Updated: 1 January 2026

Privacy Policy GTR99 – Our Commitment to Protecting Your Personal Data

Your privacy is an absolute priority at gtr99. This page clearly explains how we collect, use, store, and protect our members' personal data — all in plain, straightforward English, free of confusing jargon. By using the gtr99 platform, you agree to the terms set out here.

256-bit SSL
Full Encryption
No Sale of Data
Data Not Sold
Full Control
Member Access Rights
Compliance
Global Standards

Protection Summary

Six Core Principles of GTR99's Privacy Policy

How we manage your data is guided by these principles every single day, without exception

Bank-Grade Encryption

All your personal data and financial transaction information is protected with 256-bit SSL encryption — the same standard used by Maybank, CIMB, and Malaysia's major banks. Your data is secure at all times.

No Data Sales

GTR99 has never sold, rented, or transferred your personal data to third parties for marketing purposes, and never will. Your data is not a commodity — it is personal information that we take seriously.

Data Minimisation

Gtr99 only collects data that is genuinely necessary to provide the platform's services, process transactions, and meet legal requirements. We do not collect data that is irrelevant to the operation of our services.

Full Control in Your Hands

You have the right to access, correct, transfer, or request the deletion of your personal data at any time. Contact the gtr99 support team and we will process your request within 30 business days.

Clear Retention Periods

Your data is not stored indefinitely. GTR99 has a clear data retention policy — transaction data is kept for the period required by applicable law, and data that is no longer needed is securely deleted.

Rapid Breach Notification

In the event of any security incident involving your personal data, gtr99 is committed to notifying affected members within the timeframe stipulated by the relevant authorities, and to taking immediate remedial action.

Important Note

This Privacy Policy explains how GTR99 ("Platform", "We", or "gtr99") collects, uses, discloses, and protects your personal information when you use the gtr99.best platform. By registering or using our platform, you agree to the collection and use of information as described in this policy. This policy is to be read together with Terms & Conditions us, and both documents together form the complete agreement between you and gtr99 regarding use of the platform.

Section 01
Introduction & Policy Scope

GTR99 is an online entertainment platform offering casino games, slots, Live Casino, Sports Betting, e-sports, lottery, and a variety of other games for users in Malaysia. In operating the gtr99 platform, we need to collect and process certain personal data from our users.

This Privacy Policy applies to all individuals who:

  • Browsing or using the gtr99.best website
  • Registering for or holding an account on the gtr99 platform
  • Making any financial transactions through the gtr99 platform
  • Contacting the gtr99 customer support team through any channel
  • Receiving any marketing communications from gtr99

GTR99 operates as a data controller responsible for the personal data we process. We adhere to internationally recognised data protection standards across all aspects of our operations, including the principles of the European GDPR (General Data Protection Regulation) as a global best-practice benchmark, even though our primary operations serve users in Malaysia.

Primary language: This Privacy Policy is written in Malay as the primary language of the gtr99 platform. Should there be any discrepancy between a translated version and the Malay version, the Malay version shall prevail.


Section 02
Personal Data We Collect

GTR99 collects personal data from several sources and in a number of different ways. Below are the categories of data we may collect:

Data you provide directly:

Full name Email address Phone number Date of birth Residential address Payment information MyKad number Account information

Data collected automatically during platform use:

  • Technical data: IP address, web browser type, operating system, screen resolution, and device information used to access gtr99
  • Usage data: Pages visited, games played, session duration, clicks and in-platform interactions, and general usage patterns
  • Transaction data: A complete record of all deposits, withdrawals, bets, winnings, and losses in your gtr99 account
  • Location data: Approximate location data based on your IP address, used for geographic region verification and regulatory compliance purposes
  • Communications data: Records of conversations with the gtr99 customer support team via live chat, WhatsApp, or email

Data from third parties:

  • Identity verification information from third-party KYC service providers
  • Payment verification data from service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and Malaysian banks via FPX
  • Risk assessment information from third-party fraud prevention services we utilise

Section 03
How We Use Your Personal Data

GTR99 uses collected personal data only for legitimate and reasonable purposes related to the operation of the platform. The primary purposes for which your data is used are as follows:

  • Account management: To create, maintain, and manage your gtr99 account, including identity verification and age verification at the point of registration
  • Transaction processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and FPX, and to handle your withdrawal of winnings quickly and securely
  • Service delivery: To give you access to and let you enjoy all the games and features on the gtr99 platform, including slots, Live Casino, Malaysia Super League and EPL Sports Betting, e-sports, and lottery
  • Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account usage, and any conduct that violates gtr99's terms
  • Legal compliance: To fulfil our legal obligations, including applicable KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements
  • Customer support: To provide effective assistance when you contact the gtr99 support team, and to maintain records of communications for quality assurance and training purposes
  • Platform improvement: To analyse aggregated usage patterns in order to improve the performance, interface, and user experience of the gtr99 platform
  • Marketing communications: To send you information about gtr99's latest promotions, bonuses, and offers that may interest you — only where you have given your consent to receive such communications
  • Responsible gaming: To monitor usage patterns that may indicate signs of problem gambling and to provide relevant responsible gaming tools to members who need them

Legal basis: gtr99 processes your data on several valid legal bases — including the performance of a contract (to process bets and payments), legal obligations (for KYC and AML compliance), legitimate interests (for security and fraud prevention), and your consent (for marketing communications). You may withdraw consent for marketing communications at any time.


Section 04
Data Sharing with Third Parties

GTR99 does not sell, rent, or transfer your personal data to third parties for their own marketing or commercial purposes. This is our absolute commitment. However, in the course of operating the platform, we may share certain information with the following categories of third parties:

  • Payment service providers: Information required to process your transactions is shared with providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and the FPX network (Maybank2u, CIMB Clicks, and other Malaysian banks). This sharing is solely to facilitate the processing of your transactions and is subject to the respective provider's privacy policy.
  • Game providers: Game providers such as Pragmatic Play, PG Soft, Evolution Gaming, and others may receive the session data necessary to deliver games to you. They do not receive your full personally identifiable information.
  • KYC service provider: For identity verification purposes, we use third-party services that specialise in document verification and digital identity authentication.
  • Technology service providers: Technical infrastructure providers such as cloud computing services, database managers, and cybersecurity providers required for the operation of the gtr99 platform. All such vendors are subject to strict data processing agreements.
  • Legal authorities: GTR99 will disclose information to the relevant authorities when required by law or a valid court order — for example, in financial crime investigations or money laundering cases.
  • Licence holders and regulatory bodies: As a licensed platform, gtr99 may be required to report certain data to licensing authorities and relevant gambling industry regulatory bodies.

In all instances of data sharing with third parties, gtr99 ensures that the relevant third parties maintain adequate privacy and security protections, and that data shared is limited strictly to what is necessary (the purpose limitation principle).


Section 05
Data Security Measures

GTR99 invests seriously in security infrastructure to protect the personal and financial data of all our members. The technical and organisational security measures we have in place include:

  • 256-bit SSL Encryption: All communications between your web browser or mobile app and gtr99's servers are encrypted using TLS (Transport Layer Security) protocol with 256-bit keys — the same standard used by Malaysia's online banking systems.
  • Encryption of data at rest: Sensitive data stored in the gtr99 database — including passwords (stored as irreversible cryptographic hashes) and payment information — is encrypted at rest.
  • Layered access controls: Only gtr99 staff with a legitimate operational need are permitted to access member data. A layered access control system ensures each staff member can only view data relevant to their job responsibilities.
  • Regular security audits: Gtr99 undergoes regular cybersecurity audits by independent third parties to identify and address any vulnerabilities in our infrastructure.
  • 24/7 monitoring: The gtr99 cybersecurity team monitors our systems around the clock to detect and respond to any suspicious activity or unauthorised access attempts.
  • Two-factor authentication (2FA): We offer a two-factor authentication option for members who wish to add an extra layer of security to their gtr99 account.
  • Staff training: All gtr99 staff who handle personal data undergo regular data protection training and cybersecurity awareness programmes.

Security limits: While gtr99 takes all reasonable steps to protect your data, no system can guarantee 100% security against every cyber threat. You also play an important role in keeping your account safe — use a strong password, never share your login credentials, and contact us immediately if you suspect any unauthorised access to your gtr99 account.


Section 06
Cookies & Tracking Technologies

The gtr99 platform uses cookies and similar tracking technologies to enhance the user experience and gather analytical data that helps us improve the platform. Cookies are small text files stored on your device when you browse the gtr99 platform.

Types of cookies used by gtr99:

  • Essential cookies: Required for core platform functionality — including maintaining your login session, remembering your language preference, and keeping the platform secure. These cookies cannot be disabled without affecting platform functionality.
  • Performance cookies: Collects data on how you use the gtr99 platform — which pages are visited most frequently, time spent in each section, and any technical errors that occur. This information is used in aggregate form to improve the platform.
  • Functional cookies: Remembers the preferences you set on the gtr99 platform — such as account settings, favourite games, and deposit limits you have configured yourself — to deliver a more personalised experience.
  • Analytics cookies: Helps us understand overall gtr99 platform usage patterns anonymously for the purpose of continuous product improvement.

You can manage cookie usage through your web browser settings. However, disabling certain cookies may affect your experience on the gtr99 platform — for example, you may need to log in again each time you visit if session cookies are disabled.


Section 07
Data Retention Period

GTR99 does not retain your personal data longer than is necessary for the purpose it was collected, or longer than required by applicable law. Our data retention guidelines are as follows:

  • Active account data: For as long as your gtr99 account remains active, we retain your registration and profile information to enable continued use of the platform.
  • Financial transaction records: Records of deposits, withdrawals, and bets are retained for a minimum of 7 years after the transaction takes place, in line with applicable Malaysian financial and tax legal requirements.
  • KYC Documents: Copies of identity documents collected for verification purposes are retained for the period stipulated by the applicable licensed gambling compliance requirements.
  • Support communication records: Records of conversations with gtr99's customer support team are retained for 3 years for quality control and dispute resolution purposes.
  • Marketing data: If you withdraw your consent for marketing communications, we will stop using your data for that purpose within 30 days, although we may need to retain a record of your withdrawal of consent.
  • After account closure: When your gtr99 account is closed, your data is not immediately deleted. We retain the necessary records for the period required by law before they are securely deleted.

When data is no longer needed and the legally required retention period has expired, gtr99 will delete or anonymise that data using secure, irreversible methods.


Section 08
Your Rights as a GTR99 Member

As a gtr99 member, you have rights regarding your personal data that we fully respect. These rights include:

01
Right of Access

You have the right to request a copy of the personal data we hold about you. GTR99 will process data access requests within 30 business days.

02
Right to Rectification

If the personal data we hold is inaccurate or incomplete, you have the right to request that we correct it promptly.

03
Right to Erasure

You may request the deletion of your personal data under certain circumstances. This right is subject to any applicable legal data retention obligations.

04
Right to Restriction of Processing

Under certain circumstances, you may request that gtr99 restrict how we process your data while a dispute or review is in progress.

05
Right to Data Portability

You have the right to receive the personal data you have provided to gtr99 in a machine-readable format for transfer to another service provider.

06
Right to Object

You may object to the processing of your data for direct marketing purposes at any time, and we will stop within 30 days.

How to Submit a Data Rights Request

To submit any request relating to your data rights, contact the gtr99 support team by email at support@gtr99.best with the subject line "Personal Data Rights Request". Please include your full name, gtr99 account number, and details of your request. GTR99 will verify your identity before processing any request to ensure account security, and will respond within 30 business days.


Section 09
Cross-Border Data Transfers

In operating the gtr99 platform, your personal data may be processed or stored on servers located outside Malaysia. This occurs when we engage international cloud computing services, global game providers, or data backup systems.

GTR99 ensures that any transfer of personal data outside Malaysia is carried out with adequate safeguards in place, including:

  • Transfers to countries with a recognised and adequate level of data protection
  • Implementation of standard contractual clauses to protect data during transfers
  • Use of providers that hold relevant international data compliance certifications
  • Binding data processing agreements with all vendors who receive gtr99 member data

You may request further information about the cross-border data transfer mechanisms we use by contacting the gtr99 support team.


Section 10
Children's Privacy

The gtr99 platform is exclusively for individuals aged 18 and above. GTR99 does not knowingly collect personal data from individuals under the age of 18.

If we discover that personal data has been collected from underage individuals without valid age verification, we will:

  • Suspending the account in question immediately
  • Deleting all related personal data as promptly as possible
  • Returning any remaining funds in the account through the appropriate channels
  • Reporting incidents to the relevant authorities where required

If you believe your underage child has registered an account at gtr99, please contact us immediately at support@gtr99.best so we can take the appropriate action without delay.


Section 11
Privacy Policy Amendments

GTR99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or platform service improvements. All changes will take effect as soon as the updated version is published on gtr99.best.

For material changes to how we process your data, gtr99 will provide notice through:

  • A prominent notice on the gtr99 platform homepage or dashboard when you log in
  • Email to the address registered to your account
  • Updates the "Last Updated" date at the top of this page

We encourage you to review this Privacy Policy page periodically. Continued use of the gtr99 platform after any changes are published will be considered acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account and stop using the gtr99 platform.


Section 12
Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way gtr99 handles your personal data, you are welcome to reach us through the following channels:

  • Privacy email: support@gtr99.best (use the subject line "Data Privacy Enquiry")
  • Live chat: Available 24/7 on the gtr99 platform — our team speaks Bahasa Malaysia and is ready to assist
  • Response time: Privacy-related enquiries will receive a response within 3 business days; formal data rights requests within 30 business days

Complaints: If you are not satisfied with gtr99's response to your privacy concerns, you have the right to lodge a complaint with the relevant data protection authority. GTR99 is committed to cooperating fully with any investigation carried out by that authority.

Editorial Note

Why Data Privacy Is a Serious Matter to GTR99

When you register at gtr99 and fill in your name, phone number, and payment details, you are placing a great deal of trust in us — and that is not something we take lightly. We understand that personal information, especially financial data such as deposit and withdrawal records via Touch 'n Go eWallet, GrabPay, or your bank account, is highly sensitive and deserves serious protection.

One thing we want to make clear is why the 256-bit SSL encryption we use at gtr99 is a genuinely important standard — not just technical jargon for show. When you make a deposit via Maybank2u or GrabPay, the information travelling between your phone and gtr99's servers is like a message coded in a language only you and gtr99 can read. No third party — even if they manage to intercept the data in transit — can decipher it without the correct decryption key.

Data minimisation is something we take seriously at the design level. Whenever the gtr99 team builds a new feature or function for the platform, one of the first questions we ask is: "Do we actually need this data?" We don't collect information simply because it's easy to gather or might come in handy someday. Every type of data we collect has a clear purpose, and that purpose is stated in this Privacy Policy.

On the topic of data sharing — many Malaysian internet users are familiar with platforms that sell user data to advertisers or marketing agents. You may have signed up on one website only to receive unsolicited sales calls or promotional messages from companies you never dealt with. At gtr99, that does not happen. Your data is only shared with third parties who are directly involved in delivering services to you — such as payment providers to process your deposits, or game suppliers to deliver your gaming sessions. Nothing more.

One aspect of gtr99's Privacy Policy that many people may not fully appreciate is the right to request data erasure. This isn't just a feature included out of legal obligation — it's a right we genuinely stand behind. If you decide to close your gtr99 account and do not want us to retain your personal data beyond what is legally required, you may submit a data erasure request and we will comply within the stipulated timeframe. We believe that control over your personal data should rest with you, not with us.

From a responsible gaming perspective, data usage also plays an important role. Gtr99 analyses usage patterns not only to improve the platform, but also to identify members who may need responsible gaming support. This analysis is carried out carefully and with respect for privacy — we do not "spy" on our members, but we do use aggregated data and responsible algorithms to identify risk patterns that call for proactive intervention. This is a use of data we believe serves the genuine interests of our members, not merely our business interests.

Finally, we want to emphasise that the gtr99 Privacy Policy is not a static document written once and forgotten. We review and update it at least once a year, and more frequently whenever there are significant changes in relevant legislation or industry practice. Members will be notified of any material updates, and the date of the most recent revision is always displayed at the top of this page. Transparency in data management is not merely a legal obligation for gtr99 — it is a core value that shapes how we operate every day.

Related Policies

Other Important Pages That Complement This Privacy Policy

Read these documents as well for a full understanding of how gtr99 operates

Terms & Conditions

The complete agreement governing use of the gtr99 platform — covering accounts, deposits, withdrawals, bonuses, and game rules.

Responsible Gaming

Deposit limit tools, self-exclusion options, and support resources to ensure a healthy and safe gaming experience at gtr99.

FAQ

Answers to frequently asked questions about accounts, deposits, withdrawals, security, and data privacy at gtr99.

About GTR99

Learn more about the mission, core values, history, and team behind the gtr99 platform you trust.

Your Data Is Safe at GTR99

Play with Peace of Mind — Your Privacy is Fully Protected

Gtr99 protects your personal data to bank-grade security standards. Register for free today and enjoy Malaysia's most trusted online entertainment platform, alongside more than 500,000 registered members.

256-bit SSL · Data Not Sold · Licensed · 18+ Only

Bahasa Melayu