9
Protection of Children's Data

Pop99 is an online entertainment platform exclusively for individuals aged 18 years of age and above. We do not intentionally collect or process personal data from individuals under the age of 18.

The pop99 account registration process requires confirmation that the user is 18 years of age or older. Pop99 reserves the right to request proof of age at any time and will immediately close any account found to be held by an underage individual.

If a parent or guardian discovers that their underage child has registered a pop99 account without authorisation, please contact us immediately at support@pop99.click. We will take prompt action to close the account and return any remaining cash balance through the appropriate process.

Shared Responsibility: While pop99 has technical controls in place to prevent registration by underage individuals, parents and guardians also share responsibility for ensuring children cannot access online gambling platforms. Use parental control software where necessary to block access to gambling sites.

Section 10
Cross-Border Data Transfers

Under certain circumstances, pop99 members' personal data may be transferred to and processed outside Malaysia. This may occur when using cloud infrastructure services, international payment providers or game software developers operating from locations outside Malaysia.

When cross-border data transfers occur, pop99 ensures adequate protection is in place for that data through the following mechanisms:

  • Ensuring that the recipient country has a level of data protection equivalent to or greater than Malaysia's
  • Executing binding contractual terms with recipient parties requiring them to protect data in accordance with the standards set by pop99
  • Obtaining your consent where required under applicable law

Pop99 prioritises working with service providers that operate in Malaysia or the Asia-Pacific region to minimise cross-border data transfers and ensure easier regulatory compliance.

Section 11
Contact POP99's Privacy Officer

Pop99 has appointed a Data Privacy Officer responsible for overseeing PDPA compliance and handling all privacy-related enquiries and complaints. If you have any questions about how pop99 handles your personal data, wish to exercise the rights set out in Section 7, or would like to raise a complaint about a potential privacy breach, you may contact us through the following channels:

  • Email: support@pop99.click (include "Privacy Enquiry" in the email subject line)
  • Live Chat: Via pop99.click, 24 hours a day, 7 days a week
  • Response time: General enquiries are typically answered within 5 minutes. Formal requests to exercise PDPA rights are processed within 14 business days

If you are not satisfied with pop99's response to your privacy complaint after contacting us, you have the right to escalate the matter to the Personal Data Protection Commissioner of Malaysia through official Malaysian government channels.

Section 12
Privacy Policy Amendments

Pop99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or developments in pop99's platform services. Any changes will be published on this website along with an updated effective date at the top of the document.

For significant changes that affect how we use your personal data, pop99 will notify members via in-platform notifications, email or SMS to the registered number — at least 30 days before the changes take effect, except in urgent circumstances such as immediate legal compliance requirements.

Continued use of the pop99 platform after an amendment's effective date will be considered acceptance of the revised policy. If you do not agree with the changes made, you may close your pop99 account and withdraw your balance through the standard procedure before the amendment takes effect.

We encourage you to review this Privacy Policy periodically to stay informed about how pop99 protects your personal data. Our commitment to your privacy is ongoing, and we will continually work to improve our data protection practices in line with advances in technology and evolving legal requirements.

Previous Version Archive: If you would like to review a previous version of pop99's Privacy Policy, you may request a copy by emailing support@pop99.click and specifying the date you require. We maintain an archive of all previous versions for record-keeping and transparency purposes.

POP99 Privacy Frequently Asked Questions

Frequently asked questions from members on how pop99 protects their personal data.

No. Pop99 does not directly store full bank account numbers, credit or debit card details, or any other sensitive financial information in our systems. All deposit and withdrawal transactions are processed through authorised third-party payment providers — such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX providers like Maybank2u and CIMB Clicks. These payment providers are responsible for holding and protecting your financial details in accordance with their own financial security standards. Pop99 only receives transaction confirmations and amount records — not your full account details.

Yes, you may request the deletion of your personal data — this is known as the "right to be forgotten" under data protection principles. However, this right has its limitations. pop99 is legally required under Malaysian law to retain certain financial records and transaction data for a minimum of 7 years for anti-money laundering compliance and tax purposes. Data that must be kept to fulfil these legal obligations cannot be deleted upon request. Data not subject to such legal obligations — such as marketing preferences, analytics data, and other non-mandatory information — can be deleted within 30 days of receiving a valid request. To request data deletion, contact support@pop99.click with the subject line "PDPA Data Deletion Request".

If you suspect your pop99 account has been accessed without your authorisation, contact the pop99 support team immediately via live chat or email at support@pop99.click. Our team will promptly freeze your account to prevent any further activity, review your account activity logs to identify actions taken without your consent, assist you in resetting your password and regaining control of your account, and investigate to determine whether unauthorised access actually occurred. If any unauthorised withdrawals have taken place, we will investigate and take appropriate action. The effectiveness and speed of our response depends on how quickly you report the incident — so the sooner you reach out, the better. Pop99 recommends that all members enable 2FA in their account settings as an additional layer of protection.

Your gaming activity records on pop99 — including football betting, slots, Live Casino, and lottery — are confidential and not shared with external parties for marketing or commercial purposes. However, there are limited circumstances in which activity data may be accessed: First, third-party game developers providing games on the pop99 platform may receive the minimum session data required to run the games correctly — they do not receive your full gaming history. Second, if Malaysian legal authorities request activity records in the course of a legitimate criminal investigation, pop99 will comply with such instructions. Third, aggregated activity data (with individual identities removed) may be used internally by the pop99 team to improve the platform. In all cases, your individual identity is protected in any sharing that takes place.

Your Data Is Safe with POP99

Now you know how pop99 protects your privacy. Join over 250,000 Malaysian members playing with peace of mind — knowing their personal data is in safe hands. Sign up for free in just 2 minutes.

For users aged 18 and above only. Please play responsibly. By registering, you agree to the Terms & Conditions and pop99 Privacy Policy.

Bahasa Melayu