Privacy Policy for CUB99 Malaysian Players

CUB99 respects the privacy of Malaysian players and other visitors who use cub99.cam. This Privacy Policy establishes the principles governing personal data processed through CUB99 services, including online casino games, sports betting, live football markets, account management, promotions, payment processing, customer support, and responsible gambling controls.

References to “you” or “your” mean the person using CUB99. References to “we”, “us”, “our”, or “CUB99” mean the operator responsible for the platform and the processing activities described in this policy. “Personal data” means information that identifies you directly or can reasonably be linked to you.

This policy applies whenever you browse CUB99, create or use an account, contact support, complete KYC checks, place a wager, claim a promotion, set a deposit limit, or request a withdrawal. It also applies to security records generated while you use the platform.

CUB99 determines why and how personal data is processed for core platform operations. Certain carefully selected service providers process information on our instructions, including hosting, fraud detection, identity verification, payment, communication, and game technology providers. Such providers are permitted to use personal data only for authorised services and applicable legal requirements.

Third-party payment institutions may independently determine how they process data required for their own services. For example, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong may maintain separate transaction records under their own obligations. CUB99 does not control records held independently by those institutions.

CUB99 may collect the following categories of personal data where relevant to your use of the platform:

CUB99 may also process responsible gambling information, such as selected deposit limits, session reminders, cooling-off requests, self-exclusion status, and communications concerning gambling behaviour. We treat this information with particular care because it can be sensitive in context.

Most information is collected directly from you when you register, update your profile, upload verification documents, make a transaction, use CUB99 products, or contact our support team. Technical and gaming data is generated automatically as you interact with CUB99.

We may receive limited information from payment providers, identity verification services, fraud prevention databases, game suppliers, and regulatory or law enforcement bodies where permitted or required. Payment providers may confirm the account holder's name, transaction status, or payment reference without disclosing full financial credentials to CUB99.

CUB99 processes personal data for legitimate and defined operational purposes, including to:

• Register, authenticate, maintain, and secure your CUB99 account.
• Confirm that users are aged 21 and above and complete identity verification.
• Provide slots, live casino, sports betting, Liga Super Malaysia, EPL, UFC, lottery, and arcade services.
• Process MYR deposits and withdrawals and confirm payment method ownership.
• Administer promotions, wagering requirements, loyalty benefits, and account balances.
• Detect account takeover, duplicate accounts, bonus abuse, collusion, fraud, money laundering, and other prohibited conduct.
• Respond to support requests, complaints, technical incidents, and transaction disputes.
• Apply deposit limits, cooling-off periods, self-exclusion requests, and other responsible gambling protections.
• Maintain platform reliability, audit records, internal reporting, and legal compliance.

CUB99 does not sell personal data to third-party marketers. Where promotional communications are permitted, users may adjust their preferences or request that non-essential marketing stop. Essential security, account, payment, and policy notices may still be sent.

Depending on the activity and applicable law, CUB99 processes personal data because it is necessary to perform our agreement with you, comply with a legal or regulatory obligation, pursue legitimate interests, protect vital interests, establish or defend legal claims, or act on valid consent.

Legitimate interests may include securing CUB99 systems, preventing fraud, improving service reliability, resolving disputes, analysing platform performance, and protecting players. CUB99 considers the necessity and proportionality of processing and balances these interests against the rights and reasonable expectations of users.

Where processing relies on consent, you may withdraw that consent prospectively. Withdrawal does not affect processing already undertaken lawfully, and it may not prevent CUB99 from retaining information required for fraud prevention, responsible gambling, dispute resolution, or compliance.

CUB99 processes transaction information to credit deposits, settle withdrawals, reconcile balances, investigate failed transfers, and prevent misuse. Malaysian users may choose channels such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong, subject to availability.

KYC normally requires a valid Malaysian MyKad, driver's licence, or passport, proof of address dated within three months, and a selfie holding the identity document. CUB99 may request evidence showing that the selected bank or e-wallet account belongs to the registered player. Additional checks may be required where activity triggers security, fraud, or anti-money laundering thresholds.

CUB99 may disclose relevant personal data to the following recipients where necessary and proportionate:

• Payment processors and financial institutions handling deposits, withdrawals, reversals, or transaction investigations.
• Identity verification, fraud prevention, cybersecurity, hosting, analytics, and customer support providers.
• Game and sportsbook technology providers where data is needed to deliver products, verify outcomes, or resolve technical disputes.
• Professional advisers, auditors, insurers, and corporate service providers subject to confidentiality obligations.
• Regulators, courts, law enforcement bodies, and other competent authorities where disclosure is legally required or reasonably necessary.
• A successor entity in connection with a merger, acquisition, restructuring, or transfer of business, subject to appropriate privacy safeguards.

CUB99 requires contracted processors to apply confidentiality, access control, security, and data-use restrictions appropriate to the services they provide. We do not authorise providers to use CUB99 player data for unrelated advertising.

CUB99 operates in an international technical and gaming environment. Personal data may therefore be processed in countries outside Malaysia by authorised service providers, including hosting, security, game technology, support, and compliance partners.

Where an international transfer occurs, CUB99 applies appropriate contractual, technical, and organisational safeguards according to the sensitivity of the information and applicable requirements. These measures may include data processing agreements, confidentiality duties, encryption, limited access, transfer assessments, and restrictions on onward disclosure.

CUB99 may use cookies and similar browser technologies to maintain secure sessions, remember preferences, balance traffic, detect suspicious access, measure platform performance, and support essential functionality. Cookies may store a session identifier or preference but should not be treated as a substitute for account security.

Your browser may allow you to block or delete cookies. Disabling essential cookies can prevent sign-in, game loading, payment confirmation, or account security functions from operating correctly. CUB99 limits non-essential tracking in accordance with applicable requirements and user choices.

Technical logs may include IP address, browser version, device category, language, session time, approximate location derived from network information, and security events. These records help CUB99 distinguish ordinary access from automated attacks or unauthorised account use.

CUB99 uses a layered security programme designed to protect personal data against accidental loss, unauthorised access, alteration, disclosure, and destruction. Controls include encrypted data transmission, role-based access, logging, system monitoring, vulnerability management, account authentication, secure development practices, and staff confidentiality requirements.

No online system can guarantee absolute security. You are responsible for choosing a strong, unique password, keeping your credentials confidential, logging out on shared devices, and reporting suspected account compromise promptly. CUB99 will never ask for your full password by email or live chat.

If CUB99 confirms a personal data incident, we will investigate, contain, and remediate the event. Where legally required, affected users and competent authorities will be notified within the applicable timeframe.

CUB99 retains personal data for as long as necessary to provide services and satisfy security, accounting, legal, regulatory, responsible gambling, dispute, and fraud prevention requirements. Retention periods vary by data type and the circumstances of the account.

Account, KYC, payment, and gaming records may be retained after account closure where required to investigate fraud, respond to disputes, comply with financial controls, enforce self-exclusion, or establish and defend legal claims. Support records and system logs are retained for periods proportionate to quality, security, and audit needs.

When information is no longer required, CUB99 will securely delete, anonymise, or isolate it from ordinary use. A deletion request does not override obligations requiring continued retention of particular records.

Subject to applicable law, identity verification, and lawful exceptions, you may be entitled to:

• Request confirmation of whether CUB99 processes your personal data and obtain access to relevant information.
• Ask CUB99 to correct inaccurate or incomplete account details.
• Request deletion where information is no longer required and no overriding retention obligation applies.
• Request restriction of certain processing while a dispute about accuracy or lawfulness is reviewed.
• Object to processing based on legitimate interests or request that non-essential direct marketing stop.
• Withdraw consent where consent is the applicable basis for processing.
• Request portable data in a structured format where the right applies and is technically feasible.
• Request meaningful information about significant automated checks that affect your account, subject to security and anti-fraud limitations.

To protect users, CUB99 will verify the identity of anyone making a privacy request. We may ask for account information or identification reasonably necessary to prevent disclosure to an unauthorised person. Requests may be refused or limited where they are manifestly unfounded, conflict with another person's rights, undermine security, or are restricted by legal obligations.

CUB99 processes responsible gambling information to provide deposit limits, loss controls, session reminders, cooling-off periods, self-exclusion, and account reviews. We may analyse account activity to identify indicators of potentially harmful play and provide appropriate account messages or restrictions.

Self-exclusion records may be retained after account closure to prevent accidental or deliberate re-registration. This continued retention supports an important player protection purpose. More information about available controls appears on our Responsible Gambling page.

CUB99 is intended exclusively for persons aged 21 and above. We do not knowingly permit anyone under 21 to register, deposit, wager, or use gambling services. Age verification forms part of the CUB99 KYC process.

If CUB99 reasonably believes an account belongs to a person under 21, the account will be suspended while the matter is investigated. Information may be retained where necessary to prevent repeat registration, address fraud, satisfy legal requirements, or protect the underage person.

CUB99 may revise this Privacy Policy to reflect changes in services, technology, security practices, legal requirements, or operational processes. The effective date and version number at the top of the page will be updated when material revisions are published.

Where appropriate, CUB99 may provide an account notice or other prominent message about significant changes. Continued use of the platform after an updated policy becomes effective means the revised policy applies to subsequent processing, subject to any consent requirement imposed by law.

For privacy questions, correction requests, access requests, or concerns about how CUB99 handles your information, contact our support team through the 24/7 live chat available inside your CUB99 account dashboard.

You may also write to our privacy support team at [email protected]. This address is displayed as plain text for your security. Please do not include your password, full payment credentials, or unredacted identity documents in an ordinary email.

CUB99 aims to acknowledge privacy enquiries promptly and respond within a reasonable period after identity verification. Complex enquiries or requests involving archived transaction, KYC, or security records may require additional time.