Privacy Policy GTR99 — Malaysian Player Data Protection

GTR99 values the privacy of every member. This document clearly explains how we collect, use, store, and protect your personal information as a player on our online betting platform in Malaysia.

Updated: 1 January 2026 | Bahasa Melayu (ms-MY) | Version 2.4
Your Privacy Is Protected
  • 256-bit SSL for all data
  • No sale of data to third parties
  • Data access & deletion rights
  • Compliance with Malaysian Law
  • User cookie controls

GTR99's Privacy Commitment — Six Core Principles

Here is how GTR99 ensures your personal data remains secure and is used responsibly.

Full SSL 256-bit Encryption

All data transmitted between your device and GTR99's servers is protected with industry-standard 256-bit SSL encryption. This means your personal information, financial details, and account activity cannot be intercepted or accessed by unauthorized parties at any time.

No Sale of Data to Third Parties

GTR99 has never and will never sell, rent or trade members' personal information to any third party for commercial purposes. Your data is used solely for the purposes explicitly stated in this Privacy Policy and nothing beyond that.

Full Control Over Your Data

As a GTR99 member, you have the right to access, correct, download, and request deletion of your personal data at any time. GTR99 will process all data rights requests within 14 business days of receiving your application.

Secure Data Storage

Your personal data is stored on servers protected by strict access controls, intrusion detection systems and regular backups. Only authorised GTR99 staff with a legitimate work requirement have access to member data, and all such access is regularly audited.

Prompt Data Breach Notification

In the event of a data breach affecting your personal information, GTR99 is committed to notifying you within 72 hours of confirming the breach. We will also take immediate steps to contain the impact and prevent recurrence.

Malaysian Legal Compliance

GTR99's Privacy Policy is built to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related legislation. We regularly review and update our privacy policy in line with developments in data protection law in Malaysia.

Contents

Important Notice: By registering an account or using the GTR99 platform, you agree to the collection and use of your personal information as described in this Privacy Policy. Please read this document carefully. If you do not agree, please discontinue use of the GTR99 platform.

1. Introduction — GTR99's Commitment to Your Privacy

GTR99 ("we", "our platform", "GTR99") is an online betting platform operating for Malaysian players at gtr99.click. We understand that your trust is the foundation of our relationship, and protecting your personal data is our absolute priority.

This Privacy Policy ("Policy") clearly and transparently describes how GTR99 collects, uses, processes, stores and protects the personal information you provide when registering an account, making deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX or other local Malaysian payment methods, playing games on our platform, or interacting with the GTR99 customer support team.

This policy applies to all registered GTR99 members, visitors to gtr99.click, and anyone who interacts with GTR99 services in any capacity. This policy should be read together with GTR99 Terms & Conditions and GTR99 Responsible Gaming Guide.

GTR99 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and all relevant data protection legislation. If you have any questions about how we handle your personal data, please contact our Data Protection Officer at support@gtr99.click.

2. Personal Information GTR99 Collects

GTR99 collects various types of personal information from members to provide a secure, efficient, and personalized service. The types of information we collect include:

2.1 Personal Identity Information

  • Full name as stated on your Malaysian identity card (MyKad)
  • Malaysian Identity Card number (MyKad) — for KYC purposes only
  • Date of birth for age verification (18 years and above)
  • Gender
  • Malaysian citizenship or residency status

2.2 Contact Information

  • Active email address
  • Malaysian mobile phone number
  • Malaysian residential address (for KYC purposes if required)

2.3 Financial & Transaction Information

  • E-wallet account details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow)
  • Bank account details for withdrawals via FPX (Maybank2u, CIMB Clicks and others)
  • Deposit and withdrawal history in Malaysian Ringgit (RM)
  • Betting and gaming activity history

2.4 Technical & Usage Information

  • IP address and general location
  • Your web browser type and device operating system
  • Device information including device ID
  • Login and platform activity logs
  • Cookie data and related tracking technology

2.5 Communication Information

  • Records of communications with the GTR99 customer support team via live chat or email
  • Feedback and complaints submitted to GTR99
  • Your communication preferences and notification settings

Important Note: GTR99 does not directly collect your credit or debit card information. All payments via e-wallet and FPX methods are processed by licensed, regulated third-party payment providers. GTR99 only receives transaction confirmations — not your full card details.

3. How GTR99 Collects Your Information

GTR99 collects personal information through several methods:

  • 3.1Account Registration: Information you provide directly when registering a new GTR99 account.
  • 3.2KYC Process: Identity verification documents you submit when required to meet compliance obligations.
  • 3.3Platform Activity: Information automatically generated when you use the GTR99 platform — including games played, bets placed, and usage patterns.
  • 3.4Financial Transactions: Information collected when you make a deposit or withdrawal via supported payment methods.
  • 3.5Communications: Information you share when contacting GTR99 customer support via live chat, email, or WhatsApp.
  • 3.6Cookies & Tracking Technologies: Data collected automatically through cookies, pixels, and similar tracking technologies while you browse the GTR99 website.
  • 3.7Authorised Third Parties: In certain cases, GTR99 may receive information from licensed third-party identity verification service providers for KYC purposes.

4. How GTR99 Uses Your Information

GTR99 uses the personal information collected for the following purposes, all within the context of providing a safe and responsible online betting platform for Malaysian players:

  • 4.1Account Management: Creating, verifying and managing your GTR99 account, including age verification and the KYC process.
  • 4.2Transaction Processing: Processing deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen local Malaysian payment method.
  • 4.3Service Provision: Gives you access to all GTR99 platform features, including live blackjack, baccarat, Malaysia Super League football betting and e-sports.
  • 4.4Customer Support: Providing assistance and resolving issues reported to the GTR99 support team.
  • 4.5Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and platform security breaches.
  • 4.6Legal Compliance: Meeting the legal and regulatory obligations applicable to GTR99 as a betting platform operator.
  • 4.7Marketing Communications: Sending information about GTR99 promotions, bonuses, and new offers — only where you have given your consent, and subject to your right to withdraw that consent at any time.
  • 4.8Platform Improvements: Analyzes aggregated usage patterns (without identifying individuals) to improve the GTR99 user experience.
  • 4.9Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling and providing appropriate assistance to members who need it.

5. Sharing Information with Third Parties

GTR99 does not sell, rent, or trade members' personal data to any third party for their own commercial purposes. However, in the following limited circumstances, GTR99 may share your personal data:

  • 5.1Payment Service Providers: GTR99 shares the necessary transaction information with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and FPX processors (Maybank2u, CIMB Clicks) to process your deposits and withdrawals. These providers are bound by strict confidentiality and data protection obligations.
  • 5.2Game Providers: GTR99 shares the necessary game session data with licensed game providers such as Evolution Gaming and Pragmatic Play to ensure smooth operation of Live Casino and other games.
  • 5.3Identity Verification Services: GTR99 may engage licensed third-party KYC services to verify member identities in order to meet legal compliance requirements.
  • 5.4Legal Requirements: GTR99 may disclose personal data if required by law, court order, or a directive from a competent authority in Malaysia.
  • 5.5Business Transfer: In the event of a GTR99 merger, acquisition, or asset sale, members' personal data may be transferred to the successor entity, subject to notice being given to members and the continuation of applicable protections.

In all the above situations, GTR99 ensures that any recipient of your data is bound by data protection obligations that are equivalent to or stricter than the standards we uphold.

6. GTR99 Data Security

GTR99 continually invests in security infrastructure to ensure members' personal data remains protected at all times. Our technical and organisational security measures include:

  • 256-bit SSL/TLS encryption for all data in transit between your device and GTR99 servers
  • Sensitive data encrypted at rest using the latest industry standards
  • Role-based access controls — only authorised staff may access members' personal data
  • Two-factor authentication (2FA) for staff access to GTR99's internal systems
  • 24/7 intrusion detection and threat monitoring system
  • Periodic security audits by independent third-party security assessors
  • A comprehensive incident response plan to address data breaches swiftly
  • Mandatory data protection training for all GTR99 staff who handle personal data

While GTR99 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. You also play an important role in keeping your account safe — ensure your GTR99 password is strong and unique, and never share your login credentials with anyone.

7. Data Retention Period

GTR99 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by law:

  • 7.1Active Account Data: For as long as your GTR99 account remains active, your personal data will be retained to enable the continued provision of our services.
  • 7.2Data After Account Closure: After an account is closed, GTR99 will retain certain records for a minimum of 7 years to fulfil legal obligations, including financial record-keeping and anti-money laundering requirements.
  • 7.3Communications Data: Customer support communication records are retained for 3 years after the last interaction for service quality and dispute resolution purposes.
  • 7.4Technical Log Data: Technical logs and cookie data are retained for between 90 days and 2 years, depending on the data type and operational requirements.

Once the specified retention period has expired, GTR99 will delete or anonymize your personal data in a secure and irreversible manner.

8. Your Personal Data Rights

As a GTR99 member residing in Malaysia, you have the following rights regarding the personal data we hold about you, in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia:

Right of Access

You have the right to request a copy of the personal data GTR99 holds about you. We will process your request within 14 business days.

Right to Rectification

If your personal data is inaccurate or out of date, you have the right to request a correction. Update your profile details via account settings or contact our support team.

Right to Erasure

You may request the deletion of your personal data under certain circumstances. Some data may need to be retained to meet legal requirements.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time via your GTR99 account settings.

Data Portability Right

You may request a copy of your personal data in a structured, machine-readable format for transfer to another service.

Right to Restrict Processing

Under certain circumstances, you may request that GTR99 restrict how we process your personal data while a dispute is being resolved.

To exercise any of the above rights, submit a written request to support@gtr99.click with the subject line "Personal Data Rights Request". GTR99 will verify your identity before processing the request and will respond within 14 business days.

9. GTR99 Cookie Policy

GTR99 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

Mandatory
Essential Cookies

Required for core GTR99 platform functions — login, play sessions and security. Cannot be disabled.

Performance
Analytics Cookies

Helping us understand how players use GTR99 in order to improve the platform. Data is collected in aggregate form and does not identify individuals.

Function
Preference Cookies

Saves your preferences such as language, display settings, and game preferences to deliver a more personalized experience.

Optional
Marketing Cookies

Used to display relevant GTR99 promotions. You can disable these cookies through your web browser settings without affecting the core functionality of the platform.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the GTR99 platform. For guidance on managing cookies in popular web browsers, please refer to your browser's official documentation.

10. Transfer of Data Outside Malaysia

In the context of operating an online betting platform, some of your personal data may be processed or stored on servers located outside Malaysia — primarily by international game providers such as Evolution Gaming and Pragmatic Play, which supply Live Casino services to the GTR99 platform.

In all such international data transfers, GTR99 ensures:

  • The recipient country maintains a level of data protection comparable to Malaysia
  • A legally binding data transfer agreement has been signed with the data recipient
  • Appropriate technical safeguards are applied during data transfers
  • Data transferred is kept to the minimum necessary for service purposes

11. Children's Privacy

The GTR99 platform is intended strictly for individuals aged 18 and above. GTR99 does not knowingly collect personal data from individuals under the age of 18. If we discover that a child's personal data has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question.

If you believe a minor has registered a GTR99 account or that we have collected their data, please contact us immediately at support@gtr99.click and we will treat the matter as a priority.

12. Third-Party Links and Services

The GTR99 platform may contain references to third-party services used in the course of our operations, such as payment providers (Touch 'n Go, GrabPay, Maybank2u) and game providers. GTR99's Privacy Policy does not apply to those third-party websites or services. We encourage you to read the privacy policies of those providers separately to understand how they handle your data when you interact with their services.

13. Amendments to the GTR99 Privacy Policy

GTR99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, developments in Malaysian data protection law, or changes to the services we offer. For material amendments — meaning changes that significantly affect your privacy rights — GTR99 will notify you via your registered email and/or in-platform notification at least 14 days before the amendment takes effect.

We recommend reviewing this Privacy Policy page periodically. The "Updated" date at the top of this document reflects the date of the most recent revision. Your continued use of the GTR99 platform after any amendments take effect will be considered acceptance of the revised terms.

14. Contact GTR99 About Your Privacy

If you have any questions, concerns, or complaints regarding how GTR99 handles your personal data, please contact GTR99's Data Protection Officer:

  • Email: support@gtr99.click (include "Privacy Policy" in the email subject line)
  • Live Chat: Available 24/7 within the GTR99 platform — response in under 3 minutes
  • Email Response Time: Within 3 business days for privacy-related enquiries

For privacy complaints that cannot be resolved internally, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia in accordance with the Personal Data Protection Act 2010 (PDPA).

Effective Date: This Privacy Policy is effective from 1 January 2026 and supersedes all previous versions. This is Version 2.4. For any enquiries regarding earlier versions, please contact the GTR99 support team.

GTR99 Data Collection & Usage Summary

A quick-reference table covering the types of data collected, their purposes, and the legal basis for processing.

Data Type Purpose of Use Retention Period
Name & Identity Information Account registration, KYC identity verification Duration of active account + 7 years
Malaysian Phone Number Account verification, security communications Throughout active account + 2 years
Email Address Login, notifications, customer support Duration of active account + 3 years
Financial Transaction Data (MYR) Deposit/withdrawal processing, audit records 7 years (legal requirement)
Game History Dispute resolution, responsible gambling 3 years from the date of play
Technical Log & IP Data Security & fraud prevention 90 days to 2 years
Communication Records Customer support, service quality 3 years after last interaction
Cookie & Analytics Data Platform improvements, user experience 90 days to 1 year
KYC Documents (MyKad) Identity verification, PDPA compliance 7 years (legal requirement)

FAQ — GTR99 Privacy Policy

Answers to the most frequently asked questions from GTR99 members regarding their privacy and data protection.

No, GTR99 never sells, rents, or trades members' personal data to third parties for their own commercial purposes. Your data is shared only with service providers directly involved in delivering the GTR99 platform — such as payment providers (Touch 'n Go, GrabPay, FPX) and game providers — and only to the extent necessary for those service purposes. All such third parties are bound by strict confidentiality agreements and data protection obligations that meet GTR99's standards.

To exercise your right of access or erasure, email support@gtr99.click with the subject line "Personal Data Rights Request" and specify the type of request (access, correction, deletion, or data portability). GTR99 will first verify your identity through a secure verification process before proceeding. We will respond within 14 business days. Please note that the right to erasure may be limited in cases where GTR99 is legally required to retain certain records, such as financial transaction records for 7 years.

When you close your GTR99 account, we will deactivate your profile and cease using your data for marketing and platform communications. However, GTR99 is legally required to retain certain records — particularly financial transaction records and KYC data — for a minimum period prescribed by Malaysian law, typically 7 years. This data is stored securely and accessible only for legal compliance purposes, dispute resolution, or upon request by lawful authorities. Once the mandatory retention period has ended, your data will be permanently deleted or anonymised.

Yes, GTR99 uses SSL 256-bit encryption for all data transmitted between your device and our servers. Your phone number is used solely for account verification and security communications. It is important to note that GTR99 does not directly store your full bank card or e-wallet details — all transactions via DuitNow, Touch 'n Go, GrabPay, FPX Maybank2u and CIMB Clicks are processed by payment providers that are licensed and regulated by Bank Negara Malaysia. GTR99 only receives confirmation that a transaction was successful, not your full account details. The GTR99 team will never contact you to ask for your password or PIN — if you receive any such communication, please report it to GTR99 support immediately.

Yes, you may withdraw your consent to receive marketing communications from GTR99 at any time. There are several ways to do so: (1) Click the "Unsubscribe" link found at the bottom of any GTR99 promotional email; (2) Update your communication preferences in your GTR99 account settings; (3) Contact the GTR99 support team via live chat or email and request to be removed from the marketing list. Please note that withdrawing marketing consent does not affect important transactional communications such as deposit, withdrawal, or account security notifications, which we still need to send you.

GTR99 has a comprehensive Incident Response Plan to address data breaches swiftly and effectively. In the event of a data breach affecting your personal information, GTR99 is committed to: (1) detecting and containing the breach as quickly as possible; (2) notifying affected members within 72 hours of confirming the breach via email and in-platform notifications; (3) reporting to the relevant authorities in accordance with Malaysian legal requirements; (4) taking remediation and preventive measures to avoid recurrence; (5) providing ongoing updates to affected members on the situation and steps being taken. We will also direct you to additional protective measures you can take to safeguard yourself.
SSL 256-bit
No Data Sales
PDPA Compliance
Data Confidentiality
24/7 Support
Full Data Rights

Related GTR99 Policy Documents

Also read the other policy documents that complement this GTR99 Privacy Policy for a complete understanding.

Terms & Conditions

The full terms of using the GTR99 platform, including rules on accounts, deposits, withdrawals, and bonuses.

Read Terms & Conditions
Responsible Gaming

Self-control tools, deposit limits, self-exclusion and support resources for GTR99 player wellbeing.

Read the Guide
About Us

About GTR99 — Malaysia's trusted online betting platform since 2018, with over 380,000 members.

About GTR99

Your Data Is Safe at GTR99 — Register With Confidence!

With a transparent Privacy Policy and 256-bit SSL protection, you can play at GTR99 with complete confidence. Register for free today, claim a welcome bonus of up to RM 1,000, and join over 380,000 Malaysian players who have trusted GTR99 since 2018.

Register Free — Safe & Secure Log In

Have Questions About Your Data Privacy at GTR99?

GTR99's Data Protection Officer is available to help you understand your rights and how we protect your personal information. Contact us 24/7 in Bahasa Malaysia.

Live Chat
Response < 3 minutes
Privacy Email
support@gtr99.click
Register with GTR99 — Free Log In

By registering, you agree to our Terms & Conditions and GTR99's Privacy Policy. Minimum age 18. Gambling can be addictive — please play responsibly.

Bahasa Melayu