gtr99 Privacy Policy

1. Introduction

gtr99 ("the Company", "we", "us", "our") operates the online gaming platform accessible at gtr99.win. In providing our services to registered Members — including sports betting, live casino, slots, and associated account and payment services — gtr99 collects and processes personal data about you.

This Privacy Policy describes how gtr99 collects, uses, stores, discloses, and protects your personal information. It applies to all data processed in connection with your use of gtr99.win, our mobile-optimised platform, and any communications you initiate with gtr99 support. By registering a gtr99 account or continuing to use the platform after this Policy is published, you acknowledge that you have read and understood its contents.

gtr99 is committed to handling personal data responsibly and in compliance with applicable data protection principles, including those of our international gaming authority jurisdiction. We do not sell personal data to third parties for their own marketing purposes. We do not monetise your data outside of the operational requirements described in this Policy.

2. Personal Data We Collect

gtr99 collects personal data through three primary means: information you provide directly, information collected automatically during platform use, and information received from third parties (such as payment processors and identity verification services).

2.1 Special Category Data

gtr99 does not intentionally collect special category personal data (health, religious belief, political opinion, biometric data for identification purposes) as part of standard account operations. If you voluntarily disclose special category data during a responsible gaming assessment or support interaction, it will be handled with additional safeguards and used only for the purpose for which it was provided.

3. How gtr99 Uses Your Personal Data

gtr99 processes your personal data for the following purposes:

• Account Registration and Management: To create and maintain your gtr99 account, authenticate your identity at login, and communicate account-related information to you.
• KYC and Age Verification: To verify that you meet the 21+ age requirement and to confirm your identity as required under our international gaming licence obligations and anti-money laundering (AML) regulations.
• Payment Processing: To process deposits and withdrawals via your chosen payment method (Touch n Go eWallet, Boost, Maybank FPX, CIMB, GrabPay, Public Bank, Hong Leong Bank, 7-Eleven Cliqq, USDT TRC20) and to reconcile transaction records.
• Service Delivery: To provide you with access to gtr99's sports betting, live casino, and slots products, to record bet outcomes, and to credit or debit your account accordingly.
• Legal and Regulatory Compliance: To meet our obligations under our gaming licence, including AML monitoring, suspicious transaction reporting, and provision of data to regulatory authorities where legally required.
• Responsible Gaming: To monitor gaming patterns that may indicate problematic gambling behaviour, to apply responsible gaming tools you have activated, and to communicate with you about responsible gaming where warranted.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, and multi-accounting.
• Customer Support: To respond to your queries, handle complaints, and resolve disputes.
• Marketing Communications: To send you promotional information about gtr99 bonuses, offers, and new game releases — subject to your communication preferences, which you may update at any time from your account settings.
• Platform Analytics and Improvement: To analyse aggregated, anonymised usage data to improve the gtr99 platform, identify technical issues, and improve the user experience for Malaysian players.

4. Legal Basis for Processing

gtr99 processes your personal data on the following legal bases, as applicable to each processing activity:

• Performance of a Contract: Processing necessary to provide the services you have registered for — account management, payment processing, game delivery, and bet settlement.
• Legal Obligation: Processing required to comply with gaming licence conditions, AML legislation, and data retention requirements mandated by applicable regulation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics — where these interests are not overridden by your rights and interests.
• Consent: Marketing communications are sent on the basis of your consent, which may be withdrawn at any time by updating your communication preferences in Account Settings or by contacting support.

5. Sharing Your Personal Data

gtr99 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the following circumstances:

5.1 Service Providers

gtr99 engages third-party service providers to support platform operations, including: identity verification and KYC providers; payment processing partners (FPX banking networks, Touch n Go, Boost, GrabPay); game software suppliers (who may receive anonymised session data for technical purposes); IT infrastructure and hosting providers; and customer support technology platforms. All such providers are contractually bound to process your data only on gtr99's instructions and to maintain appropriate data security standards.

5.2 Regulatory and Law Enforcement Authorities

gtr99 may be required to disclose personal data to gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies where required by law or as a condition of our gaming licence. gtr99 will comply with such legal obligations and, where permitted, will notify you of such disclosures.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of gtr99's business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and any change in data controller identity.

6. Cookies and Tracking Technologies

gtr99.win uses cookies and similar tracking technologies to operate the platform effectively and to improve your experience. The types of cookies used include:

• Strictly Necessary Cookies: Required for platform functionality, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing platform operation.
• Functional Cookies: Store your preferences such as language settings, responsible gaming tool configurations, and display options.
• Analytics Cookies: Collect anonymised data about platform usage patterns — pages visited, session duration, features accessed — to support platform improvement. No personally identifiable information is included in analytics data.
• Security Cookies: Support fraud prevention and detection functions, including device fingerprinting for multi-account detection.

You may configure cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent gtr99 from functioning correctly. gtr99 does not use third-party advertising or retargeting cookies.

7. Data Retention

gtr99 retains personal data for as long as your account is active and for a minimum period after account closure as required by our gaming licence and applicable anti-money laundering regulations — typically five (5) years following account closure or last transaction, whichever is later. Specific retention periods by data category:

• KYC and identity documents: 5 years post account closure.
• Financial transaction records: 5 years from the date of each transaction.
• Gaming activity logs: 3 years from the date of each session.
• Support communications: 2 years from the date of each interaction.
• Technical and security logs: 90 days from collection, unless retained for the purposes of an active investigation.

After applicable retention periods expire, personal data is securely deleted or anonymised in a manner that prevents re-identification.

8. Security Measures

gtr99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit TLS encryption for all data transmitted between your device and gtr99 servers.
• Passwords stored using industry-standard one-way cryptographic hashing (bcrypt). Your raw password is never stored in any gtr99 system.
• Role-based access controls ensuring that only authorised gtr99 personnel with a specific operational need can access Member personal data.
• Regular third-party security penetration testing and vulnerability assessment as required under our gaming licence.
• Data centres with physical access controls, redundant systems, and disaster recovery protocols.
• Two-Factor Authentication (2FA) available to all Members and mandatory for administrative access by gtr99 internal staff.

While gtr99 implements strong security measures, no internet-based system can be guaranteed to be completely secure. In the event of a data breach that poses a risk to your rights and freedoms, gtr99 will notify you and relevant authorities as required by applicable regulation.

9. Your Data Protection Rights

Subject to applicable law and the conditions of our gaming licence (which may impose restrictions on certain rights where data is held for compliance purposes), you hold the following rights with respect to your personal data held by gtr99:

To exercise any of the above rights, submit a written request to gtr99's data team via the support email address: [email protected]. Please include your registered account username and a description of the right you wish to exercise. gtr99 will respond within 30 days of receiving a valid request. In complex cases requiring extended review, gtr99 may extend this period by a further 60 days, of which you will be informed.

Note: Where data is retained to fulfil a legal obligation (such as AML record-keeping requirements), the right to erasure may not apply. gtr99 will clearly explain the basis for any partial or full refusal to fulfil a data rights request.

10. Children's Privacy

The gtr99 platform is strictly restricted to individuals aged 21 years and older. gtr99 does not knowingly collect personal data from any person under the age of 21. If gtr99 discovers or is notified that it has collected personal data from an underage individual, the relevant account will be immediately closed, and the associated personal data will be deleted as soon as possible in accordance with our retention obligations.

If you believe that a minor has registered a gtr99 account, please contact gtr99 support immediately at [email protected]. gtr99 treats reports of underage gambling as a high-priority matter and will investigate and act on such reports without delay.

11. Changes to This Privacy Policy

gtr99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. For material changes, gtr99 will provide additional notice to registered Members via email or in-platform notification prior to the change taking effect.

Continued use of the gtr99 platform after a revised Privacy Policy has been published constitutes your acknowledgement of the updated Policy. If you disagree with any change, you have the right to close your account and withdraw any remaining balance before the effective date of the change.

12. Contact and Data Subject Requests

For all data protection enquiries, data subject access requests, or complaints regarding gtr99's handling of your personal data, please contact the gtr99 data team:

• Email: [email protected] (mark subject line: "Data Protection Request")
• Live Chat: Available 24/7 via your gtr99 account dashboard after login — for urgent privacy or security matters.
• Response Time: 2–4 hours (live chat), up to 30 days (formal data subject requests via email).

gtr99 is committed to resolving data protection concerns directly and promptly. If you believe your data protection rights have been violated and gtr99 has not adequately addressed your concern, you may have the right to lodge a complaint with the supervisory authority applicable under your gaming licence jurisdiction.