Minimal Collection
Combo999 collects only the personal data needed to operate accounts, process MYR payments and meet applicable verification obligations.
Data & Privacy
combo999 Privacy Policy
This Privacy Policy explains what personal information combo999 collects from Malaysian players, how it is used, who may access it, how long it is kept and what rights you have over it.
Effective date: 1 January 2026
At a Glance
How combo999 Protects Your Information
The summary cards below highlight the key principles of this policy. They do not replace the full clauses — please read the complete policy before using combo999.
Encryption and Security
Data in transit and at rest is protected with industry-standard encryption. Access controls limit who within combo999 can view account or payment records.
Your Rights
You may request access to, correction of, or deletion of your personal data, subject to applicable legal obligations and retention requirements.
Controlled Sharing
Data is shared only with verified service providers, payment processors and where legally required — never sold to third-party advertisers.
Defined Retention
Personal data is held only as long as the account relationship continues or as required by regulatory, financial or legal obligations.
Direct Contact
Questions, correction requests or complaints about data handling may be submitted to the combo999 support team at any time.
1. Introduction
Combo999 operates an English-language online entertainment platform for Malaysian players aged 21 and above. This Privacy Policy applies to all personal data processed in connection with account registration, platform use, deposits, withdrawals, promotion activity and support communications.
By registering with combo999, you acknowledge that you have read and understood this policy. If you do not agree, you should not create an account or continue using the platform. This policy should be read alongside the combo999 Terms & Conditions, which govern the overall service relationship.
Malaysian players
Combo999 is directed at adult users in Malaysia. Personal data provided by users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and elsewhere in Malaysia is processed in accordance with this policy. Combo999 does not represent that it complies with any specific national data-protection legislation, but applies reasonable data-handling standards consistent with international good practice.
2. Definitions
In this Privacy Policy, the following terms carry the meanings set out below:
- "Personal Data" means any information that identifies or can reasonably identify a living individual, including name, date of birth, email address, payment details and device identifiers.
- "Processing" means any operation performed on personal data, including collection, storage, use, disclosure and deletion.
- "Account Holder" or "you" means the verified individual who registers and uses a combo999 account.
- "Service Providers" means third parties engaged by combo999 to deliver specific functions, including payment processors, KYC verification services and hosting providers.
- "KYC" means Know Your Customer procedures, including identity, age and address verification.
- "Cookies" means small text files or similar tracking technologies placed on your device when you access combo999.
3. Personal Data We Collect
3.1 Information You Provide
When you register or use combo999, you may provide:
- Full legal name, date of birth and nationality;
- Email address and contact information;
- Residential address, including city and postcode;
- Government-issued identity documents submitted for KYC;
- Payment method details — such as Malaysian bank account names, e-wallet identifiers (for example Touch 'n Go eWallet, Boost or GrabPay), DuitNow references or cryptocurrency wallet addresses;
- Preferences, responsible-gambling tool selections and support communications.
3.2 Information Collected Automatically
When you access combo999, technical data may be collected automatically, including:
- IP address, approximate location and device type;
- Browser type, operating system and version;
- Pages visited, session duration, game activity and wagering records;
- Deposit and withdrawal timestamps and reference identifiers;
- Cookie and session data as described in Section 7.
3.3 Information from Third Parties
Combo999 may receive data from KYC providers, payment processors, fraud-detection services and, where applicable, responsible gambling databases. This information is used to verify eligibility, confirm payment ownership and maintain platform integrity.
4. How We Use Your Personal Data
Combo999 processes personal data for the following purposes:
| Purpose | Examples |
|---|---|
| Account administration | Registration, login security, account updates and closures |
| Payment processing | Deposits via FPX, Maybank, CIMB or e-wallets; withdrawal processing; transaction records |
| Identity and age verification | KYC document checks confirming 21+ eligibility and payment ownership |
| Service improvement | Game lobby development, mobile performance analysis, payment route evaluation |
| Security and fraud prevention | Detecting duplicate accounts, irregular wagering patterns and unauthorised access |
| Responsible gambling | Monitoring account behaviour to support self-exclusion requests and deposit-limit tools |
| Customer support | Handling queries about deposits, EPL or Liga Super Malaysia bet settlements and account issues |
| Legal compliance | Responding to lawful requests from competent authorities; retaining records as required |
5. Lawful Basis for Processing
Combo999 relies on the following bases when processing personal data:
- Contractual necessity: processing required to provide the account, execute payment transactions and deliver the services you have requested.
- Legitimate interests: fraud detection, platform security, responsible gambling monitoring and service improvement, balanced against individual privacy interests.
- Legal obligation: processing required to meet applicable AML, verification or financial record-keeping obligations.
- Consent: where you have provided a specific, informed and freely given consent — for example, optional marketing communications. You may withdraw consent without affecting prior processing.
6. Data Sharing and Disclosure
Combo999 does not sell personal data to third-party advertisers or unrelated commercial entities. Data may be shared with the categories of recipient described below, and only to the extent necessary for the stated purpose.
- Payment processors and e-wallet providers: to complete MYR deposits and withdrawals through Touch 'n Go eWallet, Boost, GrabPay, Maybank, Public Bank, Hong Leong Bank and similar services.
- KYC and identity verification providers: to confirm age, identity and document authenticity before account activation or withdrawal approval.
- Game software providers: who may receive session and wagering data necessary to operate and audit the relevant game.
- Fraud prevention and security services: to cross-reference account data against known risk indicators and protect the platform.
- Hosting, analytics and infrastructure providers: operating under confidentiality obligations who process data on combo999's behalf.
- Legal and regulatory authorities: where disclosure is required by a valid court order, lawful authority request or binding regulatory obligation.
Cross-border transfers: Service providers may be located outside Malaysia. Where data is transferred internationally, combo999 takes reasonable steps to ensure appropriate contractual or technical safeguards are in place.
7. Cookies and Tracking Technologies
Combo999 uses cookies and similar technologies to maintain sessions, remember login state, analyse platform performance and support security functions. Cookies do not collect personally identifiable information on their own but may be linked to account data when you are signed in.
Types of cookies used
- Essential cookies: required for session management, login persistence and security. Cannot be disabled without affecting platform functionality.
- Analytical cookies: used to understand how players navigate the platform, which games are accessed and how payment flows are used — to improve the experience.
- Functional cookies: retain non-sensitive preferences such as language or display settings.
Most browsers allow cookies to be managed or cleared through settings. Disabling essential cookies may prevent combo999 from functioning correctly. Combo999 does not currently use cross-site tracking cookies for third-party advertising purposes.
8. Data Retention
Personal data is retained only for as long as the account relationship continues, plus any additional period required by applicable legal, financial or audit obligations. The principles applied are:
- Active account data is maintained while your combo999 account remains open and in the period immediately following closure.
- Transaction, wagering and payment records may be retained for a minimum period to meet financial record-keeping standards.
- KYC and identity documents may be retained for a period following account closure where verification obligations require it.
- Support communications may be kept for a defined period to allow query review or dispute resolution.
When retention is no longer necessary, personal data is deleted or anonymised. Anonymised aggregate data may be retained for analytical purposes and cannot be used to identify individuals.
9. Your Rights
Subject to applicable law and legitimate operational constraints, you have the following rights over personal data held by combo999:
- Right of access: request a copy of personal data combo999 holds about you.
- Right to correction: request correction of inaccurate or incomplete information on your account.
- Right to deletion: request erasure of personal data that is no longer necessary, subject to retention obligations that override deletion.
- Right to restrict processing: ask combo999 to limit use of your data while a concern is being reviewed.
- Right to object: object to processing based on legitimate interests where your particular circumstances justify it.
- Right to withdraw consent: withdraw any previously given consent without affecting the lawfulness of earlier processing.
To exercise any of these rights, contact the support team at the address listed in Section 13. Combo999 will respond within a reasonable period and may need to verify your identity before acting on a request.
Note on mandatory retention
Certain records — including transaction histories, KYC documents and account activity logs — may be subject to mandatory retention periods. A deletion request cannot override a legal obligation to retain data for a defined minimum period.
10. Security Measures
Combo999 applies technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These include:
- Encryption of data in transit between your device and the combo999 platform;
- Encryption and access controls applied to stored account, payment and identity records;
- Role-based access limiting which staff members can view sensitive data categories;
- Logging and monitoring of access to account and payment systems; and
- Vendor assessment requirements for service providers handling personal data.
No system is completely immune to risk. You are responsible for keeping your login credentials confidential, using a secure device and reporting suspected unauthorised access promptly. Combo999 will take reasonable steps to address security incidents and notify affected account holders where required.
11. Age Restriction and Minor Protection
Combo999 is strictly for players aged 21 and above. The platform does not knowingly collect personal data from anyone under 21. Where combo999 becomes aware that data belonging to an under-age person has been received, that data will be deleted and the account will be closed without further processing.
If you believe an under-age person has registered or attempted to access combo999, contact the support team immediately. Identity and age verification checks are applied precisely to reduce the risk of underage access.
12. Changes to This Privacy Policy
Combo999 may update this Privacy Policy to reflect service changes, new payment methods, legal developments or improved security practices. Material changes will be published with an updated effective date. Continued use of combo999 following a published update constitutes acceptance of the revised policy.
We recommend reviewing this page periodically. If you disagree with a material change, you may request account closure before the revised policy takes effect.
13. Contact Us
Questions, data-access requests, correction requests or complaints about how combo999 handles personal information may be directed to the support team. Please include enough detail to allow the query to be handled efficiently — but do not include your password or full payment credentials.
Privacy & Data Enquiries
For all privacy-related questions about your combo999 account data:
Support is available 24 hours a day, 7 days a week.
When contacting us about a data request, please provide your registered account email and a brief description of your request. Combo999 may ask for identity confirmation before acting on access or deletion requests.
Privacy Understood
Ready to Explore combo999?
Now that you understand how combo999 handles your personal data, visit the homepage to explore casino games, live dealer tables and sports betting markets. For players aged 21 and above in Malaysia only.
Visit Homepage Read the FAQ