rebate99 Privacy Policy

1. Who We Are

rebate99 operates the online gaming platform accessible at rebate99.win. For the purposes of this Privacy Policy, rebate99 acts as the data controller in relation to the personal information of registered Members and visitors to the platform. rebate99 is licensed and operates under international gaming authority standards.

This Privacy Policy governs rebate99's collection, use, storage, and processing of personal data. It applies to all Members, prospective members, and visitors to the rebate99 website, regardless of their location. It should be read in conjunction with the Terms & Conditions and Responsible Gaming policy.

2. Data We Collect

rebate99 may collect and process the following categories of personal data:

Category	Examples	Purpose
Identity Data	Full name, date of birth, nationality, MyKad or passport number	Account registration, KYC verification, age verification
Contact Data	Email address, Malaysian mobile phone number	Account communication, 2FA, support
Financial Data	Payment method type, transaction reference, deposit and withdrawal amounts in MYR	Deposit and withdrawal processing, fraud prevention
Account Activity Data	Login timestamps, game sessions, bet history, cashback credits, balance changes	Platform operation, dispute resolution, responsible gaming monitoring
Technical Data	IP address, device type, operating system, browser version, session tokens	Security, fraud detection, platform optimisation
Verification Documents	MyKad scan, selfie, proof of address, payment method screenshot	KYC compliance, withdrawal verification
Communications Data	Live chat transcripts, email correspondence with rebate99 support	Support delivery, dispute resolution, quality assurance

rebate99 does not collect or store full payment card numbers, complete eWallet PINs, or internet banking passwords. All payment transactions are routed through certified Malaysian payment processors (Touch n Go, Boost, DuitNow FPX, GrabPay, Maybank, CIMB, Public Bank).

3. How We Collect Data

rebate99 collects personal data through the following channels:

• Direct collection: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal request, or contacting customer support.
• Automated collection: Technical data collected automatically when you access the rebate99 platform, including IP address, device identifiers, browser type, and session data collected via cookies and server logs.
• Third-party sources: Identity verification data provided by regulated KYC service providers; fraud screening data from anti-money-laundering compliance services; and transaction confirmation data from payment processors.

4. How We Use Your Data

rebate99 uses your personal data for the following purposes:

• Account management: Creating and maintaining your rebate99 Account, authenticating your identity at login, and enabling account features including deposit, withdrawal, and cashback tracking.
• KYC and regulatory compliance: Verifying your identity and age (21+), complying with anti-money-laundering (AML) obligations, and meeting the requirements of our international gaming authority licence.
• Payment processing: Facilitating deposits and withdrawals via Touch n Go eWallet, Boost, DuitNow, FPX bank transfers, GrabPay, and USDT TRC20; verifying payment method ownership; and managing transaction records.
• Platform security and fraud prevention: Detecting and preventing account takeover, bonus abuse, money laundering, and other prohibited activities; monitoring for suspicious login patterns; and protecting the integrity of the platform.
• Customer support: Responding to enquiries, resolving disputes, processing responsible gaming requests, and maintaining support records.
• Responsible gaming: Monitoring account activity for indicators of problem gambling behaviour; enforcing deposit limits and self-exclusion requests; and supporting our obligations under the responsible gaming framework.
• Platform improvement: Analysing aggregate usage patterns to improve the rebate99 platform, identify technical issues, and optimise the member experience. This analysis is conducted on anonymised or pseudonymised data where possible.
• Legal obligations: Retaining records as required by applicable law, gaming regulations, and our operating licence; responding to lawful requests from regulatory or law enforcement authorities.

5. Legal Bases for Processing

rebate99 processes personal data under the following legal bases:

• Contractual necessity: Processing required to deliver the services described in the Terms & Conditions, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable law, including KYC/AML obligations, gaming licence requirements, and data retention mandates.
• Legitimate interests: Processing carried out for rebate99's legitimate business interests where those interests are not overridden by Member rights, including fraud prevention, platform security, and service improvement.
• Consent: Where rebate99 relies on consent as a legal basis (for example, for certain optional communications), you may withdraw consent at any time by contacting rebate99 support.

6. Cookies & Tracking

rebate99 uses cookies and similar technologies to operate and improve the platform. The following categories of cookies are used:

• Essential cookies: Required for the platform to function. These include session authentication tokens, load balancing cookies, and security cookies. Essential cookies cannot be disabled without impairing platform functionality.
• Analytical cookies: Used to understand aggregate usage patterns — page views, session duration, navigation paths, and feature usage. This data is processed in anonymised or pseudonymised form and is not used to identify individual members.
• Preference cookies: Store Member preferences such as language settings and display options between sessions.

rebate99 does not use third-party advertising cookies, behavioural targeting cookies, or social media tracking pixels. Your browsing activity on the rebate99 platform is not shared with external advertising networks.

Most browsers allow you to control cookie settings via the browser settings menu. Note that disabling essential cookies may affect your ability to log in to and use the rebate99 platform.

7. Data Sharing & Disclosure

rebate99 does not sell, rent, or trade your personal data to third parties for their marketing purposes. Personal data may be shared with third parties only in the following circumstances:

• Payment processors: Transaction data is shared with certified Malaysian payment processors (Touch n Go, Boost, DuitNow, FPX, GrabPay, USDT network) as required to process deposit and withdrawal requests. These processors operate under their own data protection obligations.
• KYC and compliance providers: Identity verification documents and personal data may be shared with regulated third-party KYC service providers and AML screening services to fulfil compliance obligations.
• Game providers: Certain technical data (session identifiers, game metadata) may be shared with certified game studios and live casino providers to deliver game content. Game providers do not receive your full identity or payment data.
• Legal and regulatory authorities: rebate99 may disclose personal data to government agencies, regulatory bodies, law enforcement authorities, or courts of competent jurisdiction where required by applicable law or in response to a lawful order.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of rebate99's assets, Member personal data may be transferred to the successor entity, subject to the same privacy protections.

8. Data Retention

rebate99 retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC data: Retained for a minimum of five (5) years following Account closure, as required by AML regulations and gaming licence obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the last communication.
• Technical and log data: Typically retained for twelve (12) months from the date of collection, unless required for longer by an ongoing investigation or legal proceeding.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Data Security

rebate99 implements technical and organisational security measures appropriate to the risk level associated with the processing of Member personal data. These measures include:

• SSL/TLS encryption for all data transmitted between Member devices and the rebate99 servers;
• Bcrypt or equivalent hashing of Member passwords — rebate99 does not store passwords in plain text;
• Access controls limiting internal access to personal data to authorised personnel on a need-to-know basis;
• Session token management with automatic expiry to limit the impact of session hijacking;
• Intrusion detection and monitoring systems to identify and respond to potential security incidents;
• Regular internal security reviews and vulnerability assessments.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. Members are encouraged to use a strong, unique password for their rebate99 Account and to enable two-factor authentication from Account Settings.

10. Your Rights

Subject to applicable data protection law, Members have the following rights in relation to their personal data held by rebate99:

• Right of access: You may request a copy of the personal data rebate99 holds about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data.
• Right of erasure: You may request deletion of your personal data in certain circumstances, subject to rebate99's legal retention obligations.
• Right to restrict processing: You may request that rebate99 restrict the processing of your data in certain circumstances.
• Right to data portability: Where technically feasible and legally required, you may request a copy of your personal data in a commonly used machine-readable format.
• Right to object: You may object to processing based on legitimate interests in certain circumstances.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact rebate99 customer support via live chat or email at [email protected]. rebate99 will respond to verified requests within a reasonable period, typically within 30 days. Identity verification will be required before personal data is accessed or amended.

11. Children & Minors

The rebate99 platform is strictly restricted to persons aged 21 and above. rebate99 does not knowingly collect personal data from persons under the age of 21. If rebate99 becomes aware that an Account has been registered by or on behalf of a person under 21, the Account will be immediately closed, any associated data will be deleted (subject to legal retention requirements), and the matter may be referred to appropriate authorities.

If you believe that a minor has registered an Account on the rebate99 platform, please report this immediately to rebate99 support.

12. Changes to This Policy

rebate99 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to Members via a prominent notice on the platform prior to the effective date of the change. Continued use of the rebate99 platform following the effective date constitutes acceptance of the revised policy.

The current version of this Privacy Policy is always accessible at rebate99.win/privacy-policy. The "Last Updated" date at the top of this document reflects the date of the most recent revision.

13. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to raise a complaint regarding rebate99's handling of your personal data, please contact rebate99 customer support:

• Live Chat: Available 24/7 from the rebate99 platform in English and Bahasa Malaysia.
• Email: [email protected]

rebate99 is committed to addressing privacy concerns promptly and in good faith. If you are not satisfied with rebate99's response, you may have the right to escalate the matter to the relevant data protection authority in the applicable jurisdiction.