Privacy Policy

1. Introduction

kacang99 ("we", "us", "our", or the "Platform") is committed to protecting and respecting the privacy of all individuals who interact with our services. This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by kacang99 in connection with your use of https://kacang99.cam and any associated mobile applications, sub-domains, or features.

This Policy applies to all kacang99 players, prospective players, and any other individuals whose personal data we process in connection with the provision of our services. It should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy.

kacang99 processes personal data in accordance with applicable data protection legislation and the requirements of its international gaming licence. We continuously review our data practices to ensure they remain compliant with evolving legal and regulatory standards.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, identification number, location data, email address, or factors specific to the physical, economic, or social identity of that person.
• "Data Controller" means kacang99, the entity that determines the purposes and means of processing personal data.
• "Data Processor" means any third-party entity that processes personal data on behalf of kacang99 under a contractual arrangement.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Consent" means freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data.
• "KYC" means Know Your Customer — the identity verification process required for compliance with anti-money laundering (AML) obligations.
• "User" / "Player" means any individual who has registered an account on the kacang99 platform or is otherwise using our services.
• "Cookies" means small data files stored on your device by a web browser, used to retain information about your session, preferences, or behaviour on the platform.

3. Data We Collect

3.1 Data You Provide Directly

We collect personal data that you provide to us at various stages of your interaction with kacang99, including:

• Registration Data: Full legal name, date of birth, nationality, residential address, email address, and mobile phone number.
• Identity Verification (KYC): Government-issued photo identification (e.g., Malaysian MyKad, passport), proof of address (e.g., utility bill, bank statement), and source of funds documentation where required.
• Payment Data: Payment method details including bank account information, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), and transaction records. Full payment card numbers are not stored by kacang99; they are processed by certified payment processors.
• Support Communications: The content of any messages, emails, or live chat conversations you have with our support team.
• Responsible Gambling Data: Self-exclusion requests, deposit limit preferences, and any other responsible gambling tool settings you configure.

3.2 Data Collected Automatically

When you use the kacang99 platform, we automatically collect certain technical and behavioural data, including:

• Internet Protocol (IP) address and approximate geographic location.
• Browser type, version, and operating system.
• Device identifiers and screen resolution.
• Pages visited, features used, and time spent on each section of the platform.
• Betting history, game session data, wagering patterns, and deposit/withdrawal records.
• Login timestamps and access logs for security monitoring purposes.

3.3 Data from Third Parties

We may receive personal data about you from third parties in certain circumstances, including identity verification agencies (for KYC purposes), fraud prevention and AML screening services, payment processors, and analytics providers. Data received from third parties is treated in accordance with this Policy and subject to the same security standards as directly collected data.

4. How We Use Your Data

kacang99 uses the personal data we collect for the following purposes:

5. Legal Basis for Processing

kacang99 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to enter into and perform our contract with you — including account creation, transaction processing, and service delivery.
• Legal Obligation: Processing necessary to comply with applicable laws, including AML legislation, KYC regulations, and licensing conditions imposed by our gaming authority.
• Legitimate Interests: Processing carried out for kacang99's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Processing carried out on the basis of your explicit consent, including the sending of direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing based on consent before withdrawal.

6. Data Sharing & Disclosure

kacang99 does not sell, rent, or trade personal data. We may share your information with third parties only in the following circumstances and to the extent necessary for the stated purpose:

• Payment Processors: To facilitate deposits and withdrawals through supported Malaysian payment channels, including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, and FPX. Payment processors are contractually obligated to handle data securely and only for the specified purpose.
• Identity Verification Providers: KYC and AML screening agencies used to verify player identities and comply with licensing obligations.
• Technology Providers: Cloud hosting providers, platform infrastructure vendors, and software suppliers who process data on our behalf under strict data processing agreements.
• Fraud Prevention Networks: Industry-shared fraud prevention databases used to identify and prevent fraudulent activity across multiple platforms.
• Regulatory & Legal Authorities: Competent government authorities, regulators, law enforcement agencies, or courts where disclosure is required by law or in connection with legal proceedings.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to a successor entity, subject to equivalent privacy protections.

7. International Data Transfers

kacang99 operates internationally and may transfer your personal data to servers or service providers located outside Malaysia. Where such transfers occur, we take appropriate steps to ensure that your data receives a level of protection equivalent to that provided under applicable data protection law, including:

• Entering into data transfer agreements with receiving parties that incorporate standard contractual clauses or equivalent safeguards.
• Transfering data only to jurisdictions that maintain an adequate level of data protection as recognised by relevant authorities.
• Applying encryption and access controls to data in transit and at rest, regardless of where it is stored.

8. Data Retention

kacang99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and licensing obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account relationship with kacang99 plus a minimum period of five (5) years after account closure, in accordance with AML and gaming regulatory requirements.
• Transaction Records: Financial and betting transaction records are retained for a minimum of five (5) years from the date of each transaction, as required by anti-money laundering legislation.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Support Communications: Retained for a maximum of three (3) years from the date of the last interaction, unless retention is required for an ongoing legal matter.
• Marketing Consent Records: Retained for as long as you maintain an active marketing consent, plus a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

9. Data Security

kacang99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including personal identification information and payment data.
• Role-based access controls and multi-factor authentication for all internal systems containing personal data.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security specialists.
• Intrusion detection systems and real-time monitoring for suspicious activity on platform infrastructure.
• Staff training on data protection obligations and information security best practices.

10. Cookies & Tracking Technologies

10.1 What We Use

kacang99 uses the following types of cookies and similar technologies on the platform:

10.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. However, disabling strictly necessary cookies may impair your ability to use core platform features including login, deposits, and bet placement. For detailed guidance on managing cookies in your specific browser, refer to the browser's help documentation.

11. Your Rights

Subject to applicable data protection legislation, you have the following rights regarding your personal data held by kacang99:

• Right of Access: You have the right to request a copy of the personal data we hold about you and to receive information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent. Note that this right may be limited where we have legal or regulatory obligations to retain specific data.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
• Right to Object: You have the right to object to processing of your personal data for direct marketing purposes at any time, and to object to processing based on legitimate interests where your individual circumstances justify doing so.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

12. Minors & Age Verification

kacang99 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all new registrations. If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will immediately close the relevant account and delete the associated data.

13. Responsible Gambling & Data Processing

kacang99's responsible gambling programme involves the processing of specific categories of player data, including betting history, deposit frequency, session duration, and responsible gambling tool settings. This data is processed for the purpose of identifying and supporting players who may be experiencing gambling-related harm.

Processing for responsible gambling purposes is carried out on the basis of our legal obligation under applicable gaming licence conditions and our legitimate interest in protecting the welfare of our players. Responsible gambling data is treated with the highest level of confidentiality and accessed only by authorised personnel with specific responsibility for player protection.

For further information about the responsible gambling tools available to you, or to request self-exclusion, visit our Responsible Gambling page.

14. Changes to This Policy

kacang99 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy will be communicated to registered players via email notification or a prominent notice on the platform at least seven (7) days before the changes take effect. The updated effective date will be reflected at the top of this document.

Your continued use of the kacang99 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We recommend that you review this Policy periodically to stay informed of how we protect your data. The most current version of this Policy is always available at https://kacang99.cam/privacy-policy.

15. Contact & Data Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the kacang99 data team through the following channels:

When submitting a data rights request, please include your full name, registered email address, and a clear description of your request. We may ask you to verify your identity before processing requests that involve access to, correction of, or deletion of personal data.