Updated: 1 January 2026

City99 Privacy Policy – Personal Data Protection for Malaysian Members

City99 takes the privacy and security of your personal data seriously. This Policy explains what information we collect, how we use it, who may access it, and your rights as a member under Malaysian data protection law.

🔒
City99
Official Privacy Policy
10
Section
256
SSL bit
2026
Latest Version
By using the City99 platform, you agree to the privacy policy set out herein.

City99's Privacy Commitment

Six core principles at the heart of how City99 protects your information

256-bit SSL Encryption
All data transmitted between your device and City99's servers is protected using 256-bit SSL encryption — the same standard used by Malaysia's major banks, including Maybank and CIMB. None of your information is transmitted in an unsecured form.
Data Not Sold
City99 never sells, rents, or trades members' personal information to any third party for marketing purposes. Your data belongs to you – we only use it for operational purposes to which you have given explicit consent.
Secure Data Storage
The personal and financial data of City99 members is stored on servers protected by multi-layered security systems, strict access controls, and regular security audits to ensure unauthorized access never occurs at any time.
Right of Access & Erasure
You have the full right to request access to the personal data held by City99, request correction of any inaccurate information, or request complete deletion of your data upon account closure, subject to applicable legal requirements.
MYR Transaction Security
All information related to financial transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, and CIMB Clicks is processed through secure channels. City99 does not store your credit card details or bank account passwords.
Malaysian Legal Compliance
City99's Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We adhere to all local legal requirements relating to data protection and online user privacy in Malaysia.

Types of Data City99 Collects

We only collect data that is genuinely necessary to deliver the best possible service to you

Personal Data Collected

Full name Malaysian phone number Email address Date of birth State / city Payment methods RM transaction records Game records Customer support logs

Technical Data Collected Automatically

IP address Web browser type Device type Approximate location Session duration Pages visited App performance data Cookies Connection type

This Privacy Policy ("Policy") explains how City99 collects, uses, stores, and protects your personal information when you use our platform at https://city99.best. By registering for or using the City99 platform, you agree to the terms of this Privacy Policy. Please read this document in full to understand your rights and responsibilities regarding your personal data.

1

Introduction & Scope of This Policy

Your privacy is our priority City99. We understand that when you register and play on our platform, you are trusting us with sensitive personal information — and we do not take that trust lightly. This Policy is designed to ensure you always know what happens to your data from the moment you sign up through every interaction you have on the City99 platform.

This Privacy Policy applies to all services offered by City99, including live casino, baccarat, blackjack, roulette, lottery, cricket, football betting (Malaysia Super League, EPL, UCL, and more), as well as all your interactions with our customer support team.

This Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). In the event of any conflict between this Policy and applicable Malaysian law, Malaysian law shall prevail.

Important Note: This Privacy Policy covers only the City99 platform accessed via https://city99.best. It does not cover third-party websites or services that you may access through links found on our website.

2

Personal Data We Collect

City99 collects your personal information through three main methods: information you provide directly during registration, information collected automatically during your use of the platform, and information we receive from third-party service providers that you use to interact with us.

Information you provide directly:

  • Your full legal name as it appears on your Malaysian MyKad.
  • An active Malaysian phone number for SMS verification and communications.
  • A valid email address for account notifications and support.
  • Date of birth for age verification (18 years and above).
  • Information relating to the payment method used (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks) — we do not store your payment account passwords or PINs.
  • Records of all deposits and withdrawals in Malaysian Ringgit (RM) for legal compliance and dispute resolution purposes.

Information collected automatically:

  • IP address and approximate location information (at city/state level).
  • Device type, operating system, and web browser version used.
  • In-platform activity logs, including pages visited, session duration, and games played.
  • Technical data related to platform performance for service improvement purposes.

City99 does NOT collect: Your full credit or debit card number, bank account or digital wallet passwords, MyKad number (unless specifically requested for identity verification on large withdrawals), or any biometric information.

3

How We Use Your Data

Every piece of data that City99 collected has a clear purpose. We do not collect information simply for the sake of it – every piece of data we hold is used for a specific and legitimate purpose. Here is how we use your information:

  • Account Operations: Your name and phone number are used to verify your identity, process logins, and enable important account-related communications such as transaction confirmations and security notifications.
  • Financial Processing: Payment method information is used solely to securely process deposits and withdrawals in MYR (RM) through your chosen payment provider.
  • Platform Security: Technical data such as IP addresses and device type is used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.
  • Service Improvement: Non-personally identifiable usage data is used to understand how members interact with the platform, enabling us to make meaningful improvements to the interface and overall user experience.
  • Legal Compliance: Transaction records and identity information are retained to meet anti-money laundering (AML) and know your customer (KYC) compliance requirements in Malaysia.
  • Customer Support: Customer support chat logs are retained to enable our team to provide more effective and consistent assistance across all your future interactions with us.
  • Service-Related Communications: Your email address and phone number may be used to send important account notifications, updates to our terms, or promotional communications you have consented to receive.

City99 will not use your data for any purpose beyond those stated above without first obtaining your renewed consent.

4

Data Sharing & Disclosure

City99 does not sell, rent, or transfer your personal data to any third party for marketing or commercial purposes. However, there are limited situations where we may need to share certain information with other parties:

  • Payment Service Providers: Transaction information necessary for processing is shared with Malaysian payment service providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) solely for the purpose of completing your financial transactions. These providers maintain their own privacy policies and are subject to Bank Negara Malaysia regulations.
  • Gaming Software Providers: The minimum technical information required for gameplay functionality is shared with third-party game software providers that supply live casino games and Sports Betting on the City99 platform. All such providers are bound by strict confidentiality agreements.
  • Legal Requirements: City99 will disclose member information when required to do so by a court order, direction from Malaysian authorities, or applicable law — including investigations related to money laundering or financial crime.
  • Protection of City99's Rights: In cases of fraud, platform abuse, or serious terms violations, City99 reserves the right to disclose relevant information to the appropriate authorities for the purpose of legal action.

Our Guarantee: City99 has never sold and will never sell members' personal data to advertising companies, data brokers, or any party intending to use it for marketing purposes without your explicit consent.

5

Data Security & Technical Protection

Data security is a core investment City99 and not merely a box to tick. We implement multiple layers of technical and organisational safeguards to keep your data secure at all times:

  • Encryption in Transit: All communications between your browser or app and City99's servers are secured using TLS 1.3 with AES-256 encryption — the highest standard currently available.
  • Storage Encryption: Sensitive data stored in our databases — including personal information and financial records — is encrypted at rest using industry-standard encryption algorithms.
  • Access Controls: Only City99 staff with a legitimate operational need are permitted to access member data, and all access is logged and audited on a regular basis.
  • 24/7 Monitoring: Our security monitoring systems operate around the clock to detect and respond promptly to any unauthorised access attempts or security anomalies.
  • Regular Security Testing: City99 conducts regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.
  • Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an additional layer of account protection, reducing the risk of unauthorised access even in the event of a compromised password.

While we take all reasonable steps to protect your data, no online security system can guarantee absolute 100% protection. We encourage you to play your part in securing your account by using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

6

Cookies & Tracking Technologies

Platform City99 uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and analyse aggregated usage patterns for service improvement purposes.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login sessions, security, and language preferences. Without these cookies, the platform will not function properly. This type of cookie cannot be disabled.
  • Performance Cookies: Collects information on how you use the platform — the most frequently visited pages, time spent, and any technical errors encountered. This data is used in aggregate form without identifying you individually.
  • Functional Cookies: Remembers your preferences and settings — such as your selected language and display preferences — to deliver a more personalised experience on future visits.

You can control and manage cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of some features on the City99 platform. More information on managing cookies in popular browsers is available in each browser's help section.

Note: City99 does not use third-party cookies for targeted advertising or share your behavioural data with any advertising network.

7

Your Rights as a City99 Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights with respect to your personal data processed by City99:

Your Rights Description How to Submit
Right of Access Obtain a copy of the personal data City99 holds about you ✓ Email / Live Chat
Right to Rectification Correct personal information that is inaccurate or incomplete ✓ Account Settings
Right to Erasure Request data deletion upon account closure (subject to legal requirements) ✓ Email City99
Right to Object Object to data processing for specific purposes such as marketing communications ✓ Email / Notification Settings
Right to Portability Receive your data in a machine-readable format (CSV/JSON) ✓ Email request
Right to Withdraw Consent Withdraw consent for data processing at any time ✓ Contact support

To submit any request relating to your privacy rights, contact City99 at support@city99.best stating the right you wish to exercise and the required identity verification details. We will process your request within 14 business days of receipt.

8

Data Retention & Deletion

City99 does not retain your personal data for longer than is necessary for the purpose for which it was collected, or as required under applicable Malaysian law.

  • Active Account Data: Retained for as long as your account is active and for 12 months following your last activity, for account recovery purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with Malaysian financial and tax legal requirements.
  • Customer Support Logs: Retained for 3 years from the date of interaction for service quality and dispute resolution purposes.
  • Technical Data & System Logs: Retained for 90 days before being automatically deleted, unless required for an ongoing security investigation.
  • After Account Closure: Personally identifiable data will be deleted or anonymised within 30 days of confirmed account closure, except for records that must be retained to meet legal requirements.

Once the retention period expires or you submit a valid data deletion request, City99 will ensure your data is securely erased using industry-standard deletion methods, making it unrecoverable by any party.

Important: Even after you close your City99 account, certain financial records must be retained for a period prescribed by Malaysian law. This is beyond our control and is a mandatory compliance requirement.

9

Privacy Policy Amendments

City99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or service improvements. When material amendments are made, we will notify you through one of the following methods:

  • A prominent notification will be displayed when you log in to the City99 platform after an amendment takes effect.
  • Email to the address registered on your account if an amendment involves material changes to how we handle sensitive data.
  • Update the "Last Updated" date displayed at the top of this document.

We encourage you to review this page regularly — at least once every 3 months — to stay informed of the latest version of our Privacy Policy. Your continued use of the City99 platform after any amendment date will be considered acceptance of the updated Policy.

Current Version: This is City99 Privacy Policy version 2.5, effective from 1 January 2026. It supersedes all previous versions of the Privacy Policy.

10

Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise your privacy rights regarding the data that City99 retain, please contact us through the following channels:

  • Privacy Email: support@city99.best – include "PRIVACY ENQUIRY" in your email subject line to expedite our response.
  • Live Chat: Available on the platform — responses within 2–5 minutes, 24 hours a day.
  • WhatsApp: The number is displayed after you log in to your account.

We are committed to responding to all privacy-related inquiries within 3 business days. For privacy rights requests that require investigation or technical action, a longer period of up to 14 business days may be needed. We will keep you updated on the progress of your request along the way.

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP), the regulatory authority established under the Personal Data Protection Act 2010 to enforce the privacy rights of Malaysians.

Why Does Data Privacy Matter at City99?

In today's digital world, personal data is an incredibly valuable asset — and every time you sign up on any online platform, you are entrusting them with a part of your digital identity. At City99, we never lose sight of this reality. This Privacy Policy is more than a legal formality — it is our promise to every member that the information you entrust to us will always be handled with responsibility, transparency, and respect.

Many people underestimate how sensitive the information involved can be when registering on a digital entertainment platform. Your name, Malaysian phone number, email address, and most critically — financial transaction records in MYR via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX — are all details that, in the wrong hands, could cause serious harm. That is why City99 continuously invests in security infrastructure and staff training to ensure your data remains protected at all times.

It is also worth understanding that the need to collect certain information does not stem purely from corporate interest — it is a legal requirement. Under Malaysian law, online financial and entertainment platforms are required to carry out Know Your Customer (KYC) procedures and comply with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA). This means that some of the information we collect is to fulfil our legal obligations as a responsible platform operator in Malaysia, not merely for operational purposes. City99.

One thing we always emphasise to new members City99: we will never ask for your account password, Touch 'n Go PIN, GrabPay credentials, or any personal banking details via email, SMS, or social media. If you receive any message claiming to be from City99 and requesting such sensitive information, it is a phishing attempt and you should report it to us at support@city99.best immediately. The City99 security team takes these matters very seriously — not only to protect you, but also to safeguard other members who may be targeted by the same fraudsters.

We also want to be upfront about cookies and online tracking — a topic that often causes confusion. City99 uses cookies for limited, legitimate purposes: keeping your login session running smoothly, remembering your preferences, and collecting non-personally identifiable performance data for platform improvement. We do not use third-party cookies for targeted advertising, and we do not sell your behavioural data to any advertising network. This is a clear commitment that sets us apart from many other platforms operating in Malaysia and worldwide.

For members who may have concerns about their data, we want to remind you that your rights under Malaysia's Personal Data Protection Act 2010 (PDPA) are real and we respect them fully. You have the right to request access to the data we hold, request correction of inaccurate information, and in many circumstances — request deletion of your data when it is no longer needed. These processes do not require you to navigate difficult bureaucracy. Simply send an email to support@city99.best with your request, and our team City99 will process such requests within 14 business days.

Finally, we want to emphasize that this Privacy Policy is a living document – it will be updated as technology evolves, laws change, and our operations develop. Whenever material amendments are made, we will notify you. Your trust is the foundation of everything we do at City99, and we will never take lightly the responsibility that comes with that trust. If you have any questions about how we handle your data privacy, do not hesitate to reach out — we are always here to respond openly and honestly.

FAQ — City99 Privacy Policy

Answers to the most frequently asked questions about privacy and data protection at City99

No. City99 does not store your full credit or debit card number, bank account passwords, digital wallet PINs (Touch 'n Go, GrabPay, Boost, ShopeePay), or any other financial account security details. When you make a deposit via FPX Maybank2u or CIMB Clicks, you are redirected directly to the respective bank's secure portal — City99 never sees or stores your banking login credentials. All transactions are processed through secure, PCI-DSS compliant payment gateways.

Yes, you have the right to request deletion of your personal data upon closing your City99 account. Send your request to support@city99.best with the subject line "DATA DELETION REQUEST", including your full name and registered phone number. City99 will delete or anonymise your identifiable personal data within 30 days. Please note, however, that financial transaction records must be retained for a minimum of 7 years under Malaysian legal requirements — this is a statutory obligation that cannot be waived even upon member request. Data retained for this legal purpose will not be used for any other operational purpose.

Absolutely not. City99 does not sell, rent, or share members' personal data with any third party for marketing or advertising purposes. Your data is only shared in very limited circumstances — with Malaysian payment service providers to process your transactions, with gaming software providers for necessary technical functions, and with Malaysian authorities when required by law. All third parties that receive your data are bound by strict confidentiality agreements and are not permitted to use that data for any other purpose.

City99 employs multiple layers of security protection, including: TLS 1.3 encryption for all data in transit, AES-256 encryption for stored data, strict role-based access controls for staff, Intrusion Detection and Prevention Systems (IDS/IPS) operating 24/7, regular penetration testing by independent third-party security experts, and cybersecurity training for all personnel. Two-Factor Authentication (2FA) is also available to all members, and we strongly encourage you to enable it for an added layer of protection on your account.

If you suspect your City99 account has been accessed without authorization or your data may have been compromised, take the following steps immediately: First, change your City99 account password right away. Second, enable Two-Factor Authentication (2FA) if you haven't already done so. Third, review your recent transaction history for any activity you don't recognize. Fourth, contact the City99 support team via live chat or email at support@city99.best to report the incident. Our security team will investigate promptly, freeze any suspicious activity, and help you regain full control of your account.

Responsible Gaming – City99's Commitment

Beyond protecting your data privacy, City99 is fully committed to the wellbeing of our members. Our platform provides a comprehensive suite of responsible gaming tools — daily and weekly deposit limits, loss limits, session time limits, temporary cooling-off options, and full self-exclusion — all accessible directly from your account settings or by contacting our support team.

City99 is strictly for users aged 18 and above. Our robust age verification system prevents access by minors in Malaysia.

Learn More – Responsible Gaming

Related Links – City99 Policy Documents

This Privacy Policy should be read alongside City99's other policy documents to fully understand your rights and responsibilities as a member of our platform.

Your Data Is Safe – Ready to Play at City99?

Register your City99 account for free today with full confidence that your information is protected by 256-bit SSL encryption. Enjoy over 1,200 games with easy deposits via Touch 'n Go, GrabPay, DuitNow, or FPX — all in Malaysian Ringgit (MYR).

Bahasa Melayu