Reference

What mr99 Does With Your Personal Data

We know your account details, payment history and device data belong to you — so this page lays out exactly what we collect, why we collect it, and how you can ask us to change or remove it.

Account data transparencye-wallet payment data handled securelyYour right to access or deleteContact us to update any recordMalaysia-relevant data practices
mr99 What mr99 Does With Your Personal Data
PRIVACY CONTACT

How to Reach Us About Your Data

If you want to see what data we hold on your account, request a correction, or ask us to remove a record, contact our support team directly. We handle privacy requests separately from general account queries — give us your registered email and account username so we can locate your record quickly and respond without delay.

Team online

Live Chat

Start a live chat from any page on mr99. Have your registered account username ready so we can pull up your data record without asking twice.

Email Support

Send your privacy or data-access request to our support email. Include the payment method on file — Touch 'n Go eWallet, Boost or GrabPay — to help us verify your identity.

Account Settings

Some data updates — like your contact number or preferred payment method — can be changed directly inside your account settings without contacting support.

HOW WE HANDLE IT

Data Handling, Cookies and Account Security

We take a practical approach to data security — not a vague one. Here is how each area actually works on our platform, from the cookies we set to how long we keep your account records after you close.

Cookies and Session Data

We use session cookies to keep you logged in during your visit and analytics cookies to understand how you move through the lobby. You can clear these via your browser settings at any time without losing your account.

Payment Data Retention

Transaction logs from Touch 'n Go eWallet, Boost or GrabPay deposits are kept for the period required under applicable law. After your account closes, transaction records are held for a set retention window then deleted.

Account Security Practices

Every login triggers an OTP verification to your registered mobile number. If we detect a login from an unfamiliar device or IP address, your session is held until you confirm via OTP — your data does not transfer to the…

Your Right to Request Changes

You can request to view, correct or delete the personal data we hold. Send the request through live chat or email with your account username. We will confirm receipt and respond within the timeframe required by applicable rules.

Common Questions About Your Privacy on mr99

These are the questions we actually receive about data handling, account privacy and how to manage your personal information on our platform.

We collect your name, email address, mobile number and the payment method you use — such as Touch 'n Go eWallet or GrabPay. Device type and IP address are also logged at registration.

No. We record transaction references and amounts for your account history, but your e-wallet PIN and login credentials stay with your payment provider. We never access or store those.

Your data is accessible only to authorised staff handling account, payment or fraud queries. We share limited data with payment processors and game platform providers only where needed to complete a transaction.

Contact us via live chat or email with your registered username. We will verify your identity — usually by confirming the payment method on file — then send you the relevant data record.

Yes. Submit a deletion request through live chat or email. Some records — such as transaction logs from DuitNow or FPX transfers — may be retained for the period required under applicable law before full deletion.

We use session cookies for login continuity and analytics cookies to see how the lobby is navigated. You can disable non-essential cookies in your browser settings without affecting your ability to log in.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.