Your Data Protection

Privacy Policy pop999
Data & Personal Information Protection

At pop999, your privacy is more than a legal obligation — it is our genuine commitment to every member. This document clearly explains what information we collect, how it is used, who can access it, and your rights as the owner of that data.

Last Updated: 1 January 2026
Commitment Privacy pop999

The following are the six core principles that underpin our approach to handling members' personal data.

End-to-End 256-bit SSL Encryption

All data transmitted between your device and pop999 servers is protected by 256-bit SSL encryption — bank-grade security technology that ensures your information cannot be intercepted by any third party.

Secure & Controlled Data Storage

Members' personal data is stored on servers protected by multi-layered access controls. Only staff with specific authorisation may access that data, and every access is logged for audit purposes.

Full Control of Your Data, In Your Hands

You have the right to access, correct, download, or request deletion of your personal data at any time. pop999 provides a straightforward mechanism for you to manage your own privacy rights.

No Sale of Data to Third Parties

Pop999 has never and will never sell, rent, or trade members' personal information to any third party for marketing or commercial purposes without your explicit consent.

Cookie Usage Transparency

Pop999 uses cookies solely to improve the user experience and for internal analytics purposes. You can manage or decline cookies at any time through your browser settings without affecting the core functionality of the platform.

Personal Data Protection Act Compliance

The pop999 Privacy Policy is fully built in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We take our legal responsibilities in handling each member's personal data seriously.

01Introduction – Why This Privacy Policy Matters

Pop999 understands that your trust is the foundation of the relationship we build together. This Privacy Policy ("Policy") clearly and transparently describes how pop999 collects, processes, stores, and protects your personal information when you use our platform, website, and mobile app.

This policy applies to all users of the pop999 platform, including unregistered visitors, registered members, and former members whose accounts have been closed. By accessing or using the pop999 platform, you agree to the terms of this Privacy Policy. If you do not agree with any part of this Policy, we encourage you not to use our platform until you are satisfied with the explanation provided.

This Privacy Policy is to be read together with Terms and Conditions pop999 and Responsible Gaming Policy us, which together form the complete agreement between you and pop999.

This Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection legislation in the region.

02Personal Information We Collect

Pop999 only collects information necessary for the legitimate purposes stated in this Policy. The following are the categories of information we may collect:

How It Is Collected
Data Categories Example Information
Identity Information Full name, date of birth, identity card number or passport number Registration form, KYC process
Contact Information Email address, phone number, residential address Account registration, profile updates
Financial Information Bank account number, bank name, digital wallet details Deposit and withdrawal process
Technical Information IP address, device type, operating system, web browser System logs, cookies, app usage
Game Activity Data Game history, betting records, wins and losses Automatic platform usage
Support Information Live chat conversation records, support emails, complaints Interactions with the customer support team

In addition to information you provide directly, we also collect data automatically through your use of our platform. This includes information on how you interact with our website and app, the pages you visit, time spent on each section, and your general navigation patterns.

pop999 will never ask for your account password via email, live chat, or any other communication channel. If you receive such a request, it is a fraudulent attempt and should be reported to us immediately.

03How We Use Your Information

Every piece of information we collect is used for legitimate and limited purposes. pop999 does not use your data for anything unrelated to the services we provide. The following are the primary purposes for which your data is used:

  • Account Management: To create, verify, and manage your member account, including the required identity verification (KYC) process
  • Transaction Processing: To securely and accurately process deposits, withdrawals, and all other financial transactions
  • Service Provision: To grant you access to all available games, promotions, and platform features
  • Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and platform abuse
  • Service Communications: To send important notifications relating to your account, transactions, policy changes, and security updates
  • Customer Support: To effectively process and respond to your inquiries, complaints, and support requests
  • Platform Improvements: To analyze usage patterns and continuously improve the overall platform experience
  • Legal Compliance: To fulfill the legal and regulatory obligations imposed on pop999 as an online platform operator
For marketing communications such as promotions and bonus offers, we will only contact you if you have given your consent to do so during registration or through the notification settings in your account.

04Sharing Information with Third Parties

Pop999 does not sell or trade members' personal information. However, there are limited circumstances in which we need to share your information with trusted third parties to enable our services to operate properly:

  • Payment Providers: Transaction information is shared with authorised payment providers such as banks, FPX operators, DuitNow, and digital wallets to process your transactions
  • Game Providers: Minimum technical information is shared with game software providers integrated with our platform to enable gaming sessions to function
  • Identity Verification Services: KYC documents are shared with accredited identity verification service providers to process the required background checks
  • Regulatory Authority: Information shared with government authorities, law enforcement bodies, or regulators when required by law
  • Analytics Services: Anonymised and aggregated data is shared with analytics service providers solely for platform improvement purposes

All third parties we engage are required to comply with strict data protection standards and are not permitted to use shared information for any purpose other than those specified in their service agreements with pop999.

05pop999 Data Security Measures

The security of your personal data is pop999's top priority. We implement multiple layers of technical and organisational safeguards to protect your information from unauthorised access, loss, misuse, or unintended disclosure.

  • 256-bit SSL/TLS encryption for all data transmission between your device and our servers
  • Passwords stored using strong hashing algorithms — the original password is never stored in readable format
  • Role-based access control (RBAC) to ensure only authorised staff can access member data
  • 24/7 security monitoring and an active intrusion detection system (IDS)
  • Regular security audits by independent third parties to identify and address potential vulnerabilities
  • A comprehensive incident response plan to address any data breach promptly
  • Mandatory data security training for all pop999 staff
pop999 undergoes independent security audits on a regular basis. Our infrastructure is designed to meet or exceed the security standards of the online financial services industry.

06Use of Cookies and Tracking Technologies

Pop999 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Cookie Type Purpose Duration
Essential Cookies Required for core platform functions such as login sessions and security Session only
Preference Cookies Remembering your preferences such as language and display settings 1 year
Analytics Cookies Helping us understand how users interact with the platform for continuous improvement 90 days
Security Cookies Detecting suspicious activity and protecting your account from unauthorised access 30 days

You can control or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the full functionality of the pop999 platform, particularly features that require session authentication.

07Data Retention and Deletion Period

Pop999 retains your personal information only for as long as necessary for the purposes stated in this Policy or as required by law. The following are our general data retention guidelines:

  • Active Account Data: Retained for the duration your account is active plus the minimum holding period required by law
  • Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with financial regulatory requirements
  • KYC Documents: Retained for a minimum of 5 years after account closure in accordance with anti-money laundering legal requirements
  • Support Communication Logs: Retained for 2 years for reference and dispute resolution purposes
  • Technical Log Data: Retained for 90 days before being automatically deleted or anonymised

When data is no longer needed and the legal retention period has expired, pop999 will securely delete or destroy that data using industry-approved methods to ensure your information cannot be recovered.

You may request deletion of your personal data that is not subject to legal retention obligations by contacting the pop999 support team. Requests will be processed within 30 business days.

08Your Rights as a Data Owner

As a pop999 member, you hold the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010:

Right of Access

You have the right to request a copy of all personal information we hold about you at any time.

Right to Rectification

You have the right to correct any personal information in your account that is inaccurate or out of date.

Right to Erasure

You may request deletion of data that is no longer required, subject to legal retention requirements.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another service.

Right to Restriction of Processing

You may request a restriction on the processing of your data under certain circumstances while a dispute or investigation is ongoing.

To exercise any of the rights above, please contact our Data Protection Officer at [email protected]. We will process your request within 14 business days.

09Cross-Border Data Transfers

In operating the pop999 platform, there are circumstances where your personal data may be transferred to or processed outside Malaysia. This occurs primarily when we use cloud servers, support services, or game providers operating in other regions.

Pop999 ensures that any cross-border data transfers are carried out with adequate safeguards, including:

  • Ensuring that data recipients outside Malaysia comply with data protection standards equivalent to or higher than Malaysia's PDPA
  • Using standard data transfer agreements that include strict data protection clauses
  • Assessing privacy risks before engaging any overseas service provider
  • Limiting data transferred to only the minimum information required
You will be notified of any significant changes to the location where your data is processed that may affect the level of protection applied to your personal information.

10Child Privacy Protection

The pop999 platform is strictly for users aged 18 and above. We do not knowingly collect, process, or store any personal information from individuals under the age of 18.

Should we discover that a child's personal information has been collected without our knowledge — whether through falsification of age details or any other means — we will take immediate steps to delete that information and close the account in question.

If you as a parent or guardian believe your minor child has registered for or used the pop999 platform, please contact us immediately via our support email. We will handle such cases with the highest priority.

11Amendments to This Privacy Policy

Pop999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform improvements. Any significant amendments will be communicated to you through:

  • Prominent notices on the pop999 platform homepage
  • Notification email sent to the address registered in your account
  • In-app notifications on the pop999 mobile app when you open it

The latest version of the Privacy Policy will always be available on this page with an updated effective date. Your continued use of the pop999 platform after the amendment's effective date constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically. The date of the last update is always displayed at the top of this page for your easy reference.

12Contact Our Data Protection Officer

If you have any questions, concerns, or wish to exercise your privacy rights, please contact the pop999 Data Protection Officer (DPO) through the following channels:

  • Data Protection Email: [email protected]
  • General Support Email: [email protected]
  • Live Chat: Available 24/7 via the pop999 platform and app
  • Response time: Within 14 working days for data privacy-related requests

When contacting us regarding privacy, please clearly state the nature of your request, your pop999 account ID (if applicable), and the contact details we can use to verify your identity before processing the request.

Pop999 is committed to addressing every privacy inquiry seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to submit a complaint to the Department of Personal Data Protection Malaysia or the relevant regulatory authority.

Your trust means everything to us. pop999 always prioritises the privacy and security of every member's data as part of our commitment to being the most trusted online entertainment platform in Malaysia.
Safe & Trusted

Your Data Is Protected. Join pop999 with Confidence

Pop999 takes your privacy seriously. Register now and enjoy a safe, fair, and responsible online entertainment experience alongside more than 500,000 members across Malaysia.

Malaysia PDPA Compliance
256-bit SSL Encryption
No Data Sales
Full Data Control
Bahasa Melayu