FC99 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how FC99 ("we", "us", or "our") collects, uses, stores, and protects personal information provided by users ("you", "Member") when accessing or using the FC99 platform at https://fc99.cam ("Platform"), including all associated services, features, and content.

FC99 operates as an online casino and sports betting platform serving members across Malaysia, including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and surrounding regions. All financial transactions are processed in Malaysian Ringgit (MYR) and we use locally integrated payment providers including Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank, as well as selected cryptocurrency networks.

By registering an account on the FC99 Platform or by continuing to use our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to close your account.

2 Definitions

The following terms carry the meanings set out below throughout this Policy:

3 Data We Collect

FC99 collects Personal Data in three primary ways: information you provide directly, information generated through your use of the Platform, and information received from third parties.

3.1 Information You Provide Directly

3.2 Automatically Collected Information

• Technical Data: IP address, browser type and version, operating system, device type, screen resolution, time zone setting.
• Usage Data: Pages visited, features accessed, time spent on the Platform, game sessions initiated, betting activity logs, search queries within the Platform.
• Session Data: Login timestamps, session duration, authentication events, logout records.
• Cookie and Tracking Data: Data collected via first-party cookies and analytics tools as described in Section 7 of this Policy.

3.3 Data from Third Parties

• Payment Providers: Transaction confirmation data, payment status, and fraud indicators from FPX, DuitNow, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, Hong Leong Bank, and cryptocurrency networks.
• Identity Verification Services: Confirmation of document authenticity and identity match scores from licensed KYC service providers.
• Fraud Prevention Agencies: Risk scoring data and watchlist checks as required for AML and responsible gambling compliance.

4 Legal Basis for Processing

FC99 processes your Personal Data one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and FC99 — i.e., to register your account, process deposits and withdrawals, and deliver betting and gaming services.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money laundering (AML) regulations, age verification requirements, and financial reporting obligations.
• Legitimate Interests: Processing is necessary for FC99's legitimate interests, including fraud prevention, Platform security, responsible gambling monitoring, and service improvement — provided these interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent — for example, to send you promotional communications — you may withdraw consent at any time by contacting our support team or adjusting your account notification preferences.

5 How We Use Your Data

FC99 uses your Personal Data for the following purposes:

• Account Management: Creating and maintaining your FC99 account, verifying your identity, managing your session, and facilitating account recovery.
• Service Delivery: Processing bets, managing game sessions, crediting winnings, and operating all features of the Platform including live dealer games, sportsbook markets, and the slot lobby.
• Payment Processing: Facilitating deposits and withdrawals via your chosen Malaysian payment method (including FPX, DuitNow, Touch 'n Go eWallet, Maybank, CIMB, and others), reconciling transactions, and maintaining financial records.
• KYC & Compliance: Verifying your age (21+ requirement), confirming your identity against official documents, screening against financial crime databases, and maintaining records as required by law.
• Responsible Gambling: Monitoring account activity for signs of problem gambling behaviour, enforcing deposit limits and self-exclusion settings, and providing proactive outreach where warranted.
• Fraud Detection & Security: Identifying suspicious login behaviour, unusual transaction patterns, and potential account abuse. Investigating and acting on reports of prohibited conduct.
• Customer Support: Responding to your queries, processing complaints, and maintaining communication records for quality assurance.
• Platform Improvement: Analysing usage patterns to improve user experience, fixing bugs, and developing new features tailored to Malaysian player preferences.
• Marketing Communications: Sending promotional offers, bonus notifications, and Platform updates — only where you have provided consent or where permitted under applicable law. You may opt out at any time.

6 Data Sharing & Disclosure

FC99 does not sell your Personal Data. We share your information only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: We share transaction data with FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency network operators solely to process your payment instructions.
• KYC Service Providers: We share identity documents with licensed third-party verification providers for the purpose of confirming your identity and age as required by our compliance obligations.
• Game Providers: Game activity data (game session ID, bet amounts, outcomes) is shared with our third-party game suppliers to the minimum extent necessary to operate the games and resolve technical disputes.
• Regulatory Authorities: We may be required to disclose Personal Data to governmental authorities, law enforcement agencies, or regulatory bodies in response to lawful requests, court orders, or legal processes.
• Fraud & AML Agencies: We may share data with licensed fraud prevention agencies and financial intelligence units as required for anti-money laundering compliance and financial crime prevention.
• Technology Infrastructure Providers: Hosting, security, and analytics service providers who process data on our behalf under binding data processing agreements and who are prohibited from using your data for their own purposes.

All third-party Data Processors engaged by FC99 are contractually obligated to maintain the confidentiality and security of your Personal Data and to process it only in accordance with FC99's documented instructions.

7 Cookies & Tracking Technologies

FC99 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and analyse how users interact with our services. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. They cannot be disabled without materially affecting Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, last visited game category, and display preferences. These improve your experience but are not essential to core functionality.
• Analytics Cookies:
• Security Cookies: Support fraud detection and login security monitoring, including detection of credential stuffing and session hijacking attempts.

You may manage or disable non-essential cookies through your browser settings. Note that disabling cookies may impact your ability to log in, maintain a session, or access certain Platform features. FC99 does not use third-party advertising or retargeting cookies.

8 Data Retention

FC99 retains your Personal Data for as long as your account remains active and for period thereafter as required to fulfil the purposes described in this Policy or as mandated by applicable law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with applicable financial crime and AML regulations.
• Transaction Records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of 7 years from the date of the transaction.
• KYC Documents: Retained for the period required by applicable law — typically 5 years from the end of the business relationship.
• Communication Records: Support tickets, live chat transcripts, and email correspondence are retained for up to 3 years from the date of the last interaction.
• Technical and Usage Logs: Server access logs, security logs, and session data are retained for up to 12 months.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where anonymisation is not technically feasible, data is securely destroyed in accordance with our data disposal procedures.

9 Data Security

FC99 implements a layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and the FC99 Platform is protected using TLS 1.2 or higher (256-bit SSL encryption).
• Encryption at Rest: Sensitive data stored on our servers — including financial details and identity documents — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to Personal Data is restricted to authorised personnel on a strict need-to-know basis. All staff with access to member data receive mandatory data protection training.
• Two-Factor Authentication: FC99 supports and strongly encourages the use of 2FA on all member accounts to mitigate the risk of unauthorised access.
• Regular Security Audits: The Platform undergoes regular penetration testing and vulnerability assessments by independent security professionals.
• Incident Response: In the event of a data breach affecting your Personal Data, FC99 will notify affected members without undue delay and take immediate steps to contain and remediate the incident.

While FC99 takes all reasonable technical and organisational measures to protect your data, no method of electronic transmission or storage is 100% secure. We encourage you to maintain a strong, unique password for your FC99 account and to notify us immediately at [email protected] if you suspect any unauthorised access.

10 Your Rights

As a Member of FC99, you have a number of rights in relation to your Personal Data. These rights are summarised below. To exercise any of them, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a verifiable request.

Please note that some rights may be subject to limitations where FC99 is required by law to retain or process your data — for example, AML retention obligations or ongoing investigation of suspected fraud. In such cases, we will explain the applicable restriction when responding to your request.

11 Children & Minors

If FC99 becomes aware that Personal Data has been collected from an individual who is under 21 years of age, we will take immediate steps to delete that information and close the associated account. All funds held in such an account will be subject to compliance review prior to any return.

Parents and guardians who become aware that minor may have registered on the FC99 Platform should contact us immediately at [email protected]. We treat all such reports with the highest urgency and will act promptly upon receipt of a verified report.

12 Changes to This Policy

FC99 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, legal obligations, or the services we offer. When material changes are made — including changes that affect your rights or how we use your data — we will notify active members by email and post a prominent notice on the Platform for a period of at least 14 days before the changes take effect.

Non-material changes — such as typographical corrections, clarifications of existing practices, or structural reformating — may be made without prior notice, though the updated date shown at the top of this page will always reflect the most recent revision.

Your continued use of the FC99 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with any material change, you are entitled to close your account and request deletion of your data subject to applicable legal retention obligations.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how FC99 handles your Personal Data, please reach out to us through the following channels. We are committed to responding to all data-related enquiries promptly.

• Email: [email protected] — for data rights requests, please use the subject line "Data Rights Request" to ensure prompt routing to our compliance team.
• Live Chat: Available24/7 via the FC99 Platform. For sensitive data requests, we recommend using email to ensure a documented trail.
• Response Timeline: FC99 will acknowledge receipt of a formal data rights request within 5 business days and provide a substantive response within 30 calendar days. Complex requests may require additional time, in which case we will notify you of the extended timeline.

For responsible gambling matters — including self-exclusion, deposit limit adjustments, or account cooling-off requests — please visit ourResponsible Gambling page or contact support directly. These requests are handled separately from general data enquiries and are treated with the highest operational priority.