Rujukan Laman

How cm99net Handles Your Personal Data

This privacy policy explains exactly what data cm99net collects when you open an account, how we use it, and the controls you hold over it.

Data collected with your consentNo sale of personal data to third partiesTouch 'n Go, GrabPay, Boost & FPX transactions coveredRight to access your own recordsClear data retention periods
Explore The Lobby Read FAQ
cm99net How cm99net Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Our Data Team Directly

If you want to access, correct or delete the personal data we hold on your account, our dedicated privacy support team is the right starting point. You can reach us through live chat, email or our in-app support form — all three channels connect to staff who can pull your records and process requests under the timelines set out in this policy.

Team online

Live Chat

Start a live chat session from any page in your account area. Our support agents handle data access and correction requests during standard operating hours and will escalate to the privacy team within one business day.

Email Support

Write to our privacy address with your registered email subject line and the nature of your request. We respond with an acknowledgement within 48 hours and aim to resolve data inquiries within seven business days.

In-App Request Form

Log in to your account, navigate to Settings and select the Privacy Request option. The form routes directly to our data team and timestamps your submission so both parties have a clear record of when the request was received.

DATA HANDLING STANDARDS

Six Ways We Protect Your Account Data

Our data practices are built around giving you visibility and control at every step.

Encrypted Storage

All personal data — including payment identifiers for Touch 'n Go, GrabPay, Boost dan FPX — is stored using industry-standard encryption at rest. We rotate encryption keys on a scheduled basis and audit access logs quarterly to catch any anomalies early.

Cookie Controls

We use session cookies to keep you logged in and analytics cookies to understand how features are used. You can manage cookie preferences from the settings panel in your account; declining analytics cookies does not affect your ability to use the platform.

Account Security Measures

Two-step verification is available for all accounts and we strongly encourage you to enable it. Login attempts from unrecognised devices trigger an automatic email alert to your registered address so you can act immediately if the attempt was not yours.

Data Retention Schedule

Transaction records are kept for the period required by applicable Malaysian law. Account profile data is removed within 30 days of a confirmed account closure request, except where a legal hold applies. We do not retain data beyond the purposes for which it was collected.

Third-Party Sharing Limits

Your data is shared only with processors directly involved in running your account — payment gateways, fraud-detection services and our hosting infrastructure. Each third party operates under a data-processing agreement that mirrors the obligations in this policy.

How to Request Changes

Submit a data correction or deletion request via live chat, email or the in-app form described in the contact section. We verify your identity before making any changes and send you a written confirmation once the update has been applied to our systems.

Your Privacy Policy Questions

These are the questions we hear most often about how your data is handled on cm99net. If your question is not covered here, the privacy support team is reachable through the contact paths above and can provide a specific answer tied to your account.

We collect your name, email address, mobile number and the payment identifiers associated with Touch 'n Go, GrabPay, Boost dan FPX. We also log device identifiers and session timestamps to protect your account from unauthorised access.

Payment identifiers are shared only with the specific gateway processing your transaction — for example, your GrabPay token goes to the GrabPay processor only. No third party receives your full account profile, and all processors are bound by data-processing agreements.

Profile data is removed within 30 days of a confirmed account closure. Transaction records are held for the period required by applicable Malaysian law and deleted once that obligation expires. We do not retain data beyond its stated purpose.

Yes. Submit a data access request via live chat, email or the in-app privacy form. We verify your identity first, then provide a structured copy of your account data within seven business days of the verified request.

Log in and use the Privacy Request form in your account Settings, or contact us by email or live chat. After identity verification, corrections are applied within seven business days and deletions within 30 days where no legal hold applies.

We use session cookies for login continuity and analytics cookies to understand feature usage. You can decline analytics cookies in your account settings panel without affecting platform access. Session cookies are required for basic account functions to work correctly.

Reach our data team via the email or live chat channels listed on this page. If you are in Johor Bahru or anywhere else in Malaysia, the same contact paths apply. Where local law permits, you may also escalate to the relevant data-protection authority in your jurisdiction.

Related Pages

cm99net Malaysia About Us Live Roulette cm99net App Register