ggc99 Privacy Policy

Full Privacy Policy

Last Updated: 12 June 2026

1. Introduction & Scope

This Privacy Policy ("Policy") describes how ggc99 ("ggc99", "we", "us", "our") collects, processes, stores, and shares personal data in connection with the operation of the ggc99 online gaming platform at ggc99.app ("Platform"), including its sports betting, casino gaming, and promotional services.

This Policy applies to all registered players, prospective players who visit the Platform without registering, and any individual who contacts ggc99 by email or live chat. By using the Platform or submitting personal data to us, you acknowledge that you have read and understood this Policy.

This Policy should be read in conjunction with ggc99's Terms & Conditions and Responsible Gaming Policy, each of which forms part of the overall framework governing your relationship with ggc99.

2. Data Controller

For the purposes of applicable data protection law, ggc99 acts as the data controller in respect of personal data collected through the Platform. Contact details for data-related enquiries are provided in Section 14 of this Policy.

3. Personal Data We Collect

ggc99 collects personal data in the following categories, depending on the nature of your interaction with the Platform:

Category	Examples	Collection Trigger
Identity Data	Full legal name, date of birth, gender, nationality, government-issued ID number	Account registration; KYC verification
Contact Data	Email address, phone number, residential address	Account registration; support contact
Financial Data	Bank account details, e-wallet identifiers, transaction history, deposit and withdrawal records	Payment processing; KYC; AML compliance
Technical Data	IP address, device type, browser, operating system, session timestamps, login history	Automatic collection on Platform access
Usage Data	Games played, wagers placed, betting patterns, session duration, feature interactions	Automatic collection during platform use
Communications Data	Live chat transcripts, email correspondence, support ticket content	Customer support interactions
Responsible Gaming Data	Self-set deposit limits, cool-off periods, self-exclusion status, problem gambling flags	Responsible gaming tool usage; regulatory compliance

We do not knowingly collect sensitive personal data (such as health, religious, or political data) except where directly relevant to a responsible gaming assessment, and only with your explicit consent.

4. How We Use Your Personal Data

ggc99 uses your personal data for the following purposes:

• Account Management: To register and maintain your ggc99 account, verify your identity, and administer your player profile.
• Service Delivery: To allow you to access and use the Platform's gaming and betting services, process deposits and withdrawals, and apply bonuses to your account.
• KYC & AML Compliance: To verify your identity and age, screen against sanctions lists, and comply with anti-money laundering obligations under applicable law.
• Responsible Gaming: To monitor betting patterns for indicators of problem gambling behaviour, administer player-set limits, and enforce self-exclusion where applicable.
• Security & Fraud Prevention: To detect, investigate, and prevent fraud, account compromise, collusion, and prohibited conduct as defined in ggc99's Terms & Conditions.
• Platform Improvement: To analyse aggregated usage data for the purpose of improving platform features, game selection, and user experience.
• Customer Support: To respond to enquiries, resolve disputes, and maintain records of communications relevant to your account.
• Legal Compliance: To satisfy reporting obligations, respond to lawful requests from authorities, and comply with applicable gaming licensing requirements.

5. Legal Bases for Processing

Where applicable data protection frameworks require a legal basis for processing personal data, ggc99 relies on the following bases:

• Contract Performance: Processing necessary to provide the gaming and betting services you have contracted for, including account management, transaction processing, and bonus administration.
• Legal Obligation: Processing required to comply with anti-money laundering legislation, licensing conditions, and lawful orders from regulatory authorities.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your rights and interests.
• Consent: Processing for optional marketing communications and non-essential cookies, where you have provided express consent. Consent may be withdrawn at any time.

6. Sharing of Personal Data

ggc99 shares personal data only where necessary and with appropriate safeguards in place. Recipients include:

• Payment Processors: Touch n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, and cryptocurrency processing partners — for the purpose of executing your deposit and withdrawal instructions.
• Identity Verification Providers: Third-party KYC and age verification service providers, who process identity documents under data processing agreements with ggc99.
• Game Studio Providers: Licensed game studios whose titles are hosted on the ggc99 platform may receive session and technical data necessary for game operation and fairness auditing.
• Regulatory Authorities: ggc99's licensing authority and other competent regulatory or law enforcement bodies, where disclosure is required by law or licensing condition.
• Professional Advisors: Legal, financial, and compliance advisors, subject to professional confidentiality obligations.

ggc99 does not sell personal data to third parties, nor share it for third-party marketing purposes without your express consent.

7. Cookies & Tracking Technologies

ggc99 uses cookies and similar technologies on the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable session authentication, security features, and basic navigation. They cannot be disabled without preventing the Platform from working.
• Functional Cookies: Remember your preferences (e.g., language, display settings) to improve your experience on return visits.
• Analytical Cookies: Used to collect aggregated, anonymised data about how players use the Platform — pages visited, session duration, features used. This data informs Platform improvements and is not linked to your identity.

ggc99 does not use advertising or behavioural targeting cookies from third-party ad networks. You may manage cookie preferences through your browser settings; note that disabling strictly necessary cookies will impair Platform functionality.

8. Data Retention

ggc99 retains personal data for the following periods:

• Active accounts: Personal data is retained for the duration of your account's existence and for a period of five years following permanent account closure, to satisfy anti-money laundering and gaming licensing record-keeping obligations.
• KYC documents: Identity documents are retained for a minimum of five years from the date of verification, consistent with AML legislative requirements applicable to licensed gaming operators.
• Transaction records: Financial transaction data is retained for seven years from the date of the transaction.
• Support communications: Live chat transcripts and email records are retained for three years from the date of the interaction.
• Marketing consent records: Records of consent and withdrawal of consent are retained for five years to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

9. International Data Transfers

ggc99 may transfer personal data to service providers and infrastructure partners located outside Malaysia. Where such transfers occur, ggc99 ensures that appropriate safeguards are in place, including contractual data protection clauses requiring the recipient to apply protection standards equivalent to those described in this Policy. By using the Platform, you consent to such transfers where they are necessary for the provision of services to you.

10. Security Measures

ggc99 implements technical and organisational security measures commensurate with the sensitivity of the data processed. These include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and ggc99 servers.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Role-based access controls ensuring that only personnel with a legitimate operational need can access personal data.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access.
• Incident response procedures for identification, containment, and notification in the event of a personal data breach.

No system is completely impenetrable. In the event of a data breach that poses a risk to your rights and freedoms, ggc99 will notify affected players and relevant authorities in accordance with applicable obligations.

11. Your Rights

Subject to applicable law and certain exceptions (including legal obligations to retain data), you have the following rights in relation to your personal data held by ggc99:

• Right of Access: To request a copy of the personal data ggc99 holds about you.
• Right to Rectification: To request correction of inaccurate or incomplete personal data.
• Right to Erasure: To request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: To request that we limit processing of your personal data in certain circumstances.
• Right to Data Portability: To receive personal data you have provided to us in a structured, commonly used, machine-readable format.
• Right to Object: To object to processing based on legitimate interests, including profiling for responsible gaming purposes.
• Right to Withdraw Consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact ggc99 via live chat or the email address in the footer of this website. We will respond within 30 days. We may need to verify your identity before processing a request.

12. Children & Minors

The ggc99 platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from minors. If we become aware that personal data has been submitted by a person under 21, we will immediately close the associated account, void all transactions, and securely delete the data. If you believe a minor has accessed the Platform, please contact us immediately via live chat.

13. Changes to This Policy

ggc99 reserves the right to update this Privacy Policy at any time. Material changes will be notified to registered players via the email address on file or via a platform notice prior to the changes taking effect. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

14. Contact & Complaints

For questions, data subject requests, or concerns regarding this Privacy Policy or ggc99's data processing practices, please contact us via live chat within the Platform (available 24/7) or at the email address displayed in the footer of this website.

If you are unsatisfied with our response to a privacy concern, you may have the right to lodge a complaint with a relevant data protection authority in your jurisdiction. ggc99 will cooperate fully with any such regulatory investigation.