SC99 treats the privacy of members' data as a non-negotiable responsibility. This Privacy Policy transparently explains the types of data we collect, how we use it, and your full rights as an SC99 member regarding your personal data.
SC99's Privacy Policy is built on six core commitments that ensure your personal data remains under the best possible protection at all times.
All data transmitted between your device and SC99's servers is encrypted using TLS 1.3 with 256-bit SSL key length — the same technology used by Maybank and CIMB to secure their online banking transactions.
Sc99 has never sold, rented, or traded members' personal data to any third party for marketing purposes or commercial gain, and never will. Your data belongs to you — it is not a sc99 business asset.
SC99 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). The collection, processing, and storage of SC99 members' personal data adhere to all provisions set out under applicable Malaysian law.
You have the right to request a copy of the personal data sc99 holds about you, ask for corrections if anything is inaccurate, or request deletion of your data subject to legal compliance requirements. sc99 will process these requests within 14 business days.
Your payment information — whether via Touch 'n Go, GrabPay, DuitNow, or Maybank2u — is never stored in full within SC99's systems. We use payment tokenisation to ensure your card or account details remain protected even in the event of a security incident.
When SC99 makes material changes to this Privacy Policy, you will be notified via in-platform notifications and email before the changes take effect. You will never be caught off guard by privacy policy changes that affect how your data is handled.
This Privacy Policy explains how sc99 (sc99.run) collects, uses, stores, and protects the personal data of its members in Malaysia. By using the sc99 platform, you agree to the practices described in this document. If you have any questions, please contact us at support@sc99.run.
SC99 collects members' personal data directly (information you provide) and indirectly (information gathered automatically during platform use). Below is a full breakdown of the types of data we collect and their purposes:
| Data Category | Specific Data Types | How We Collect It |
|---|---|---|
| Personal Identity | Full name, Malaysian phone number, email address, MyKad number (for KYC) | Provided during registration |
| Financial Information | Payment methods (Touch 'n Go, GrabPay, DuitNow), deposit and withdrawal records, account balance | Auto-generated during transactions |
| Platform Activity | Game records, bets placed, promotions claimed, login sessions | Generated automatically during use |
| Technical Data | IP address, device type, operating system, web browser, device ID | Collected automatically |
| Communications | Records of customer support conversations, emails, and complaints submitted | Provided by you during communications |
| Verification Data | MyKad copy, verification selfie (for large-withdrawal KYC) | Provided upon request |
Sc99 uses members' personal data only for legitimate, clearly stated purposes. We do not use your data for anything unrelated to the operation of the sc99 platform without your explicit consent. The following is a complete list of the purposes for which your data is used:
Sc99 operates on a "minimum purpose" basis — we only collect and use data that is genuinely necessary for the stated purpose. Once that purpose has been fulfilled, the data is either deleted or anonymised in accordance with sc99's data retention policy.
SC99 does not sell members' personal data. Data is only shared with third parties in the limited situations set out below, and in every case, the relevant third party is required to comply with data protection standards that are equivalent to or stricter than those of SC99.
All third parties SC99 works with are bound by strict data processing agreements. SC99 conducts regular due diligence on all data processing partners to ensure their data protection standards remain aligned with SC99's commitment to its members.
SC99 invests seriously in security infrastructure to ensure members' personal data is always protected against unauthorised access, data breaches, and misuse. The technical and organisational security measures we have implemented are as follows:
SC99 member data is stored on servers located in data centres with stringent physical and digital security certifications. In the event of a material security incident affecting members' personal data, SC99 will notify affected members within a reasonable timeframe as required under Malaysia's PDPA.
As an SC99 member and data subject under Malaysia's PDPA 2010, you have the following rights regarding the personal data SC99 holds. To exercise any of these rights, please contact us at support@sc99.run and clearly state your request.
You have the right to request a copy of the personal data sc99 holds about you. sc99 will provide this copy in a readable format within 14 business days of receiving a valid request.
If any personal data SC99 holds about you is inaccurate or incomplete, you have the right to request a correction. SC99 will update the relevant data within 7 working days of verification.
You may request that sc99 delete your personal data under certain circumstances — for example, when the data is no longer needed for the purpose it was originally collected and there is no legal obligation requiring sc99 to retain it.
Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the validity of any processing that took place before it.
You have the right to receive the personal data you have provided to SC99 in a structured, commonly used, and machine-readable format, for transfer to another operator upon your request.
You may object at any time to the processing of your personal data for direct marketing purposes. SC99 will stop all marketing communications immediately upon your request, either via the unsubscribe link in our emails or by contacting SC99 support directly.
SC99 uses cookies and similar tracking technologies to keep the platform running properly, improve the user experience, and analyse usage patterns. Below is a full breakdown of the types of cookies used:
You can manage cookie settings through your web browser. Most browsers — Chrome, Firefox, Safari, Edge — provide options to view, manage, and delete stored cookies. Please refer to your browser's help section for specific instructions. Note that disabling essential cookies may affect the functionality of the SC99 platform.
SC99 does not retain members' personal data longer than necessary for the stated purposes, unless a longer retention period is required under Malaysian law. The following is SC99's data retention policy:
Once the retention period expires, sc99 will delete or anonymise the relevant data in a secure and permanent manner — ensuring it cannot be recovered or linked back to your identity in the future.
If you have any questions, concerns, or requests regarding SC99's Privacy Policy or how we handle your personal data, please contact the SC99 data protection team through the following channels:
If you are not satisfied with SC99's response to your privacy enquiry or complaint, you have the right to escalate the matter to the Department of Personal Data Protection Malaysia or the relevant regulatory authority under applicable Malaysian law.
Sc99 reserves the right to update this Privacy Policy at any time to reflect changes in privacy practices, products, legal requirements, or other relevant developments. Material changes will be communicated to members via in-platform notifications or email before they take effect. The "Updated" date at the top of this document will always reflect the latest version of the sc99 Privacy Policy.
The most frequently asked questions from Malaysian members about how SC99 protects and manages their personal data.
In today's digital age, data privacy is no longer something that can be taken lightly. When you register with any online platform — whether a banking platform, e-commerce site, or an entertainment platform such as SC99 — you are entrusting some of your personal information to that platform. The reasonable questions to ask are: what happens to that information? Who can access it? Is it secure? SC99 believes you deserve clear and honest answers to all of these questions.
Privacy Policy SC99 built on one core principle: your personal data belongs to you, not to SC99 as a business asset. We collect the data needed to operate the platform safely and efficiently, use it only for purposes you have consented to, and protect it with the best security technology available. This is not merely a promise — it is how SC99 has operated since the platform launched in 2018.
One concern that many Malaysian users often have is around payment information. When you make a deposit at SC99 using Touch 'n Go eWallet, GrabPay, DuitNow, or any other local payment method, your account or digital wallet details are never stored in full within SC99's systems. The tokenisation technology SC99 employs ensures that payments are processed securely without SC99 needing to retain any sensitive information. This means that even in the most unforeseen scenario, your payment information remains unexposed to risk.
With respect to Malaysia's Personal Data Protection Act 2010 (PDPA), SC99 takes an approach that goes beyond mere minimum legal compliance. The PDPA sets a baseline standard for data protection in Malaysia, and SC99 treats that standard as a starting point, not an upper limit. SC99's data protection practices incorporate concepts such as "privacy by design" — where privacy considerations are built into every platform feature from the design stage, rather than added as an afterthought.
Your rights as a member SC99 regarding personal data are real and enforceable. You may request a copy of the data SC99 holds about you, request a correction if there are errors, request deletion of data that is no longer needed, and object to the processing of your data for specific purposes such as direct marketing. SC99 processes these requests within 14 business days at no charge. The process is designed to be straightforward and accessible — no need to navigate complex legal procedures.
Use of cookies on the platform SC99 is limited to technical needs and user experience. SC99 does not use third-party tracking cookies that follow your activity across the internet for targeted advertising. The analytics cookies used are solely to understand how members use the SC99 platform — this information is used to improve products and services, not to be sold or shared with external advertisers.
One thing that sets the privacy approach of SC99 from some other platforms is transparency around data retention. SC99 does not store data indefinitely. There is a clear retention schedule — transaction records are kept for 7 years as required by law, technical logs are deleted after 90 days, and data that is no longer needed is deleted or anonymised according to a defined schedule. This means SC99 only retains what is necessary — nothing more.
In the context of Malaysia's growing digital awareness, SC99 believes its members have the right to understand how their data is handled before they sign up — not after the fact, when they discover practices that do not align with their expectations. That is why SC99's Privacy Policy is written in plain, straightforward language rather than dense legal jargon that leaves everyday users confused.
If you still have questions about how SC99 handling your personal data after reading this Privacy Policy, do not hesitate to reach the SC99 support team via 24/7 live chat or email at support@sc99.run. We are committed to addressing every privacy-related enquiry transparently and within a reasonable timeframe. Your trust is the foundation of SC99's long-term relationship with its member community across Malaysia.