1. Home
  2. Privacy Policy
fa99 Official Documents

Fa99 Privacy Policy – Our Commitment to Data Protection Malaysian Players

Fa99 takes the privacy and security of your personal data seriously. This document clearly explains what information we collect, why we need it, how it is used and protected, and your rights as the owner of that data. We have written this in plain, easy-to-understand language — no confusing legal jargon.

Updated: January 2026 Bahasa Melayu (ms-MY) Malaysia PDPA Compliance
Your Data, Your Rights
Protected to international standards
256-bit SSL encryption at all times
Data is never sold to third parties
Data access and deletion rights
Compliance with the Personal Data Protection Act 2010
Data Protection Summary

The Six Core Privacy Principles fa99 Stands By

This is not merely a principle on paper. It is the daily practice that fa99 upholds across every aspect of operations involving Malaysian player data.

Purpose-Specific Data Collection
fa99 only collects personal data that is genuinely necessary for platform operations — namely name, phone number, payment information, and activity records. We do not collect irrelevant data simply because it can be collected. Every data point held by fa99 has a clear and legitimate purpose.
256-bit SSL High-Grade Encryption
All data transmitted between your device and fa99's servers is protected with 256-bit SSL encryption — the same security standard used by leading Malaysian banking institutions. Data stored in fa99's databases is also encrypted to ensure it cannot be read even by unauthorised staff.
No Sale of Data to Third Parties
fa99 has never and will never sell, rent, or disclose your personal information to third parties for marketing or commercial purposes. Your data is not a product we trade in. We generate revenue through the betting services we provide — not by selling our players' information.
Strict Internal Access Controls
Access to fa99 player personal data is restricted solely to staff who require that information to carry out their duties — a strict "need to know" principle. fa99's systems log every access to sensitive data for audit purposes. Any staff member found misusing data access will face immediate disciplinary action.
Full Data Owner Rights Respected
As the owner of your own personal data, you have the right to access the information fa99 holds about you, correct any inaccuracies, request deletion of your data, and object to certain types of processing. fa99 is committed to processing all data rights requests within 30 calendar days.
Full Compliance with Malaysia PDPA 2010
fa99's Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing the processing of personal data in the country. We regularly review our privacy policies and practices to ensure they remain aligned with evolving legislation and the latest industry standards.
Contents
Last updated:
January 2026

Welcome to fa99's Privacy Policy. This document explains in detail how the fa99 platform collects, uses, stores, and protects your personal information. By registering for or using any fa99 service — including Sports Betting, Live Casino, baccarat, jackpot, slots, or badminton — you agree to the terms of this Privacy Policy. If you do not agree, please stop using the fa99 platform immediately and contact us to close your account.

Section 1

Introduction – Who fa99 Is and Why Privacy Matters

Fa99 is an online sports betting and casino platform operating in Malaysia, serving over 500,000 registered members nationwide. In the course of delivering our services, fa99 necessarily processes players' personal data to ensure the platform runs securely, smoothly, and fairly for everyone.

Fa99 is a "data controller" as defined under Malaysia's Personal Data Protection Act 2010 (PDPA). This means fa99 bears full responsibility for how your personal data is collected, used, and protected. We take this responsibility very seriously.

This Privacy Policy is written to answer the questions you should reasonably ask before trusting fa99 with your personal information — what we collect, why we need it, who can see it, how long we keep it, and what you can do if you are not comfortable with how we handle your data. We believe transparency is the foundation of trust, and trust is the foundation of our relationship with every fa99 member.

If you have any questions about this Privacy Policy at any time, our Malay-speaking fa99 support team is available via 24/7 live chat or email at support@fa99-khelo.com.

Section 2

Personal Data Collected by fa99

Fa99 collects various categories of personal data depending on how you interact with our platform. Below is a detailed breakdown of the data we collect and how it is gathered:

Data Categories Example Information How It Is Collected
Identity Full name, date of birth, national identity card number Registration form
Contact Malaysian phone number, email address Registration & profile
Financial Bank account numbers, e-wallet details (TnG, DuitNow, GrabPay, Boost, ShopeePay), deposit/withdrawal records Transactions
Platform Activity Betting records, games played, bonuses claimed, active hours Platform usage
Technical IP address, device type, operating system, web browser, cookie data Automatic
Communications Live chat transcripts, emails, complaint records and resolutions Customer Support

Sensitive Data: fa99 does not collect sensitive data such as medical information, religious beliefs, or sexual orientation. The information we collect is limited to what is necessary to operate the betting platform and comply with relevant legal requirements.

Section 3

How fa99 Uses Your Personal Data

Fa99 uses your personal data solely for the following purposes. Each use has a valid legal basis under Malaysia's PDPA:

  • Account Management: Creating and maintaining your fa99 account, verifying your identity, processing logins, and keeping your account secure from unauthorised access.
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, FPX (Maybank2u, CIMB Clicks), GrabPay, ShopeePay, and Boost, as well as handling your withdrawal requests.
  • Bonus & Promotion Administration: Calculating bonus eligibility and processing the weekly cashback, freebets, and other promotions you claim on the fa99 platform.
  • Customer Support: Resolving complaints, responding to enquiries, and providing technical support via live chat, email, and WhatsApp.
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, multi-accounting, money laundering, and bonus abuse.
  • Legal Compliance: Meeting reporting obligations to Malaysian authorities, including Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements.
  • Platform Improvement: Analysing usage patterns (in aggregate and without identifying individuals) to improve the user experience, platform speed, and game variety.
  • Service Communications: Sending you important notifications about your account, policy changes, relevant promotions, and responsible gaming reminders.

Marketing Note: fa99 does not use your personal data for third-party marketing. We only send communications related to fa99's own services. You can opt out of marketing communications at any time through your account settings or by contacting the fa99 support team.

Section 4

Data Sharing – When and With Whom fa99 Shares Your Information

Fa99 does not sell or disclose your personal data to third parties for commercial purposes. However, there are limited situations where fa99 needs to share your information with specific parties to keep the platform functioning properly:

  • Payment Service Providers: Required transaction information is shared with Malaysian payment gateways (such as FPX, DuitNow, and e-wallet providers) solely for the purpose of processing your deposits and withdrawals. These providers are bound by their own strict privacy and data protection policies.
  • Third-Party Game Providers: For Live Casino and slots games (such as Pragmatic Play and PG Soft), only minimal session data is required to maintain continuity of play. These providers do not receive your full financial or identity information.
  • Malaysian Authorities: fa99 complies with all court orders, law enforcement directives, and valid regulatory reporting requirements. Should Malaysian authorities request your information as part of a legitimate investigation, fa99 is legally obligated to comply.
  • Identity Verification Services: During the KYC (Know Your Customer) process, your identity information may be verified through licensed third-party verification services that comply with Malaysia's PDPA.

In all of the data-sharing scenarios above, fa99 ensures that only the minimum necessary information is shared, and all parties receiving your data are bound by strict confidentiality agreements with fa99.

Fa99 has never and will never share your personal data with marketing companies, data aggregators, or any party that has no legitimate operational need in connection with fa99's services.

Section 5

Fa99's Data Security Measures

Fa99 continuously invests in security infrastructure to ensure your personal data is always protected against both external and internal threats. Below are the protection layers we have in place:

  • Transit Encryption: All communications between your device and fa99's servers are protected by TLS 1.3 (256-bit SSL) protocol. This means your data cannot be intercepted while in transit over the internet.
  • Storage Encryption: Sensitive data stored in fa99's databases — including payment information and identification numbers — is encrypted using the AES-256 standard to ensure it remains unreadable even if the database itself is accessed without authorisation.
  • Internal Access Controls: A role-based access control (RBAC) system ensures that only staff with a legitimate work requirement can access players' personal data. All access is logged and continuously monitored.
  • Two-Factor Authentication (2FA): All fa99 staff accessing internal systems are required to use two-factor authentication. fa99 members are also encouraged to enable 2FA on their accounts for added protection.
  • Regular Security Testing: fa99 conducts regular penetration testing and independent security audits to identify and address any vulnerabilities before they can be exploited.
  • Incident Response Plan: fa99 has a comprehensive incident response plan to handle data breach situations. Should a security incident occur that affects your personal data, we will notify you within the timeframe required under Malaysian law.

Shared Responsibility: While fa99 implements robust protections on our end, the security of your account also depends on your own actions. Please use a strong, unique password for your fa99 account, never share your login credentials with anyone, and always log out after each session — especially on shared devices.

Section 6

Data Retention Period – How Long fa99 Keeps Your Information

Fa99 retains your personal data only for as long as necessary for the stated purpose, or as required by Malaysian law. Our general principle is "keep what is needed, delete what is not":

  • Active Account Data: For as long as your fa99 account remains active, all profile information, transaction records, and betting activity records are retained to ensure the service functions properly and for internal audit purposes.
  • Financial Transaction Records: Deposit, withdrawal, and bonus transaction records are retained for seven (7) years from the date of the transaction, as required by Malaysia's anti-money laundering laws and applicable tax requirements.
  • Closed Account Data: Once a fa99 account is closed at a member's request, personal data no longer required for legal purposes will be deleted or anonymised within 90 days. Financial transaction records are retained for the seven-year period outlined above.
  • Communication Data: Live chat transcripts and email records are retained for two (2) years for service quality purposes and to assist in resolving any disputes that may arise.
  • Cookie & Technical Data: Session cookie data is deleted when you log out. Aggregated analytics data that does not identify individuals may be retained for a longer period for platform improvement purposes.
Section 7

Your Rights as a fa99 Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data that fa99 processes. Below are those rights and how to exercise them:

Access Rights
You have the right to request a copy of the personal data fa99 holds about you. fa99 will provide this information in a readable format within 30 days of receiving your request. Send your request by email to support@fa99-khelo.com with the subject line "Data Access Request".
Right to Correction
If you find that the personal data fa99 holds about you is inaccurate or out of date, you have the right to request a correction. You can update most of your profile information directly through your fa99 account settings. For corrections that require document verification, please contact our support team.
Right to Erasure
You may request the deletion of your personal data once it is no longer needed for its original purpose. However, deletion requests may not be fully fulfilled if the data is required for legal compliance — for example, transaction records that must be retained for seven years.
Right to Object
You have the right to object to the processing of your personal data for specific purposes — particularly marketing communications. You can opt out of receiving promotional emails or messages from fa99 at any time by clicking the "unsubscribe" link in any email or by contacting our support team.
Data Portability Rights
You have the right to receive the personal data you have provided to fa99 in a structured, commonly used format. This makes it easier for you to transfer your data should you choose to move to another platform. Data portability requests can be submitted via fa99's support email.
Right to Lodge a Complaint with the Authorities
If you believe fa99 has processed your personal data unlawfully or in breach of Malaysia's PDPA, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia. fa99 encourages you to contact us first so we can address any concerns before a formal complaint is filed.
Section 8

Cookies, Tracking & Similar Technologies on the fa99 Platform

Fa99 uses cookies and similar tracking technologies to keep the platform running smoothly, enhance the user experience, and understand how players interact with our platform. Here are the types of cookies we use:

  • Essential Cookies (Required): These cookies are required for the fa99 platform to function — including maintaining your login session, saving language preferences, and enabling security features. They cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting information on how you use the fa99 platform — pages visited, time spent, and errors encountered. This information is used in aggregate form (non-identifiable) to improve the platform.
  • Functional Cookies: Saving your preferences such as favourite games, display settings, and notification choices so you do not need to reconfigure them each time you log in to fa99.
  • Security Cookies: Used to identify suspicious activity, prevent fraud, and protect your account from unauthorised access attempts.

You can manage or disable cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the fa99 platform. fa99 does not use third-party cookies for advertising or cross-site tracking.

Section 9

Child Privacy Protection – fa99's Strict Policy

Fa99 is a betting platform intended exclusively for individuals aged 18 and above. fa99 does not knowingly collect or process personal data from children or minors under the age of 18.

If fa99 discovers that personal data belonging to an individual under the age of 18 has been collected without valid knowledge or consent, we will take immediate action to delete that data and close the account in question. Any balance in that account will be handled in accordance with procedures prescribed by Malaysian law.

To Parents and Guardians: If you have reason to believe that your child or an underage dependent has registered a fa99 account, please contact us immediately at support@fa99-khelo.com. We will respond promptly and take the appropriate steps to protect that child's interests.

Section 10

Fa99 Privacy Policy Amendments

Fa99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or developments in the data security industry.

  • Any material amendments to this Privacy Policy will be communicated to all fa99 members via their registered email and in-platform notifications at least 14 days before the changes take effect.
  • The latest update date of this Privacy Policy is always displayed at the top of this page so you know which version you are reading.
  • Continued use of the fa99 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
  • If you disagree with any changes to the Privacy Policy, you have the right to close your fa99 account before those changes take effect.
Section 11

Contact fa99 for Your Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how fa99 handles your personal data, please reach out to us through the channels below. Our Malay-speaking fa99 support team is available 24 hours a day, 7 days a week.

Live Chat
Active 24/7 – Click the live chat icon at the bottom right corner of the fa99 platform
Privacy Email
support@fa99-khelo.com – Subject: "Data Privacy Enquiry"
Response Time
General enquiries: within 24 hours | Data rights requests: within 30 days

For formal data rights requests (access, correction, deletion), please send an email including your full name, fa99 account number, and a clear description of your request. This allows us to verify your identity and process your request more quickly and accurately.

A Note from fa99

Why Data Privacy Is More Than a Formality at fa99

In the online betting industry, trust is the most valuable currency there is. Malaysian players need to be confident that when they register with fa99, their personal information — from their full name to their bank account number — is in the right hands and used in the right way. Without that trust, nothing else matters.

That is why fa99 does not view this Privacy Policy as merely a legal document we are required to have. It reflects our genuine values. When you deposit funds via Touch 'n Go eWallet or DuitNow, when you place a bet on a Malaysia Super League or Thomas Cup match, when you claim your weekly cashback — every one of those interactions involves data you have entrusted to fa99. We do not take that trust lightly.

One of the things we are most proud of at fa99 is our early decision not to monetise player data. Some platforms use their users' data to sell "profiles" to advertisers or third-party marketing companies. fa99 has deliberately chosen to reject that business model. We believe the best way to grow fa99 is by giving players a genuinely great experience — not by selling their information to others.

On the technical side, fa99 invests seriously in security infrastructure. Our 256-bit SSL encryption is not just a marketing feature — it is a real layer of defence protecting every transaction you make. Our internal access controls ensure that, for example, a marketing manager has no access to players' financial transaction records, simply because it is not relevant to their role.

Finally, we want to remind you that data privacy is a shared responsibility. While fa99 puts every protection in place on our end, you as a member also play a vital role — by using a strong password, not sharing your login credentials, and reporting to us promptly if you suspect anything is wrong. Together, we can keep your fa99 account safe and secure at all times.

Fa99's Commitment to Malaysia PDPA Compliance

Fa99's Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). fa99 processes your personal data solely for platform operations, transaction processing, and legal compliance. All data is protected with 256-bit SSL encryption and stored on secure servers. You have the right to access, correct, or request deletion of your personal data at any time.

For privacy-related enquiries, contact us at Frequently Asked Questions or directly via fa99's support email. You may also visit Terms & Conditions us for full details on the terms governing use of the fa99 platform.

Frequently Asked Questions

Frequently Asked Questions about fa99's Privacy Policy

No. fa99 has never sold, rented, or disclosed your personal data to any third party for marketing or commercial purposes, and never will. Your data is only shared with parties necessary for the operation of the platform — namely Malaysian payment gateway providers when processing your transactions, game providers for Live Casino or slots sessions, and Malaysian authorities if required by law. In all cases, only the minimum necessary information is shared.

To request a copy of your personal data, send an email to support@fa99-khelo.com with the subject line "Data Access Request", along with your full name and fa99 account number for identity verification. fa99 will process your request and deliver the relevant information in a readable format within 30 calendar days of receiving it. This service is provided free of charge for reasonable requests.

Yes, you may request the deletion of your personal data. However, please note that such requests may not be fulfilled in full under all circumstances. Data required for legal compliance — such as financial transaction records that must be retained for seven years under Malaysia's anti-money laundering laws — cannot be deleted before the mandatory retention period expires. Data not subject to any legal retention requirement will be deleted within 90 days of the request date. Closing your fa99 account is the first step in the data deletion process.

fa99 has a comprehensive incident response plan in place. Should a security incident occur that affects your personal data, fa99 will take immediate steps to contain the incident, assess the scope of data affected, notify impacted players via email or in-platform notification within the timeframe required under Malaysian law, and report the incident to the relevant authorities where necessary. fa99 will also advise you on steps you can take to protect yourself, such as changing your account password.

fa99 sends service-related communications — including promotional notifications, bonus reminders, and account information — to registered members. You can manage these communication preferences through your fa99 account settings or by contacting our support team. fa99 does not use your data for third-party advertising and does not participate in any ad network that tracks you across other websites. The cookies we use are for the fa99 platform's own functionality, not for external advertising.

Your payment information — including bank account numbers, Touch 'n Go eWallet details, DuitNow, GrabPay, ShopeePay, and Boost — is protected by multiple layers of security at fa99. All such information is encrypted in transit using 256-bit SSL and stored in encrypted form in our database using the AES-256 standard. fa99 does not store full card numbers or CVV details — all transactions are processed through licensed and registered payment gateways in Malaysia. fa99 staff also do not have access to your full payment information; only a masked version (e.g. ***1234) is visible for identification purposes.
Your Data Is Safe with fa99

Join fa99 with Complete Confidence — Your Privacy is Guaranteed

Fa99 safeguards your personal data with 256-bit SSL encryption, a strict privacy policy, and an unwavering commitment to Malaysia's PDPA. Register for free today and enjoy a safe, fair, and responsible betting experience.

Register Free Now Log In

Free registration · 256-bit SSL · Privacy guaranteed · 24/7 Malay language support

Bahasa Melayu