Section 1
1. Introduction
This Privacy Policy ("Policy") describes how Syabas99 ("we", "us", "our") collects, uses, discloses, stores, and protects the personal data of individuals ("you", "User", "Player") who access or use the Syabas99 website at syabas99.cam and all associated services, features, and communications.
Syabas99 is committed to protecting the privacy of our users in a manner consistent with applicable data protection legislation and industry best practice. This Policy applies to all personal data processed by Syabas99 in connection with the operation of the platform, including data collected during account registration, identity verification, financial transactions, customer support interactions, and general platform usage.
By registering an account with Syabas99 or by continuing to use our platform after this Policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Syabas99 platform.
Section 2
2. Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:
| Term |
Meaning |
| "Personal Data" |
Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers. |
| "Processing" |
Any operation performed on personal data, including collection, storage, use, disclosure, transfer, deletion, or any combination thereof. |
| "Data Controller" |
Syabas99, the entity that determines the purposes and means of processing personal data collected through the platform. |
| "Data Processor" |
A third party engaged by Syabas99 to process personal data on our behalf and under our documented instructions. |
| "Consent" |
A freely given, specific, informed, and unambiguous indication of agreement by the data subject to the processing of their personal data. |
| "KYC" |
Know Your Customer — the identity and age verification process conducted by Syabas99 as required by applicable anti-money laundering and age restriction obligations. |
| "Cookie" |
A small text file placed on a User's device by the Syabas99 website for purposes including session management, analytics, and functional preferences. |
Section 3
3. Personal Data We Collect
3.1 Data Provided Directly by You
Syabas99 collects personal data that you voluntarily provide when you register an account, complete identity verification, make deposits or withdrawals, contact our support team, or participate in promotions. This includes:
- Full legal name, date of birth, and gender
- Residential address, including postcode, city (e.g., Kuala Lumpur, Petaling Jaya, Johor Bahru, Penang, Shah Alam), and country
- Email address and mobile phone number
- Government-issued identification document details (MyKad number, passport number) submitted during KYC
- Payment method details, including bank account information, e-wallet account identifiers for Touch 'n Go eWallet, Boost, GrabPay, and DuitNow, and card details where applicable
- Username, password (stored in hashed form only), and security preferences
- Communications submitted through live chat, email, or WhatsApp support channels
3.2 Data Collected Automatically
When you access and use the Syabas99 platform, certain technical data is collected automatically by our systems. This includes:
- IP address and approximate geolocation derived therefrom
- Device type, operating system, browser type and version
- Session timestamps, pages visited, game sessions accessed, and clickstream data
- Wagering history, deposit and withdrawal records, and bonus utilisation records
- Referral source data indicating how you arrived at the Syabas99 platform
3.3 Data from Third Parties
Syabas99 may receive personal data from third-party service providers in the course of operating the platform, including payment processors, identity verification agencies, fraud prevention services, and analytics providers. Such data is handled in accordance with this Policy and is used only for the purposes specified herein.
Section 4
4. Lawful Basis for Processing
Syabas99 processes personal data only where a valid lawful basis exists. The applicable lawful bases for our processing activities are as follows:
| Lawful Basis |
When We Rely on It |
| Contractual Necessity |
Processing required to perform our obligations under the Terms & Conditions, including account management, payment processing, and service delivery. |
| Legal Obligation |
Processing required to comply with applicable law, including KYC and anti-money laundering obligations, age verification, and regulatory reporting. |
| Legitimate Interests |
Processing necessary for fraud detection, security monitoring, platform improvement, and responsible gambling monitoring, where such interests are not overridden by your rights. |
| Consent |
Processing for marketing communications and non-essential cookies, where you have provided explicit and informed consent that may be withdrawn at any time. |
Section 5
5. How We Use Your Personal Data
Syabas99 uses the personal data we collect for the following specific purposes:
- Account creation and management: Setting up, maintaining, and closing your Syabas99 account; authenticating your identity on each login.
- Identity and age verification: Conducting KYC checks to confirm you are aged 21 or above and that your identity matches your registration details.
- Payment processing: Facilitating deposits via FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency channels; processing withdrawal requests to verified accounts.
- Fraud detection and prevention: Monitoring account activity for indicators of fraudulent behaviour, money laundering, bonus abuse, or multi-accounting.
- Responsible gambling compliance: Identifying patterns consistent with problem gambling behaviour and applying responsible gambling tools where appropriate.
- Customer support: Responding to enquiries, resolving disputes, and processing requests submitted through Live Chat, WhatsApp, and email.
- Legal and regulatory compliance: Meeting obligations imposed by applicable laws, including anti-money laundering regulations and record-keeping requirements.
- Platform improvement: Analysing usage patterns to improve game selection, interface design, payment reliability, and support quality.
- Marketing communications (where consent has been given): Sending promotional offers, bonus notifications, and platform updates via email or WhatsApp. You may opt out at any time.
💡
Marketing Opt-Out: If you no longer wish to receive marketing communications from Syabas99, you can unsubscribe at any time via the link in any marketing email, by updating your account preferences, or by contacting our support team. Opting out of marketing will not affect transactional communications related to your account.
Section 6
6. Data Sharing & Disclosure
Syabas99 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:
6.1 Service Providers and Data Processors
We engage trusted third-party service providers to assist in operating the Syabas99 platform. These providers act as Data Processors and process personal data only under our documented instructions and subject to appropriate data protection agreements. Categories include:
- Payment processing partners (banks, e-wallet operators, card schemes, cryptocurrency processors)
- Identity verification and KYC service providers
- Cloud hosting and infrastructure providers
- Fraud detection and cybersecurity services
- Customer support platform providers
- Analytics and platform performance monitoring tools
6.2 Legal and Regulatory Authorities
Syabas99 may disclose personal data to competent governmental, regulatory, or law enforcement authorities where required or permitted by applicable law — for example, in response to a court order, a regulatory investigation, or to fulfil anti-money laundering reporting obligations. We will notify you of such disclosures where we are legally permitted to do so.
6.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of Syabas99's business, personal data held by Syabas99 may be transferred to the acquiring entity as part of that transaction, subject to appropriate confidentiality obligations and this Policy continuing to apply.
⚠️
No Data Sales: Syabas99 does not, and will not, sell or rent your personal data to third-party advertisers, data brokers, or marketing organisations under any circumstances.
Section 7
7. Cookies & Tracking Technologies
7.1 What We Use
Syabas99 uses cookies and similar tracking technologies (including session tokens, local storage, and analytics pixels) on the platform. These technologies are used to maintain your login session, remember your preferences, analyse usage patterns, and detect fraudulent or abnormal activity.
7.2 Categories of Cookies
| Cookie Type |
Purpose |
Can Be Disabled? |
| Essential |
Required for login sessions, security tokens, and core platform functionality. Without these, the platform cannot operate correctly. |
No — essential for operation |
| Functional |
Store user preferences such as language settings, display options, and notification choices between sessions. |
Yes — via browser settings |
| Analytics |
Collect anonymised data on how users navigate the platform, which games are most accessed, and where technical issues occur. Used to improve platform quality. |
Yes — with consent |
| Security |
Detect and prevent fraudulent logins, bot activity, and suspicious account behaviour patterns. |
No — essential for security |
You may manage cookie preferences through your browser settings. Please note that disabling functional or analytics cookies may affect your experience on the platform but will not prevent you from accessing core services.
Section 8
8. Data Retention
Syabas99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
- Account data and KYC documents: Retained for the duration of your Account and for a minimum of five (5) years following account closure, as required by anti-money laundering regulations.
- Transaction records (deposits, withdrawals, wagers): Retained for a minimum of five (5) years from the date of the transaction.
- Customer support communications: Retained for three (3) years from the date of the interaction, unless required longer for dispute resolution purposes.
- Marketing consent records: Retained until consent is withdrawn, plus three (3) years thereafter as evidence of prior consent.
- Technical log data: Retained for twelve (12) months from collection, unless required for an ongoing security investigation.
At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is not technically feasible, data is segregated and access restricted pending secure deletion at the next available opportunity.
Section 9
9. Data Security Measures
Syabas99 implements a range of technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include, but are not limited to:
- 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
- Encryption of sensitive data fields at rest within our database infrastructure
- One-way cryptographic hashing of all user passwords — passwords are never stored in readable form
- Multi-factor authentication options for account access
- Role-based access controls limiting staff access to personal data to only those with a legitimate operational need
- Regular security audits, penetration testing, and vulnerability assessments by qualified external parties
- Real-time monitoring for anomalous access patterns and potential data breach indicators
- Documented incident response procedures to address data security incidents promptly
In the event of a data breach that is likely to result in a risk to your rights and freedoms, Syabas99 will notify affected users without undue delay and, where required, report the breach to the relevant supervisory authority within the timeframe prescribed by applicable law.
🔒
Your Responsibility: While we implement robust security measures on our end, you are responsible for maintaining the confidentiality of your account password and for any activity that occurs through your account. Do not share your credentials with anyone and contact support immediately if you suspect unauthorised access.
Section 10
10. International Data Transfers
Syabas99 operates and engages service providers that may be located in jurisdictions outside Malaysia. Where personal data is transferred to a country that does not provide a level of data protection equivalent to that applicable in Malaysia, Syabas99 will ensure that appropriate safeguards are in place prior to such transfers. These safeguards may include:
- Entering into data processing agreements incorporating standard contractual clauses that impose equivalent data protection obligations
- Engaging service providers who hold recognised international data protection certifications
- Conducting transfer impact assessments to verify that the level of protection afforded to transferred data is not undermined by the laws of the destination jurisdiction
By using the Syabas99 platform and providing your personal data to us, you acknowledge that your data may be processed in jurisdictions outside Malaysia in accordance with the safeguards described above.
Section 11
11. Your Data Protection Rights
As a data subject, you hold a number of rights in respect of the personal data Syabas99 holds about you. Syabas99 is committed to facilitating the exercise of these rights in a timely and transparent manner. Your rights are as follows: