agam99 is committed to protecting the personal data of all registered users. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you hold as a data subject — in plain English, without the fine-print maze.
This Privacy Policy ("Policy") is published by agam99 ("we", "us", "the Company", "the Platform") and governs the collection, processing, storage, and disclosure of personal data submitted by users ("you", "the User", "the Player") in connection with your use of the agam99 website at agam99.buzz and all associated services, including online casino games, sports betting, live dealer products, lottery services, and customer support channels.
agam99 operates under international online gaming licensing and takes its data protection obligations seriously. This Policy is designed to be transparent and readable — we want you to understand exactly how your data is handled before you provide it. We do not sell your personal data. We do not share it with third parties for their own marketing purposes. Data is collected and processed only where there is a legitimate purpose and a legal basis for doing so.
By registering an Account on agam99 or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood its terms. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact our support team to request Account closure.
A note for Malaysian users: Malaysia's Personal Data Protection Act 2010 (PDPA) establishes obligations for data processors handling personal data of Malaysian residents. agam99 applies data handling standards aligned with international best practices, including GDPR-influenced principles, which in many respects meet or exceed PDPA requirements. However, as an internationally licensed operator, Malaysian users are advised to review this Policy independently and contact us with any jurisdiction-specific data rights requests.
For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:
| Term | Definition |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, IP address, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, organisation, storage, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. For this Policy, the Data Controller is agam99. |
| "Data Processor" | A third party that processes personal data on behalf of the Data Controller, under written instruction and contractual data protection obligations. |
| "Data Subject" | The natural person whose personal data is being processed — in this context, the registered User or visitor to the Platform. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for a stated purpose. |
| "Cookie" | A small text file stored on a user's device by a web browser, used to retain session state, preferences, and analytics data. |
| "KYC Data" | Identity verification documents and associated data collected for Know Your Customer compliance, including MyKad, passport scans, and proof of address documents. |
agam99 is the Data Controller for all personal data collected through the agam99 Platform. As Data Controller, we are responsible for determining the purposes for which your personal data is processed and for ensuring that processing activities comply with our applicable legal obligations under our international licensing framework.
Data Controller: agam99
Platform URL: agam99.buzz
Contact for Data Enquiries: [email protected] (plain text — not a clickable link)
Operational Basis: International online gaming licensing. No Malaysian government regulatory affiliation.
agam99 collects personal data in several categories, depending on the nature of your interaction with the Platform. We collect only what is necessary for the purposes described in this Policy — no more.
Personal data is collected through the following primary channels:
agam99 processes personal data only where a valid legal basis exists. The applicable legal bases are as follows:
| Legal Basis | Application |
|---|---|
| Contract Performance | Processing necessary to operate your Account, process deposits and withdrawals, settle wagers, and deliver the services you have registered to use. |
| Legal Obligation | Processing required to comply with our international licensing obligations, including KYC identity verification, AML transaction monitoring, and age verification enforcement. |
| Legitimate Interests | Processing carried out for fraud detection and prevention, platform security, abuse monitoring, and internal business analytics — where these interests are not overridden by your privacy rights. |
| Consent | Processing for optional purposes where you have given explicit, freely revocable consent — including receipt of promotional emails and non-essential analytics cookies. |
agam99 uses the personal data collected for the following purposes:
agam99 does not sell, rent, or otherwise commercialise your personal data to third parties. We share data only in the circumstances described below, and only to the minimum extent necessary for each stated purpose:
We engage carefully vetted third-party service providers to assist in delivering our services. These providers act as Data Processors under written agreements that impose data protection obligations consistent with our own. Categories of service providers include:
agam99 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally compelled to do so under applicable law, or where disclosure is necessary to protect the rights, property, or safety of agam99, its users, or the public.
In the event of a merger, acquisition, or transfer of all or substantially all of agam99's business or assets, personal data held by agam99 may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer via email or Platform notification prior to completion where practically possible.
We never share your personal data for third-party marketing. Your data is not sold to advertisers, data brokers, or any third party for their own commercial purposes. If you receive unsolicited marketing communications claiming to be from agam99, please report them to our support team immediately.
agam99 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law and our licensing obligations. The following general retention principles apply:
| Data Category | Retention Period |
|---|---|
| Account & Registration Data | Duration of active Account plus a minimum of 5 years following Account closure, as required by AML and licensing obligations. |
| KYC Documents | Minimum of 5 years from the date of submission or from the date of Account closure, whichever is later. |
| Transaction & Financial Records | Minimum of 5 years from the date of each transaction, in compliance with financial record-keeping requirements under our licensing framework. |
| Game & Betting History | Minimum of 2 years from the date of each session, for dispute resolution and regulatory audit purposes. |
| Support Communications | 24 months from the date of each interaction, unless the subject matter forms part of an ongoing dispute or investigation. |
| Cookie & Analytics Data | Session cookies expire at the end of each browsing session. Persistent analytics cookies are retained for up to 13 months. |
| Self-Exclusion Records | Indefinitely, to ensure that self-exclusion decisions are enforced and not accidentally reversed. |
Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual.
agam99 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session state, and understand how users interact with our services. The types of cookies we use are described below:
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Essential for the Platform to function. Includes session authentication cookies that keep you logged in during a browsing session. Cannot be disabled without impairing Platform functionality. |
| Functional | Remembers your preferences such as display language, odds format, and responsible gambling settings. Persists across sessions. |
| Analytics | Collects anonymised usage data to help us understand how users navigate the Platform, which features are used most, and where technical issues arise. Operated by agam99 using privacy-respecting analytics tools. |
| Marketing (opt-in) | Used only where you have explicitly opted in. Supports delivery of relevant promotional messaging within the Platform. Not used for cross-site advertising profiling. |
You may manage your cookie preferences via your browser settings at any time. Note that disabling cookies beyond strictly necessary ones may affect Platform functionality and your user experience. We do not use cross-site tracking technologies to follow your activity on third-party websites.
agam99 implements a layered approach to data security designed to protect personal data against unauthorised access, accidental loss, alteration, and disclosure. Our security measures include:
While we apply industry-standard security measures, no online system is entirely risk-free. You can help protect your account by using a strong, unique password, enabling 2FA, and reporting any suspected unauthorised access to our 24/7 support team immediately.
agam99 operates under international licensing and may use cloud infrastructure and service providers located outside of Malaysia. Your personal data may therefore be transferred to, stored in, or processed in jurisdictions other than Malaysia. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place to protect your data, including:
As a Data Subject, you hold the following rights in relation to your personal data held by agam99. To exercise any of these rights, contact us via live chat or at the email address listed in Section 16. We will respond within 30 days of a verified request.
You may request a copy of the personal data agam99 holds about you, along with information about how it is being used and with whom it has been shared.
You may request correction of any inaccurate or incomplete personal data. Updates to account-critical fields (name, date of birth) require supporting documentation.
You may request deletion of your personal data where there is no longer a lawful basis for its retention. Note that this right is subject to legal, regulatory, and licensing obligations that require us to retain certain records for defined minimum periods.
You may request that we restrict the processing of your data — for example, while a rectification request is under review or a legitimate interests objection is being assessed.
Where processing is carried out by automated means on the basis of consent or contract, you may request a copy of your data in a structured, machine-readable format.
You may object to processing carried out on the basis of legitimate interests, including any profiling for fraud detection or service personalisation purposes.
Where processing is based on your consent (for example, marketing email opt-in or non-essential analytics cookies), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
The agam99 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the KYC process, and all accounts are subject to document-based age confirmation before withdrawals are processed.
Where agam99 becomes aware, or has reasonable grounds to suspect, that an Account is registered to or operated by a person under 21, we will immediately suspend the Account, freeze any associated balance pending investigation, and permanently close the Account upon confirmation. Personal data associated with confirmed underage accounts will be retained only to the extent required by our legal and regulatory obligations, then securely deleted.
Parental Notice: If you believe that a minor in your household has accessed or attempted to register on agam99, please contact our support team immediately. We will investigate and take appropriate action. We recommend using parental control software to restrict access to gambling websites for minors.
agam99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or regulatory requirements. The revised Policy will be published on this page with an updated "Last Updated" date. For material changes — meaning changes that significantly affect how we use your personal data — we will endeavour to notify registered Account holders via email prior to the changes taking effect.
Your continued use of the Platform after the publication of any updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with any updated Policy, you should discontinue use of the Platform and request Account closure by contacting our support team.
For any questions, requests, or concerns relating to this Privacy Policy, the processing of your personal data, or the exercise of your data rights, please contact the agam99 data team through the following channels:
Live Chat: Available 24/7 on the agam99 Platform. The fastest route for urgent privacy or account queries. Average first-response under 90 seconds.
Email: [email protected] (plain text — not a clickable link). For formal data rights requests, please include "Data Rights Request" in your subject line and identify yourself clearly. We will respond within 30 calendar days.
Language: All communications are handled in English.
If you are dissatisfied with our response to a data rights request, you may have the right to escalate your concern to a relevant data protection authority depending on your jurisdiction of residence. We encourage you to contact us first so that we have the opportunity to address your concern directly.
Your personal information is never sold, rented, or shared with third parties for their own marketing or commercial purposes. Full stop. If a third party receives your data, it is under contractual data protection obligations and strictly for delivering our services.
We collect only what is necessary for the stated purpose. Account registration, KYC, payments, gaming, and support each have specific data requirements — we don't collect beyond them.
All data exchanged between your browser or device and our servers is protected by 256-bit TLS encryption. KYC documents and financial records are also encrypted at rest in our secure infrastructure.
Access, rectification, erasure, portability, objection, and consent withdrawal — all data rights are honoured. Submit a request via live chat or email and we'll respond within 30 days.
We don't hold your data indefinitely. Each data category has a defined retention period tied to legal, licensing, or operational necessity. Data is securely deleted or anonymised when no longer required.
Promotional emails and marketing communications are sent only to users who have explicitly opted in. Withdrawing consent is instant — one click, no dark patterns, no re-enrolment without fresh consent.
Your data is protected, your rights are real, and your privacy is not a product we sell. Experience Malaysia's most transparent online casino platform.