This page sets out how r999 collects, uses and protects the personal information attached to your account — including transaction records tied to Touch 'n Go eWallet and DuitNow activity. If you have a question about what we hold or how to request a change, the contact paths are listed further down this page.
Account data handled with care
Touch 'n Go eWallet & DuitNow context
Clear contact route for data requests
Applies to Malaysia-eligible accounts
POLICY POSTURE
What This Policy Covers and How We Apply It
r999 collects the information you provide when opening an account — name, contact details, login credentials — and the transactional data generated when you deposit or withdraw using Touch 'n Go eWallet, DuitNow or FPX. We use this information to process your requests, maintain your account wallet, verify transactions and respond to support queries. We do not sell your personal data to third parties, and we do not share it with outside parties except where required to complete a payment instruction or where local law requires disclosure. Cookies and session data are used to keep your login active and to remember account preferences across visits on mobile. Retention periods follow applicable requirements in the regions where this service is accessible — account data is held for as long as your account remains active and for a period afterward as required. If you believe any record held is inaccurate, you can raise a correction request through the support channels listed on this page. Access to this service, and the data we process in connection with it, is subject to local law and available only where local law permits.
Touch 'n Go eWallet transaction context
DuitNow transfer records
FPX online banking data
Account wallet history
Session and login data
POLICY BOUNDARIES
Where This Policy Applies
Not every data flow falls under this policy. The table below marks what sits inside its scope and what falls outside, so you know exactly which records this document governs.
Account Access Data
Login credentials, session tokens and device identifiers generated when you access your r999 account on mobile or desktop — these fall fully within this policy and are handled under the data practices described here.
Payment Transactions
Records of Touch 'n Go eWallet deposits, DuitNow transfers and FPX instructions are processed to complete your request. The payment rail itself operates under that provider's own terms; our policy covers the record we hold on our side.
Site Content and Game Activity
Bet history, game session records and account wallet movements within the platform are within scope. Game engine logic and random-number generation are handled by the respective studio and fall outside this policy.
Third-Party Services
Links to external sites, third-party analytics tools or payment gateways operate under their own privacy terms. We are not responsible for data practices on pages or services outside the r999 domain.
YOUR CHOICES
Practical Actions Available Under This Policy
There are four things you can do at any time regarding the personal information we hold. First, review what is on record — your account dashboard shows the contact details, linked wallet identifiers and transaction history we hold for your profile. Second, correct any detail that is out of date by submitting a change through the account settings page or via live chat. Third, raise a question about how a specific piece of data is being used — the support team can clarify this without requiring you to close your account. Fourth, request deletion or restriction of your data where local law gives you that right; availability of this option depends on local law and eligible regions. Each request is handled through the same support routes listed in the section below. We aim to respond to data-related requests within the timeframe shown in your support ticket once it has been logged.
Review Your Records
Open the account dashboard after login — contact details, wallet identifiers and transaction history are displayed there for your reference.
Correct Account Details
Submit a correction through the account settings fields or start a live chat session. The support team will confirm the update once it is processed on our side.
Ask a Data Question
If you need clarity on how a particular record is used — for example, how a DuitNow transaction reference is stored — live chat or email support can explain without any account disruption.
Request Deletion or Restriction
Where local law in your eligible region gives you the right to request data deletion or processing restriction, submit the request through support. We will confirm what is possible under applicable requirements.
CONTACT PATHS
How to Reach Us on Privacy Matters
Privacy questions and data requests can be sent through any of the channels below. For account-specific matters — such as correcting a name or querying a stored transaction reference — live chat is the quickest route because the support team can verify your identity and act on the request in the same session.
Live Chat
Start a chat session from the account page. Suitable for correction requests, data questions and anything tied to your active session or wallet record.
Email Support
Use the email address listed in the contact section of the site for written data requests or when you need a documented record of the exchange.
Account Settings Page
Some updates — contact number, email address, linked wallet details — can be made directly inside account settings without contacting support first.
HOW WE HANDLE DATA
Data Handling, Cookies and Retention Practices
Knowing the mechanics behind how your information is stored helps you make sense of what the policy actually means for your account. Each point below covers a distinct part of how we operate.
Cookies and Session Data
Cookies keep your login active across pages and remember account preferences on mobile. You can clear cookies through your browser settings at any time; doing so will end your current session and require a fresh login.
Account Security Practices
Access to your stored data is restricted to authenticated sessions. The account page requires login credentials before any personal details or wallet records are displayed. Do not share login details with anyone.
Retention and Deletion
Account data is held while your account remains active and for a period afterward as required by applicable rules in your region. Once a deletion request is approved, records are removed in line with our retention schedule.
Policy Updates
When this policy changes, the updated version is posted on this page with the revision date shown at the top. Continued use of the account after a change is published means you have read the updated terms.
POLICY QUESTIONS
Common Questions About This Privacy Policy
If the answers below do not cover what you need, the support team can address specific queries through live chat or email.
What personal information does r999 collect when I open an account?
We collect the details you enter during account setup — name, contact information, login credentials — along with transactional data generated by your activity, including Touch 'n Go eWallet and DuitNow records on our side of each transaction.
Can I see what data is held on my account?
Yes. Log in and open the account dashboard — your stored contact details, wallet identifiers and transaction history are displayed there. If you need a more detailed breakdown, submit a data access request through live chat or email support.
How do I correct an incorrect detail on my account?
Go to the account settings page and update the relevant field directly, or start a live chat session and the support team will process the correction after verifying your identity. Most contact-detail changes can be completed in the same session.
Does r999 share my data with third parties?
We do not sell personal data. Information is shared externally only where necessary to complete a payment instruction — for example, passing a DuitNow reference to process a withdrawal — or where disclosure is required under applicable local law.
How long is my account data kept after I stop using the service?
Data is retained for a period after account closure as required by applicable rules in your eligible region. The exact period depends on local requirements. Submit a deletion request through support to ask about the timeline that applies to your account.
How do I request deletion of my personal data?
Contact the support team via live chat or email and specify that you are making a data deletion request. Availability of full deletion depends on local law and the region where your account was opened. The team will confirm what is possible once the request is reviewed.