mstar99 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by mstar99 ("we", "us", "our", "the Company"), the operator of the online casino and sports betting platform accessible at mstar99.cam (the "Platform"). It sets out the terms on which we collect, process, store, and protect personal data submitted by or generated through users ("you", "User", "Member") of the Platform.

mstar99 is committed to handling all personal information entrusted to it with the highest standards of care, transparency, and security. We process personal data only for lawful, specified, and legitimate purposes, and we do not process it in ways that are incompatible with those purposes.

This Policy applies to all individuals who access the mstar99 Platform, including registered members, visitors browsing without registration, and any individual whose personal information is processed in connection with the provision of our services — including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, identification number, contact details, location data, IP address, and financial information.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" refers to mstar99, which determines the purposes and means of processing Personal Data.
• "Data Processor" refers to any third party that processes Personal Data on behalf of mstar99 pursuant to a written data processing agreement.
• "Consent" means any freely given, specific, informed, and unambiguous indication by the User of their agreement to the processing of their Personal Data.
• "Cookies" means small text files placed on a User's device by the Platform for session management, analytics, and functional purposes.
• "KYC" means Know Your Customer — the identity verification process required under anti-money laundering compliance obligations.
• "MYR" means Malaysian Ringgit, the primary transaction currency used on the Platform.

3. Data We Collect

mstar99 collects several categories of personal data in connection with operating the Platform and providing its services. These categories are detailed below.

3.1 Registration & Account Data

When you register a mstar99 account, we collect the following information as a minimum:

• Full legal name (as it appears on your government-issued identification)
• Date of birth (to verify you are 21 years of age or older)
• Residential address (including city and postcode)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred currency (MYR)

3.2 Identity Verification (KYC) Data

To comply with our anti-money laundering obligations and to verify your identity prior to processing withdrawals, we may collect:

• A copy of your Malaysian MyKad (front and back) or valid passport
• A recent utility bill or bank statement as proof of address
• A selfie photograph holding your identification document
• Source of funds documentation in certain circumstances

3.3 Financial Transaction Data

When you make deposits or request withdrawals, we collect transaction-related data including:

• Payment method details (e-wallet account reference, bank account number, cryptocurrency wallet address)
• Deposit and withdrawal amounts in MYR
• Transaction timestamps and reference numbers
• Payment provider identifiers (e.g., Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX)

mstar99 does not store full card numbers. Payment processing is handled by certified payment service providers.

3.4 Usage & Behavioural Data

We automatically collect data about how you interact with the Platform, including:

• Device type, operating system, and browser version
• IP address and approximate geolocation
• Pages visited, games played, and session duration
• Wagering history, game preferences, and betting patterns
• Login timestamps and frequency of access

3.5 Customer Support Communications

When you contact our support team via live chat or email, we retain records of the communication including the nature of your query, the resolution provided, and any supporting documentation you share with us.

4. How We Collect Your Data

mstar99 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies as you navigate the Platform.
• From third-party payment providers — transaction data shared with us by Malaysian payment service providers such as DuitNow, FPX, and e-wallet operators when you initiate a payment.
• From fraud prevention and compliance services — where we engage third-party services to verify identity, screen for sanctions, or detect fraudulent activity.

5. Data Processing — Purposes & Use

mstar99 processes your personal data only for specific, lawful purposes. The table below summarises the primary purposes of processing and the data categories involved.

6. Legal Basis for Processing

mstar99 relies on the following legal bases when processing your personal data:

• Contractual Necessity: Processing is required to enter into or perform the contract between mstar99 and the User — including account creation, game provision, and payment processing.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, KYC verification mandates, and responsible gambling regulations.
• Legitimate Interest: Processing is necessary for mstar99's legitimate business interests — such as fraud prevention, platform security, and improving the quality of the Platform — where those interests are not overridden by the User's rights and freedoms.
• Consent: Where processing is not covered by the above, mstar99 will seek your explicit consent. You retain the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing & Disclosure

mstar99 does not sell your personal data to third parties for their commercial purposes under any circumstances. We may share your data with the following categories of third parties strictly as necessary and for the purposes described in this Policy:

• Payment service providers: Malaysian payment processors including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and banking partners (Maybank, CIMB, Public Bank, Hong Leong) — to facilitate deposits and withdrawals on your behalf.
• Identity verification services: Third-party KYC and AML compliance providers engaged to verify your identity and screen for sanctions or politically exposed persons (PEP) status.
• Technology and infrastructure providers: Cloud hosting, content delivery, and IT security service providers who support the operation of the Platform under strict data processing agreements.
• Fraud prevention and security services: Services that help mstar99 detect, investigate, and prevent fraudulent transactions and account abuse.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or formal regulatory request, mstar99 may disclose personal data to relevant authorities.

8. Cookies & Tracking Technologies

mstar99 uses cookies and similar tracking technologies to operate the Platform effectively, understand how users interact with our services, and deliver a consistent experience across sessions. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without preventing core functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and your most recently used payment method.
• Analytics Cookies: Collect anonymised data about Platform usage patterns — such as most visited pages, session duration, and device types — to help us improve the user experience.
• Marketing Cookies: Used only where you have provided explicit consent. These assist in delivering relevant promotional information about mstar99 offers to you across sessions.

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use key Platform features including login and payment processing. For analytics and marketing cookies, your consent is obtained separately and can be withdrawn at any time.

9. Data Retention

mstar99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and registration data: Retained for the duration of your active account relationship with mstar99, and for a period of no less than five (5) years following account closure, to meet AML and compliance obligations.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in accordance with anti-money laundering regulatory requirements.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the relevant transaction, as required for financial audit and regulatory compliance purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless the subject matter involves an unresolved dispute.
• Usage and behavioural data: Aggregated and anonymised after thirteen (13) months; individual-level data is not retained beyond this period unless required for active compliance investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with mstar99's data disposal procedures.

10. Data Security

mstar99 implements technical and organisational security measures proportionate to the risk associated with processing your personal data. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mstar99 Platform.
• Encryption at rest for sensitive personal data stored on our systems, including KYC documents and financial records.
• Role-based access controls ensuring that personal data is accessible only to authorised personnel with a legitimate operational need.
• Multi-factor authentication for access to internal systems containing personal data.
• Regular penetration testing and security audits by independent third-party providers.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

11. International Data Transfers

In certain circumstances, mstar99 may transfer personal data to service providers or infrastructure partners located outside of Malaysia. Where such transfers occur, mstar99 ensures that appropriate safeguards are in place to maintain the protection of your personal data at a standard equivalent to that described in this Policy.

Such safeguards may include contractual obligations on the receiving party (such as Standard Contractual Clauses), ensuring transfers occur only to jurisdictions with adequate data protection frameworks, or obtaining your explicit consent where required by applicable law.

12. Your Rights as a Data Subject

As a user of the mstar99 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team using the details provided in Section 16 of this Policy.