dragon99 is committed to handling your personal information with care, transparency and respect. This Privacy Policy explains what data we collect when you use our platform, why we collect it, how we process it, who we may share it with, and what rights you hold over your own information.
Before reading the full policy, these six principles summarise the values that guide every decision dragon99 makes about personal data.
dragon99 collects only the personal data that is genuinely necessary for account operation, identity verification, payment processing and responsible-gambling compliance. We do not collect data speculatively or for undisclosed purposes.
Personal data collected for one purpose — for example, processing a DuitNow deposit — is not repurposed for unrelated activities without your knowledge. Each data category is used only for the specific functions described in this Policy.
We apply technical and organisational measures, including TLS encryption, hashed credential storage and access controls, to protect your personal data from unauthorised access, disclosure, alteration or destruction.
This Policy is written in plain English rather than dense legal language wherever possible. Malaysian users deserve to understand, without specialist training, exactly what happens to their data when they interact with dragon99.
You hold specific rights over your own personal data, including the right to access it, correct inaccuracies and request deletion where applicable. These rights are described in detail in Section 8 of this Policy.
dragon99 maintains internal records of processing activities and takes responsibility for the data practices of service providers acting on our behalf. Third parties processing data for dragon99 are required to operate under equivalent data protection standards.
Request a copy of the personal data we hold about you.
Ask us to correct inaccurate or incomplete data.
Request deletion of data we no longer have a lawful basis to retain.
Ask us to pause processing in specific circumstances while a dispute is resolved.
This Privacy Policy ("Policy") describes how dragon99, operating through the website https://dragon99.lat ("Platform"), collects, uses, stores, discloses and otherwise processes personal data relating to individuals who register an account, visit the Platform or otherwise interact with dragon99 services.
This Policy applies to all users of the Platform, including registered account holders, visitors who do not register, and individuals who contact the Platform through support channels. It should be read in conjunction with the dragon99 Terms & Conditions.
By accessing the Platform, creating an account or interacting with any dragon99 service, you acknowledge that you have read and understood this Policy. If you do not agree with any part of it, you should not use the Platform.
Malaysian users: While Malaysia's Personal Data Protection Act 2010 (PDPA) applies to data processors operating commercially within Malaysia, dragon99 processes data in accordance with the principles described in this Policy regardless of jurisdiction. You are encouraged to review your rights under applicable local law.
For the purposes of this Policy, the data controller responsible for your personal data is dragon99, the operator of the Platform accessible at https://dragon99.lat. Questions, requests and complaints regarding data processing may be directed to the contact details set out in Section 14 of this Policy.
Where dragon99 engages third-party processors to carry out specific processing activities on its behalf — for example, payment processing, identity verification or fraud detection — those processors act under written agreements that restrict their use of personal data to the purposes authorised by dragon99.
dragon99 collects the following categories of personal data, depending on the nature of your interaction with the Platform:
| Category | Examples | Collected When |
|---|---|---|
| Identity data | Full legal name, date of birth, national ID or passport number, selfie or document photograph | Registration; KYC verification |
| Contact data | Email address, phone number, residential address (including city: e.g. Kuala Lumpur, Penang, Johor Bahru) | Registration; account updates; support contacts |
| Financial data | Bank account details, e-wallet identifiers (e.g. Touch 'n Go eWallet, Boost, GrabPay), transaction history, deposit and withdrawal amounts in MYR or digital asset equivalents | Deposit; withdrawal; payment verification |
| Technical data | IP address, device type, operating system, browser type, session duration, page visit logs | Each Platform visit (automated collection) |
| Usage data | Game activity records, bet history, sports markets accessed, casino game preferences, bonus uptake | Active account use |
| Communication data | Live chat transcripts, WhatsApp message records, email correspondence content | Support interactions; complaint handling |
| Responsible gambling data | Self-imposed deposit limits, time-out requests, self-exclusion status, problem-gambling referral records | Responsible gambling tool usage |
We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health information or biometric data) unless strictly required for identity verification purposes, in which case it is processed solely for that purpose and retained only as long as necessary.
Personal data is collected through the following channels:
dragon99 processes personal data only where a lawful basis exists. The table below sets out the main processing purposes and the corresponding basis for each:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact | Performance of contract |
| Age and identity verification (KYC) | Identity, document images | Legal obligation; legitimate interests (fraud prevention) |
| Processing deposits and withdrawals (Maybank, CIMB, DuitNow, FPX, e-wallets, USDT etc.) | Financial, identity | Performance of contract |
| Fraud detection and anti-money laundering | Technical, financial, identity | Legal obligation; legitimate interests |
| Responsible gambling monitoring and intervention | Usage, responsible gambling, financial | Legal obligation; legitimate interests; consent (where limits are self-imposed) |
| Platform improvement and analytics | Technical, usage | Legitimate interests (balanced against user rights) |
| Customer support and complaint handling | Communication, identity | Performance of contract; legal obligation |
| Marketing communications (where opted in) | Contact, usage | Consent |
Where processing is based on consent, you have the right to withdraw that consent at any time by contacting support or adjusting your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
dragon99 does not sell your personal data to third parties. We may share personal data in the following limited circumstances:
All third parties engaged by dragon99 as data processors are required to process personal data only on dragon99's documented instructions, to implement appropriate security measures and to refrain from any further disclosure.
dragon99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable law or legitimate operational need.
When personal data is no longer required, it is securely deleted or anonymised in a manner that prevents reconstruction of the original information.
Subject to applicable law, you hold the following rights in respect of your personal data held by dragon99:
To exercise any of the above rights, please contact dragon99 at [email protected]. We will acknowledge your request within 3 business days and respond substantively within 30 days, subject to the complexity and volume of requests received.
We may require you to verify your identity before fulfilling a data subject request. This is to ensure that personal data is not disclosed to an unauthorised party.
The dragon99 Platform uses cookies and similar client-side storage technologies to support core functionality, improve user experience and gather usage analytics. The following categories of cookies are used:
You may control non-essential cookies through your browser settings. Note that disabling functional or analytical cookies may affect your experience on the Platform. Strictly necessary cookies cannot be disabled.
dragon99 implements a range of technical and organisational security measures proportionate to the nature and sensitivity of the personal data processed, including:
No security system is infallible. In the event of a data breach that poses a significant risk to affected individuals, dragon99 will take all reasonable steps to limit the impact and to notify affected users and relevant authorities as required by applicable law.
You also have a responsibility to protect your own account. Use a strong, unique password for dragon99 that you do not share with other services, and contact support immediately if you suspect your account has been accessed without your authorisation.
dragon99 and its service providers may process personal data in countries outside Malaysia. Where personal data is transferred internationally, dragon99 ensures that appropriate safeguards are in place to protect the data at the destination, including contractual protections such as standard data transfer clauses or equivalent mechanisms recognised under applicable data protection frameworks.
By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries that may have different data protection standards from those applicable in Malaysia.
The Platform is intended exclusively for adults aged 21 and above. dragon99 does not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe that a minor has provided personal data to dragon99, please contact us immediately at [email protected] and we will take prompt action to delete the relevant data and close any associated account.
dragon99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or Platform functionality. Where material changes are made, we will update the "Last reviewed" date at the top of this page and, where appropriate, provide additional notice through the Platform.
Your continued use of the Platform following the effective date of any amended Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and request account closure.
For any questions, requests or concerns relating to this Privacy Policy or to dragon99's data processing practices, please contact our support team. We handle data enquiries in English, Bahasa Melayu and Chinese.
Email: [email protected]
Data-related requests — including access, rectification, erasure and objection requests — will be acknowledged within 3 business days and substantively addressed within 30 calendar days. Complex requests may require additional time, in which case we will notify you of the expected timeline.
For responsible gambling related matters, including self-exclusion requests, please visit the Responsible Gambling page.
If you have reviewed this Privacy Policy and have a specific question about your personal data, contact our support team via live chat or email. To explore the Platform, return to the homepage. For adults aged 21 and above in Malaysia only.