Six core principles that guide GTR99 in keeping your personal data safe and secure at all times.
Robust Data Encryption
All data transmitted between your device and gtr99 servers is protected using 256-bit SSL encryption — the same security standard used by leading banking institutions in Malaysia.
No Data Sales
Gtr99 has never and will never sell, rent, or disclose your personal data to any third party for marketing purposes without your explicit prior consent.
You're in Control
You have the full right to access, amend, request a copy of, or delete your personal data at any time via your account settings or by contacting our support team.
Secure Data Storage
Your data is stored on servers protected by multi-layered firewalls, intrusion detection systems, and strict access controls. Only authorised personnel are permitted to access sensitive data.
PDPA Compliance
GTR99 operates in accordance with principles aligned with Malaysia's Personal Data Protection Act (PDPA). We respect users' privacy rights and ensure that data processing is carried out lawfully and responsibly.
Communication Preferences
You can control the types of marketing communications you receive from GTR99 at any time. Unsubscribe easily via the unsubscribe link in every email or by contacting our support team.
1 Information We Collect
GTR99 collects your personal data only when it is necessary to deliver quality services, comply with regulatory requirements, and ensure platform security. We do not collect excessive or irrelevant information.
1.1 Information You Provide Directly
When you register or use the GTR99 platform, we collect the following information:
- Full name as stated on your identity card or passport
- Date of birth for age verification (18 years and above)
- Active email address and mobile phone number
- Current residential address in Malaysia
- Identity card number (MyKad) or passport number
- Bank account or e-wallet details for deposit and withdrawal purposes
- Any additional information you provide to our customer support team
1.2 Information Collected Automatically
While you are using the gtr99 platform, our systems automatically record technical information including:
- IP address and approximate geographic location (state or country level)
- Web browser type and version used
- Device type, operating system, and screen resolution
- Pages visited, browsing duration, and navigation patterns within the platform
- Login session data including date, time, and session duration
- Deposit, withdrawal, and wagering transaction records
1.3 Information from Third-Party Sources
In certain contexts, GTR99 may receive your information from legitimate sources such as:
- Payment processors that assist in verifying your financial transactions
- Identity verification agencies that assist with the KYC process
- Problem gambling blacklist database (for player protection purposes)
2 How We Use Your Data
GTR99 uses collected personal data on valid legal grounds, including contractual performance, legal obligations, legitimate interests, and user consent where applicable.
| Purpose of Use | Data Used | Legal Basis |
|---|---|---|
| Registration & Account Verification | Name, email, phone number, date of birth | Contract Performance |
| KYC Verification | MyKad/passport, bank/e-wallet details | Legal obligation |
| Payment Processing | Bank account information, transaction records | Contract Performance |
| Security & Fraud Prevention | IP address, login patterns, activity records | Legitimate interests |
| Customer Support | All relevant account information | Contract Performance |
| Marketing Communications | Email, phone number | User consent |
| Service Improvement | Usage data, user feedback | Legitimate interests |
Gtr99 will not use your personal data for any purposes not stated in this Privacy Policy without first obtaining your consent. Should there be any change to the purpose of processing, you will be promptly informed.
3 Information Sharing
GTR99 values your privacy and practises the principle of minimum disclosure. We only share your information in limited circumstances and under strict controls.
3.1 Trusted Service Providers
GTR99 works with selected third-party service providers to support platform operations, including payment processors, gaming technology providers, and identity verification services. All partners are bound by confidentiality agreements and are only permitted to process your data in accordance with GTR99's instructions.
3.2 Legal Obligations
Gtr99 may be required to disclose your information to competent authorities when mandated by law, court order, or a legitimate request from a lawful law enforcement agency. In such situations, we will endeavour to notify you in advance where permitted by law.
3.3 Platform Protection
To maintain the overall security of the platform ecosystem, gtr99 may share limited information with recognised cybersecurity providers or fraud prevention databases, particularly where there is evidence of fraudulent activity or financial crime.
4 Data Security
GTR99 continuously invests in digital security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction.
4.1 Technical Measures
- 256-bit SSL/TLS Encryption — all communications between your device and our servers are fully encrypted.
- Multi-Layer Firewall — protects server infrastructure from external attacks.
- Intrusion Detection System (IDS/IPS) — monitors network activity in real time to detect threats.
- Two-Factor Authentication (2FA) — available for user accounts as an additional layer of security.
- Regular Data Backups — data is automatically backed up and stored in a secure, separate location.
4.2 Organisational Measures
- Only staff with a legitimate business need are permitted to access users' personal data.
- All staff undergo regular data security training and sign confidentiality agreements.
- Internal and external security assessments are conducted regularly to identify vulnerabilities.
In the Event of a Security Incident: Should gtr99 detect any data breach that may affect your information, we are committed to notifying you within a reasonable timeframe and taking remedial action immediately. You are encouraged to contact our support team right away if you suspect any suspicious activity on your account.
5 Cookies & Tracking Technologies
GTR99 uses cookies and similar tracking technologies to enhance user experience, ensure platform security, and understand how users interact with our services.
5.1 Types of Cookies We Use
- Essential Cookies — required for core platform functions such as login session authentication and security. These cookies cannot be disabled.
- Performance Cookies — collects information on how users interact with the platform (e.g., most frequently visited pages) for improvement purposes. No personally identifiable information is collected.
- Functional Cookies — remembers your preferences such as language, display settings, and login details for your convenience.
- Analytics Cookies — helps us understand aggregate usage patterns to improve platform content and features.
5.2 Managing Cookies
You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the GTR99 platform. Detailed instructions for managing cookies are available in your browser's help documentation.
6 Data Retention
Gtr99 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable laws and regulations.
- Active Account Data — retained for as long as your account is active and for 5 years after account closure for legal compliance purposes.
- Financial Transaction Records — retained for a minimum of 7 years as required by applicable financial and tax regulations.
- Support Communication Logs — retained for 3 years for dispute resolution and quality assurance purposes.
- Session and Activity Data — technical logs are retained for 90 days before being automatically deleted.
- KYC Documents — retained for 5 years from the date of verification or account closure, whichever is later.
Once the defined retention period has expired, your data will be securely deleted or anonymised so that it can no longer be personally associated with you.
7 Your Rights
As a gtr99 user, you hold the following rights regarding your personal data. gtr99 is committed to facilitating the exercise of these rights within a reasonable timeframe.
Right of Access
You may request a copy of the personal data we hold about you at any time.
Right to Rectification
You have the right to request correction of any inaccurate or incomplete data.
Right to Erasure
You may request deletion of your personal data, subject to applicable legal requirements.
Right to Restriction of Processing
You have the right to request that we restrict the processing of your data under certain circumstances.
Right to Data Portability
You may request your data in a machine-readable format for transfer.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time.
To exercise any of the above rights, please contact the gtr99 customer support team via Live Chat, available 24/7 within the platform. We will process your request within 14 business days. For more complex cases, this period may be extended to 30 days and you will be notified accordingly.
8 International Data Transfers
In the course of its operations, GTR99 may transfer your personal data to servers or service providers located outside Malaysia. All such transfers are carried out with adequate safeguards to ensure your data remains secure.
The safeguards we apply to international data transfers include:
- Legally binding data processing agreements with all overseas data recipients
- Use of internationally recognised standard contractual clauses
- Security assessment prior to engaging any new service provider outside Malaysia
- Ongoing monitoring of service providers' compliance with established security standards
9 Children's Privacy
The gtr99 platform is strictly for individuals who are of age 18 years and above. GTR99 does not intentionally collect or process personal data from any individual under the age of 18.
Should gtr99 determine that a child's personal data has been collected without proper age verification, that data will be deleted immediately and the associated account closed without delay. Parents or guardians who suspect a child under their care has registered on the gtr99 platform should contact our support team promptly.
10 Privacy Policy Amendments
GTR99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data handling practices, current legal requirements, or service improvements. The "Last Updated" date at the top of this document will be updated each time an amendment is made.
For significant and material amendments, gtr99 will notify you via your registered email or in-platform notification at least 7 days before the changes take effect. Continued use of the gtr99 platform after the effective date of any amendment constitutes your acceptance of the updated policy.
You are advised to review this page periodically to stay informed about how we protect your privacy.
11 Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the gtr99 data protection team through the following channels:
Data Protection Email: [email protected]
Live Chat Support: Available 24/7 directly within the gtr99 platform
Response Time: We will respond to privacy-related enquiries within 3 working days and resolve data rights requests within 14 working days.
GTR99 takes every privacy-related complaint seriously. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.
Answers to the most frequently asked questions about privacy and data protection at gtr99.