Roll99 respects your privacy. This document clearly explains the types of data we collect, how we use it, who can access it, and your rights as a member under the Personal Data Protection Act 2010 (PDPA 2010).
This policy applies to all members and visitors of the Roll99 platform. Last updated: 1 July 2026. Continued use of the Roll99 platform following any such policy amendments will be considered acceptance of the updated terms.
Six core principles that shape how Roll99 handles your personal data
All data transmitted between your device and Roll99's servers is protected by 256-bit SSL encryption — the same security technology used by major Malaysian banks such as Maybank and CIMB. Your information cannot be intercepted by third parties while in transit.
Roll99 never sells, rents, or trades your personal data to any third party for marketing purposes. Your data belongs to you — it is used solely for the purposes you have consented to and to operate Roll99's services securely.
All personal data processing at Roll99 is in full compliance with the Personal Data Protection Act Malaysia 2010. We have an appointed Data Protection Officer (DPO) to ensure ongoing compliance and to handle privacy-related enquiries from our members.
Only Roll99 staff who require data access to carry out their duties are permitted to access member personal data — and only to the extent necessary for the task at hand. All access is logged, audited, and monitored on a regular basis by our internal security team.
Roll99 members have the right to access, correct, transfer, and in certain circumstances request the deletion of their personal data. Data-related requests can be submitted via email to support@roll99.best and will be processed within 14 business days.
Roll99 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to meet applicable legal requirements. Once the retention period has expired, your data is securely deleted or anonymised in accordance with established procedures.
This Privacy Policy describes how Roll99 — the online casino platform operated under the domain roll99.best — collects, uses, stores, discloses, and protects your personal data when you use our services. It also outlines your rights under applicable Malaysian law, in particular Personal Data Protection Act 2010 (PDPA 2010).
We know most people don't read privacy policies closely — and we understand why, because documents like these tend to be long and hard to follow. That's why we've made an effort to write this policy in plain, straightforward language, so you genuinely understand what happens to your data when you play on Roll99.
If you have any questions after reading this document, feel free to reach out to us at support@roll99.best.
The data controller responsible for the processing of your personal data is Roll99, which operates the online casino platform under the domain roll99.best. For all privacy and data protection matters, you may contact us via:
Roll99 has appointed Data Protection Officer (DPO) responsible for overseeing PDPA 2010 compliance, handling privacy-related complaints, and ensuring that all data processing activities at Roll99 are carried out in accordance with applicable laws.
Roll99 collects various types of personal data depending on how you interact with our platform. Below are the categories of data we collect:
2.1 Data You Provide Directly
2.2 Automatically Collected Data
2.3 Financial Transaction Data
Roll99 uses the personal data collected for the following purposes. We do not use your data for any purpose not listed here without first obtaining your consent:
| Purpose of Use | Types of Data Used | Legal Basis |
|---|---|---|
| Registration & account management | Identity, contact, account | Contract fulfilment |
| Identity verification (KYC) | Identity, verification documents | Legal obligation |
| Processing deposits & withdrawals | Financial transactions, identity | Contract fulfilment |
| Fraud detection & security | Technical, usage, transactions | Legitimate interests |
| Customer support | Identity, communication, account | Contract fulfilment |
| Direct marketing (with consent) | Relationship, usage | Consent |
| Platform analytics & improvement | Usage, technical | Legitimate interests |
| Legal requirement compliance | All related categories | Legal obligation |
| Responsible gaming & player protection | Usage, transactions, account | Legitimate & public interest |
Regarding Direct Marketing: If you provide consent during registration or at a later stage, Roll99 may send you promotional communications about bonuses, special offers, and new games via email or SMS. You may withdraw this consent at any time by clicking the "unsubscribe" link in our promotional emails or by contacting our support team.
Under PDPA 2010, Roll99 processes your personal data on the basis of one or more of the following legal grounds:
Roll99 does not sell, rent, or disclose your personal data to third parties for marketing purposes. Your data may be shared only under the following limited circumstances:
5.1 Approved Service Providers
Roll99 works with trusted third-party service providers to manage certain aspects of our platform's operations. These providers are only permitted to process your data in accordance with Roll99's specific instructions and are bound by strict data processing agreements:
5.2 Legal Requirements
Roll99 may disclose your personal data to public authorities when required to do so by law or a valid court order in Malaysia. This includes criminal investigations, court orders, directives from the Companies Commission of Malaysia or Bank Negara Malaysia, and reporting obligations under the Anti-Money Laundering Act 2001.
5.3 Business Transfers
If Roll99 is involved in a merger, acquisition, or sale of business assets, member personal data may be transferred as part of that transaction. In such circumstances, Roll99 will notify members and ensure the new recipient agrees to uphold equivalent or higher data protection standards.
Roll99 consistently invests in best-in-class security infrastructure to protect your personal data. The technical and organisational security measures we have in place include:
Data Retention Period:
| Data Categories | Retention Period | Reason |
|---|---|---|
| Active account data | Throughout the active account period | Account management |
| Financial transaction records | 7 years after the transaction | Legal requirement (AMLA) |
| KYC Documents | 5 years after account closure | Compliance requirements |
| Support communication logs | 2 years | Dispute resolution |
| Technical log data | 90 days | Security & debugging |
| Inactive account data | 2 years from last login | Subsequently deleted/anonymised |
While Roll99 takes all reasonable steps to protect your data, no security system is perfect. In the unlikely event of a data breach that affects your rights, Roll99 is committed to notifying you and the relevant authorities as required by law within 72 hours of becoming aware of the breach.
Roll99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
Types of cookies we use:
You can manage cookies through your browser settings. However, disabling essential cookies may affect the functionality of the Roll99 platform and prevent you from logging in or accessing certain games. Analytics and functional cookies can be disabled without affecting core platform functionality.
Under Malaysia's Personal Data Protection Act 2010 (PDPA 2010), you have the following rights regarding your personal data held by Roll99. We are committed to helping you exercise these rights promptly and without unnecessary obstacles:
You have the right to obtain a copy of the personal data Roll99 holds about you, along with information on how it is used and who it is shared with.
If you find that any personal data held by Roll99 is inaccurate or out of date, you have the right to request that we correct it.
Under certain circumstances, you have the right to request that Roll99 erase your personal data. This right may be limited by applicable legal retention requirements.
You have the right to object to the processing of your data for specific purposes such as direct marketing. Objections to marketing will be acted upon immediately.
You may request your personal data in a structured, machine-readable format for transfer to another party where this is technically feasible.
In certain circumstances, you may request that Roll99 restrict the processing of your data while a dispute or review is pending resolution.
How to Exercise Your Rights:
To exercise any of the rights outlined above, please send us a written request at support@roll99.best with the email subject [Data Rights Request] — Full Name — Account Number. Please include sufficient proof of identity so we can verify that you are the legitimate account holder.
Roll99 will respond to your request within 14 business days from the date of receipt. If your request is complex or involves a large volume of data, we may require up to 30 days and will notify you of the reason.
In the course of operating its platform, Roll99 may need to transfer your personal data to recipients located outside Malaysia — for example, to cloud service providers or international gaming software partners used to run the platform.
When cross-border data transfers occur, Roll99 ensures adequate protection is in place through one or more of the following mechanisms:
The Roll99 platform is restricted to individuals who are of age 21 years and above only. Roll99 does not knowingly collect or process personal data from individuals under the age of 21.
If we discover that we have inadvertently collected personal data from minors, we will take immediate steps to:
The Roll99 platform may contain links to third-party services such as payment providers (Touch 'n Go, GrabPay, DuitNow, and others) that you will access during the deposit or withdrawal process. When you click these links or use a third-party payment interface, you are directed to their platform, which is governed by their own privacy policy.
Roll99 is not responsible for the privacy practices of these third-party providers. We encourage you to read the privacy policy of any payment provider you use before completing any transaction through their platform.
That said, we only work with payment providers that have a strong reputation in Malaysia and comply with relevant financial security standards, including PCI-DSS for payment processing.
Roll99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. The latest version of the Privacy Policy will always be available on this page, with the date of the most recent update clearly stated at the top.
For material amendments — those that significantly change how we process your data or reduce your rights — Roll99 will:
For non-material amendments — such as spelling corrections, language clarifications, or the addition of information that does not alter our data processing practices — we may update this policy without prior notice, though the update date will be revised accordingly.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Roll99, we encourage you to reach out to us directly. We are committed to providing clear, helpful responses within a reasonable timeframe.
Ways to reach us:
For enquiries that require identity verification (such as data access or deletion requests), please ensure you include:
Roll99 Commitment Summary: We do not sell your data. We protect it with industry-standard encryption. We comply fully with PDPA 2010. And we respect your right to control your own data. If anything in this policy is unclear, reach out to us — we're happy to explain. For full details on platform terms of use, please also read Terms & Conditions us.
Eight concrete safeguards that keep your personal data secure at Roll99
All data in transit is protected by bank-grade encryption.
Two-factor authentication protects your account from unauthorised access.
Stored sensitive data is encrypted using military-grade standards.
Passwords are stored as cryptographic hashes — we have no visibility into your actual password.
All access to member data is logged and audited on a regular basis.
Roll99's systems are regularly tested by independent security experts.
Staff only access data required for their specific role.
Clear procedures are in place to detect, contain, and report any data breaches.
An honest look at how Roll99 handles your information and what sets our approach apart
When people sign up on an online casino platform, the last thing on their mind is usually "what happens to my data?" — and that's understandable. You're excited to try a new game, redeem a bonus, or see if luck is on your side tonight. Data privacy feels like a distant, technical concern.
But in reality, it matters a great deal. When you register with Roll99, you entrust us with fairly sensitive information — your full name, IC number, phone number, and financial transaction records. This is not the kind of information you share with just anyone. So we believe you deserve to know exactly what we do with it.
Some platforms operate on a business model that relies on selling or sharing user data with advertisers and data brokers. roll99 does not operate that way. Your personal data is collected solely because it is necessary to deliver the services you have requested — to enable you to register an account, process deposits via Touch 'n Go or DuitNow, verify your identity for withdrawals, and provide customer support when you need it.
We also use technical data — such as device type and usage patterns — to improve the platform experience. If data shows that many Malaysian players are using Android devices on standard 4G connections, that tells us we need to ensure Roll99 runs smoothly even on moderate internet speeds. This is data use that directly benefits you.
The Malaysian Personal Data Protection Act 2010 (PDPA 2010) is the legislation governing how companies like Roll99 handle the personal data of Malaysian users. Under PDPA 2010, we have clear legal obligations — including obtaining consent before collecting data, using it only for stated purposes, and safeguarding it with adequate security measures.
Roll99's commitment to PDPA 2010 goes beyond compliance on paper. We appoint a dedicated Data Protection Officer to oversee ongoing compliance, conduct data privacy training for all staff who handle member data, and regularly audit our data processing practices. This isn't a box we tick — it's simply how we operate.
Not all Roll99 staff have access to members' personal data. We enforce the "least privilege" principle — each staff member can only access the data necessary to carry out their specific role. Customer support agents assisting you with technical issues do not have access to your full financial transaction records. The technical team managing our servers does not have access to your KYC information. All access is logged.
The third-party providers we work with — such as game software providers and Malaysian payment providers — are only permitted to process data necessary for their specific function, and strictly in accordance with our instructions. They are bound by contractual agreements that require data protection standards equivalent to those of Roll99.
One of the most important yet most overlooked aspects of any privacy policy is the rights you hold as a data subject. At Roll99, we do not simply list these rights in a legal document — we actively make it easy for you to exercise them. Want to know what data we hold about you? Send us an email and we will deliver a report within 14 days. Need to correct inaccurate information? You can do it directly in your account settings or through support. Want to delete your account and data? We will process it in accordance with legal requirements.
One important note — there are limits to the right of erasure when it comes to financial records. Under Malaysian laws such as the Anti-Money Laundering Act 2001, we are required to retain financial transaction records for a specified period even after your account is closed. This is not our choice — it is a legal obligation imposed on all financial operators and betting platforms. We will always make this clear when a deletion request involves such data.
Ultimately, Roll99's approach to data privacy stems from the same value that shapes everything we do — trust. We know Malaysian players have options when choosing a platform to play on. We want Roll99 to be the choice you make because you trust us to handle your information honestly, securely, and responsibly — not just because our games are exciting or our bonuses are generous.
Privacy Enquiries: For any enquiries relating to this Privacy Policy or how Roll99 handles your personal data, contact us at support@roll99.best with the subject line "[Privacy]". For information on the platform's overall terms of use, please read Terms & Conditions us. For responsible gaming guidance, visit the page Responsible Gaming.
Your data is protected. Your games are fair. Your payments are secure. That is Roll99's promise to every member in Malaysia. Create a free account today and experience a platform built on trust from the ground up.
For users aged 21 and above only. Please play responsibly.