🔒 Your personal data is protected with 256-bit SSL encryption at crs99 🛡️ crs99 does not sell or share player data with third parties without your consent 📋 crs99 Privacy Policy — updated January 2026 for the latest compliance updates 🔞 crs99 is for users 18 years and above — play safe and responsibly 💳 All transactions via Touch 'n Go, GrabPay, DuitNow fully protected 🔒 Your personal data is protected with 256-bit SSL encryption at crs99 🛡️ crs99 does not sell or share player data with third parties without your consent 📋 crs99 Privacy Policy — updated January 2026 for the latest compliance updates 🔞 crs99 is for users 18 years and above — play safe and responsibly 💳 All transactions via Touch 'n Go, GrabPay, DuitNow fully protected
🔒 Updated: January 2026

Privacy Policy crs99 – Malaysian Player Data Protection

Crs99 takes your privacy seriously. This policy clearly explains how we collect, use, store, and protect your personal data as a crs99 platform player in Malaysia.

256
SSL Bit Encryption
0
Sale of Data to Third Parties
24/7
Security Monitoring
PDPA
MY Legal Compliance
OUR PRIVACY COMMITMENT

6 Ways crs99 Protects the Privacy of Malaysian Players

These are not just promises — they are concrete steps we take every day to keep your data safe.

256-bit SSL Encryption

All data transmitted between your device and crs99 servers is protected by 256-bit SSL encryption — the same technology used by leading Malaysian banks such as Maybank and CIMB to secure their customers' online transactions.

No Sale of Personal Data

Crs99 strictly does not sell, rent, or disclose players' personal data to any third party for marketing or commercial purposes without your explicit consent. Your information is used solely for the purposes you have agreed to.

Strict Internal Access Controls

Access to crs99 player personal data is restricted to staff who genuinely need it to perform their duties. All access is logged and monitored, governed by a strict role-based access control policy.

Malaysia PDPA Compliance

Crs99 complies with the Personal Data Protection Act (PDPA) Malaysia 2010. We ensure that all personal data collection, processing, and storage practices align with applicable Malaysian legal requirements.

Minimal Data Retention

Crs99 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to meet legal obligations. Data that is no longer required is securely deleted or anonymised.

Data Breach Notification

In the event of a security incident involving player personal data, crs99 is committed to notifying affected players within a reasonable timeframe in accordance with legal requirements and to helping them take appropriate protective measures.

Important Note: This Privacy Policy explains how crs99 ("we", "our platform") collects, uses, discloses, and protects your personal information when you use our website and services. Please read this policy carefully. Continued use of the crs99 platform constitutes your agreement to the terms of this Privacy Policy.

1.Introduction & Scope of This Privacy Policy

Crs99 is an online entertainment platform serving players in Malaysia. We understand that your trust is the foundation of our relationship, and protecting your privacy and personal data is a commitment we do not take lightly.

This Privacy Policy applies to all players who register an account, use our services, or access any part of the crs99 platform — including the main website crs99.top, online casino games (Live Casino, slots, blackjack), Sports Betting (football, cricket, badminton, esports), and all our official communication channels.

This policy forms part of crs99's broader policy framework, which includes Terms & Conditions and page Responsible Gaming us. Reading all three documents will give you a complete picture of how crs99 operates and safeguards your interests as a player.

This Privacy Policy is written in Bahasa Melayu for the convenience of Malaysian players. The "Last Updated" date shown at the top of this page reflects the date this policy was last amended and came into effect.

2.Personal Data We Collect

Crs99 only collects personal data that is strictly necessary to deliver our services safely and effectively. The following are the categories of data we collect:

a) Data You Provide Directly:

  • Registration Information: Full name, active Malaysian phone number, email address, username, and encrypted password.
  • Identity Verification (KYC) Information: Malaysian identity card number (MyKad), copy of identity card or passport, verification selfie — collected only when required to meet legal compliance obligations.
  • Payment Information: Details of the payment methods used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, CIMB Clicks). Note: crs99 does not directly store credit or debit card information — all transactions are processed through secure third-party payment processors.
  • Support Communications: Records of your communications with the crs99 customer support team via live chat, email, or Telegram.

b) Automatically Collected Data:

  • Technical Data: IP address, browser type, device operating system, screen resolution, and unique device identifiers.
  • Usage Data: Pages visited, session duration, games played, betting history, total deposits and withdrawals, and platform usage patterns.
  • Cookie Data: Session cookies, preference cookies, and analytics cookies — detailed in Section 7 of this policy.
  • Location Data: Approximate location based on IP address for geographic compliance and fraud detection purposes. crs99 does not collect precise GPS location data without your explicit consent.
Data Category Example Primary Purpose
Identity Name, MyKad, date of birth KYC, age verification
Relationships Phone number, email Communications, account security
Financial Deposit/withdrawal methods Payment processing
Transactions Deposit history, winnings Account records, AML compliance
Technical IP, browser, device Security, anti-fraud
Usage Games played, sessions Personalisation, improvement

3.How We Use Your Personal Data

Crs99 uses the personal data collected for the following purposes, all of which are directly related to delivering our platform services to Malaysian players:

  • Account Management: Creating and managing your crs99 account, processing registrations, verifying identity, and ensuring login security.
  • Payment Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks, as well as managing withdrawals of winnings to your verified account.
  • Provision of Gaming Services: Gives you full access to everything crs99 has to offer — from slots, Live Casino, and blackjack, to Sports Betting on Malaysia Super League football, EPL, cricket, badminton, and esports.
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multiple accounts, and any other misuse of the crs99 platform.
  • Legal Compliance: Meeting KYC (Know Your Customer), AML (Anti-Money Laundering), and other statutory reporting and compliance obligations.
  • Customer Support: Provides technical assistance and support in Bahasa Melayu, handling player enquiries, complaints, and requests.
  • Service Communications: Sending important notifications relating to your account, security, and policy changes that affect you as a crs99 player.
  • Platform Improvements: Analysing usage patterns to improve the design, features, and performance of the crs99 platform, delivering a better experience for all players.
  • Responsible Gaming: Monitoring gameplay patterns to identify players who may need support and to ensure self-control tools are working effectively.
  • Marketing (with consent): Sending information about crs99 promotions, bonuses, and new offers to players who have consented to receive marketing communications. You may withdraw this consent at any time.

Crs99 will not use your personal data for any purpose beyond those stated above without first notifying you and, where required, obtaining your renewed consent.

4.Legal Basis for Data Processing

Crs99 processes your personal data on valid legal grounds in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010. These grounds are:

  • Contract Performance: Processing required to deliver the crs99 services you have requested — including account management, payment processing, and access to games.
  • Compliance with Legal Obligations: Processing required to comply with KYC, AML, and other legal obligations applicable to online gambling platform operators.
  • Legitimate Interests: Processing for the purposes of security, fraud prevention, platform improvement, and service communications — where crs99's legitimate interests do not override your fundamental privacy rights.
  • Consent: Processing for marketing purposes — where you have given explicit consent. You may withdraw this consent at any time by contacting the crs99 support team.

5.Disclosure to Third Parties

Crs99 does not sell players' personal data. We may share data with selected third parties only in the following circumstances:

  • Payment Service Providers: Payment processors that handle transactions via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other supported payment methods. These providers are bound by strict data protection agreements and may only use your data for payment processing purposes.
  • Game Providers: Third-party game software providers that supply slots, live casino, and other games on the crs99 platform. They receive only the minimum technical data necessary to deliver their games effectively.
  • Analytics Service Providers: Analytics tools that help crs99 understand platform usage patterns. Data shared with these providers is typically anonymised or aggregated.
  • Regulatory Bodies and Authorities: crs99 may be required to disclose data to regulatory bodies, law enforcement agencies, or courts when mandated by Malaysian law or a valid court order.
  • Independent Audit: Third-party auditors conducting game fairness and security audits may access certain data within the limited scope of strict confidentiality agreements.

In all cases of third-party disclosure, crs99 ensures that adequate data protection agreements are in place before any data is shared. crs99 does not share player data with entities outside the scope described above without first obtaining your consent.

6.Data Security

Crs99 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, use, alteration, or disclosure:

  • 256-bit SSL Encryption: All communications between your browser and the crs99 platform are secured with 256-bit SSL/TLS encryption — the same security standard used by banking institutions.
  • Sensitive Data Encryption: Passwords are stored in an unreadable hashed format. Sensitive financial information is encrypted using industry-standard security algorithms.
  • Role-Based Access Control: Access to players' personal data is restricted to crs99 staff who require it to perform their duties. All access is logged and monitored.
  • 24/7 Security Monitoring: The crs99 system is continuously monitored to detect any suspicious activity, intrusion attempts, or security anomalies.
  • Periodic Penetration Testing: crs99 conducts regular security testing by independent third-party experts to identify and address vulnerabilities before they can be exploited.
  • Staff Training: All crs99 staff who handle players' personal data receive regular data protection training and are bound by strict confidentiality agreements.

While crs99 takes all reasonable steps to protect your data, no security system can guarantee 100% protection against every threat. You are also responsible for keeping your account secure by using a strong password and never sharing your login credentials with anyone.

7.Cookies & Tracking Technologies

Crs99 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Strictly Necessary Cookies: These cookies are essential for the core functions of the crs99 platform — including maintaining your login session, betting cart, and security preferences. Without them, the platform will not work properly. These cookies cannot be disabled.
  • Performance / Analytics Cookies: These cookies help crs99 understand how players use the platform — which pages are visited most frequently, how long users spend in each section, and common navigation paths. This data is used in aggregate to improve the platform's design and functionality.
  • Preference Cookies: These cookies store your preferences — such as your chosen language, display settings, and game selections — so you don't have to reconfigure them every time you visit crs99.
  • Marketing Cookies (with consent): With your consent, crs99 may use cookies to display ads more relevant to your gaming interests. You can opt out of these cookies at any time through your cookie settings.

You can manage your cookie settings through your browser settings or via the cookie preference panel on the crs99 platform. Please note that disabling certain cookies may affect the functionality and your overall experience on the crs99 platform.

8.Data Storage & Transfers

Data Retention Period:

Crs99 retains your personal data only for as long as necessary to fulfil the purposes set out in this policy or to meet applicable legal requirements:

  • Active Account Data: Personal data for players with active accounts is retained for the duration of the account's activity, plus any additional period required for legal compliance following account closure.
  • Financial Transaction Records: Records of deposits, withdrawals, and other financial transactions are retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering (AML) legal requirements.
  • KYC Data: Identity verification documents are retained for the period required by applicable regulatory obligations, typically no less than 5 years after account closure.
  • Support Communication Records: Conversation records with the crs99 support team are retained for 2 years for reference and service improvement purposes.
  • Technical Log Data: System logs and technical data are retained for a shorter period, typically between 90 days and 1 year, depending on the data type and security requirements.

When data is no longer needed, it is securely deleted or anonymised in accordance with crs99's standard data disposal procedures.

Crs99 player personal data may be stored and processed on servers located in various locations. Regardless of where data is stored, crs99 ensures the same high level of protection applies to all player data through appropriate data transfer agreements and equivalent technical safeguards.

9.Your Privacy Rights as a crs99 Player

As a crs99 player based in Malaysia, you have the following privacy rights regarding the personal data we hold about you:

Right of Access

You have the right to obtain a copy of the personal data we hold about you, along with information on how it is being used.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure

Under certain circumstances, you have the right to request the deletion of your personal data, subject to any applicable legal record-keeping obligations.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time.

Right to Restriction

In certain circumstances, you have the right to request that crs99 restrict the processing of your personal data while a dispute is being resolved.

Data Portability Rights

You have the right to receive the personal data you have provided to us in a machine-readable, portable format.

To exercise any of these rights, please contact the crs99 support team by email at support@crs99.top by specifying the right you wish to exercise and providing sufficient information to verify your identity. crs99 will respond to valid requests within 30 business days.

10.Children's Data

The crs99 platform is intended exclusively for individuals aged 18 and above. crs99 strictly does not knowingly collect, process, or store personal data of individuals under the age of 18.

If crs99 identifies or is notified that personal data belonging to a minor has been collected, we will immediately take steps to delete that data and close the account in question. Parents or guardians who become aware that their child has registered an account with crs99 are urged to contact our support team right away at support@crs99.top.

11.Links to Third-Party Sites

The crs99 platform may contain links to or integrations with third-party services such as game providers, payment providers, and social media platforms. This Privacy Policy applies solely to the crs99 platform and does not cover the privacy practices of those third-party websites or services.

Crs99 is not responsible for the privacy practices or content of any third-party websites you may access through links on our platform. We encourage you to read the privacy policy of any third-party site you visit, especially before submitting any personal information.

12.Privacy Policy Amendments

Crs99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, legal requirements, or other legitimate operational reasons.

  • Players will be notified of any material amendments via in-platform notifications on crs99 and/or by email to your registered address at least 7 days before the changes take effect.
  • The "Last Updated" date at the top of this page will be revised whenever this policy is amended.
  • Continued use of the crs99 platform after the effective date of any amendment constitutes full acceptance of the revised Privacy Policy.
  • Where an amendment requires your fresh consent (for example, for a new processing purpose), crs99 will obtain that consent before processing begins.

13.Contact Us About Privacy

If you have any questions or concerns, or wish to exercise your privacy rights in relation to this crs99 Privacy Policy, please get in touch with us:

  • Privacy Email: support@crs99.top — for all privacy-related enquiries and data rights requests. Please include "Privacy Enquiry" in your email subject line.
  • Live Chat: Available on the crs99 platform — for general privacy enquiries requiring an immediate response, answered within 5 minutes by our Bahasa Malaysia support team.
  • Telegram: Contact us on Telegram for fast support in Bahasa Melayu.

The crs99 support team operates 24 hours a day, 7 days a week. For formal data rights requests, we will respond within 30 business days of receiving a complete and valid request.

If you are dissatisfied with how crs99 handles your personal data or our response to your data rights request, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the authority responsible for enforcing PDPA 2010.

OUR COMMITMENT IN SUMMARY

Crs99's Privacy Commitment to Every Player

Your data is protected with 256-bit SSL encryption at all times
All communications and transactions on crs99 are encrypted to the same high security standards used by Malaysian online banking.
crs99 never sells your personal data
Your personal data will not be sold, rented, or shared with third parties for marketing purposes without your explicit consent.
crs99 collects only the data that is strictly necessary
We practise data minimisation — collecting only the information genuinely needed to provide our services to you.
You may access, correct, or delete your data
crs99 respects your privacy rights under Malaysia's PDPA. Contact us at any time to exercise these rights.
Full compliance with Malaysia's PDPA 2010
All data collection and processing practices at crs99 are fully aligned with the requirements of Malaysia's Personal Data Protection Act.
24/7 privacy support in Bahasa Malaysia
crs99's Malay-language support team is available to assist you with any privacy-related queries at any time.
Related crs99 Policy Documents

This Privacy Policy forms part of crs99's broader policy framework. For a fuller understanding of how our platform operates and protects your interests, please also read the following related documents:

🔒 Secure & Trusted Platform

Play Safely at crs99 Today

Your privacy and data security are our top priority. Join over 200,000 Malaysian players who trust crs99 as their preferred online entertainment platform — register for free and claim your RM 100 welcome bonus today.

Licensed & Secure
SSL 256-bit
PDPA Compliant
24/7 Support
Bahasa Melayu