Privacy Policy

Clud99 Privacy Policy — Our Commitment to Protecting Your Personal Data

Clud99 takes the privacy of every member seriously. This document transparently explains how we collect, use, store, and protect your personal information to the highest data security standards.

Updated: 1 January 2026 PDPA 2010 Compliance
Comprehensive Protection

Clud99's Six Core Principles of Data Privacy Protection

Clud99's integrated approach to safeguarding every member's personal information

Advanced-Level Encryption

All personal data and financial transactions are protected with 256-bit SSL and AES-256 encryption technology — the same security standards used by major banks in Malaysia.

Malaysia PDPA Compliance

All data management operations at clud99 fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your rights as a user are consistently upheld.

No Data Sales

Clud99 has never and will never sell, rent, or disclose member personal data to any third party for marketing purposes without your explicit consent.

Full Member Control

You have the right to access, correct, download, and request deletion of your personal data at any time via the account panel or by contacting our support team.

Secure & Protected Servers

Your data is stored in high-grade data centres with strict physical and digital access controls. Only personnel with specific authorisation may access sensitive information.

Immediate Breach Notification

Should any data security incident occur that affects your information, clud99 will notify you within 72 hours in accordance with data protection best practices.

Important Note: By registering and using the clud99 platform, you consent to the collection and use of your personal data as described in this Privacy Policy. This policy forms part of the Terms and Conditions governing the use of our platform.

1

Introduction and Scope of This Privacy Policy

Clud99 is an online entertainment platform that operates with full integrity and transparency. We understand that your trust is our most valuable asset, and protecting your personal information is our absolute top priority in every aspect of this platform's operations.

This Privacy Policy explains in detail how clud99 collects, processes, stores, protects, and in certain circumstances shares your personal information. It applies to all registered members, website visitors, and anyone who interacts with the clud99 platform whether through the website, mobile app, or any of our official communication channels.

This policy is drawn up in compliance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and global best practices in data protection. clud99 views compliance with privacy legislation not merely as a legal obligation, but as a reflection of our commitment to the trust of our members.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer at [email protected] at any time.

2

Types of Personal Data We Collect

Clud99 only collects personal data that is genuinely necessary to deliver high-quality services, ensure platform security, and comply with applicable legal requirements. The following are the categories of information we collect:

  • Personal Identification Information: Full name, date of birth, identity card number (MyKad), passport number, gender, and nationality provided during account registration or the KYC process.
  • Contact Information: Email address, mobile phone number, current residential address, and postcode used for communication and verification.
  • Financial Information: Bank account number, bank name, e-wallet account number, and other payment details required to process deposits and withdrawals.
  • Platform Usage Data: Game history, betting records, deposit and withdrawal activity, game preferences, and usage patterns that help us improve our services.
  • Technical Data: IP address, device type, operating system, browser version, login session data, and approximate geolocation information for security purposes.
  • Communication Content: Transcripts of customer support conversations, emails sent to us, and feedback submitted through surveys or customer satisfaction forms.

Clud99 will never request credit or debit card information directly via email or live chat. All financial transactions are processed securely through the encrypted payment portal within the platform.

Data Category Collected During Registration Collected During KYC Collected During Usage
Personal Identification Information Yes Yes No
Contact Information Yes Updated No
Financial Information No Yes Yes
Platform Usage Data No No Yes
Technical Data Yes No Yes
3

How clud99 Uses Your Personal Data

Every piece of information we collect has a clear and legitimate purpose. clud99 adheres to the principle of purpose limitation — meaning we do not use your data for any purpose beyond what is stated below without first obtaining fresh consent from you.

  • Service Provision: To process account registration, verify identity, handle deposits and withdrawals, and enable access to all games and platform features.
  • Security and Fraud Prevention: To detect suspicious activity, prevent unauthorized access, identify fraud attempts, and protect the overall integrity of the platform.
  • Legal Compliance: To fulfil legal obligations including anti-money laundering (AML) requirements, Know Your Customer (KYC), and reporting to relevant authorities when required by law.
  • Service Improvement: To analyse aggregated usage patterns in order to improve the user experience, develop new features, and optimise platform performance.
  • Service Communications: To send transaction notifications, security alerts, policy updates, and other important information related to your account.
  • Marketing Communications: With your consent, sending information about promotions, bonus offers, and platform news that may interest you. You may unsubscribe from marketing communications at any time.
  • Customer Support: To resolve member enquiries, complaints, and technical issues more efficiently and effectively.

Clud99 never uses your personal data for any purpose beyond the list above without first obtaining your explicit consent. You may withdraw consent for marketing purposes at any time through your account settings.

4

Sharing Information With Third Parties

Clud99 understands that your trust is the cornerstone of our relationship. We do not sell, rent, or disclose your personal data to third parties for their own gain. However, in the context of operating a secure and lawful platform, there are limited situations where we need to share your information:

  • Payment Providers: Required information is shared with the payment service providers we use (such as banks, e-wallet operators, and crypto processors) solely for the purpose of processing your financial transactions.
  • Game Software Providers: Minimum necessary data is shared with third-party game software providers to enable access to their games on our platform.
  • Technology Service Providers: Technical partners such as cloud services, analytics, and cybersecurity providers that help us operate the platform are bound by strict confidentiality agreements.
  • Law Enforcement Agencies: When required by court order, legal regulation, or a lawful request from the relevant authorities, clud99 will disclose the necessary information.
  • Business Transfer: In the event of a merger, acquisition, or sale of business assets, user data may be transferred to the new entity, with appropriate notice provided to you.

All third parties working with clud99 are required to comply with data protection standards at least equivalent to our own. Legally binding data processing agreements are signed with every third-party partner.

5

Data Security Measures We Practice

Clud99 continually invests in the latest security infrastructure to ensure your personal data is always protected against unauthorised access, theft, or damage. Our security approach is multi-layered and comprehensive:

  • Data-in-Transit Encryption: All communications between your device and clud99's servers are secured with TLS 1.3 protocol and 256-bit SSL encryption, making data unreadable to anyone attempting to intercept the connection.
  • Data-at-Rest Encryption: Sensitive data stored in our databases is encrypted using the AES-256 algorithm, ensuring data remains inaccessible even in the event of a physical storage breach.
  • Layered Access Control: Access to systems containing personal data is restricted based on the principle of least privilege. All access is logged and continuously monitored.
  • Two-Factor Authentication (2FA): All member accounts are supported by two-factor authentication for an additional layer of protection during login.
  • 24/7 Monitoring: Our cybersecurity team continuously monitors systems around the clock to detect and respond to any threats immediately.
  • Regular Security Audits: Security audits and penetration testing are conducted periodically by independent third parties to identify and address any system vulnerabilities.

While no system can guarantee 100% absolute security, clud99 employs industry-leading security technology and practices to minimise risk. We continuously update our security systems to keep pace with the latest cybersecurity threats.

6

Use of Cookies and Tracking Technologies

Clud99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website and play an important role in ensuring the platform runs smoothly and securely.

  • Essential Cookies: Required for core platform functions including login session management, account security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: To collect information about how you use the platform — pages visited, time spent, and errors encountered — to help us improve website performance.
  • Functional Cookies: To save your preferences such as display settings, favourite game selections, and language choices in order to deliver a more personalised experience.
  • Analytics Cookies: Used to analyse overall platform traffic and usage patterns for continuous improvement purposes. This data is processed in aggregate and does not identify individuals.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect your experience on the clud99 platform. Visiting our platform is considered your consent to the use of cookies in accordance with this policy.

Clud99 does not use cookies to track your activity on other websites or for advertising purposes unrelated to our platform. All cookies we use are solely to improve your experience on clud99.

7

Your Rights Regarding Personal Data

As a clud99 member and a data subject under Malaysia's PDPA, you have legally protected rights regarding your personal data. clud99 is committed to making it easy for you to exercise these rights without unnecessary obstacles.

Right of Access

You have the right to obtain a copy of the personal data we hold about you within 21 business days of your request.

Right to Rectification

You may request correction of inaccurate or incomplete personal data at any time via your account settings.

Right to Erasure

You may request deletion of your personal data, subject to applicable legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing a reason.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another provider.

Right to Restriction of Processing

In certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved.

To exercise any of the above rights, please contact our Data Protection team at [email protected] including your account number and proof of identity. We will process your request within the timeframe prescribed by law.

8

Personal Data Retention Period

Clud99 retains your personal data only for as long as necessary to fulfil the original purpose of collection and to comply with relevant legal requirements. We practise a disciplined and regular data deletion policy to ensure we do not hold information longer than necessary.

Data Type Retention Period Reason
Account Registration Data For the duration of active account + 7 years AML legal requirements
Financial Transaction Records 7 years after transaction Tax and audit requirements
KYC Documents 5 years after account closure PDPA compliance requirements
Communication Logs 3 years Dispute Resolution
Technical Data & Logs 12 months Security and troubleshooting
Marketing Data Until consent is withdrawn Legal basis

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised in a manner that ensures it can no longer be personally linked to you.

9

KYC Process and Identity Verification

The Know Your Customer (KYC) process is a mandatory requirement that cannot be avoided in the regulated online entertainment industry. clud99 carries out KYC not merely to comply with the law, but also to protect you from identity misuse and to ensure the safety of your funds.

  • Identity Document: MyKad, passport, or other valid government-issued official identity document.
  • Proof of Address: Bank statement, utility bill, or other official document containing your current name and address, dated within the last 3 months.
  • Payment Method Verification: Screenshots or proof of ownership of the bank account or e-wallet used for deposits and withdrawals.
  • Selfie Photo: In some cases, a selfie with your identity document may be requested to verify that the account holder is the legitimate owner of that document.

All KYC documents you submit to clud99 are stored with the highest-level encryption and accessed only by specially trained compliance staff. These documents are never shared with third parties unless required by law.

10

Privacy Policy Amendments and How to Contact Us

Clud99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or technological developments. Any significant amendments will be communicated to you via email notification or in-platform notice at least 14 days before taking effect.

Your continued use of the clud99 platform after the effective date of any amendments to this Privacy Policy constitutes your acceptance of those changes. If you do not agree with the amendments made, you should discontinue use of the platform and contact us to close your account.

  • The current version of this Privacy Policy is marked with the "Last Updated" date at the top of this page.
  • Previous versions of the Privacy Policy can be requested via our support email for reference purposes.
  • This Privacy Policy is in Malay as the official reference version.

For any enquiries, concerns, or requests relating to your data privacy, contact the clud99 Data Protection Officer at [email protected]. Our team is available to assist in Malay and English, seven days a week.

Join clud99 Today

A Trusted Platform — Your Data Is Safe With clud99

Create your clud99 account today and enjoy a safe, fair, and responsible online entertainment experience — your privacy is always our priority.

256-bit SSL Encrypted Data Malaysia PDPA Compliance Download App
FAQ

Frequently Asked Questions About clud99's Privacy Policy

Answers to the most frequently asked questions by our members

Absolutely not. clud99 has never and will never sell, rent, or transfer your personal data to any third party for their commercial gain. Your data is only shared in very limited situations as outlined in this Privacy Policy, and only when genuinely necessary to provide services to you or to comply with legal requirements.

You may request deletion of your personal data by emailing [email protected] with your account number and a copy of your proof of identity. Please note that certain data is legally required to be retained (e.g., financial transaction records for 7 years for AML and tax purposes). Data not subject to legal retention requirements will be deleted within 30 days of a verified request.

When you close your clud99 account, we will immediately deactivate your account and stop all marketing communications. However, under Malaysian legal requirements, we are obligated to retain certain records such as identity information and financial transaction records for specified periods (between 3 and 7 years depending on the data type). After the relevant retention period expires, your data will be securely and permanently deleted.

No. clud99 only uses cookies to enhance your experience within our platform. We do not use cross-site tracking cookies, advertising pixels, or other tracking technologies to monitor your activity on websites or apps outside of clud99. The cookies we use are solely for platform functionality, performance, and service improvement within the clud99 ecosystem.

All financial transactions on the clud99 platform are processed through a payment portal secured with 256-bit SSL encryption and the latest TLS 1.3 protocol. Your bank account or e-wallet details are stored in AES-256 encrypted format and accessed only to process transactions you have requested. clud99 never stores credit or debit card information directly — all card-based payments are processed through PCI-DSS compliant payment providers.

If you suspect any unauthorized access to your account, the immediate steps you should take are: (1) Change your account password immediately via the security settings page; (2) Enable Two-Factor Authentication (2FA) if you have not already done so; (3) Contact the clud99 support team at [email protected] to report the incident; (4) Review all recent transactions and report any activity you do not recognize. Our security team will investigate and take action within 24 hours.
Bahasa Melayu