Privacy & Data Security

Privacy Policy mm99
Your Data Fully Protected

Mm99 treats every member's privacy as a core responsibility — not an afterthought. Find out exactly how we collect, use, and protect your personal information.

Last updated: 1 January 2026
256-bit SSL
Military-grade encryption
No Sale of Data
Your data is never sold to anyone
Full Control
Request deletion of your data at any time
PDPA Compliance
Compliance with the Personal Data Protection Act 2010

Mm99's Privacy Commitment to All Members

Six core principles that guide how mm99 handles your personal data

Data Minimisation

Mm99 collects only the data genuinely needed to provide its services. We do not request information that is irrelevant to the platform's operations.

Restricted Data
Secure & Encrypted Storage

All mm99 members' personal data is stored on servers protected by 256-bit SSL encryption, with access restricted to authorised personnel only.

256-bit SSL
Your Data, Your Control

You have the right to access, correct, port, or request the deletion of your personal data at any time through mm99 customer support.

Full Member Rights
No Unauthorised Sharing

Mm99 does not sell, rent, or share members' personal data with third parties for marketing purposes without explicit consent from the member.

Zero Data Selling
Malaysia PDPA Compliance

Mm99's Privacy Policy is designed to be fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international privacy standards.

PDPA 2010
Data Breach Notification

In the event of any security incident involving your data, mm99 is committed to notifying affected members within the timeframe required by law.

Prompt Notification
1
Introduction

Welcome to the Privacy Policy mm99 (mm99-khelo.com). We understand that your trust is not something to be taken lightly — and that trust begins with full transparency about how we handle your personal data.

This Privacy Policy explains in detail what information we collect from you, how it is used, how it is protected, and what rights you have as a member mm99. It applies to all users of the mm99 platform — including the mm99-khelo.com website, mobile applications (where available), and all associated services.

By registering for or using the platform mm99, you agree to the data processing practices described in this policy. If you do not agree, please discontinue use of the platform and contact us to delete your account.

mm99's Commitment

We never sell your personal data to anyone. This is not merely a promise in a document — it is a core operating policy adhered to by all mm99 staff and partners, without exception.

2
Information We Collect

mm99 collects information from you in three main ways: information you provide directly, information collected automatically during your use of the platform, and information from legitimate third-party sources.

2.1 Information You Provide Directly
Data Category Example Information Primary Purpose
Identity Full name, date of birth, MyKad/passport number Identity verification
Relationships Malaysian phone number, email address Account communications
Finance Bank account number, TNG/DuitNow e-wallet details Deposits & withdrawals
Account Username, password (encrypted), notification preferences Account management
KYC MyKad image, verification selfie, bank statement AML Verification
2.2 Automatically Collected Information

When you use the platform mm99, our system automatically records the following technical information for security and service improvement purposes:

  • IP address and approximate geographical location (state/city);
  • Device type, operating system, and browser version;
  • Pages visited, session duration, and platform usage patterns;
  • Login and logout timestamp records;
  • Cookie data and session identifiers (see Section 6).
3
How We Use Your Data

mm99 uses collected personal data solely for legitimate, stated purposes. The following is a complete list of data processing purposes at mm99:

  • Account management: Creating, verifying, and maintaining your mm99 member account;
  • Transaction processing: Processing deposits (TNG eWallet, DuitNow, FPX, GrabPay, Boost, ShopeePay) and withdrawals of winnings in Malaysian Ringgit (RM);
  • Identity verification (KYC/AML): Complying with legal requirements relating to identity verification and anti-money laundering;
  • Customer service: Handling enquiries, complaints, and support requests via Live Chat and email;
  • Platform security: Detecting and preventing fraud, duplicate accounts, and other suspicious activity;
  • Product improvement: Analysing usage patterns to improve your gaming experience at mm99;
  • Marketing communications: Sending promotional offers, bonuses, and platform updates (subject to your opt-in/opt-out preferences);
  • Legal compliance: Fulfilling legal and regulatory obligations related to mm99's operations.
Marketing Communications

You may opt out of mm99 promotional emails at any time by clicking the "unsubscribe" link in any promotional email we send, or by updating your communication preferences in your account settings.

4
Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), mm99 only processes your personal data on the following bases:

  • Consent: You have given explicit consent at registration or through a specific opt-in on the platform;
  • Contract performance: Processing is necessary to fulfil the service agreement between you and mm99 (e.g., processing deposits and withdrawals);
  • Legal obligations: mm99 is legally required to retain or disclose certain data (e.g., KYC records for AML compliance);
  • Legitimate interests: Processing is necessary for mm99's legitimate interests, provided those interests do not override your own rights and interests (e.g., fraud analysis to protect all members).
5
Data Sharing with Third Parties

mm99 does not sell or rent your personal data to third parties for marketing purposes. Your data is shared only in the following limited circumstances:

5.1 Service Providers (Data Processors)

Mm99 works with trusted third-party service providers to carry out certain operations. All providers are contractually bound to protect your data and use it only for the specified purposes. Categories of providers that may receive your data include:

  • Payment gateway providers (for processing TNG, DuitNow, FPX, GrabPay, Boost, and ShopeePay transactions);
  • Cloud service and server infrastructure providers;
  • Customer support software platform providers;
  • Identity verification service providers (KYC/AML).
5.2 Legally Required Disclosures

Mm99 may disclose your data to the relevant authorities where required by Malaysian law, court order, or valid legal process. We will notify you of any such disclosure where permitted by law.

Data Sharing Guarantee

All third parties that receive data from mm99 are bound by strict data protection agreements. They are not permitted to use your data for any purpose other than those specified, and are required to uphold security standards equivalent to those of mm99.

6
Cookies & Tracking Technologies

mm99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit the mm99 website.

6.1 Types of Cookies We Use
Cookie TypePurposeRetention Period
Essential Cookies Maintaining mm99 login sessions and account security Session
Functional Cookies Remembering language preferences, display settings, and user configurations 1 year
Analytics Cookies Understanding how users interact with the mm99 platform 2 years
Security Cookies Detecting suspicious activity and preventing fraud 30 days

You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect the functionality of the mm99 platform.

7
Data Security

mm99 implementing comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

  • 256-bit SSL Encryption for all data in transit between your browser and mm99 servers;
  • Encryption of data at rest for all sensitive information stored in our databases;
  • Role-based access control — only specifically authorised personnel may access certain categories of data;
  • 24/7 security monitoring using automated threat detection systems;
  • Penetration testing conducted periodically by independent security experts;
  • Data security training mandatory for all mm99 staff.
Shared Responsibility

While mm99 takes all appropriate measures to protect your data, no system can guarantee absolute security. You are also responsible for keeping your mm99 account password and login credentials confidential.

8
Data Retention & Deletion

mm99 retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by Malaysian law.

  • Active account data: Retained for the duration of your membership;
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements;
  • KYC/AML records: Retained for a minimum of 5 years following termination of the business relationship;
  • Security logs: Retained for 12 months;
  • Marketing data (if you have opted in): Until you opt out or request deletion.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with industry-standard procedures.

9
Your Rights Under the PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by mm99:

1
Access Rights
Requesting a copy of the personal data mm99 holds about you.
2
Right to Rectification
Request correction of any inaccurate or incomplete data in your mm99 account.
3
Right to Erasure
Request the deletion of your personal data when it is no longer required for its original purpose.
4
Right to Restrict Processing
Requesting mm99 to restrict the processing of your data under certain circumstances while a dispute is under review.
5
Right to Data Portability
Requesting your data in a structured, machine-readable format for transfer to another service.
6
Right to Object
Object to the processing of your data for direct marketing purposes or on the basis of mm99's legitimate interests.
How to Exercise Your Rights

To exercise any of the above rights, contact mm99's Privacy Officer by email at support@mm99-khelo.com or via 24/7 Live Chat. We will process your request within 30 calendar days of receipt.

10
Children's Privacy

Platform mm99 is intended strictly for individuals aged 18 and above. mm99 does not accept registrations from minors and does not knowingly collect personal data from anyone under the age of 18.

If we become aware that we have collected data from an individual under the age of 18 without proper age verification, we will take immediate steps to delete that information and close the account in question.

Parental & Guardian Responsibilities

If you suspect that your child or an underage individual has registered an mm99 account, please contact us immediately at support@mm99-khelo.com. We will investigate and take the appropriate action without delay.

11
Third-Party Links

Platform mm99 may contain links to third-party websites or services in certain contexts. mm99's Privacy Policy does not apply to those websites or services.

Mm99 is not responsible for the privacy practices of any third parties. We encourage you to read the privacy policy of every website you visit. If you come across any external links on the mm99 platform that should not be there, please let us know.

12
Privacy Policy Amendments

mm99 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, technological developments, or new legal requirements.

When material changes are made, we will notify you via an in-platform notification or by email to the address registered with your mm99 account. The "Last updated" date at the top of this page will be revised to reflect the latest amendments.

Continued use of the mm99 platform after any amendments take effect will be considered acceptance of the updated privacy terms.

13
Contact mm99's Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy mm99 this, or to exercise your privacy rights, please contact us:

  • Live Chat: Available 24 hours a day, 7 days a week, directly within the mm99 platform;
  • Privacy Officer Email: support@mm99-khelo.com — response within 2 business days;
  • Frequently Asked Questions: Visit the page Frequently Asked Questions for more information.
Complaints to Regulatory Authorities

If you are not satisfied with mm99's response to your privacy complaint, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) or the relevant regulatory body.

🔒

Your Data is Safe — Ready to Play?

Mm99 takes your privacy seriously. By registering, you agree to this Privacy Policy and entrust your data to a platform that genuinely cares about the security of its members.

TNG eWallet FPX DuitNow GrabPay Boost

18+ only · 256-bit SSL · No Data Sales · PDPA 2010

Bahasa Melayu