Your privacy matters to us. This Privacy Policy explains what personal data Sky99 collects, why we collect it, how we use and protect it, and what rights you hold as a registered player on our platform. We have written this policy in plain English so it is genuinely readable — not just a legal formality.
These six points summarise the principles that guide how Sky99 handles your personal information. The full policy below provides complete detail.
Sky99 does not sell, rent, or trade your personal information to third-party advertisers or data brokers — ever. Your data exists on our platform to serve your account, not someone else's business.
All data transmitted between your device and Sky99 is protected by 256-bit SSL/TLS encryption. Sensitive data at rest — including payment details and identity documents — is stored using AES-256 encryption.
We collect only the personal data necessary to operate your account, process transactions, fulfil legal obligations, and deliver customer support. We do not collect data speculatively or for undisclosed purposes.
You have the right to access, correct, export, or request deletion of your personal data at any time. Requests are processed within 30 days. See Section 9 of this policy for the full list of your data rights.
Sky99 is built for Malaysian players. Our data handling practices take into account the Personal Data Protection Act 2010 (PDPA Malaysia) and applicable local regulations. All MYR transactions are processed locally where possible.
We do not hold your data indefinitely. Retention periods are defined by regulatory requirements — typically 5–7 years for financial records — and data is securely deleted or anonymised once retention obligations are met.
This Privacy Policy ("Policy") is published by Sky99 ("we", "us", "our", "Sky99"), the operator of the online casino and sports betting platform accessible at https://sky99.buzz (the "Platform"). This Policy applies to all registered users ("you", "your", "User") and visitors to the Platform.
Sky99 is an English-language platform designed specifically for the Malaysian market. We operate in full awareness of the Malaysian Personal Data Protection Act 2010 (PDPA) and take our obligations under that legislation, as well as applicable international data protection standards, seriously.
This Policy explains in clear terms: what personal data we collect from you and about you; the purposes for which that data is processed; the legal bases upon which we rely to process it; who we may share it with; how long we keep it; and the rights you have in relation to your personal data.
By registering for a Sky99 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy. This Policy forms part of, and should be read in conjunction with, Sky99's Terms & Conditions.
In this Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, directly or indirectly. This includes name, identification number, contact details, financial information, and device identifiers. |
| "Processing" | Any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, erasure, or transmission. |
| "Data Subject" | The natural person to whom Personal Data relates — in this context, registered Sky99 Users and visitors to the Platform. |
| "Data Controller" | Sky99, as the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Third Party" | Any entity other than Sky99 and the Data Subject, including payment processors, identity verification providers, game studios, and regulatory authorities. |
| "KYC" | Know Your Customer — the mandatory identity and address verification process conducted by Sky99 prior to authorising withdrawals or elevated transaction limits. |
| "Cookie" | A small text file placed on your device by the Sky99 Platform to enable session management, personalisation, and analytics functions. |
| "PDPA" | The Personal Data Protection Act 2010 (Malaysia), which governs the processing of personal data in commercial transactions in Malaysia. |
Sky99 collects Personal Data that falls into the following categories. We collect only what is necessary for the stated purposes and do not retain data beyond the periods described in Section 8 of this Policy.
Sky99 collects Personal Data through the following channels:
Sky99 processes your Personal Data for the following defined purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and operating your Sky99 account, including authentication and account security. |
| Identity Verification | Conducting KYC checks to verify your identity and age (21+ requirement) in compliance with applicable regulations. |
| Payment Processing | Processing deposits and withdrawals in MYR through your chosen payment method, including reconciliation of transactions. |
| Regulatory Compliance | Meeting obligations under applicable laws including anti-money laundering (AML), counter-terrorism financing (CTF), and the PDPA Malaysia. |
| Fraud Prevention | Detecting, investigating, and preventing fraudulent activity, bonus abuse, money laundering, and other prohibited conduct. |
| Customer Support | Responding to enquiries, resolving disputes, and managing formal complaints from registered Users. |
| Responsible Gambling | Monitoring account activity for signs of problem gambling, applying responsible gambling tools, and enforcing self-exclusion requests. |
| Platform Improvement | Analysing aggregated, anonymised usage data to improve game offerings, payment flows, and platform performance. |
| Marketing Communications | Sending promotional communications where you have given explicit consent. You may opt out at any time via Account Settings or by contacting Support. |
Sky99 does not process your Personal Data for any purpose not listed above without first obtaining your explicit consent or identifying a valid legal basis as described in Section 6.
Sky99 relies on the following legal bases to process your Personal Data, as recognised under the PDPA Malaysia and applicable data protection frameworks:
Sky99 does not sell, rent, or trade your Personal Data to third parties. We may, however, share specific Personal Data with the following categories of recipients where necessary and permitted by law:
When you make a deposit or withdrawal, relevant transaction data is shared with the applicable payment service provider — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX network participants (Maybank, CIMB, Public Bank, Hong Leong Bank), or cryptocurrency processing services — solely for the purpose of executing and confirming the transaction.
KYC documents and identity data may be shared with contracted third-party identity verification providers to assist in document authentication and fraud screening. These providers are contractually bound to process your data only for the stated purpose and in accordance with applicable data protection obligations.
Sky99 may be required to disclose Personal Data to regulatory bodies, law enforcement agencies, or other competent authorities where required by applicable law, court order, or regulatory direction. Sky99 will comply with such requirements while seeking to provide only the minimum necessary information.
Certain technical data (such as session identifiers) may be transmitted to licensed game studio providers in the course of delivering live casino or slot game content. Such providers receive only the technical data necessary to operate the game session and are not provided with your full identity or financial data.
Sky99 may share Personal Data with legal advisors, auditors, or insurers on a confidential basis where necessary for legitimate business purposes, including the defence of legal claims.
Sky99 retains Personal Data only for as long as is necessary for the stated purpose, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of account + 5 years after closure | AML/CTF regulatory obligation |
| KYC Documents | 5 years from account closure | Regulatory obligation (PDPA, AML) |
| Financial Transaction Records | 7 years from transaction date | Financial regulatory obligation |
| Gaming Activity Logs | 5 years from date of activity | Regulatory compliance and dispute resolution |
| Customer Support Records | 3 years from last interaction | Legitimate interest (dispute resolution) |
| Marketing Consent Records | Until consent withdrawn + 2 years | Legal obligation (consent evidence) |
| Technical / Device Logs | 12 months from creation | Security and fraud prevention |
Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data no longer constitutes Personal Data under applicable law and may be retained for analytical purposes without time limit.
As a Data Subject, you hold the following rights in relation to your Personal Data processed by Sky99. These rights are exercisable at any time by contacting Customer Support, subject to any applicable legal limitations:
To exercise any of the above rights, please contact Sky99 Customer Support via live chat or email at . Sky99 will respond to all verified data rights requests within 30 calendar days. In complex cases, this may be extended by a further 30 days, and you will be informed accordingly.
Sky99 uses cookies and similar tracking technologies on the Platform for the following purposes:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for the Platform to function. Enable session management, login authentication, and security features. Cannot be disabled without affecting core functionality. | Session / up to 30 days |
| Functional Cookies | Remember your preferences such as language, currency display, and recently played games to personalise your experience. | Up to 12 months |
| Analytics Cookies | Collect aggregated, anonymised data about Platform usage patterns to help us improve performance, game availability, and user experience. No individual user is identifiable from this data. | Up to 24 months |
| Security Cookies | Support fraud detection and prevention functions, including detection of unusual login patterns and device fingerprinting for account protection. | Up to 12 months |
Sky99 does not use third-party advertising cookies or behavioural targeting cookies. You may manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to use the Platform. For further information, consult the help documentation of your browser.
Sky99 applies a strict minimum age requirement of 21 years for all registered users. The Platform is not directed at, and does not knowingly collect Personal Data from, any individual under the age of 21.
Where Sky99 has reasonable grounds to believe that an Account has been registered by or is being accessed by an individual under the age of 21, the Account will be immediately suspended and all associated Personal Data will be subject to a mandatory review. If underage access is confirmed, the Account will be permanently closed and relevant Personal Data will be handled in accordance with applicable law, which may include notification to appropriate authorities.
If you believe that a minor has registered on Sky99 or is accessing the Platform, please contact our Customer Support team immediately at .
Sky99 implements a multi-layered approach to data security, incorporating both technical and organisational controls to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction:
Sky99 is an operator serving the Malaysian market. Where it is necessary for operational reasons to transfer your Personal Data outside of Malaysia — for example, to contracted service providers hosting infrastructure in other jurisdictions — such transfers will be conducted in accordance with the requirements of the PDPA Malaysia and any applicable cross-border data transfer regulations.
Prior to any cross-border transfer, Sky99 will ensure that the recipient jurisdiction provides an adequate level of data protection, or that appropriate safeguards are in place through contractual provisions binding the recipient to data protection obligations equivalent to those applied by Sky99.
Where permitted by applicable law, Sky99 prioritises data hosting and processing arrangements that keep Malaysian user data within Malaysia or within jurisdictions recognised as providing equivalent protection.
Sky99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last updated" date at the top of this page indicates when the most recent revision was published.
Where material changes are made to this Policy — for example, changes that significantly affect how we use your Personal Data or your rights — Sky99 will notify registered Users by email and/or through a prominent notice on the Platform prior to the changes taking effect.
Your continued use of the Sky99 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you should contact Customer Support to close your Account.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how Sky99 handles your Personal Data, please contact us through the following channels:
If you are not satisfied with Sky99's response to a data protection concern, you have the right to lodge a formal complaint with the relevant data protection authority in Malaysia. Sky99 requests that you contact us directly in the first instance to allow us the opportunity to address your concern before escalation to a supervisory authority.
Formal data protection complaints should be submitted in writing to , clearly marked as "Formal Data Protection Complaint". Sky99 undertakes to acknowledge formal complaints within 5 business days and provide a substantive written response within 30 calendar days.
Our support team is available around the clock to help with any privacy-related questions, data rights requests, or account concerns. You can also explore our FAQ for quick answers.
For players aged 21 and above only. Please also review our Terms & Conditions and Responsible Gambling pages.