Rebate99 Privacy Policy – Data Protection & Malaysian Player Privacy

This Privacy Policy is published by Rebate99 — an online betting platform dedicated to serving Malaysian players. We understand that your privacy is a serious matter, and we take this responsibility with full commitment.

This document explains in detail how Rebate99 collects, processes, stores, and protects your personal data when you use our platform — whether through a web browser on your laptop or on your Android or iOS device. It also explains your rights as the owner of that personal data and how you can exercise them.

By registering an account at Rebate99 or using any of our services, you agree to the collection and use of your personal data as described in this Privacy Policy. If you do not agree, please do not use our platform and contact us if you wish to request deletion of any data we have previously collected.

Rebate99 only collects data that is necessary to operate the platform and provide you with a reliable service. The categories of data we collect are as follows:

Rebate99 collects your personal data through several different channels and methods throughout your use of our platform:

• During account registration — you provide your name, phone number, date of birth, and other details directly when creating a new account on Rebate99.
• During the KYC (Know Your Customer) process — Rebate99 may request a copy of your MyKad or other verification documents when required to comply with legal obligations or to verify your identity before approving large withdrawals.
• During financial transactions — every time you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks or FPX, transaction details are recorded automatically.
• During betting activity — every bet you place, every market you select, and every betting outcome is recorded as part of your account history.
• Through cookies and tracking technologies — your web browser automatically sends technical information such as your IP address and browser type when you visit the Rebate99 platform.
• Via customer support communications — when you contact the Rebate99 support team via live chat or email, the content of those conversations is stored for quality control purposes and future reference.

Rebate99 uses your personal data only for legitimate and necessary purposes. We do not use your data for anything unrelated to the services we offer. The specific purposes are as follows:

• Managing your account and services — processing your registration, login, deposits, withdrawals, and all betting activity on the Rebate99 platform.
• Identity verification (KYC) — to ensure all members are real individuals who meet the eligibility requirement of being 18 years of age or older and residing in Malaysia.
• Security and fraud prevention — detecting and investigating suspicious activity, freezing compromised accounts, and protecting members from unauthorized access.
• Legal and regulatory compliance — to comply with anti-money laundering (AML) legal requirements and reporting obligations as required by the relevant authorities.
• Service communications — sending notifications about your account, transaction confirmations, security alerts, and important updates related to Rebate99's services.
• Marketing and promotions — with your consent, sending you information about new promotions, bonuses, and special offers that may be of interest to you. You may withdraw this consent at any time.
• Responsible Gaming — monitors betting patterns to identify signs of problem gambling and takes appropriate preventive action for your well-being.
• Platform improvements — analyses how members use the platform to identify opportunities for improvement and ensure the best possible user experience.

Rebate99 does not sell, rent or disclose your personal data to any third party for commercial purposes. However, in operating our platform, there are certain situations where your data may need to be shared with the following parties:

• Payment service providers — Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banks such as Maybank and CIMB need to receive the necessary transaction information to process your deposits and withdrawals. These providers have their own privacy policies.
• Technology service providers — companies that provide the technical infrastructure, server hosting, analytics, and security services required to operate the Rebate99 platform. All such providers are bound by strict confidentiality agreements.
• Authorities and regulatory bodies — if required by Malaysian law or a valid court order, Rebate99 may be obliged to disclose certain information to the relevant authorities.
• Casino and gaming service providers — to operate Live Casino games and other services, minimal technical information may need to be shared with licensed game providers such as Evolution Gaming or Pragmatic Play Live. Your full identity details are not shared in this process.

Rebate99 takes cybersecurity infrastructure seriously to ensure that every member's personal and financial data remains protected at all times. The following are the key technical and organizational measures we have in place:

• 256-bit SSL Encryption — all communication between your browser and Rebate99's servers is encrypted using TLS 1.3 with 256-bit encryption, making the data unreadable to any unauthorised party.
• Password in hashed form — your password is never stored in plain text. Rebate99 uses a strong one-way hashing algorithm, meaning even Rebate99's own internal team cannot read your password.
• Two-factor authentication (2FA) — available to all accounts, 2FA adds an extra layer of protection by requiring an OTP code from your mobile device in addition to your password when logging in.
• 24/7 Security Monitoring — automated monitoring systems run around the clock to detect suspicious access attempts, brute force attacks, or anomalies that may indicate a potential security breach.
• Regular security audits — Rebate99 undergoes regular independent security audits by external cybersecurity firms to identify and patch any vulnerabilities before they can be exploited.
• Internal access controls — member data is accessible only to Rebate99 staff who have a legitimate work-related need to do so. All access is logged and monitored.
• Secure data backups — your data is regularly backed up to a secure, separate location to ensure recovery is possible in the event of a serious technical failure.

Rebate99 uses cookies and similar tracking technologies to ensure the platform functions properly and to understand how members use our services. Cookies are small text files stored by your web browser when you visit the rebate99 platform.

• Session cookies — a temporary cookie required to maintain your login session while you use the platform. This cookie is automatically deleted when you close your browser.
• Preference cookies — stores your personal settings such as preferred language and display preferences to ensure a consistent experience each time you visit the platform.
• Analytics cookies — helps Rebate99 understand which pages are visited most frequently, how long members spend in each section of the platform, and where they encounter difficulties. Analytics data is collected in aggregate form that does not identify individuals.
• Security cookies — used to detect suspicious login attempts and protect your account from unauthorised access.

You can manage cookie usage through your web browser settings. However, disabling certain cookies may affect platform functionality — for example, disabling session cookies means you will need to log in again each time you open a new page. Rebate99 does not use cookies to display third-party advertisements to you.

Rebate99 is a platform exclusively for adults aged 18 years and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

• All users are required to confirm that they are 18 years of age or older at the time of registration. Rebate99 reserves the right to request age verification at any time.
• Should Rebate99 discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge, that data will be deleted immediately and the associated account will be closed.
• Parents or guardians who believe their minor child may have registered at Rebate99 should contact our support team immediately at support@rebate99.biz.

As the owner of your personal data, Rebate99 recognises and respects the following rights available to you. You may exercise any of these rights by contacting our support team via live chat or email at support@rebate99.biz:

Rebate99 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable law. The following is a general guide to data retention periods:

• Active account data — retained for as long as your account remains active and for a period following account closure as required by legal compliance obligations.
• Financial transaction records — retained for a minimum period of 7 years in accordance with Malaysian tax and anti-money laundering legal requirements.
• Customer service communication logs — retained for 2 years for quality control purposes and reference in the event of a dispute.
• Technical data and security logs — retained for 12 months for security investigation and fraud detection purposes.
• Data after account closure — after account closure, Rebate99 will retain only the minimum data required by law and delete all other data within 90 days.

The Rebate99 platform may include links to third-party websites or services in certain contexts — for example, links to official streaming platforms to watch Malaysia Super League matches, MPL esports tournaments, or EPL fixtures relevant to your bets.

• Rebate99 is not responsible for the privacy practices of any third-party websites you visit through links on our platform.
• Each third-party website has its own privacy policy that applies when you visit it. rebate99 recommends that you read the privacy policy of every site you visit.
• Payment service providers such as Touch 'n Go, GrabPay, and Maybank2u each have their own privacy policies governing how they handle your transaction data on their end.

Rebate99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, technological developments, or new legal requirements applicable to Malaysia. When we make significant changes, we will:

• Updating the "Updated" date at the top of this page to reflect the date of the latest revision.
• Sending notifications via registered email or in-platform alerts to inform members of important changes.
• In the case of highly significant changes that materially affect your rights, Rebate99 may seek your renewed consent before those changes take effect.

Continued use of the Rebate99 platform after the amendment date constitutes acceptance of the latest version of the Privacy Policy. We recommend that you check this page periodically.

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, please contact the Rebate99 privacy team via: