Introduction
d199 ("we", "us", "our" or "the Platform") operates the website located at https://d199.cam. We are committed to protecting the personal data of all individuals who access or use our Platform, including users based in Malaysia and other regions.
This Privacy Policy ("Policy") describes the types of personal information we collect, the purposes for which we process it, the circumstances under which it may be shared, the period for which it is retained, the security measures we apply, and the rights available to you in relation to your data. This Policy applies to all visitors, registered account holders, newsletter subscribers and any other individuals who interact with the d199 Platform.
By accessing or using d199, you acknowledge that you have read and understood this Privacy Policy in its entirety and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue your use of the Platform immediately.
This Policy should be read in conjunction with the d199 Terms & Conditions, which govern your general use of the Platform. Capitalised terms used but not defined in this Policy carry the meanings ascribed to them in the Terms & Conditions.
Data controller: d199 acts as the data controller in respect of personal data collected through the Platform. Queries relating to data processing may be directed to [email protected].
Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
- "Personal Data"
- Any information relating to an identified or identifiable natural person, including but not limited to name, email address, IP address, device identifiers, usage data and any other information that can be used directly or indirectly to identify you.
- "Processing"
- Any operation or set of operations performed on Personal Data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure or destruction.
- "Data Subject"
- Any natural person whose Personal Data is processed by d199, including Platform visitors, registered users and enquiry submitters.
- "Data Controller"
- The entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, d199 is the data controller.
- "Cookies"
- Small text files placed on your device by a website to store information about your browsing session, preferences or identity for future visits.
- "Third-Party Service Provider"
- Any external organisation engaged by d199 to provide services related to the Platform, including analytics providers, hosting services and support tools.
Data We Collect
d199 collects Personal Data through various means depending on how you interact with the Platform. The categories of data we may collect are described below.
3.1 Data you provide directly
- Account registration data: Full name, email address, date of birth, chosen username and password (stored in hashed form) provided when creating a d199 account.
- Identity verification data: Where Know Your Customer (KYC) procedures apply, copies of identification documents such as a valid Malaysian identity card (MyKad), driver's licence or passport, and proof of address such as a utility bill issued within the past three months.
- Support communications: The content of messages, queries and attachments submitted to the d199 support team via email at [email protected] or through live chat.
- Voluntary submissions: Any additional information you choose to provide in connection with surveys, feedback forms or promotional participation.
3.2 Data collected automatically
- Technical and device data: IP address, browser type and version, operating system, screen resolution, referring URL and device identifiers.
- Usage data: Pages visited, time spent on each page, links clicked, scroll depth, search terms entered and session duration.
- Cookie and tracking data: Information gathered through cookies, web beacons, pixels and similar technologies. See Section 7 for full details on our cookie practices.
- Geolocation data: Approximate geographic location inferred from your IP address, which may identify your city or region within Malaysia (for example, Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya or Shah Alam) or internationally.
Sensitive data note: d199 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records or financial account credentials. Do not submit sensitive data unless specifically requested as part of a verified KYC process.
Data Processing
We process the Personal Data we collect for the following specific purposes:
| Purpose | Data Used | Basis |
|---|---|---|
| Providing and operating the Platform | Account data, usage data, technical data | Contract performance |
| Account registration and authentication | Name, email, password hash | Contract performance |
| Identity verification (KYC) | ID documents, proof of address, selfie | Legal obligation / Consent |
| Customer support and communications | Email, chat logs, support content | Contract performance / Legitimate interest |
| Platform analytics and improvement | Usage data, device data, cookies | Legitimate interest |
| Security monitoring and fraud prevention | IP address, device data, account data | Legitimate interest / Legal obligation |
| Legal compliance and regulatory obligations | All relevant data categories | Legal obligation |
| Marketing communications (where consented) | Email address, name, preferences | Consent |
We do not use your Personal Data for purposes other than those listed above. Where we intend to process your data for a new purpose, we will provide notice and, where required by applicable law, seek your consent prior to commencing such processing.
Legal Basis for Processing
d199 processes Personal Data only where a valid legal basis exists under applicable data protection law. The legal bases upon which we rely are as follows:
- Contractual necessity: Processing required to provide the services you have requested, including operating your account and responding to support queries.
- Legal obligation: Processing required to comply with applicable laws and regulations, including identity verification requirements and anti-money laundering obligations.
- Legitimate interests: Processing carried out in furtherance of our legitimate business interests, such as improving Platform performance, preventing fraud and ensuring security, provided such interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing based on your freely given, specific, informed and unambiguous consent, such as receiving marketing emails. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Data Sharing
d199 does not sell, rent or trade your Personal Data to third parties for commercial gain. We may, however, share your data in the following limited circumstances:
- Service providers: Third-party organisations engaged to support the operation of the Platform, such as cloud hosting providers, analytics services, customer support software vendors and email delivery services. These providers are contractually bound to process data only on our instructions and to implement appropriate security measures.
- Legal and regulatory authorities: Where we are required by law, court order or regulatory direction to disclose information to competent authorities. We will notify you of such disclosure where legally permitted to do so.
- Business transfers: In the event of a merger, acquisition, restructuring, asset sale or insolvency proceeding involving d199, Personal Data may be transferred as part of the transaction. We will endeavour to provide reasonable notice before such a transfer and to ensure appropriate protections remain in place.
- With your consent: In any other circumstances where you have provided express prior consent to the sharing of your data.
Where Personal Data is transferred outside of Malaysia to a jurisdiction that may not provide an equivalent level of data protection, we will implement appropriate safeguards, such as contractual protections, to ensure that your data remains adequately protected.
Cookies & Tracking Technologies
d199 uses cookies and similar tracking technologies to enhance your experience on the Platform, to understand how users interact with our content, and to support security measures. Below is a description of the types of cookies we deploy:
-
Strictly necessary cookies
Essential for the Platform to function correctly. They enable core features such as session management, security tokens, login authentication and navigation. These cookies cannot be disabled without impairing functionality.
-
Analytics and performance cookies
Collect anonymous information about how visitors use the Platform — for example, which pages are visited most often and how users navigate between sections. Data is aggregated and does not identify individual users. These cookies help us understand what content is most useful to Malaysian players.
-
Preference cookies
Remember your settings and preferences such as language selection, display options and previously viewed content. These cookies improve the convenience of return visits without requiring you to reconfigure your preferences each time.
Managing cookies: You may control cookies through your browser settings. Most browsers allow you to view, block or delete cookies. Please note that disabling strictly necessary cookies may affect Platform functionality. Continued use of the Platform following notification of our cookie practices constitutes your consent to the use of non-essential cookies.
Data Retention
d199 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
- Account data: Retained for the duration of your account and for a period of up to five (5) years following account closure, to support legal claims, regulatory investigations and fraud prevention obligations.
- KYC and identity verification documents: Retained for the period required by applicable anti-money laundering and regulatory requirements, which may extend beyond account closure.
- Support communications: Retained for up to two (2) years from the date of the last communication, to support dispute resolution and quality assurance.
- Analytics data: Anonymised analytics data may be retained indefinitely in aggregated, non-identifiable form to support Platform development and analysis.
- Marketing data: Retained until you withdraw consent or request deletion, subject to any overriding legal retention obligations.
Following the expiry of applicable retention periods, Personal Data will be securely deleted or irreversibly anonymised in accordance with our internal data management procedures.
Data Security
d199 implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:
- Transmission of data over encrypted HTTPS connections using industry-standard TLS protocols.
- Password hashing using secure cryptographic algorithms to ensure that plaintext passwords are never stored.
- Access controls restricting Personal Data access to authorised personnel only, on a need-to-know basis.
- Regular security assessments and monitoring of Platform systems for vulnerabilities and suspicious activity.
- Employee training on data protection obligations and safe handling of Personal Data.
Whilst d199 takes data security seriously and maintains industry-standard safeguards, no method of electronic transmission or storage is completely secure. You acknowledge that you transmit information to the Platform at your own risk and that d199 cannot guarantee absolute security.
Personal responsibility: You are responsible for keeping your account credentials secure. Do not share your username, password or one-time codes with any other person. If you suspect unauthorised access to your account, contact [email protected] immediately and change your password.
User Rights
Subject to applicable data protection laws, you have the following rights in respect of your Personal Data held by d199. To exercise any of these rights, please contact us at [email protected] with a clear description of your request and sufficient identity information to allow us to verify your identity.
Right of Access
Request a copy of the Personal Data we hold about you and information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete Personal Data held in your account or our records.
Right to Erasure
Request deletion of your Personal Data where processing is no longer necessary, subject to overriding legal obligations.
Right to Restriction
Request that processing of your data be restricted in certain circumstances, such as while an accuracy dispute is being resolved.
Right to Portability
Request transfer of your data in a structured, machine-readable format where processing is based on consent or contract.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless compelling grounds override your interests.
We will respond to all verified data rights requests within thirty (30) days of receipt. Where requests are complex or numerous, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it.
Protection of Minors
The d199 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, solicit or process Personal Data from individuals under the age of 21. The age restriction applies in accordance with internationally recognised standards for gambling-related content.
If d199 becomes aware that Personal Data has been collected from a person under the age of 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data from our records and, where applicable, terminate the associated account.
If you believe that a minor may have submitted Personal Data to d199, please notify us at [email protected] as soon as possible. We will investigate the matter promptly and take appropriate action.
Third-Party Links
The d199 Platform may contain references to, or informational descriptions of, third-party websites, gaming platforms and payment services, including Malaysian payment methods such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong. References to these services are provided for informational purposes only.
d199 does not operate, control or endorse any third-party website or service referenced on the Platform. We are not responsible for the privacy practices, terms of service, security measures or data handling procedures of any third-party platform. If you follow any link to an external site, you do so at your own risk and subject to the privacy policy of that site.
We strongly recommend that you review the privacy policy of any third-party platform before submitting Personal Data or engaging in financial transactions with that platform.
Policy Amendments
d199 reserves the right to update, revise or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, regulatory requirements or operational changes to the Platform. When material changes are made, we will update the "Last Updated" date displayed at the top of this page.
We encourage you to review this Policy periodically to stay informed of how we process your Personal Data. Where changes are significant, we may notify registered users by email or through a prominent notice on the Platform prior to the changes taking effect.
Your continued use of the d199 Platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any updated provision, you should cease using the Platform and, if applicable, request deletion of your account and associated data.
Contact Us
If you have any questions, concerns or requests in connection with this Privacy Policy or the processing of your Personal Data, please contact us using the details below:
- Data controller: d199
- Website: https://d199.cam
- Support email: [email protected]
- Live chat: Available 24 hours a day, 7 days a week through the Platform
- Response commitment: Data rights requests acknowledged within 30 days; general queries typically responded to within 24 hours
When contacting us about a data rights request, please include your full name, registered email address and a clear description of your request. We may need to verify your identity before processing certain requests to ensure the security of your data.
This Privacy Policy was last reviewed and updated on 1 January 2026. We recommend bookmarking this page and revisiting it periodically to remain informed of any changes that may affect how your Personal Data is processed by d199.