Rebat99 is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you hold over your own data as a registered player on our platform.
These summary cards outline our most important data protection commitments. They are supplementary to the full legal text below, which governs all data processing activities on the Rebat99 platform.
This Privacy Policy ("Policy") describes how Rebat99 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "your", "the User", "the Player") who access or use the services available at rebat99.cam and its associated subdomains.
Rebat99 takes the protection of your personal data seriously. We are committed to handling your information transparently, processing it only for legitimate and clearly stated purposes, and maintaining robust technical and organisational safeguards to ensure its security.
By registering an account on the Rebat99 platform, completing the KYC verification process, or continuing to use our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy forms part of and should be read in conjunction with our Terms and Conditions.
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| Personal Data | Any information that relates to an identified or identifiable natural person — including name, email address, date of birth, identity document number, IP address, and financial account details. |
| Processing | Any operation performed on Personal Data, whether by automated means or otherwise — including collection, recording, storage, use, disclosure, transmission, and deletion. |
| Data Controller | The entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, the Data Controller is Rebat99. |
| Data Processor | A third party that processes Personal Data on behalf of the Data Controller under a contractual agreement and in accordance with instructions from the Data Controller. |
| KYC | Know Your Customer — the identity verification process required of all registered players, involving the submission of identity and address documentation. |
| Cookies | Small text files stored on a User's device by the Platform for the purposes of session management, analytics, preferences, and performance optimisation. |
| Consent | A freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their Personal Data for a stated purpose. |
Rebat99 acts as the Data Controller in respect of all Personal Data collected from users of the rebat99.cam platform. As Data Controller, we are responsible for determining the purposes for which your personal data is collected, the methods by which it is processed, and the measures taken to protect it from unauthorised access, loss, or disclosure.
Where Rebat99 engages third-party service providers — including payment processors, identity verification providers, and game content suppliers — to process personal data on our behalf, those parties operate as Data Processors subject to contractual obligations that are consistent with this Policy. Rebat99 remains accountable for the personal data processed by its appointed Data Processors.
For all data protection enquiries, access requests, and formal complaints, please refer to the contact details provided in Section 16 of this Policy.
Rebat99 collects personal data only to the extent necessary for the lawful operation of the Platform, compliance with our licensing obligations, and delivery of services to registered players. The categories of data we collect are as follows:
Personal data is collected through the following channels and methods:
Rebat99 processes personal data for the following specific and legitimate purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and operating your registered account, including processing deposits, withdrawals, and account settings changes. |
| Identity Verification (KYC) | Verifying your identity and age in compliance with our international licensing obligations and anti-moneylaundering requirements. |
| Fraud Prevention | Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, and other prohibited conduct on the Platform. |
| Transaction Processing | Processing deposit and withdrawal requests via approved payment methods including local Malaysian channels and cryptocurrencies. |
| Regulatory Compliance | Meeting obligations imposed by our international gaming licence, including record-keeping, suspicious activity reporting, and cooperation with lawful requests from authorities. |
| Responsible Gambling | Monitoring player activity to identify potential signs of problem gambling and applying responsible gambling tools such as deposit limits and self-exclusion in accordance with your instructions. |
| Customer Support | Responding to enquiries, resolving disputes, processing complaints, and communicating with you about your account. |
| Platform Improvement | Analysing anonymised or aggregated usage data to improve platform performance, user experience, and game selection. |
| Marketing (with Consent) | Sending promotional communications about bonuses, VIP programme updates, and special offers — only where you have provided explicit consent. |
Rebat99 processes your personal data only where a recognised legal basis exists. The applicable legal bases for our processing activities are:
Rebat99 does not sell, rent, lease, or otherwise commercially transfer your personal data to third parties. We may share your data with specific categories of third parties only where strictly necessary and for the purposes set out in this Policy:
To process your deposit and withdrawal transactions, we share relevant financial data with authorised payment processors. This includes Malaysian domestic banking channels (Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX), digital wallet operators (Touch 'n Go eWallet, Boost, GrabPay), and cryptocurrency network infrastructure providers. These processors receive only the data necessary to complete the requested transaction.
KYC documents and biometric verification data are processed by contracted identity verification service providers who operate under data processing agreements consistent with applicable privacy standards. These providers do not retain your data beyond the period necessary for verification.
Anonymised or pseudonymised gameplay and session data may be shared with game studio suppliers and RNG certification bodies for the purposes of game performance validation and fairness testing. No personally identifiable information is shared for this purpose.
Rebat99 may disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, a court order, or in connection with the investigation and prevention of financial crime, fraud, or other serious misconduct.
As an internationally operated platform, Rebat99 may transfer your personal data to servers and service providers located outside of Malaysia. Where such transfers occur, we take appropriate measures to ensure that your data continues to be processed in accordance with equivalent protections, including:
By using the Rebat99 platform, you acknowledge that your data may be processed in jurisdictions outside Malaysia, and you consent to such transfers as described in this Policy.
Rebat99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following retention guidelines apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years following account closure |
| KYC identity documents | Duration of account plus 5 years, or longer where required by licensing authority |
| Transaction and financial records | 7 years from the date of the transaction (anti-moneylaundering obligation) |
| Support and communication records | 3 years from the date of last interaction |
| Game activity and wagering logs | Duration of account plus 3 years following closure |
| Marketing consent records | Duration of consent plus 2 years for audit purposes |
| Technical logs (IP, session data) | 12 months from collection |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard deletion procedures. Where you request deletion of your data prior to the natural expiry of the retention period, we will act on your request except where retention is mandated by law or licensing requirements.
Rebat99 uses cookies and similar tracking technologies to enhance platform functionality, maintain session integrity, and analyse usage patterns. The following categories of cookies are deployed on the Platform:
These cookies are strictly necessary for the operation of the Platform — including session management, login authentication, security tokens, and game state preservation. Essential cookies cannot be disabled without materially affecting your ability to use the Platform.
Analytical cookies enable us to measure and understand how users interact with the Platform, identify performance issues, and improve the overall user experience. Data collected via analytical cookies is aggregated and does not identify individual users.
Functional cookies store your preferences — such as preferred language, display settings, and notification preferences — so that these can be preserved across sessions without requiring you to re-enter them on each visit.
You may configure your browser settings to refuse or delete cookies. Please note that disabling certain categories of cookies may impair platform functionality. We do not deploy third-party advertising or cross-site tracking cookies on the Rebat99 platform.
Subject to applicable law and our regulatory obligations, you hold the following rights in respect of your personal data processed by Rebat99. You may exercise any of these rights by submitting a written request to our support team at the contact details provided in Section 16.
Rebat99 will respond to verified data subject requests within thirty (30) days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reason for it.
Rebat99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Our security infrastructure includes:
While Rebat99 takes all reasonable precautions to secure your data, no internet-based system can be guaranteed to be entirely free from risk. You are responsible for maintaining the security of your own account credentials and for notifying us promptly if you suspect any unauthorised access.
The Rebat99 platform is strictly prohibited for use by individuals under the age of twenty-one (21). We do not knowingly collect, process, or retain personal data relating to individuals under this age threshold.
Where we become aware — through KYC verification, third-party reporting, or any other means — that an individual under21 has registered an account or submitted personal data on the Platform, we will immediately suspend the account, initiate deletion of the personal data subject to any legally mandated retention, and take appropriate steps to prevent further access.
Rebat99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. The date of the most recent revision is indicated at the top of this document.
Where changes to this Policy are material — particularly changes that affect the rights of registered players or the categories of data processed — we will provide reasonable advance notice via a prominent notification on the Platform or by direct communication to your registered email address.
Your continued use of the Rebat99 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We recommend reviewing this Policy periodically to stay informed of how we handle your personal data.
For all data protection enquiries, access requests, consent withdrawals, and formal privacy complaints, please contact the Rebat99 data protection team through the following channels. Please clearly state the nature of your request to ensure prompt handling:
If you are not satisfied with our response to a data protection concern, you have the right to escalate the matter to the relevant data protection authority in the jurisdiction under which Rebat99 holds its operating licence. Details of the applicable supervisory authority are available on request.
If you have questions about how Rebat99 handles your personal data, or you would like to exercise your data rights, our support team is available24/7. You can also visit our FAQ page for quick answers to common questions.
Related documents: Terms & Conditions | Responsible Gambling | About Us