Last updated: 1 July 2026 Version 3.1

Digi999 Privacy Policy – Data Protection for Malaysian Players

Digi999 is committed to protecting the privacy and personal data security of every Malaysian player. This document clearly explains how we collect, use, and safeguard your information.

Register Free Log In

Digi999's Privacy Commitment to Malaysian Players

Six core principles that underpin how digi999 handles the personal data of every member.

256-bit SSL Encryption

All data transmitted between your device and digi999's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's major banks, including Maybank and CIMB. Your personal information and financial transactions remain secure in transit at all times.

Data Is Never Sold to Third Parties

Digi999 never sells, rents or trades members' personal data to any third party for marketing purposes. Your information belongs to you — we use it solely for the purposes stated in this policy and nothing beyond that.

Malaysian Legal Compliance

The digi999 Privacy Policy is drafted in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA). We comply with all applicable legal requirements governing the collection, processing, and storage of users' personal data in Malaysia.

Restricted & Controlled Data Access

Only digi999 staff who require access to your personal data to perform their authorised duties are permitted to access it. All access is logged and monitored. Our staff are bound by strict confidentiality agreements and undergo ongoing data protection training.

Right of Access & Data Correction

As a digi999 member, you have the right to access, review, request corrections to, or apply for the deletion of your personal data. Such requests may be submitted to the digi999 support team and will be processed within the timeframes prescribed under Malaysian law.

Data Breach Notification

In the event of any data security breach that may affect your personal information, digi999 is committed to notifying you within the timeframe stipulated under applicable Malaysian law. We will not conceal any serious security incidents.

Your Rights as a digi999 Member

A summary of the data protection rights you hold as a user of the digi999 platform in Malaysia.

Your Rights Description How to Submit a Request Status
Right of Access Request a copy of the personal data digi999 holds about you Email support@digi999.best AVAILABLE
Right to Rectification Request correction of inaccurate or incomplete personal data Live chat or email AVAILABLE
Right to Erasure Request the deletion of your personal data under circumstances provided for by law Official email with account details CONDITIONAL
Right to Object Object to the processing of your personal data for direct marketing purposes Account settings or email AVAILABLE
Right to Restrict Processing Requesting restrictions on how digi999 processes your data in certain circumstances Email support@digi999.best CONDITIONAL
Right to Data Portability Receive your data in a structured, machine-readable format Written request via email AVAILABLE
Right to Withdraw Consent Withdraw consent for data processing based on consent at any time Account settings or contact support AVAILABLE

1Scope & Purpose of This Privacy Policy

This Privacy Policy explains how digi999 collects, uses, discloses, stores and protects your personal information when you use our platform — including the digi999 website, mobile app and all related services.

This policy applies to all users of the digi999 platform based in Malaysia, including registered members, website visitors, and anyone who interacts with digi999 services in any capacity. By registering for or using digi999, you agree to the collection and use of data as described in this document.

Legal Basis: digi999's Privacy Policy is framed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We comply with all data protection principles set out in the Act, including the General Principle, the Notice & Choice Principle, the Disclosure Principle, the Security Principle, the Data Integrity Principle, the Access Principle and the Accountability Principle.

Digi999 is the data controller for personal information collected through our platform. This means we are responsible for determining the purposes and means of processing your personal data. If you have any questions or concerns about how we handle your data, please contact our team at support@digi999.best.

2Types of Personal Data We Collect

Digi999 collects various types of personal information depending on how you interact with our platform. Below are the categories of data we collect:

Registration & Identity Data

  • Full name as it appears on your identity card or passport.
  • Date of birth for age verification purposes (you must be 18 years of age or older).
  • An active Malaysian email address and mobile phone number.
  • Residential address in Malaysia.
  • A copy of your identity document (MyKad or passport) when required for the Know Your Customer (KYC) process.

Financial & Transaction Data

  • Details of Malaysian e-wallet accounts used for deposits and withdrawals, including Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks).
  • Deposit and withdrawal transaction history in Malaysian Ringgit (RM).
  • Records of wins, losses, and betting activity on the digi999 platform.

Usage & Technical Data

  • IP address, browser or application type and version used.
  • Device information including operating system, device model, and unique device identifier.
  • Log data including access times, pages visited, games played, and session duration.
  • General location data (state or city within Malaysia) derived from your IP address.
  • Cookie data and similar tracking technologies — see Section 7 for further details.

Communication Data

  • Records of live chat conversations, emails or other communication channels with the digi999 support team.
  • Feedback, complaints or suggestions you submit to us.
  • Your marketing communication preferences — whether you have opted in to or out of receiving promotional communications from digi999.

Important Note: digi999 does not store full credit or debit card numbers in our systems. All payment processing is handled via Malaysian e-wallet methods and FPX, processed through licensed and secure third-party payment providers. We only retain transaction information necessary for record-keeping and legal compliance.

3How digi999 Uses Your Personal Data

Digi999 uses the personal data we collect for the following purposes, all of which are legitimate, reasonable and necessary to deliver our services to players in Malaysia:

Service Provision & Management

  • Processing your digi999 account registration and verifying your identity and eligibility.
  • Enables you to access and use all digi999 games and services — including slots, live casino, baccarat, table games, lottery, cricket, and Sports Betting.
  • Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX, as well as managing your winnings withdrawals.
  • Managing the VIP Rewards programme and ensuring you receive the correct benefits for your membership tier.
  • Issuing and managing digital lottery tickets, verifying draw results, and crediting winnings.

Security & Compliance

  • Detecting, investigating, and preventing fraud, money laundering, and other unlawful activities.
  • Complying with Malaysian legal requirements and applicable regulations, including PDPA 2010.
  • Maintaining the integrity of the digi999 platform and protecting the interests of all users.
  • Enforcing digi999's Terms & Conditions and related policies.

Marketing & Communications (with Consent)

  • Sending you information about relevant digi999 promotions, bonuses and special offers — including Hari Raya, Chinese New Year and other Malaysian festive promotions.
  • Sending important notifications about your account, lottery draw results, bonus status, and platform updates.
  • Conducting market research and customer satisfaction surveys to improve digi999's services.

Marketing Opt-Out Options: You may opt out of receiving marketing communications from digi999 at any time by using the "unsubscribe" link in any marketing email or by contacting our support team. You will, however, continue to receive important service communications relating to your account and transactions.

4Personal Data Sharing & Disclosure

Digi999 does not sell, rent or trade members' personal data to any third party for their own marketing purposes. However, there are certain circumstances in which we may need to share some of your information with the following parties:

Third-Party Service Providers

Digi999 works with trusted third-party service providers to help operate our platform. These include:

  • Payment Processing Providers: Licensed Malaysian e-wallet providers (Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay) and FPX member banks, to process deposit and withdrawal transactions.
  • Game Provider: International-standard casino game software providers that supply slots, Live Casino, and table games to digi999. They receive only the minimum data necessary for game transaction verification.
  • Cloud & Infrastructure Services: Server and cloud service providers that host digi999 platform data to industry-standard security specifications.
  • Identity Verification Services: KYC service providers who assist in verifying member identities to meet legal and regulatory requirements.

All these third-party providers are bound by strict data protection agreements and are only permitted to use your data for the specific purposes related to the services they provide to digi999.

Legal Requirements

Digi999 may be required to disclose your personal data to Malaysian public authorities when mandated by law — for example, to the Royal Malaysia Police (PDRM), the Financial Intelligence Unit (FIU), or relevant courts in connection with criminal investigations or legal proceedings. In such circumstances, we will disclose only the minimum information required and will notify you where the law permits us to do so.

Reminder: digi999 will not disclose your personal data to any party without a valid legal basis or your consent, except in emergency situations involving risk to life or the prevention of serious crime as required under Malaysian law.

5digi999 Data Security Measures

Digi999 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. The following are the key layers of protection we have in place:

Technical Security

  • 256-bit SSL/TLS Encryption: All communications between your browser or app and digi999's servers are encrypted using the latest SSL/TLS protocols.
  • Data Encryption at Rest: Sensitive data stored in digi999's databases is encrypted at rest using industry-standard encryption algorithms.
  • Two-Factor Authentication (2FA): Available free of charge to all digi999 accounts to add an extra layer of security to the login process.
  • Intrusion Detection System: digi999 employs continuous monitoring systems to detect and respond to any unauthorised access attempts on our systems.
  • Firewall & Network Security: digi999's infrastructure is protected by a multi-layered firewall system and stringent network security controls.

Internal Access Controls

  • Access to members' personal data is governed by a "need-to-know" principle — only staff who require access to carry out their duties are authorised to do so.
  • All staff access to systems containing personal data is logged and continuously monitored.
  • Digi999 staff undergo background checks and receive regular data protection training.

Shared Responsibilities: While digi999 maintains robust security measures, the safety of your account also depends on your own actions. Please use a strong password, enable 2FA, never share your login credentials, and contact us immediately if you suspect any suspicious activity on your digi999 account.

6Data Storage & Retention Period

Digi999 retains your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable Malaysian law, whichever is longer.

Specific Retention Periods

  • Active Account Data: For as long as your digi999 account remains active, your profile data and account history are retained to ensure you can use the platform without interruption.
  • Financial Transaction Data: Records of deposits, withdrawals, and financial transactions are retained for a minimum of 7 years in accordance with Malaysian financial and tax reporting requirements.
  • Support Communication Data: Customer support conversation records are retained for 3 years for dispute resolution and service quality improvement purposes.
  • Technical Log Data: Access logs and system activity records are retained for 12 months for security and technical troubleshooting purposes.
  • Data Following Account Closure: When an account is closed, digi999 may retain certain data for the period required under Malaysian law before it is securely deleted.

Once the relevant retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked back to you personally.

7Cookies & Tracking Technologies

Digi999 uses cookies and similar tracking technologies to enhance your experience on our platform, understand how users interact with our services, and keep your login sessions secure.

Types of Cookies We Use

You can control and manage cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the digi999 platform. For guidance on managing cookies in popular browsers, please refer to your browser's help documentation.

8Protection of Children's Data

Digi999 services are intended for adults aged 18 and above only. digi999 does not knowingly collect or process personal data from individuals under the age of 18.

All account registrations go through a strict age verification process. Should we discover that we have inadvertently collected personal data from an underage individual, we will take immediate steps to delete that data and close the account in question.

To Parents & Guardians: If you believe your child under the age of 18 has registered for or used the digi999 platform without your knowledge, please contact us immediately at support@digi999.best. We will investigate and take immediate action, including account closure and deletion of all associated data.

9Your Data Protection Rights

As a digi999 member residing in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA) with respect to your personal data:

How to Exercise Your Rights

To exercise any of the rights listed in the table above, you may:

  1. Submitting a written request by email to support@digi999.best with the subject line "Personal Data Rights Request".
  2. Include your full name, digi999 account email, and details of the right you wish to exercise.
  3. Providing the required identity verification documents to protect your account against unauthorised requests.

Digi999 will acknowledge receipt of your request within 3 business days and endeavour to fulfil it within 21 business days. For complex requests, additional time may be required, and we will notify you accordingly.

Limitations on the Right to Erasure: Your right to request data deletion may be limited in circumstances where digi999 is required to retain that data in order to comply with legal obligations, resolve outstanding disputes, or enforce agreements. In such cases, we will explain why deletion cannot be carried out.

10Cross-Border Personal Data Transfers

As an online platform, some of digi999's operations involve service providers that may store or process data outside Malaysia — for example, international-grade game software providers or global cloud services.

When your personal data is transferred outside Malaysia, digi999 ensures that:

  • The recipient country or region provides an adequate level of data protection, or
  • Appropriate contractual safeguards are in place, such as Standard Contractual Clauses or recognised data transfer mechanisms, to ensure your data is protected to a standard equivalent to that provided under Malaysian law.

Information about the data transfer mechanisms used can be obtained by contacting us at support@digi999.best.

11Amendments to This Privacy Policy

Digi999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements or changes to the services we offer.

When we make material changes to this policy, we will notify you via:

  • Notification emails sent to the address registered on your digi999 account.
  • In-platform notifications on digi999 when you are logged in.
  • The "Last Updated" date at the top of this page will be revised accordingly.

We encourage you to review this Privacy Policy periodically. Continued use of the digi999 platform after any amendments take effect constitutes your acceptance of the revised policy. If you do not agree with the changes made, you have the right to close your digi999 account by contacting our support team.

12Contact Us About Privacy

If you have any questions or concerns, or wish to exercise your rights in relation to this Privacy Policy or how digi999 handles your personal data, please contact us:

  • Privacy Email: support@digi999.best (please include "Privacy Enquiry" in the subject line)
  • Live Chat: Available 24 hours a day, seven days a week on the digi999 platform

Our team is committed to handling all privacy-related enquiries seriously, in strict confidence, and within a reasonable timeframe. We aim to provide an initial response within 3 business days and to resolve requests within 21 business days for standard cases.

Complaints to the Authorities: If you are not satisfied with digi999's response to your privacy concern, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (PDPDP) or the relevant data protection authority in Malaysia.

Your Data Lifecycle at digi999

From the moment you register to the moment you withdraw your winnings — how digi999 handles your data at every stage.

1
Data Collected During Registration

You provide your name, email, Malaysian phone number and date of birth. digi999 stores this information with secure encryption and uses it to create your account and verify that you are an eligible adult to use the platform.

2
Identity Verification (KYC)

For your first withdrawal, or when otherwise required, you will be asked to submit identity verification documents. These documents are stored with strict encryption and are only accessible to our authorised KYC team. Once verification is complete, the documents are not used for any other purpose.

3
Platform Usage & Game Records

Your gaming activity — whether playing slots, Live Casino baccarat, betting on EPL football, or purchasing 4D lottery tickets — is recorded for bonus calculation, dispute resolution, fraud detection, and compliance with statutory reporting requirements.

4
Financial Transactions

Every deposit made via Touch 'n Go eWallet, GrabPay, DuitNow or FPX, as well as all withdrawal transactions, is securely recorded. These records are retained in accordance with Malaysian financial law and used for verification, dispute resolution and mandatory reporting.

5
Long-Term Secure Storage

Data that must be retained for longer periods — such as financial records — is stored in secure archival systems with strict access controls. This data is not used for any purpose other than legal compliance or dispute resolution.

6
Secure Data Deletion

When your data is no longer needed and the legally required retention period has expired, digi999 securely deletes or anonymises it using methods that ensure it cannot be recovered or linked back to you.

FAQs – digi999 Privacy Policy

The most frequently asked questions by Malaysian players about privacy and data protection at digi999.

Absolutely not. digi999 has never and will never sell, rent, or trade members' personal data to any third party for their own marketing or commercial purposes. Your data is only shared with carefully selected and trusted third-party service providers who assist us in operating the platform — such as Malaysian e-wallet payment providers and game software providers — and only the minimum information necessary for those purposes is shared. All data sharing is governed by strict data protection agreements.

You may request access to your personal data by emailing support@digi999.best with the subject line "Personal Data Access Request". Please include your full name and the email address linked to your digi999 account. To protect your privacy, we may require additional identity verification before processing the request. digi999 aims to fulfil valid data access requests within 21 business days, in accordance with Malaysia's PDPA requirements.

Yes, you may request the deletion of your personal data under certain circumstances. However, this right is limited where digi999 is required to retain data in order to comply with Malaysian legal obligations — for example, financial records that must be kept for 7 years under accounting and tax law. Where a deletion request is accepted, we will inform you which data can be deleted immediately and which must be retained temporarily for legal reasons. Submit your request to support@digi999.best.

Yes. digi999 uses 256-bit SSL encryption for all communications and encrypts sensitive data at rest. Importantly, digi999 does not store full credit or debit card numbers in our systems. All transactions are processed through licensed payment providers — Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX. We retain only transaction records (amount, date, status) and not your full payment account details.

You can opt out of marketing emails from digi999 in two simple ways. First, use the "Unsubscribe" link found at the bottom of every marketing email we send. Second, contact the digi999 support team via live chat or email at support@digi999.best and request to be removed from the marketing mailing list. Requests will be processed within 10 business days. Please note that even after opting out, you will continue to receive important transactional emails such as deposit confirmations, withdrawal notifications and critical account updates.

When you close your digi999 account, we will deactivate your public profile and cease all marketing communications immediately. However, certain data must be retained for a specified period in accordance with Malaysian legal requirements — for example, financial and transaction records are kept for 7 years. Data that is no longer required will be deleted or anonymised once the retention period has expired. If you would like more details on what happens to your data after account closure, please contact us at support@digi999.best before closing your account.

Digi999 Policies & Related Information

This Privacy Policy should be read together with the other important documents that form your overall agreement with digi999.

Terms & Conditions

The full rules, rights, and responsibilities governing use of the digi999 platform — from account registration through to withdrawing your winnings.

Responsible Gaming

Self-exclusion tools, responsible betting limit guides, and professional support resources for players who need assistance.

About Us

The digi999 story, our vision for Malaysian players, and our commitment to security, fairness, and transparency across every aspect of the platform.

FAQs

Answers to the most frequently asked questions covering all aspects of the digi999 platform — including privacy and data security.

Your Data Is Safe at digi999 — Join Us Today

Digi999 protects your privacy with 256-bit SSL encryption, compliance with Malaysia's PDPA and a strict no-data-sale policy. Register for free today and enjoy a safe, transparent experience across slots, Live Casino, lottery and Sports Betting.

Register Free Now Log In

For adults aged 18 and above only. Please play responsibly. Privacy Policy applies.

Bahasa Melayu