At CRS99, the protection of your personal data is a responsibility we take seriously. This Privacy Policy explains precisely what information we collect from Malaysian members, how it is used, who it may be shared with, and the rights you hold over your own data. Please read this document carefully.
Your personal information is never sold to third-party marketers or data brokers under any circumstances.
All data transmitted between your device and CRS99 is protected with bank-grade TLS/SSL encryption.
You may request access, correction, or deletion of your personal data at any time by contacting us.
We collect only the data that is genuinely necessary to operate your account and process transactions.
CRS99 ("we", "us", "our", "the Company", "the Platform") is committed to safeguarding the privacy and personal data of all individuals who access or use our online gaming and sports betting platform athttps://crs99.lat. This Privacy Policy ("Policy") describes in clear and transparent terms the types of personal information we collect, the purposes for which that information is processed, the parties with whom it may be shared, and the rights available to you as a data subject.
This Policy applies to all registered Members and visitors to the CRS99 Platform, including users accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations across Malaysia. It applies to personal data collected through the CRS99 website, any associated mobile interfaces, and any communications exchanged between you and CRS99 (including live chat, email, and support tickets).
By creating a CRS99 account, making a deposit, or otherwise using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.
This Privacy Policy should be read together with our Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions in relation to data processing matters, this Privacy Policy will take precedence.
For the purposes of this Privacy Policy, the following definitions apply:
CRS99 collects personal data through multiple channels in the course of providing its Services. The data we collect falls into the following categories:
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Name, DOB, MyKad number, Passport | Registration & KYC submission |
| Contact Data | Email, phone, residential address | Registration form |
| Financial Data | Bank account, e-wallet ID, crypto wallet | Deposit / withdrawal requests |
| Technical Data | IP address, browser, device ID | Automatic — platform access |
| Usage Data | Betting history, login times, pages visited | Automatic — platform activity |
| Communications Data | Support chat logs, email content | Customer support interactions |
CRS99 processes your personal data only for clearly defined, legitimate purposes. The following table sets out the primary purposes for which we use personal data and the corresponding legal basis in each case:
CRS99 does not use your personal data for automated individual decision-making that produces significant legal effects, and does not engage in profiling for direct marketing purposes without your explicit consent.
CRS99 processes your personal data on the following legal grounds, which may vary depending on the specific purpose of processing:
CRS99 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of third parties solely to the extent necessary for the purposes described in this Policy:
We share transactional and identity data with licensed Malaysian payment service providers — including FPX-affiliated banks (Maybank, CIMB, Public Bank, Hong Leong, RHB), e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), and DuitNow — to facilitate the processing of deposits and withdrawals. These providers are bound by their own applicable data protection obligations and may not use your data for any purpose beyond facilitating the specific transaction.
KYC documentation and identity data may be shared with regulated identity verification and AML screening service providers. These processors operate under binding data processing agreements and strict confidentiality obligations.
Personal data may be processed by cloud hosting providers, database management services, and cybersecurity partners that support the operation and security of the CRS99 Platform. All such processors are engaged under formal data processing agreements.
CRS99 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required to do so by applicable law, court order, or regulatory direction. We will use reasonable efforts to notify you of any such disclosure to the extent permitted by law.
CRS99 will never disclose your personal data to any third party in exchange for payment, marketing arrangements, or commercial incentives. If you receive any communication from a party claiming to represent CRS99 and requesting personal data through an unofficial channel, treat it as fraudulent and contact our support team immediately.
CRS99 uses cookies and similar tracking technologies to operate essential Platform functions, improve user experience, and support security and analytics processes. By continuing to use the CRS99 Platform, you consent to our use of cookies as described in this section.
Most browsers allow you to control cookies through their settings. You may configure your browser to block non-essential cookies or to alert you when cookies are being set. Please note that disabling certain cookies may impair the functionality of the CRS99 Platform and may prevent you from accessing certain features or completing transactions.
CRS99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general data retention principles are as follows:
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with CRS99's internal data disposal procedures.
CRS99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures in place include:
While CRS99 employs robust security measures, no digital system is completely immune to risk. You also play a role in protecting your data — keep your Account password secure, do not share your login credentials, and contact us immediately if you suspect any unauthorised activity on your Account.
As a data subject, you hold a number of rights in relation to your personal data held by CRS99. These rights are set out below and may be exercised at any time by submitting a request to our Data Privacy team at [email protected]. CRS99 will respond to all verified data rights requests within a reasonable timeframe and in any event within 30 days of receipt.
You may request a copy of all personal data we hold about you, including the categories of data, the purposes of processing, and any third parties with whom it has been shared.
You may request correction of any inaccurate or incomplete personal data held your CRS99 account. Many details can be updated directly through your account settings.
You may request deletion of your personal data where it is no longer necessary for the original purpose, subject to our legal obligations to retain certain records.
You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being verified following a rectification request.
Where processing is based on your consent or the performance of a contract, you may request that your personal data be provided to you in a structured, machine-readable format.
You may object to the processing of your personal data where it is based on legitimate interests. You may also withdraw consent for any processing activities where consent is the stated legal basis.
The CRS99 Platform is strictly intended for use by adults aged21 years and above. CRS99 does not knowingly collect, store, or process personal data from individuals under the age of 21. If CRS99 becomes aware that personal data has been submitted by a person below the minimum age threshold, that data will be deleted promptly and the associated account will be permanently closed.
Parents and guardians are encouraged to use available parental control tools to restrict access to online gambling platforms. If you believe that a minor may have registered an account or provided personal data to CRS99, please contact our support team immediately at [email protected] so that we may investigate and take appropriate action without delay.
Strictly 21+ Only. CRS99 enforces a minimum age of 21 years for all account registrations and real-money gaming activities. Age verification is conducted as part of the KYC process for every Member prior to withdrawal processing.
CRS99 may transfer your personal data to service providers or infrastructure partners located outside of Malaysia in the course of operating the Platform. Where such transfers occur, CRS99 ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that which would apply within Malaysia.
Safeguards applied to international data transfers may include: contractual data processing agreements incorporating standard data protection clauses; transfer to jurisdictions that maintain an adequate level of data protection as determined by applicable regulatory frameworks; and technical measures such as encryption and pseudonymisation to reduce the risk associated with cross-border data flows.
The CRS99 Platform may incorporate third-party services such as payment gateway interfaces, identity verification portals, and analytics tools. While CRS99 selects third-party partners carefully and holds them to strict contractual data protection standards, we are not responsible for the privacy practices of independently operated third-party services accessed via links or integrations on our Platform.
This Privacy Policy applies solely to personal data collected and processed directly by CRS99. You are encouraged to review the privacy policies of any third-party services you interact with — including Malaysian bank portals such as Maybank2u, CIMB Clicks, and Public Bank Online — before submitting any personal data through those services.
CRS99 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our internal data processing practices. Where any amendment is material, CRS99 will notify registered Members via the email address associated with their account or through a prominent notice displayed on the Platform prior to the change taking effect.
The date of the most recent revision to this Policy is displayed at the top of this page. Your continued use of the CRS99 Platform following any update to this Policy constitutes your acknowledgement and acceptance of the revised terms. If you do not agree to any amendment, you should discontinue use of the Platform and may request account closure by contacting our support team.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by CRS99, please contact our Data Privacy team using the details below. All data rights requests and privacy enquiries will be acknowledged within 48 hours and resolved within 30 days.
When submitting a data rights request, please provide your registered Account username and email address to assist us in verifying your identity and locating the relevant records. CRS99 may request additional verification before processing requests relating to sensitive personal data categories.
Our privacy framework is built around six core commitments to every CRS99 member.
Your personal data is not a product. CRS99 will never sell, license, or exchange your personal information with third parties for their own commercial gain.
We collect only what is genuinely necessary to operate your account, process transactions in MYR, and comply with our regulatory obligations. No unnecessary data hoarding.
Access, correct, export, or request deletion of your data at any time. Our privacy team responds to all verified data rights requests within 30 days.
256-bit TLS/SSL protects all data in transit. Sensitive records including KYC documents and financial data are encrypted at rest within our secured infrastructure.
We don't keep your data indefinitely. Clear retention schedules govern how long each category of personal data is stored before secure deletion or anonymisation.
In the unlikely event of a security incident affecting your data, CRS99 will notify affected Members promptly and take immediate steps to contain and remediate the issue.
If you have questions about how your personal data is handled on CRS99, our support team is available 24/7. You can also explore our FAQ or return to the homepage.
Back to Homepage Read Our FAQ