Privacy Policy

This Privacy Policy ("Policy") sets out how digi999 ("we", "us", "our", "Platform") collects, uses, stores, shares, and protects the personal data of individuals ("User", "Player", "you") who access or use the online gaming and sports betting services available at digi999.cam (the "Website"), including any mobile-optimised version of the platform.

digi999 is committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection legislation. We collect only the personal data that is genuinely necessary for the operation of your account, the processing of financial transactions, the fulfilment of regulatory obligations, and the delivery of a high-quality gaming experience to players across Malaysia — including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond.

By registering an account with digi999 or otherwise using our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree to the terms of this Policy, you should not use the digi999 platform.

For the purposes of this Privacy Policy, the following terms are defined as follows:

• "Personal Data" means any information relating to an identified or identifiable natural person — that is, information that can be used, directly or indirectly, to identify you as an individual.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means digi999, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of digi999 under written agreement.
• "Cookies" means small text files stored on your device by your browser when you visit a website, used to retain session information and user preferences.
• "KYC" means Know Your Customer — the identity and age verification process required before a Player may make withdrawals from their digi999 Account.
• "Account" means the registered player account held with digi999, as defined in our Terms & Conditions.

digi999 collects Personal Data across several categories, depending on how you interact with the platform. The table below summarises the categories of data we collect and examples of specific data points within each category:

We do not collect or process special category data (e.g., health information, racial or ethnic origin, political opinions, religious beliefs, or biometric data) unless this is strictly required for regulatory compliance and you have provided explicit consent.

digi999 collects Personal Data through the following channels:

4.1 Directly from You

The majority of Personal Data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in promotions, or update your account settings.

4.2 Automatically Through Platform Use

When you access and use the digi999 platform, we automatically collect certain technical and behavioural data, including your IP address, browser type, device identifiers, pages visited, time spent on pages, and in-game activity. This data is collected via server logs, cookies, and similar tracking technologies.

4.3 From Third-Party Payment Processors

When you use supported Malaysian payment methods — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or USDT TRC20 — your payment provider may transmit transactional and verification data to us as necessary to process your deposit or withdrawal.

4.4 From Identity Verification Services

During the KYC verification process, we may engage accredited third-party identity verification providers who cross-reference the documents you submit against official government databases. The results of such checks are transmitted to digi999 as a verification outcome.

digi999 processes your Personal Data for the following purposes. We do not process your data for any purpose incompatible with those listed below without obtaining your prior consent.

• Account Management: Creating, maintaining, and administering your digi999 Account, including processing your registration, authentication of login sessions, and management of your account settings and preferences.
• Transaction Processing: Processing deposits, withdrawals, and bonus credits in Malaysian Ringgit (MYR) via your chosen payment method, and maintaining accurate transaction records.
• Identity & Age Verification (KYC): Verifying your identity and confirming that you meet the minimum age requirement of 21 years, as required for regulated gaming operations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, money laundering, account takeover attempts, and other illegal activities that could harm you or the platform.
• Regulatory Compliance: Fulfilling obligations under applicable anti-money laundering (AML) regulations, data protection laws, and gaming regulatory requirements, including the maintenance of mandatory records.
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance through our live chat and email support channels.
• Platform Improvement: Analysing aggregated, anonymised gameplay and navigation data to improve the functionality, performance, and user experience of the digi999 platform.
• Responsible Gambling: Monitoring gaming patterns to identify indicators of problem gambling behaviour, enabling us to proactively offer support resources or enforce responsible gambling controls.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to your registered email address or mobile number, where you have opted in to receive such communications. You may opt out at any time.
• Bonus & Loyalty Programme Administration: Tracking your VIP tier progression, birthday bonus eligibility, referral reward credits, and cashback calculations.

digi999 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary for the performance of the contract between you and digi999 — including account management, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable law, including AML regulations, KYC requirements, and data retention obligations imposed by regulatory authorities.
• Legitimate Interests: Processing carried out in pursuance of digi999's legitimate business interests, where those interests are not overridden by your rights — including fraud prevention, platform security, and internal analytics.
• Consent: Processing for which you have provided specific, informed, and freely given consent — primarily marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

digi999 does not sell, rent, or commercially trade your Personal Data to any third party. We share your data only in the following circumstances and only to the extent necessary for the specified purpose:

• Payment Service Providers: We share transaction data with our Malaysian payment partners — including e-wallet providers (Touch 'n Go, Boost, GrabPay), DuitNow/FPX operators, and banking partners (Maybank, CIMB, Public Bank, Hong Leong, RHB) — solely to process your deposits and withdrawals.
• Identity Verification Providers: KYC data may be shared with accredited third-party identity verification services engaged by digi999 to confirm your age and identity. These providers are contractually bound to process data only for this specific purpose.
• Game Software Providers: Certain anonymised gameplay data may be shared with our licensed game studio partners for the purpose of game integrity verification and RTP auditing.
• Regulatory & Law Enforcement Authorities: We will disclose Personal Data to competent government authorities, regulators, or law enforcement agencies where required to do so by law, court order, or binding regulatory direction.
• Professional Advisers: Legal, audit, and compliance advisers engaged by digi999 may have access to Personal Data on a strictly confidential, need-to-know basis.
• Business Transfers: In the event of a merger, acquisition, or transfer of the digi999 business, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.

digi999 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations.

• Active Accounts: Personal Data associated with an active Account is retained for the duration of the account relationship plus a minimum period as required by applicable AML and gaming regulations following account closure.
• Transaction Records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of five (5) years from the date of each transaction in accordance with applicable financial record-keeping obligations.
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Support Communications: Live chat transcripts and email correspondence are retained for up to two (2) years from the date of the interaction, after which they are securely deleted.
• Marketing Data: Marketing preferences and opt-in records are retained until you withdraw your consent, after which your contact details are removed from active marketing lists within thirty (30) days.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data disposal procedures.

digi999 implements industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes, but is not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the digi999 platform.
• Encryption of sensitive data at rest within our secure data infrastructure.
• Role-based access controls ensuring that only authorised personnel with a genuine operational need may access specific categories of Personal Data.
• Regular penetration testing and vulnerability assessments conducted by qualified cybersecurity professionals.
• Monitoring of platform activity for indicators of unauthorised access or data exfiltration attempts.
• Staff training on data protection obligations and secure data handling procedures.

Notwithstanding the above measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your account credentials and for notifying digi999 promptly of any suspected unauthorised access to your Account.

digi999 uses cookies and similar technologies (such as local storage and session identifiers) to operate and improve the platform experience. Cookies are small text files stored on your device by your web browser when you visit the Website.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of the platform. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Store your platform preferences such as language settings, preferred game categories, and display options to enhance your experience across sessions.
• Analytical Cookies: Collect anonymised data on how Users navigate the platform — including pages visited, time spent, and errors encountered — to help us identify areas for improvement.
• Security Cookies: Support fraud detection and prevention by monitoring for anomalous login patterns, multiple account access from a single device, and other risk indicators.

You may control cookie behaviour through your browser settings. Please note that disabling certain cookies may affect the functionality of the digi999 platform and your gaming experience.

As a data subject, you have the following rights with respect to the Personal Data that digi999 holds about you. To exercise any of these rights, please contact our data team using the contact details in Section 15.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you (a "Subject Access Request"). We will respond within a reasonable period and provide the information in a clear, accessible format.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our right to retain data as required by applicable law (e.g., mandatory AML retention periods).
• Right to Restrict Processing: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while you dispute the accuracy of data we hold, or while we assess the merits of a deletion request.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of digi999's legitimate interests, including profiling for responsible gambling monitoring. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — including consent to receive marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

digi999 is strictly an adult gaming platform intended for individuals aged 21 years and above only. We do not knowingly collect or process Personal Data relating to individuals under the age of 21.

Age verification is a mandatory part of the digi999 onboarding and KYC process. Where we have reasonable grounds to believe that an Account belongs to a person under the age of 21, that Account will be immediately suspended, any gameplay will be voided, and the matter will be investigated in accordance with our child protection procedures.

Parents and guardians who believe that a minor has accessed the digi999 platform or provided personal information without their consent are encouraged to contact us immediately at [email protected] so that we can take prompt corrective action.

The operation of the digi999 platform may, in certain circumstances, require the transfer of your Personal Data to servers or processors located outside of Malaysia. Where such international transfers occur, digi999 ensures that appropriate safeguards are in place to maintain the security and integrity of your data.

Transfers to third-party processors — including identity verification services, game software providers, and cloud infrastructure partners — are governed by written data processing agreements that impose obligations equivalent to those under applicable data protection standards.

digi999 does not transfer Personal Data to jurisdictions that do not provide an adequate level of data protection unless appropriate contractual safeguards are in place.

digi999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of our platform. The date of the most recent revision is displayed at the top of this page.

Where amendments are material — meaning they significantly change how we collect, use, or share your Personal Data — we will notify you by posting a prominent notice on the Website or by sending a notification to your registered email address prior to the changes taking effect.

Your continued use of the digi999 platform following the effective date of any amendment to this Policy shall constitute your acceptance of the revised terms. If you do not agree to the updated Policy, you should cease using the platform and may close your Account in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which digi999 handles your Personal Data, please contact our team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the digi999 platform. Our support team can assist with general privacy questions and can escalate formal data rights requests to the appropriate team.
• Email: [email protected] — for formal data rights requests, please use the subject line "Data Rights Request". All formal requests will receive an acknowledgement within 5 business days.

For formal Subject Access Requests, Right to Erasure requests, or objections to processing, we will require identity verification before proceeding. Please include your full registered name and account username in any formal correspondence to allow us to locate your records accurately.

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions of the digi999 Privacy Policy.