Official digi999 Documents

Digi999 Privacy Policy – Personal Data Protection for Malaysia Players

Q: Does digi999 share my data with other companies for advertising purposes?

No. digi999 never sell, rent, or share your personal data with third-party companies for advertising or marketing purposes. We do not work with ad networks that use user data for targeted advertising. Your data is used solely to operate the digi999, process your transactions, and provide customer support. If you have ever received marketing communications from digi999, it is because you provided explicit consent during registration or through your account settings.

Q: What happens to my data if I close my digi999 account?

When you close your account digi999, we will deactivate your account immediately so you can no longer log in. However, your personal data will not be deleted right away, as there are statutory data retention obligations we are required to comply with. Your financial transaction records will be retained for a minimum of 7 years. KYC data will be retained for a minimum of 5 years. Once the mandatory retention period has lapsed, your data will be automatically deleted or anonymised according to the schedule set out. You may contact privacy@digi999.xyz for more details on the specific retention periods applicable to each category of your data.

Q: Does digi999 store my payment details such as bank account numbers?

digi999 store the payment details needed to process your transactions, such as your account holder name and bank or e-wallet account number — this is necessary to ensure withdrawals are sent to the correct account and in the correct name. We do not, however, store your online banking password, e-wallet PIN, full credit card number, or any information that could be used to directly access your financial accounts. All payment information we retain is encrypted using 256-bit SSL encryption and protected by strict access controls.

Q: What should I do if I suspect my digi999 account has been accessed without my authorisation?

If you suspect your account digi999 your account has been accessed without your authorisation, take the following steps immediately: First, change your account digi999 your password immediately to a strong, unique one. Next, enable two-factor authentication (2FA) if you have not already done so. Then, contact our support team digi999 via 24/7 live chat or email support@digi999.xyz and report the incident with as much detail as possible. We will promptly review your account activity logs, suspend any suspicious transactions, and help you secure your account again. We take all reports of unauthorised access very seriously and will respond without delay.

At digi999, protecting your personal data is not merely a legal obligation — it is a genuine commitment we uphold every day. This Privacy Policy clearly sets out what we collect, how we use it, and your full rights as a member.

SSL

256-Bit Data Encryption

PDPA

2010 Malaysia Compliant

Sale of Data to Third Parties

24/7

Security Monitoring

Updated: January 2026 Bahasa Melayu (ms-MY) Malaysia PDPA 2010 Compliant

digi999 ("we", "platform") is the data controller responsible for the personal information you provide when using our online sports betting and casino platform. This Privacy Policy has been drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and sets out our privacy practices in full and with transparency.

We understand that your trust is the most valuable asset to digi999. When you make your first MYR20 deposit, place a bet on a weekend Malaysia Super League match, or play blackjack at our Live Casino — you are trusting us not just with your money, but with your personal information. That trust is something we never take lightly.

This Privacy Policy applies to all information collected through the digi999.xyz website, mobile application digi999 (if any), and all our official communication channels. By using the digi999, you agree to the practices described in this Privacy Policy.

🛡️ How digi999 Protects Your Privacy

Six layers of protection we have built to ensure the personal data of every digi999 member remains safe and secure at all times.

Banking-Grade 256-Bit SSL Encryption

Every bit of data travelling between your device and our servers digi999 protected with 256-bit SSL encryption — the same standard used by Malaysia's leading banks.

Full HTTPS across all pages
SSL certificate verified by a trusted certificate authority
No data is transmitted in plain text format
End-to-end encryption for all transactions

Secure and Segmented Data Storage

Your personal data is stored on secured servers with strict, segmented access controls — meaning each type of data can only be accessed by the systems that specifically require it.

Databases encrypted at the storage level
Data segregation by sensitive category
Strict role-based access controls
Access logs are monitored and audited on a regular basis

Full Compliance with Malaysia PDPA 2010

digi999 fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing the collection, use, and storage of personal data in Malaysia.

Data collection only with valid consent
Purposes for data use are clearly stated
Guaranteed rights to data access and correction
Data Protection Officer appointed internally

Strict No Data Sale Policy

digi999 has never and will never sell, rent, or share your personal data with any third party for marketing or commercial purposes without your explicit consent.

Data is not sold to third-party advertisers
No sharing with profiling companies
Player data is not used for any purposes outside of digi999
Confidentiality agreements with all vendor partners

Data Anonymisation and Collection Minimisation

We only collect data that is strictly necessary for the operation of the platform digi999. Data that is no longer required is deleted or anonymised according to a set schedule.

Data minimisation principles are fully observed
Analytics data is anonymised before processing
Automatic deletion of expired data
Regular reviews of stored data

Prompt Data Breach Notification

In the event of any security incident involving member data digi999, we are committed to notifying affected members and the relevant authorities within the timeframe required by law.

Documented incident response plan
Member notification within 72 hours
Reporting to the JPDP Malaysia when required
Immediate and transparent remedial action

📋 digi999 Full Privacy Policy

The full content of our privacy policy is written in plain language that all Malaysian players can easily understand.

Information We Collect

digi999 collect your personal information through several different methods throughout your use of our platform. We classify the information collected into a number of key categories:

Information You Provide Directly:

Registration Information: Full name, mobile phone number, email address, date of birth, and the username you chose when registering your account digi999
Identity Verification (KYC) Information: Malaysian Identity Card number (MyKad), copies of identification documents, and supporting documents such as bank statements or utility bills when required for the verification process
Payment Information: Bank account or e-wallet details (account holder name, account number) used for deposits and withdrawals via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX. We do not store your e-wallet PIN or password
Communications with Us: Records of live chat conversations, emails, and any other correspondence with our support team digi999

Automatically Collected Information:

Technical Data: IP address, browser type and version, device operating system, screen resolution, and time zone
Platform Activity Data: Betting records, casino game history, total deposit and withdrawal amounts, login and logout times, and page navigation
Cookie Data: Session cookies, preference cookies, and platform usage analytics data as further described in Section 5

Important Note: digi999 never ask for your bank account password, e-wallet PIN, or full credit card number through any communication channel, including live chat, email, or phone. If anyone claiming to be from digi999 requesting such information, it is a fraudulent attempt — please report it to us immediately.

How We Use Your Data

digi999 uses personal information collected solely for the legitimate purposes stated below. We do not use your data for any other purpose without your consent:

Purpose of Use	Types of Data Used	Legal Basis
Member account management and verification	Registration information, KYC	Performance of contract
Processing of deposits and withdrawals	Payment information, identity	Performance of contract
Age verification and KYC	Date of birth, identity documents	Legal obligations
Fraud prevention and security	Technical data, account activity	Legitimate interests
Customer support and complaint resolution	Communication records, account activity	Performance of contract
Legal and regulatory compliance	All relevant data categories	Legal obligations
Platform enhancement and development	Anonymised usage data	Legitimate interests
Marketing communications (with consent)	Email, phone number	Your consent

For marketing communications such as new promotions, sports offers, or platform updates, digi999 will only contact you if you have provided explicit consent at the time of registration or through your account settings. You may withdraw this consent at any time via your account settings or by contacting our support team.

Data Sharing with Third Parties

digi999 do not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes under any circumstances. However, there are limited situations in which we may share necessary information:

Third-Party Service Providers (Sub-Processors):

We work with a select group of carefully vetted third-party service providers to help operate the platform digi999. This includes:

Payment Gateway Providers: To process transactions via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX — they only receive the information required to complete each transaction
Game Software Providers: Casino and sports software providers that require session data to ensure game integrity
KYC Verification Services: For identity verification and document checks required by law
Infrastructure and Hosting Services: Cloud and hosting service providers that store and process data on our behalf

All sub-processors are bound by strict confidentiality and data protection agreements. They are permitted to use your data only for the purposes we specify and nothing beyond that.

Legally Mandated Disclosure:

digi999 may be required to disclose certain information to the relevant Malaysian authorities upon a lawful request under applicable law. This includes responses to court orders, law enforcement requests, or obligations under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001. In all such cases, we will disclose only the minimum information necessary.

Security and Data Protection

digi999 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or accidental destruction.

The technical security measures we employ include:

256-bit SSL/TLS encryption for all data in transit between your device and our servers digi999
Encryption at rest for databases containing sensitive information
Enterprise-grade firewall and intrusion detection system (IDS) monitored 24/7
Two-factor authentication (2FA) is available for all member accounts and is mandatory for internal administrative accounts
Regular security vulnerability scans and penetration testing conducted by independent third parties
Segmented networks to isolate systems containing sensitive data from publicly accessible systems

On the organisational side, digi999 conducts data security training for all staff, restricts access to personal data strictly on a need-to-know basis, and performs background checks on all personnel handling sensitive data.

Shared Responsibility: Although digi999 takes all reasonable steps to protect your data, data security is a shared responsibility. You also play a role by using a strong and unique password for your digi999 yours, not sharing your login credentials, and ensuring that the devices you use to access the platform are always up to date with the latest security patches.

Cookies and Tracking Technologies

Platform digi999 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how our platform is used. We use the following types of cookies:

Essential Cookies (Required): Required for core platform functions such as login verification, session security, and language preference memory. These cookies cannot be disabled as the platform will not function properly without them
Preference Cookies: Saves your preferences such as favourite sports, selected odds display, and other platform settings so you do not have to reconfigure them each time you log in
Analytics Cookies: Helping us understand how members use the platform digi999 — most visited pages, time spent, and navigation flow. This data is anonymised and used solely for platform improvement
Security Cookies: Used to detect suspicious activity, prevent unauthorised access, and protect your account from account takeover attempts

You can manage your cookie settings through your web browser settings. However, disabling essential cookies will affect the functionality of the platform digi999 and may prevent you from logging in or using certain features. digi999 does not use third-party cookies for targeted advertising purposes.

Data Retention and Deletion

digi999 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required under applicable Malaysian law.

Data retention period guidelines at digi999:

Active Account Data: Retained for the duration your account is active and for several years after account closure for legal compliance purposes
Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax legal requirements
KYC and Identity Verification Records: Retained for a minimum of 5 years after the business relationship ends, in line with AML/CFT requirements
Support Communication Logs: Retained for 3 years for complaint resolution and service improvement purposes
Anonymised Analytics Data: May be retained longer as it no longer contains personally identifiable information

When your personal data is no longer needed and there is no legal obligation to retain it, digi999 will securely delete or anonymise it using methods that ensure the data cannot be recovered. You may request early deletion of your data subject to any legal obligations still in force — see Section 7 for information on your rights.

Your Rights Under Malaysia's PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by digi999:

⚖️ Your Privacy Rights as a digi999 Member

Rights guaranteed to you under Malaysia's PDPA 2010 and digi999's commitment to upholding them.

Right to Access Data

You have the right to request a copy of the personal data we hold about you. digi999 will process access requests within 21 days and provide information in a readable format.

Right to Data Rectification

If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Basic information can be updated directly through your account settings digi999 your.

Right to Data Erasure

You may request the deletion of your personal data, subject to applicable legal retention obligations. All requests will be assessed and responded to within 30 business days.

Right to Withdraw Consent

Where data processing is based on your consent (such as marketing communications), you may withdraw that consent at any time through your account settings or by contacting us.

Right to Object to Processing

In certain circumstances, you have the right to object to the processing of your personal data by digi999, particularly where it relates to direct marketing interests.

Right to Lodge a Complaint with the JPDP

If you believe your privacy rights have been violated by digi999 and we have not resolved the matter to your satisfaction, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia.

How to Submit a Privacy Rights Request: To submit any of the above privacy rights requests, please contact our Data Protection Officer digi999 via email at privacy@digi999.xyz, stating the type of request, your account number, and the relevant identity verification details. We will acknowledge your request within 3 business days and provide a full response within the timeframe stipulated by the PDPA 2010.

Children's Data and Age Restrictions

Platform digi999 is strictly limited to individuals aged 18 and above. We do not knowingly or intentionally collect, process, or store the personal data of anyone under the age of 18.

As part of the registration process, we require date of birth verification and reserve the right to request age verification documents at any time. If we find that a member registered while under the age of 18, we will:

Closing the account immediately without prior notice
Promptly delete all associated personal data
Voiding all winnings obtained during any period of underage access
Refunding any original deposits following identity verification and through the appropriate process

If you are a parent or guardian and believe your child under the age of 18 has registered an account on digi999, please contact us immediately at privacy@digi999.xyz with the relevant information so we can take prompt action.

Changes to This Privacy Policy

digi999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to our services.

When we make material changes to this Privacy Policy, we will:

Updating the "Last Updated" date at the top of this document
Displaying a prominent notice on the platform's main page digi999 at least 14 days before the changes take effect
Sending email notifications to all active members for significant changes to how we use or protect your data
In cases where changes require new consent, we will seek your explicit consent before proceeding with the processing of that data

Continued use of the platform digi999 after the effective date of any changes constitutes your acceptance of the amended Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. All previous versions of our Privacy Policy are available upon request through our customer support team.

Contact Us About Privacy

If you have any questions, concerns, or requests regarding your privacy and personal data protection at digi999, a number of channels are available to you:

digi999 Data Protection Officer: privacy@digi999.xyz — for all formal requests relating to privacy rights, data access, rectification, or deletion
General Customer Support: support@digi999.xyz or 24/7 live chat in Bahasa Malaysia — for general enquiries about privacy and how we handle your data
Complaint to Malaysia's JPDP: If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia at www.pdp.gov.my

We are committed to responding to all privacy enquiries seriously and within a reasonable timeframe. Our target response times are 3 working days for general enquiries and 21 working days for formal data access requests. digi999 takes every privacy-related complaint seriously and will thoroughly investigate each case before providing a full and transparent response.

The effective date of this Privacy Policy is 1 January 2026. This Policy supersedes all previous versions of the Privacy Policy digi999.

❓ FAQ – digi999 Privacy Policy

Answers to the most frequently asked questions from digi999 members about privacy and data protection.

No. digi999 never sell, rent, or share your personal data with third-party companies for advertising or marketing purposes. We do not work with ad networks that use user data for targeted advertising. Your data is used solely to operate the digi999, process your transactions, and provide customer support. If you have ever received marketing communications from digi999, it is because you provided explicit consent during registration or through your account settings.

Yes, you have the right to request deletion of your personal data under Malaysia's PDPA 2010. However, please note that certain legal obligations require us to retain specific categories of data for prescribed periods — for example, financial transaction records must be kept for a minimum of 7 years under Malaysian financial law. To submit a data deletion request, email privacy@digi999.xyz with your account number and the type of data you wish to have deleted. We will review your request and respond within 30 working days with details on what can be deleted immediately and what must be retained for legal reasons.

When you close your account digi999, we will deactivate your account immediately so you can no longer log in. However, your personal data will not be deleted right away, as there are statutory data retention obligations we are required to comply with. Your financial transaction records will be retained for a minimum of 7 years. KYC data will be retained for a minimum of 5 years. Once the mandatory retention period has lapsed, your data will be automatically deleted or anonymised according to the schedule set out. You may contact privacy@digi999.xyz for more details on the specific retention periods applicable to each category of your data.

digi999 store the payment details needed to process your transactions, such as your account holder name and bank or e-wallet account number — this is necessary to ensure withdrawals are sent to the correct account and in the correct name. We do not, however, store your online banking password, e-wallet PIN, full credit card number, or any information that could be used to directly access your financial accounts. All payment information we retain is encrypted using 256-bit SSL encryption and protected by strict access controls.

To unsubscribe from promotional emails and marketing communications from digi999, you have a few options. The simplest is to log in to your digi999 your account, go to your account settings, and disable the marketing communications option. Alternatively, every promotional email we send includes an "unsubscribe" link at the bottom which you can click to withdraw your consent. You may also contact support digi999 via live chat or email at support@digi999.xyz to request that we manually update your communication preferences. Please note that even after unsubscribing from marketing communications, we may still send important transactional emails such as deposit confirmations, withdrawal notifications, and account security updates.

If you suspect your account digi999 your account has been accessed without your authorisation, take the following steps immediately: First, change your account digi999 your password immediately to a strong, unique one. Next, enable two-factor authentication (2FA) if you have not already done so. Then, contact our support team digi999 via 24/7 live chat or email support@digi999.xyz and report the incident with as much detail as possible. We will promptly review your account activity logs, suspend any suspicious transactions, and help you secure your account again. We take all reports of unauthorised access very seriously and will respond without delay.

Your Data Is Safe. Ready to Get Started?

Digi999 safeguards your privacy with 256-bit SSL encryption and full PDPA 2010 compliance. Register today and enjoy safe, fair, and entertaining Sports Betting and online casino games designed for Malaysia players.

Minimum deposit MYR20 | DuitNow, Touch 'n Go, GrabPay, FPX | 18+ only | Bet responsibly