rebate99 Privacy Policy

1.1  This Policy applies to all personal data that rebate99 collects, processes, stores, or otherwise handles in connection with your use of the rebate99.club website, mobile interface, and all associated gaming, financial, and support services ("Platform").

1.2  By registering a Member Account on rebate99 and by continuing to use the Platform, you confirm that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to the terms of this Policy, you must not register an account or continue to use the rebate99 Platform.

1.3  This Policy should be read in conjunction with the rebate99 Terms & Conditions, which governs your use of the Platform more broadly, and the Responsible Gaming policy.

1.4  rebate99 may process personal data relating to individuals located in Malaysia and other jurisdictions. Where applicable, this Policy is intended to satisfy the disclosure requirements of the PDPA and equivalent data protection legislation in any other jurisdiction from which the Platform is lawfully accessed.

2.1  Registration Data. When you create a rebate99 Member Account, we collect: your full legal name; date of birth; email address; Malaysian mobile telephone number; and your chosen username. This information is required to establish and maintain your account and to verify your identity.

2.2  Identity Verification (KYC) Data. Where rebate99 requires you to complete Know Your Customer verification, we collect copies of government-issued identification documents (such as your Malaysian Identity Card or passport), proof of residential address, and where applicable, source-of-funds documentation. This data is collected and processed solely for the purposes of identity verification, fraud prevention, and compliance with applicable anti-money laundering obligations.

2.3  Financial Data. We collect transaction data associated with your rebate99 Wallet, including deposit amounts, deposit payment method identifiers (such as the last four digits of a bank account or e-wallet account reference), withdrawal requests, and rebate credit history. We do not store full payment card numbers or banking passwords.

2.4  Gaming Activity Data. We collect records of all gaming activity conducted through your Member Account, including games played, bet amounts, game outcomes, session durations, and use of responsible gaming tools such as deposit limits and self-exclusion settings.

2.5  Technical Data. We automatically collect certain technical information when you access the rebate99 Platform, including: IP address; device type and operating system; browser type and version; session timestamps; referring URL; and geolocation data (at the country and regional level) derived from your IP address.

2.6  Communications Data. We retain records of all communications between you and rebate99 customer support, including email correspondence, live chat transcripts, and any information you voluntarily provide in the course of those communications.

3.1  Directly from you. The majority of the personal data rebate99 holds is provided directly by you at the point of registration, during KYC verification, when initiating deposits or withdrawals, and when you contact our support team.

3.2  Automatically through your use of the Platform. Technical and gaming activity data is collected automatically as you navigate and interact with rebate99.club. This collection occurs through server logs, cookies, and similar tracking technologies as described in Section 7.

3.3  From third parties. rebate99 may receive personal data about you from third-party identity verification service providers, payment processors (including Touch 'n Go eWallet, DuitNow, and FPX operators), fraud detection partners, and game content providers. All third-party data sharing arrangements are governed by appropriate data processing agreements.

4.1  rebate99 processes your personal data for the following purposes:

• Account management: creating, maintaining, and securing your Member Account; processing rebate99 login authentication; communicating account-related notifications.
• Service delivery: enabling participation in all gaming products on the Platform; processing deposits and withdrawals; calculating and crediting the Daily Rebate; administering VIP tier progression.
• Identity verification and compliance: conducting KYC checks; verifying age eligibility (21+); complying with anti-money laundering and counter-financing of terrorism obligations; complying with requests from regulatory or law enforcement authorities.
• Fraud prevention and security: detecting and investigating suspected fraudulent activity, account abuse, multi-accounting, and prohibited conduct as defined in the rebate99 Terms & Conditions.
• Responsible gaming: monitoring gaming patterns for indicators of problem gambling behaviour; administering deposit limits, cooling-off periods, and self-exclusion requests; complying with responsible gaming obligations under applicable international gaming authority frameworks.
• Customer support: responding to enquiries, complaints, and dispute submissions from rebate99 Members.
• Marketing and communications: where you have provided consent, sending rebate99 promotional communications including information about new games, promotions, and platform updates. You may opt out of marketing communications at any time by contacting rebate99 support.
• Platform improvement: analysing aggregated, anonymised usage data to improve Platform performance, game selection, and user experience for Malaysian players.

5.1  rebate99 processes personal data on the following legal bases:

• Contractual necessity: processing required to deliver the services described in the rebate99 Terms & Conditions, including account management, payment processing, and rebate calculation.
• Legal obligation: processing required to comply with applicable law, including KYC/AML verification requirements and responses to regulatory or court orders.
• Legitimate interests: processing for fraud detection, security monitoring, responsible gaming oversight, and Platform improvement, where those interests are not overridden by your privacy rights.
• Consent: processing for marketing communications, where you have provided explicit opt-in consent. Consent may be withdrawn at any time.

6.1  rebate99 does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent strictly necessary:

• Payment processors: your transaction data is shared with the relevant payment provider (e.g., Touch 'n Go eWallet operator, DuitNow, FPX-linked banks including Maybank, CIMB, Public Bank, Hong Leong) to execute deposit and withdrawal instructions.
• Identity verification providers: KYC documentation is shared with our contracted identity verification partner(s) for the purpose of age and identity verification.
• Game providers: your gaming session data (including Member Account identifier and Wallet balance information) is shared with the relevant Game Provider (e.g., Evolution Gaming, Pragmatic Play, PG Soft) solely for the purpose of facilitating game play.
• Fraud and security partners: technical data including IP address and device fingerprint may be shared with fraud detection partners to support the rebate99 security infrastructure.
• Regulatory and law enforcement authorities: rebate99 will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required by applicable law, a valid court order, or a regulatory direction from a competent authority.
• Corporate transactions: in the event of a merger, acquisition, or sale of all or substantially all of the rebate99 business, Member personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection commitments.

6.2  All third parties with whom rebate99 shares personal data are required to handle that data in accordance with applicable data protection law and are prohibited from using it for any purpose other than those for which it was shared.

7.1  rebate99 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: required for core Platform functionality including session management, rebate99 login authentication, and security token validation. These cannot be disabled without impairing Platform functionality.
• Performance cookies: used to collect anonymised data about how Members interact with the Platform, which pages are most visited, and where errors occur. This data is used solely to improve Platform performance.
• Functional cookies: used to remember your preferences such as language settings and display preferences to personalise your experience on subsequent visits.

7.2  You may configure your browser to refuse cookies or to alert you when cookies are being sent. Refusing strictly necessary cookies will impair your ability to access the rebate99 Platform, including the rebate99 login functionality. Refusing other categories of cookies will not prevent access to core Platform features.

7.3  rebate99 does not use third-party advertising cookies or track Member activity across third-party websites for advertising purposes.

8.1  rebate99 retains personal data for as long as your Member Account remains active and for such additional period as is required by applicable law or justified by our legitimate interests.

8.2  Following the closure of a Member Account, rebate99 retains personal data for a minimum period of five (5) years, in accordance with applicable anti-money laundering record-keeping obligations and the requirements of the international gaming authority licensing framework under which rebate99 operates. Financial transaction records, KYC documentation, and gaming activity logs are retained for this minimum period regardless of the reason for account closure.

8.3  Communication records (support tickets, live chat transcripts) are retained for a minimum of two (2) years from the date of the last communication in each thread. Marketing consent records are retained for a period of three (3) years following the withdrawal of consent.

8.4  Upon expiry of the applicable retention period, rebate99 will securely delete or anonymise personal data such that it can no longer be associated with any identifiable individual.

9.1  rebate99 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and rebate99 servers;
• Encryption at rest for sensitive personal data stored in rebate99 databases;
• Access controls limiting personal data access to rebate99 personnel with a legitimate operational need;
• Two-factor authentication available for Member Account rebate99 login sessions;
• Regular security assessments and penetration testing by qualified independent security professionals;
• Anomaly detection systems monitoring for unusual rebate99 login patterns and suspicious transaction activity.

9.2  Notwithstanding these measures, no method of data transmission or storage is completely secure. rebate99 cannot guarantee the absolute security of your personal data. You are responsible for maintaining the confidentiality of your rebate99 login credentials and for notifying rebate99 immediately if you suspect unauthorised access to your account.

9.3  In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, rebate99 will notify the relevant supervisory authority and, where required, affected Members in accordance with applicable legal obligations and within applicable timeframes.

10.1  Subject to applicable law and any overriding legitimate interests or legal obligations, you have the following rights in respect of your personal data held by rebate99:

• Right of access: you may request a copy of the personal data rebate99 holds about you.
• Right of correction: you may request that inaccurate or incomplete personal data be corrected or updated. You may also update certain account information directly through your Member Account dashboard following rebate99 login.
• Right to withdraw consent: where processing is based solely on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of prior processing.
• Right to object to marketing: you may opt out of receiving marketing communications from rebate99 at any time by contacting our support team.
• Right to lodge a complaint: if you believe rebate99 has not handled your personal data lawfully, you may lodge a complaint with the Department of Personal Data Protection (PDPD) Malaysia or with the relevant supervisory authority in your jurisdiction.

10.2  To exercise any of the above rights, please submit a written request to rebate99 at [email protected]. rebate99 will acknowledge receipt within two (2) business days and endeavour to respond substantively within thirty (30) calendar days. rebate99 may require you to verify your identity before processing a data subject rights request.

11.1  The rebate99 Platform is strictly prohibited for use by persons under the age of twenty-one (21). rebate99 does not knowingly collect personal data from individuals under 21 years of age. If rebate99 becomes aware that personal data has been collected from a minor, the associated account will be immediately closed, all data will be deleted, and any funds will be returned via the deposit payment method.

11.2  If you are a parent or guardian and believe that a minor has registered an account on rebate99, please contact us immediately at [email protected]. rebate99 will act on verified reports of underage account creation within twenty-four (24) hours.

12.1  The rebate99 Platform integrates third-party game content (from providers such as Evolution Gaming, Pragmatic Play, and PG Soft) and payment processing services (such as Touch 'n Go eWallet, Boost, GrabPay, and DuitNow FPX). Your use of these integrated services is subject to the privacy policies of the respective third-party providers in addition to this Policy.

12.2  rebate99 is not responsible for the data practices of third-party service providers beyond the contractual data processing obligations imposed on those providers by rebate99. Players are encouraged to review the privacy policies of any third-party service they use in connection with the rebate99 Platform.

13.1  rebate99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our service offering. Material changes will be communicated to registered Members via their registered email address at least fourteen (14) calendar days before the revised Policy takes effect.

13.2  The current version of this Policy is always accessible at rebate99.club/privacy-policy. The "Last updated" date at the top of this document indicates when the most recent revision was made. Your continued use of the rebate99 Platform following the effective date of a revised Policy constitutes your acknowledgment of the updated terms.

For all data protection enquiries, data subject rights requests, privacy complaints, or questions regarding this Policy, please contact rebate99 in writing:

rebate99 will handle all privacy-related correspondence with confidentiality and will not share the content of data subject rights requests with any third party without the consent of the requesting individual, except where required to do so by applicable law.