CRS99 values every member's privacy. This document clearly explains how we collect, store, use, and protect your personal information when you use the CRS99 platform. Your privacy is our priority.
We protect your data from multiple angles — technical, operational, and legal — to ensure your personal information remains secure at all times.
All communications between your device and crs99 servers are secured with TLS 1.3 protocol and AES-256 encryption. Sensitive data such as bank account numbers and card information is never stored in plain text.
Your personal information is stored on servers protected by multi-layered firewalls, strict access controls, and round-the-clock threat monitoring. Only authorised staff may access this data.
The crs99 KYC process is designed to protect your identity from misuse. Submitted identification documents are stored in a separate encrypted system and cannot be accessed directly from the public-facing side of the platform.
Access to member data within the CRS99 organisation is strictly limited on a need-to-know basis. All staff actions on member data are recorded in an immutable audit log.
CRS99's Privacy Policy is reviewed and updated regularly in line with changes in law, technology, and industry best practices. Members will be notified of any material updates via email and in-platform notices.
CRS99 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure that data collection and processing is carried out lawfully, fairly, and transparently at all times.
CRS99 is a trusted online entertainment platform for Malaysian players, accessible via the official website at crs99.onl as well as Android and iOS mobile apps. We understand that privacy is more than a legal requirement — it is a fundamental right of every user that we must respect and protect to the best of our ability.
This Privacy Policy details how CRS99 collects, processes, stores, discloses, and protects your personal information. It applies to all users who access or use any CRS99 services, whether through the website, mobile app, or any of our official communication channels.
Important Note: By registering for or using CRS99 services, you agree to the terms of this Privacy Policy. Please read this document carefully before using our platform. If you do not agree, you should not use CRS99 services.
This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming Policy CRS99, both of which together form the complete agreement between you and our platform.
CRS99 collects your personal information through various means as you interact with our platform. The following are the main categories of information we collect:
Information you provide directly:
Information collected automatically:
| Data Category | Example Information | Primary Purpose |
|---|---|---|
| Identity | Name, date of birth, IC number | Account verification & KYC |
| Contact | Phone number, email | Communications & notifications |
| Financial | Banking details, transaction history | Payment processing |
| Technical | IP address, device type | Security & fraud |
| Usage | Game history and activity logs | Service improvement |
CRS99 uses your personal information solely for legitimate, clearly stated purposes. We never use your data for unrelated purposes or in ways that could harm your interests. The primary purposes for data use are as follows:
Note: CRS99 does not use your personal data for automated decision-making that has a significant impact on you without human involvement. All important decisions, such as account closures or transaction restrictions, involve manual review by our team.
CRS99 does not sell, rent, or disclose your personal information to third parties for marketing or advertising purposes without your explicit consent. However, there are certain situations where we need to share information with trusted parties to enable the platform to operate effectively:
All third parties that receive data from crs99 are bound by strict data protection agreements and are only permitted to use that data for the specified purposes.
CRS99 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored in your browser when you visit our website.
Types of cookies we use:
You can manage cookies through your browser settings. However, disabling certain cookies may affect the functionality and user experience of the CRS99 platform. Third-party cookies used by game providers and payment service providers are subject to their respective privacy policies.
CRS99 continuously invests in the latest security infrastructure to ensure your personal data is protected at all times. Our key security measures include:
Incident Reporting: In the event of a data breach affecting your personal information, crs99 is committed to notifying you within 72 hours of the incident being detected, in line with industry best practices and applicable legal requirements.
While crs99 takes all reasonable precautions, no system can be guaranteed 100% secure. We encourage you to take personal security measures such as using a strong password, enabling 2FA, and never sharing your login credentials with anyone.
As a crs99 member and a Malaysian citizen or resident, you hold the following rights regarding your personal data under the Personal Data Protection Act 2010:
You have the right to obtain a copy of all personal information we hold about you.
You have the right to request correction of any personal information that is inaccurate or incomplete.
Under certain circumstances, you have the right to request the deletion of your personal data from our systems.
You have the right to object to the processing of your personal data for direct marketing purposes.
You have the right to receive your personal data in a machine-readable format for transfer.
You have the right to request restriction of your data processing in certain situations provided for by law.
To exercise any of the above rights, contact the crs99 support team via 24/7 live chat or our official email. We will process your request within 14 business days. Please note that some requests may be subject to certain legal restrictions, such as data that must be retained for AML compliance purposes.
CRS99 retains your personal information only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.
Once the retention period expires, your data will be securely deleted or disposed of using methods that ensure it cannot be recovered. In cases where complete deletion is not possible (such as data within backup systems), the data will be kept in an isolated and inactive state until it can be fully deleted.
CRS99 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect or process any personal information from individuals under the age of 18.
Child Protection: If we find that we have accidentally collected personal information from someone under 18 years of age, we will immediately take steps to delete that information and close the account in question. If you believe your child has registered at crs99, please contact us immediately for prompt action.
Parents and guardians are encouraged to monitor their children's online activities and use available parental control tools to prevent access to online betting platforms.
CRS99 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other relevant reasons. All changes take effect immediately upon publication on the platform.
For material amendments, we will notify you via one or more of the following methods before the changes take effect:
We encourage you to review this page periodically to stay informed about how we protect your information. The latest revision date will always be displayed at the top of this document.
The current version of this Privacy Policy is effective from January 2026. Your continued use of the CRS99 platform after any amendments are published will be considered your acceptance of the updated terms.
If you have any questions, concerns, or wish to exercise your privacy rights regarding the crs99 Privacy Policy, please contact us through the following channels:
The fastest way to get an immediate response. Our team is available to assist at any time.
Contact us at [email protected] for written enquiries requiring a detailed response.
We are committed to responding to all privacy-related enquiries within 3 business days. For requests relating to personal data rights, the processing period is up to 14 business days depending on the complexity of the request.