At crs99, your privacy is more than a legal obligation — it is a responsibility we take seriously. This document clearly explains what data we collect, why we need it, how it is used, and your rights as the owner of that data.
Before reading the full policy, here are the core principles that guide how CRS99 handles every member's personal data.
All data transmitted between your device and CRS99's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's leading financial institutions such as Maybank and CIMB. Your data cannot be intercepted while in transit.
CRS99 never sells, rents, or trades members' personal data to any third party for marketing purposes. Your information belongs to you — it is not a business asset we exchange with others without your consent.
CRS99 only collects data that is strictly necessary to operate our services — nothing more. We do not gather sensitive information that is irrelevant to the operation of our online Sports Betting and casino platform.
Only crs99 staff with a legitimate operational need are permitted to access members' personal data. All access is logged and monitored. Our staff are bound by strict confidentiality agreements and undergo regular data protection training.
As a CRS99 member, you have the right to access, correct, or request the deletion of your personal data at any time. Your request will be processed within 14 business days upon completion of the required identity verification.
CRS99 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in digital data protection. Compliance is not optional — it is the minimum standard we are committed to exceeding.
This Privacy Policy ("Policy") describes how CRS99 — an online Sports Betting and casino platform operating under the domain crs99.best — collecting, using, storing, and protecting your personal data when you register as a member, access the platform, or use any of the services we provide.
CRS99 is committed to protecting every member's privacy in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and international best practices in data protection. We understand that your trust in CRS99 depends greatly on how we handle your personal information — and we do not take that responsibility lightly.
By registering an account or using the CRS99 platform, you consent to the collection and use of your personal data as described in this Privacy Policy. This Policy should be read together with the Terms and Conditions CRS99 which constitutes the entire agreement between you and our platform.
Note: This Privacy Policy applies to all users of the CRS99 platform — including unregistered visitors, registered members, and users accessing the platform via smartphone or any other device. The date of the most recent update is stated at the top of this page.
CRS99 collects various types of personal data depending on how you interact with our platform. The table below outlines the main data categories we collect and the purposes behind each:
| Data Category | Examples of Information | Requirement |
|---|---|---|
| Identity Data | Full name, MyKad/passport number, date of birth, gender | Required for registration & KYC |
| Contact Data | Malaysian phone number, email address, delivery address (where applicable) | Required for communication & verification |
| Financial Data | Bank account information, e-wallet numbers (TnG, GrabPay, Boost, ShopeePay, DuitNow), transaction history in MYR | Required for deposits & withdrawals |
| Platform Activity Data | Betting history, games played, win/loss records, session duration | Required for platform operations & responsible gaming |
| Technical Data | IP address, device type, operating system, browser type, cookie data | Required for platform security & improvement |
| Communication Data | Live chat conversation records, support emails, feedback information | Required for customer support & service improvement |
| Marketing Data | Communication preferences, campaign responses, promotions clicked | Optional — only if you have agreed to receive marketing communications |
CRS99 not collecting health information, biometric data (beyond what you voluntarily provide for identity verification purposes), or any other sensitive data that exceeds the operational requirements of our platform.
Crs99 collects your personal data through the following methods:
Data you provide directly when:
Data collected automatically when you use the CRS99 platform:
In certain circumstances, CRS99 may receive data about you from legitimate third parties, including:
Crs99 uses your personal data for the following purposes, all of which are directly related to the provision of our online betting and casino platform services:
crs99 does not use your personal data for any purpose beyond those stated above without first obtaining your consent. You may withdraw consent for marketing communications at any time through your account settings or by contacting our support team.
CRS99 does not sell, rent, or disclose members' personal data to third parties for their own marketing purposes. However, there are limited situations where CRS99 may need to share your data with selected third parties:
CRS99 works with carefully selected third-party service providers to support the operation of our platform. These include licensed casino game providers (such as Evolution Gaming, Pragmatic Play Live, and Asia Gaming), security-audited technology infrastructure and cloud service providers, local Malaysian payment service providers, and data analytics companies that help us understand platform usage. All providers are bound by strict data protection agreements and are only permitted to use your data for agreed purposes.
CRS99 may be required to disclose your personal data to authorities or regulatory bodies in the following circumstances:
The CRS99 Guarantee: In all of the above cases, CRS99 will disclose only the minimum data necessary to satisfy the relevant legal or regulatory requirement. We will notify you of any such disclosure request where permitted to do so under applicable law.
Crs99 continuously invests in security infrastructure to ensure your personal data is protected against unauthorized access, disclosure, alteration, or destruction. The key security measures we have implemented are:
While CRS99 takes all reasonable security measures, no digital security system can guarantee absolute 100% protection. You also play an important role in keeping your account secure — use a strong password, never share your login credentials, and notify us immediately if you suspect any suspicious activity on your account.
CRS99 retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by Malaysian law. Our data retention guidelines are as follows:
| Data Type | Retention Period | Reason |
|---|---|---|
| Identity & KYC data | 5 years after account closure | Legal compliance & financial crime monitoring requirements |
| Financial transaction records | 7 years | Malaysian accounting & tax legal requirements |
| Gaming activity data | 3 years after the last session | Responsible gaming & platform analytics |
| Customer support communication records | 2 years | Complaint reference & service improvement |
| Technical log data | 12 months | Security & technical troubleshooting |
| Cookie & analytics data | 13 months (renewable) | User analytics & experience improvement |
Once the retention period expires, your data will be securely deleted or anonymised in a form that can no longer be linked back to you. CRS99 does not retain personal data for longer than is necessary.
The CRS99 platform uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how members interact with our services.
You can control or disable cookies through your web browser settings. Please note, however, that disabling essential cookies will affect the functionality and security of the crs99 platform. For specific instructions on managing cookies, please refer to your browser's help documentation (Chrome, Firefox, Edge, Safari, etc.).
CRS99 does not use cookies to track your activity outside our platform or to target you with third-party advertisements on other websites. Our use of cookies is limited strictly to functionality and experience improvements within the CRS99 platform.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data CRS99 holds about you:
To exercise any of the rights above, please contact the CRS99 support team by email at support@crs99.best with the subject line "Data Rights Request", along with full details of your request and a copy of your identification document for identity verification. All requests will be processed within 14 business days.
The crs99 platform is exclusively for users aged 18 years and above. CRS99 does not knowingly collect, store, or process personal data of individuals under the age of 18.
If you are a parent or guardian and believe that your child under the age of 18 has registered for or used the CRS99 platform, please contact us immediately at support@crs99.best. We will investigate the report and take immediate action, including closing the relevant account and deleting all associated data.
Child Protection: CRS99 uses an age verification system during registration and reserves the right to request identity document proof to ensure compliance with the minimum age requirement. Protecting minors from online gambling is an absolute priority for us.
Crs99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the way we operate. When material changes are made, we will:
It is your responsibility to review this page periodically. Continued use of the CRS99 platform after any changes are published constitutes your acceptance of the latest version of the Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your data before the changes take effect.
If you have any questions, concerns, or complaints regarding how crs99 handles your personal data, our privacy team is ready to assist you:
For formal complaints regarding suspected privacy violations, please email support@crs99.best with the subject line "Official Privacy Complaint", including a full description of the incident, the date it occurred, and any relevant information. Official complaints will be investigated and responded to within 30 business days.
This Privacy Policy is governed by and construed in accordance with the laws of Malaysia, in particular the Personal Data Protection Act 2010 (PDPA). Any dispute arising from or in connection with this Privacy Policy shall be subject to the jurisdiction of the relevant courts in Malaysia.
Thank you for trusting CRS99 with your personal data. We are committed to continuously raising our data protection standards and ensuring you always retain full control over your information. Your privacy is not merely a legal obligation — it is a mark of our respect for every CRS99 member.
Answers to the most frequently asked questions by members regarding data protection and privacy on the crs99 platform.