Purpose-Limited Collection
cun99 collects information that is reasonably required for account administration, identity checks, payments, security, responsible gambling and service improvement.
This Privacy Policy explains how cun99 collects, uses, stores, discloses and protects personal data when Malaysian adults access our website, manage an account or use online entertainment services.
Effective date: 1 January 2026cun99 aims to handle personal data lawfully, fairly and transparently. The principles below summarise our approach, but the complete clauses in this Privacy Policy govern how information is processed.
cun99 collects information that is reasonably required for account administration, identity checks, payments, security, responsible gambling and service improvement.
Administrative, organisational and technical safeguards are applied to reduce the risk of unauthorised access, loss, alteration or improper disclosure.
KYC documents are used for age, identity, address and anti-fraud checks. Access is limited to personnel and providers with a legitimate operational need.
Information linked to FPX, DuitNow, Malaysian banks and supported eWallet transactions is processed for payment verification and financial security.
Eligible users may request access, correction or deletion and may object to certain uses of personal data, subject to legal and operational limits.
cun99 retains data only for as long as reasonably needed for the stated purpose, legal compliance, dispute handling and fraud prevention.
cun99 respects the privacy of visitors and registered users. This Privacy Policy describes the information practices applied when you visit https://cun99.asia, create or maintain an account, contact support, complete identity verification, make a MYR transaction, use responsible gambling controls or participate in available games and promotions.
For the purposes of this Privacy Policy, “personal data” means information that identifies you directly or can reasonably be linked to you. “Processing” includes collecting, recording, organising, storing, reviewing, using, sharing, correcting, restricting, deleting or otherwise handling personal data.
By using cun99, you acknowledge that your information will be processed as described in this document. Where consent is required for a particular activity, cun99 will request it separately. Consent may be withdrawn where permitted, although withdrawal does not affect processing already completed lawfully.
Do not upload identity documents through unsecured chat, social media or any unknown channel. Only submit documents through a trusted cun99 interface protected by HTTPS and follow the instructions shown during verification.
This Privacy Policy applies to personal data processed through the cun99 website, mobile-responsive pages, account tools, customer support channels and related services controlled by cun99. It applies to visitors, prospective users and registered account holders in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and elsewhere in Malaysia.
This policy should be read together with the Terms & Conditions and the Responsible Gambling policy. If a specific service displays an additional privacy notice, that notice supplements this policy for the relevant processing activity.
The information collected by cun99 depends on how you interact with the platform. The principal categories are outlined below.
| Data Category | Typical Information | Primary Purpose |
|---|---|---|
| Identity data | Full name, date of birth, nationality, identification details and document images | Age checks, KYC, account integrity and fraud prevention |
| Contact data | Residential address, email address and available contact details | Account notices, support and identity confirmation |
| Account data | Username, encrypted credentials, settings, limits and account status | Authentication, administration and security |
| Financial data | Transaction references, payment method, deposit and withdrawal history | Payment processing, reconciliation and financial controls |
| Gaming data | Game selections, wagers, results, bonuses and session history | Service delivery, responsible gambling and dispute review |
| Technical data | IP address, browser, device type, operating system and security logs | Site operation, diagnostics and abuse prevention |
| Communication data | Support requests, complaints, feedback and correspondence records | Customer service, quality control and dispute handling |
cun99 may also process information relating to deposit limits, time-outs, self-exclusion and other responsible gambling controls. Such information is handled carefully because it may reveal sensitive circumstances about a user.
cun99 collects personal data directly when you create an account, update your profile, submit KYC documents, make a transaction, contact support, set responsible gambling controls or otherwise communicate with us. Providing certain information is voluntary, but cun99 may be unable to deliver account functions when required information is withheld.
Information is also collected automatically when you access the site. Technical logs may record your IP address, device characteristics, browser type, pages visited, access time, approximate location and security events. These records help cun99 maintain service stability and identify suspicious activity.
Where permitted, cun99 may receive verification or transaction information from payment processors, identity-checking providers, fraud prevention services and financial institutions involved in your selected payment method. Data may also be generated internally from your account activity and communication history.
cun99 processes personal data only where there is a defined and appropriate purpose. Those purposes may include:
cun99 does not use personal data for a materially incompatible purpose without providing an appropriate notice or obtaining consent where consent is required.
Depending on the context, cun99 processes information because it is necessary to provide a requested service, comply with applicable obligations, pursue a legitimate operational interest or act upon your consent. Legitimate interests may include preventing fraud, securing the platform, improving service quality, resolving disputes and protecting users.
Where Malaysian data protection requirements apply, cun99 seeks to handle personal data consistently with the Personal Data Protection Act 2010 and related principles. This statement does not create rights beyond those provided under applicable law, and the precise legal basis may vary according to the service, data category and user location.
When a user selects FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay or another supported option, transaction data may be exchanged with the relevant financial service provider. cun99 processes transaction references, payment status, amount, currency, account ownership information and fraud indicators as required to complete and reconcile the transaction.
cun99 does not require users to disclose a complete banking password or eWallet password. Those credentials should only be entered within the secure interface of the relevant payment provider. Users must never send payment passwords, one-time codes or personal identification numbers to cun99 support.
Financial records may be retained after account closure where required for transaction disputes, accounting, anti-fraud controls or compliance with an applicable legal obligation.
cun99 may use cookies and similar technologies to maintain sessions, remember preferences, support authentication, measure website performance and detect suspicious traffic. Essential cookies are necessary for core site functions. Preference and performance technologies help cun99 understand which pages work well and where navigation may be improved.
Browser controls may allow you to block or remove cookies. Disabling essential cookies can prevent login, payment or account-security features from operating correctly. cun99 does not use cookies to bypass your browser choices.
Technical analytics should be evaluated in aggregate where reasonably possible. Access to detailed technical logs is restricted to authorised personnel and providers who need the data for security, diagnostics or service operation.
cun99 does not sell personal data. Information may be disclosed to carefully selected service providers only when necessary for a legitimate business or legal purpose. These recipients may include hosting providers, security specialists, identity-verification services, payment processors, customer support systems and professional advisers.
cun99 may also disclose information where reasonably required to:
Service providers are expected to act under contractual confidentiality and security obligations. They may process information only for the authorised service unless independent legal duties apply.
Some technology, security, payment or support providers used by cun99 may operate outside Malaysia. As a result, personal data may be processed in another jurisdiction with different data protection rules.
Before making an international transfer, cun99 considers the nature of the information, the purpose of processing and the safeguards available. Appropriate measures may include contractual protections, access restrictions, encryption and due diligence regarding the recipient. Users may contact cun99 for general information about applicable transfer safeguards.
cun99 keeps personal data for no longer than reasonably necessary for the purpose for which it was collected. The relevant period depends on account status, transaction history, the sensitivity of the information, security needs and applicable legal or contractual obligations.
Account and KYC records may be retained after closure where cun99 needs them to prevent duplicate registration, enforce self-exclusion, respond to disputes, investigate fraud or maintain financial records. When information is no longer required, cun99 will delete, anonymise or securely isolate it in accordance with established retention procedures.
An anonymised record that can no longer identify an individual may be retained for statistical, security and service-improvement purposes.
cun99 applies reasonable technical and organisational safeguards designed to protect personal data. Measures may include encrypted transmission, controlled access, credential protection, activity logging, staff confidentiality requirements, security monitoring and periodic review of service providers.
No online system can guarantee absolute security. Users also have an important role in protecting their accounts. Keep your password confidential, use a unique credential, sign out on shared devices and never disclose a one-time security code. Contact cun99 promptly if you suspect unauthorised account access.
If a personal data incident creates a material risk, cun99 will investigate, contain the issue and provide notifications where required under applicable law.
Subject to applicable law and identity verification, a user may ask cun99 to provide access to personal data, correct inaccurate information, restrict certain processing, delete information that is no longer required or explain how particular data is used. A user may also withdraw consent for consent-based processing and object to certain promotional communications.
Some requests may be limited where cun99 must retain information for fraud prevention, self-exclusion enforcement, transaction records, legal claims or another applicable obligation. cun99 will explain a refusal or limitation where reasonably required.
To protect account information, cun99 may request evidence of identity before completing a privacy request. Requests should be sent to the support email displayed in the Contact Us clause. Do not include full identity documents in an initial unsecured message.
cun99 is intended exclusively for adults aged 21 and above. We do not knowingly permit an individual under 21 to create an account or participate in casino-style gambling. Identity and age verification may be required before account functions are available.
If cun99 has reasonable grounds to believe that an underage person has submitted personal data, the relevant account may be suspended while the matter is reviewed. Information will be deleted or retained only to the extent necessary to enforce age restrictions, investigate misuse and meet applicable obligations.
A parent or guardian who believes an underage individual has provided information to cun99 should contact support using the plain-text email shown below.
cun99 may update this Privacy Policy to reflect changes in services, security practices, legal requirements or data processing activities. The effective date at the top of the page will be revised when an update is published.
Where a change materially affects how personal data is handled, cun99 may provide an additional notice through the website or available account communication channel. Continued use of the platform after an updated policy takes effect constitutes acknowledgement of the revised notice, but cun99 will seek fresh consent when legally required.
Questions, concerns and privacy requests may be directed to the cun99 support team. The email address is displayed as plain text and is not a clickable link:
Support email: [email protected]
Support availability: 24 hours a day, 7 days a week
Include the subject “Privacy Request” and describe your enquiry without sending passwords, one-time codes or complete identity documents in the initial message.
General account and service questions may also be answered on the FAQ page. Information about age controls, deposit limits and self-exclusion is available on the Responsible Gambling page.
Privacy rights depend on applicable law and may require identity verification, but cun99 will review every valid request fairly.
Ask whether cun99 holds personal data about you and request an appropriate copy.
Request updates where account or contact information is incomplete or inaccurate.
Ask for data to be deleted when it is no longer needed and no retention duty applies.
Request limits on certain processing while an accuracy or lawful-use concern is reviewed.
Review the cun99 Terms & Conditions, explore responsible gambling safeguards or return to the homepage. The platform is intended only for Malaysian players aged 21 and above.