Introduction
This Privacy Policy ("Policy") describes how Uncut99 ("we", "us", "our", "Platform") collects, processes, stores, and protects personal data relating to individuals ("you", "Player", "User") who access or use the services available at uncut99.cam. It forms part of our broader legal framework alongside our Terms and Conditions and any applicable promotional terms.
Uncut99 takes its data protection obligations seriously. We recognise that Malaysian players entrust us with sensitive personal and financial information when they register and transact on our Platform, and we are committed to handling that information with appropriate care, transparency, and respect for your rights.
By registering an account on the Uncut99 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not register an account or use the Platform.
Scope: This Policy applies to all personal data collected through the Uncut99 website (uncut99.cam), mobile browser interface, and any associated communication channels including live chat and email support.
Definitions
In this Policy, the following terms carry the meanings set out below:
- "Personal Data" — Any information that identifies or could reasonably identify a living individual, either directly or in combination with other data. This includes names, identification numbers, contact details, financial information, and device identifiers.
- "Processing" — Any operation or set of operations performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, and deletion.
- "Data Controller" — The entity that determines the purposes and means of processing personal data. Uncut99 acts as the Data Controller for all personal data collected through the Platform.
- "Data Processor" — A third party that processes personal data on behalf of the Data Controller, such as payment processors, identity verification providers, or cloud hosting services.
- "Consent" — A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
- "Cookies" — Small text files placed on your device by the Platform for functional, analytical, or preference-related purposes.
Data We Collect
Uncut99 collects only the personal data that is necessary for the operation of the Platform, fulfilment of our legal obligations, and delivery of the services you have requested. The categories of personal data we collect are as follows:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number (MyKad), passport number, selfie photograph | Account registration, KYC/age verification, fraud prevention |
| Contact Data | Email address, mobile phone number, city of residence (e.g. Kuala Lumpur, Penang, Johor Bahru) | Account communication, support, promotional notifications |
| Financial Data | Bank account numbers, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), transaction history, deposit and withdrawal amounts in MYR | Payment processing, AML compliance, withdrawal verification |
| Gameplay Data | Betting history, game session logs, win/loss records, bonus usage, RTP data by session | Service delivery, dispute resolution, responsible gambling monitoring |
| Technical Data | IP address, browser type and version, device type, operating system, screen resolution, session timestamps | Security, fraud detection, platform optimisation |
| Communication Data | Live chat transcripts, email correspondence, support ticket content | Customer support, quality assurance, dispute documentation |
| Preference Data | Marketing consent status, communication channel preferences, cookie settings | Personalisation, compliance with consent obligations |
We do not intentionally collect sensitive personal data beyond what is required for identity verification (such as government-issued ID documents). We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, or health data, except where this arises incidentally from the identity documents submitted for KYC purposes, in which case it is used solely for verification and not further processed.
How We Collect Data
Uncut99 collects personal data through the following channels:
- Direct Submission: Information you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, or contacting our support team via live chat or email.
- Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser data, and session activity logs, through server logs, cookies, and similar tracking technologies.
- Payment Processors: Confirmation data relating to financial transactions processed via DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, Touch 'n Go eWallet, Boost, and GrabPay — shared with us by our payment service providers to confirm transaction completion and source of funds.
- Identity Verification Providers: Results of identity and age verification checks conducted by our third-party KYC service providers, where applicable.
- Fraud Prevention Services: Risk assessment signals and device fingerprinting data from fraud detection partners, used to identify and prevent fraudulent account activity.
Purposes of Processing
Uncut99 processes your personal data for the following purposes:
- Account Management: Creating, maintaining, and managing your Uncut99 account, including authentication and security.
- Service Delivery: Processing deposits and withdrawals, delivering gaming and betting services, crediting bonuses, and maintaining transaction records.
- Identity and Age Verification: Verifying that you meet the minimum age requirement of 21 years and that your identity matches the registered account details, as required by our anti-fraud and regulatory obligations.
- Regulatory Compliance: Fulfilling obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gambling regulations, including record-keeping, suspicious activity reporting, and self-exclusion management.
- Customer Support: Handling queries, complaints, disputes, and technical issues raised through live chat, email, or other support channels.
- Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited activities.
- Platform Improvement: Analysing aggregated and anonymised usage data to improve Platform performance, user experience, and game selection.
- Marketing Communications: Sending promotional offers, bonus notifications, and platform updates, where you have provided consent to receive such communications and have not subsequently withdrawn that consent.
- Responsible Gambling: Monitoring gameplay patterns for indicators of problem gambling, enforcing player-requested limits and exclusions, and providing access to responsible gambling tools.
Legal Basis for Processing
Uncut99 processes your personal data only where a valid legal basis exists. The applicable legal basis for each category of processing is as follows:
- Contractual Necessity: Processing required to create and manage your account, process transactions, and deliver the gaming services you have requested under the Terms and Conditions.
- Legal Obligation: Processing required for compliance with applicable laws, including AML/CTF legislation, age verification requirements, and regulatory record-keeping obligations.
- Legitimate Interests: Processing for the purposes of fraud prevention, platform security, and the protection of the integrity of our gaming services — where such interests are not overridden by your privacy rights.
- Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.
Where Uncut99 relies on legitimate interests as a legal basis, we have conducted a balancing assessment to ensure that our interests are proportionate and do not override your fundamental rights and freedoms. You may request information about this assessment by contacting us as described in Section 12.
Data Sharing & Disclosure
Uncut99 does not sell, rent, or otherwise commercially disclose your personal data to third parties for their own independent purposes. Data is shared with third parties only in the following limited circumstances, and only to the extent strictly necessary:
- Payment Service Providers: To process deposits and withdrawals via DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, and GrabPay. These providers are contractually bound to handle your data securely and only for the purpose of transaction processing.
- Identity Verification (KYC) Providers: To conduct mandatory age and identity checks as part of account opening and withdrawal processing. KYC providers operate under strict data processing agreements and applicable privacy law.
- Fraud Detection and Security Partners: To identify, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the Platform.
- Cloud Hosting and Infrastructure Providers: To store Platform data and maintain operational systems. All hosting providers are selected based on their security standards and contractual data protection commitments.
- Legal and Regulatory Authorities: Where disclosure is required by law, court order, regulatory directive, or a legitimate request from a competent authority. Uncut99 will challenge any disclosure requests that appear disproportionate or unlawful.
- Professional Advisers: Lawyers, auditors, and accountants, where necessary for the conduct of our business, subject to strict confidentiality obligations.
Important: Uncut99 does not share your personal data with advertising networks, data brokers, social media platforms, or any third party for profiling or targeted advertising purposes.
Cookies & Tracking Technologies
Uncut99 uses cookies and similar tracking technologies to ensure the Platform functions correctly and to improve your experience. The types of cookies used on the Platform are as follows:
- Strictly Necessary Cookies: These are essential for the Platform to operate. They maintain your session state (keeping you logged in), enforce security measures, and enable core transactional functions. These cookies cannot be disabled without affecting Platform functionality.
- Functional Cookies: These remember your preferences, such as language settings and display options, to provide a personalised experience across sessions.
- Analytical Cookies: These collect aggregated, anonymised data about how users interact with the Platform — such as pages visited, session duration, and navigation paths — to help us improve the user experience. This data does not identify individual users.
- Security Cookies: These are used to detect and prevent fraudulent activity, including session hijacking and bot traffic, by verifying that interactions originate from legitimate human users.
You may manage your cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to use the Platform. Blocking other cookie types may reduce the quality of your experience but will not prevent access to core services. Uncut99 does not use third-party advertising cookies or cross-site tracking technologies.
Data Retention
Uncut99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The general retention periods applied are as follows:
- Active Account Data: Retained for the full duration of your account's active status, plus a minimum of five years following account closure, to satisfy AML record-keeping obligations.
- KYC and Identity Documents: Retained for a minimum of five years after the end of the customer relationship, in accordance with applicable regulatory requirements.
- Transaction Records: Financial transaction logs, including deposit and withdrawal records in MYR, are retained for a minimum of seven years to comply with financial record-keeping requirements.
- Support Communications: Live chat transcripts and email correspondence are retained for a period of three years from the date of the interaction, or longer where relevant to an unresolved dispute.
- Technical Logs: Server access logs and security event data are retained for a rolling period of 12 months, unless required for longer periods in connection with a security investigation.
- Marketing Consent Records: Records of your marketing consent status and any subsequent opt-out are retained for six years from the date of the consent or opt-out, to demonstrate compliance with applicable law.
Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised. Where data is anonymised, it may be retained for longer periods for statistical and research purposes without restriction.
Data Security
Uncut99 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
- Encryption of sensitive data at rest, including stored identity documents and financial records.
- Strict role-based access controls limiting employee access to personal data on need-to-know basis.
- Multi-factor authentication requirements for all administrative system access.
- Regular third-party penetration testing and vulnerability assessments of Platform infrastructure.
- 24/7 security monitoring with automated alerting for anomalous access patterns or potential breaches.
- Data processing agreements with all third-party processors specifying equivalent security standards.
Notwithstanding these measures, no data transmission over the internet or electronic storage system is entirely immune from risk. In the event of a data breach that is likely to result in a risk to your rights and freedoms, Uncut99 will notify affected individuals and, where required, the relevant regulatory authority, in accordance with applicable law.
Your Role in Security: You are responsible for maintaining the confidentiality of your account credentials. Never share your Uncut99 password with any third party. If you suspect your account has been compromised, contact our support team immediately via live chat or email at [email protected].
Your Rights
Subject to applicable law, you have the following rights in relation to the personal data Uncut99 holds about you. To exercise any of these rights, please contact us as described in Section 12:
Right of Access
Request a copy of the personal data we hold about you and confirmation of how it is being processed.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held your account records.
Right to Erasure
Request deletion of your personal data where it is no longer necessary, or where consent has been withdrawn, subject to legal retention obligations.
Right to Restriction
Request that we restrict processing of your data in certain circumstances, such as where accuracy is disputed or processing is unlawful.
Right to Portability
Request receipt of your personal data in a structured, machine-readable format where processing is based on consent or contract.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes. We will cease marketing communications immediately upon receipt of an opt-out request.
All data subject requests will be acknowledged within 48 hours and fulfilled within 30 calendar days of receipt. We may request proof of identity before processing a data subject request to ensure we do not disclose personal data to an unauthorised party. In complex cases, the30-day response period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it.
Limitation: The right to erasure and restriction are subject to our legal retention obligations. Certain personal data must be retained for regulatory, legal, or fraud prevention purposes even after a request for deletion, and we will inform you of any such limitation when responding to your request.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to raise a privacy-related complaint, please contact our data protection team using the following channels:
- Email: [email protected] — Please include "Privacy Request" or "Data Subject Request" in the subject line of your message. This is a plain-text email address and is not a clickable link.
- Live Chat: Available 24 hours a day, 7 days a week via the live chat widget on the Platform. Please state that you have a privacy or data protection query at the start of the conversation so we can route it to the appropriate team member.
If you are not satisfied with our response to a privacy-related complaint, you have the right to escalate the matter to the relevant data protection regulatory authority in your jurisdiction.
Policy Amendments
Uncut99 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform services. The most current version of this Policy will always be accessible at uncut99.cam/privacy-policy. The "Last Updated" date at the top of this page will be revised upon each substantive amendment.
Where amendments are material — that is, where they significantly alter your rights or our data processing activities in a manner that may affect you — we will endeavour to notify you via the email address associated with your account prior to the changes taking effect. Your continued use of the Platform after the publication of an updated Policy constitutes your acceptance of the revised terms.
We encourage all registered Players to review this Privacy Policy periodically, particularly following any updates communicated via Platform announcements or account notification. If you do not agree with any changes to this Policy, you should cease use of the Platform and may request account closure in accordance with the Terms and Conditions.
This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions of the Uncut99 Privacy Policy. For a summary of recent changes or to request a comparison with a prior version, please contact our data protection team.