Privacy Policy

1 Introduction

This Privacy Policy (the "Policy") sets out how fly999 — accessible at https://fly999.cam — collects, processes, stores, and protects the personal data of individuals who access, register on, or otherwise use the fly999 platform and its associated services (collectively, the "Platform"). fly999 is committed to handling personal data responsibly, transparently, and in compliance with applicable data protection legislation.

By registering an account on the fly999 Platform, making a deposit, placing a bet, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must immediately discontinue your use of the Platform.

Note: This Privacy Policy applies exclusively to data processed by fly999 in connection with your use of the fly999 Platform. It does not apply to data processed by third-party payment providers, game studios, or other external services you may interact with independently. Please refer to those parties' respective privacy policies for information on how they handle your data.

This Policy may be updated periodically to reflect changes in our data practices or applicable law. The version effective at any given time will be the version published on this page, with the "Last Updated" date shown at the top of this document reflecting the most recent revision.

2 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below:

"Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to a name, identification number, location data, email address, financial account details, or any combination of data points that, taken together, could identify an individual.
"Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, or deletion.
"Data Controller" means fly999, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
"Data Subject" means the natural person to whom the Personal Data relates — in the context of this Policy, this refers to you as a registered User or visitor to the fly999 Platform.
"Third-Party Processor" means an external organisation or individual that processes Personal Data on behalf of fly999, acting under written data processing agreements and bound by equivalent data protection obligations.
"Cookies" means small text files placed on your device by the fly999 Platform for the purposes described in Section 10 of this Policy.
"KYC" (Know Your Customer) means the identity and address verification process applied by fly999 as required by applicable anti-money laundering and gaming compliance obligations.

3 Personal Data We Collect

fly999 collects personal data only to the extent necessary to provide, maintain, and improve the Platform and to fulfil our legal and regulatory obligations. The categories of personal data we collect are as follows:

3.1 Registration Data

When you create a fly999 account, we collect your full legal name, date of birth, email address, residential address, phone number, and chosen account credentials. This information is required to create and administer your account.

3.2 Identity Verification (KYC) Data

To comply with our anti-money laundering and gaming licensing obligations, we collect copies of government-issued photo identification (such as a Malaysian NRIC / MyKad, Passport, or Driver's Licence), proof of residential address (such as a utility bill or bank statement), and in certain circumstances, source-of-funds documentation.

3.3 Financial and Transaction Data

We collect information relating to your deposits, withdrawals, and betting activity, including payment method details (such as masked bank account or e-wallet identifiers), transaction amounts in MYR, dates and times of transactions, and the results of bets and games played.

3.4 Technical and Usage Data

We automatically collect technical information when you access the Platform, including your IP address, browser type and version, device type, operating system, referring URL, pages visited, session duration, and clickstream data. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

3.5 Communications Data

If you contact our customer support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, and agent notes, for quality assurance, dispute resolution, and training purposes.

3.6 Marketing Preferences

Where you have opted in to receive promotional communications, we retain a record of your marketing preferences, including the types of offers you have expressed interest in and any subsequent opt-out requests.

4 How We Collect Personal Data

fly999 collects personal data through the following means:

Directly from you — when you register an account, complete KYC verification, make a deposit, contact support, or update your account settings.
Automatically — through cookies, server logs, and tracking technologies when you browse or use the Platform (see Section 10 for full details).
From third-party verification providers — during the KYC process, we may receive data from identity verification services used to authenticate your identity documents.
From payment processors — our payment partners may provide us with transaction confirmation data, fraud flags, and payment instrument details necessary to process deposits and withdrawals.
From fraud prevention services — we may receive risk signals and alert data from specialist fraud detection services used to protect the Platform and its users.

5 Data Processing Purposes

fly999 processes your personal data for the following specific purposes. We do not process personal data for any purpose beyond those listed here without first obtaining your explicit consent or establishing an alternative lawful basis:

Purpose	Data Used	Lawful Basis
Account creation and administration	Registration data, contact details	Contract performance
Identity verification (KYC / AML)	ID documents, proof of address	Legal obligation
Processing deposits and withdrawals	Financial and transaction data	Contract performance
Fraud prevention and security monitoring	Technical data, transaction data	Legitimate interest
Customer support and dispute resolution	Communications data, account data	Contract performance
Responsible gambling enforcement	Betting history, session data	Legal obligation / Legitimate interest
Platform performance analytics	Technical and usage data	Legitimate interest
Marketing communications (opt-in only)	Contact details, preferences	Consent
Legal and regulatory compliance	All applicable data categories	Legal obligation

6 Legal Basis for Processing

fly999 relies on the following legal bases to process your personal data, as summarised in the table in Section 5:

Contract Performance: Processing is necessary to fulfil our contractual obligations to you as a registered Platform user, including account management, game provision, and payment processing.
Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, gaming licensing requirements, and KYC verification mandates.
Legitimate Interest: Processing is carried out in pursuit of fly999's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
Consent: Where processing is not justified by any of the above bases, fly999 will seek your prior explicit consent before processing your data. You retain the right to withdraw consent at any time without prejudice to the lawfulness of processing conducted prior to withdrawal.

7 Data Sharing & Disclosure

fly999 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may, however, share personal data with the following categories of recipients where strictly necessary:

Payment Processors: Your financial transaction data is shared with our integrated Malaysian payment partners — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and relevant bank partners including Maybank, CIMB, Public Bank, Hong Leong, and RHB — solely to process your deposits and withdrawals.
Identity Verification Providers: KYC document data is processed by accredited third-party identity verification services operating under strict data processing agreements and bound by equivalent data protection standards.
Gaming Content Providers: Limited technical data may be shared with licensed game studios whose content is hosted on the fly999 Platform to facilitate game provisioning and RNG integrity verification.
Fraud Prevention Services: We may share technical and transactional data with specialist fraud detection providers to identify and prevent fraudulent activity on the Platform.
Regulatory and Law Enforcement Authorities: fly999 will disclose personal data to government authorities, regulators, or law enforcement agencies where required to do so by applicable law, court order, or regulatory direction, or where such disclosure is necessary to prevent, detect, or investigate criminal activity.
Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to the relevant successor entity, subject to equivalent data protection obligations.

Important: All third-party processors engaged by fly999 are required to enter into binding data processing agreements that restrict their use of your personal data to the specific purposes for which it was shared, and impose security standards at least equivalent to those applied by fly999 itself.

8 Data Retention

fly999 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any applicable legal retention obligations. The following retention periods apply as a general framework:

Account and Registration Data: Retained for the duration of your account's active status and for a minimum period of five (5) years following account closure, as required by applicable gaming compliance and AML regulations.
KYC and Identity Verification Documents: Retained for a minimum of five (5) years from the date of verification, consistent with AML legislative requirements.
Financial Transaction Records: Retained for a minimum of seven (7) years to satisfy financial record-keeping obligations under applicable law.
Communications Data: Customer support interaction records are typically retained for two (2) years, unless they are relevant to an ongoing dispute, in which case they are retained until final resolution.
Marketing Preference Data: Retained until you withdraw consent, at which point your details will be removed from our active marketing lists within thirty (30) days.
Technical and Usage Data: Anonymised or aggregated analytics data may be retained indefinitely; identifiable technical logs are typically retained for up to twelve (12) months.

Upon the expiry of the applicable retention period, personal data will be securely deleted or permanently anonymised so that it can no longer be attributed to an identifiable individual.

9 Data Security

fly999 employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform;
Encrypted storage of sensitive data at rest, including KYC documents and financial records;
Role-based access controls ensuring that only authorised fly999 personnel with a legitimate business need can access personal data;
Two-factor authentication (2FA) available for all Account holders and enforced for administrative system access;
Real-time fraud detection and anomaly monitoring across all account activity and transaction processing;
Regular third-party security audits and penetration testing of the Platform infrastructure;
Staff training on data protection obligations and secure data handling practices.

Your Role in Security: While fly999 takes every reasonable step to protect your data, the security of your account also depends on you. We strongly recommend using a unique, strong password for your fly999 account, enabling 2FA, and never sharing your login credentials with any third party. If you suspect unauthorised access to your account, contact our support team immediately.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, fly999 will notify the relevant regulatory authority within the timeframe required by applicable law and will notify you directly where the breach poses a high risk to your personal rights.

10 Cookies & Tracking Technologies

fly999 uses cookies and similar tracking technologies on the Platform to improve your user experience, maintain session state, and gather analytics data. The categories of cookies we use are as follows:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They enable core functionality such as secure login session management, preferences storage, and shopping cart maintenance. These cookies cannot be disabled without significantly impairing your ability to use the Platform.

10.2 Performance and Analytics Cookies

These cookies collect anonymous information about how visitors interact with the Platform, including which pages are visited most frequently, how long users spend on each page, and where users navigate from. This information is used exclusively to improve Platform performance and user experience. No personally identifiable information is collected through these cookies.

10.3 Functional Cookies

Functional cookies remember choices you have made on the Platform — such as your preferred language, display settings, or notification preferences — to provide a more personalised experience during your current and future sessions.

10.4 Managing Cookie Preferences

You may control and manage cookie settings through your browser's built-in privacy controls. Please note that disabling certain cookie categories may affect the functionality of the Platform. Strictly necessary cookies cannot be opted out of without ceasing use of the Platform entirely.

11 Your Data Rights

As a Data Subject, you hold the following rights with respect to the personal data fly999 holds about you. To exercise any of these rights, please contact us using the details provided in Section 16:

Right of Access: You may request a copy of all personal data held about you by fly999, together with information on how it is being processed. We will respond to verified access requests within thirty (30) calendar days.
Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you. Where data is being actively processed, corrected data will be applied promptly.
Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to fly999's overriding legal retention obligations (see Section 8).
Right to Restrict Processing: You may request that fly999 temporarily restrict the processing of your personal data in certain circumstances, such as while a dispute over data accuracy is being resolved.
Right to Data Portability: Where processing is based on consent or contract performance and is carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format.
Right to Object: You may object to processing based on legitimate interest grounds, including profiling. fly999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

Response Timeframe: fly999 will acknowledge all rights requests within five (5) business days and will provide a substantive response within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with advance written notice to you.

12 Children's Privacy

The fly999 Platform is strictly intended for use by adults aged 21 years and above. fly999 does not knowingly collect, process, or retain personal data relating to any individual under the age of 21. Age verification is a mandatory component of the KYC process, and accounts identified as being operated by persons under 21 will be immediately closed and all associated data will be deleted in accordance with applicable law.

🔞 Strict Age Policy: If you are a parent or guardian and believe that a minor in your care has registered on the fly999 Platform, please contact our support team immediately at [email protected] (plain text — not a clickable link). We will take immediate action to close the account and permanently delete the associated data.

13 International Data Transfers

fly999 operates primarily with infrastructure and service providers located within jurisdictions that maintain adequate data protection standards. Where personal data is transferred to countries or territories outside the jurisdiction in which it was collected, fly999 ensures that appropriate safeguards are in place prior to any such transfer.

Such safeguards may include: the existence of an adequacy decision by a relevant supervisory authority recognising the destination jurisdiction as providing an adequate level of data protection; the execution of standard contractual clauses approved by an applicable data protection authority; or binding corporate rules where the recipient is part of a corporate group with equivalent data protection policies.

If you would like further information regarding the specific safeguards in place for any international transfer of your personal data, please contact us using the details in Section 16.

14 Third-Party Services

The fly999 Platform integrates with several third-party services to deliver its full range of features, including payment processing, identity verification, game content delivery, fraud prevention, and customer communications. Each of these service providers operates under its own privacy policy and data protection framework.

fly999 is not responsible for the privacy practices of third-party services. We recommend that you review the privacy policies of any third-party services you interact with in connection with your use of the fly999 Platform — particularly your selected payment provider — to understand how your personal data is handled beyond the boundaries of the fly999 Platform itself.

All third-party processors engaged by fly999 are subject to binding data processing agreements that restrict their processing of your personal data to the specific purposes for which it was shared and require them to maintain appropriate technical and organisational security measures.

15 Amendments to This Policy

fly999 reserves the right to modify this Privacy Policy at any time to reflect changes in our data processing practices, technological developments, or applicable legal requirements. Where amendments materially affect your rights or the manner in which your personal data is processed, fly999 will take reasonable steps to notify you — either via email to your registered address or via a prominent notice on the Platform — prior to the changes taking effect.

The "Last Updated" date displayed at the top of this document will always reflect the date of the most recent revision. Your continued use of the fly999 Platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which fly999 processes your personal data, please contact our Data Protection team through the following channels:

Privacy & Data Protection Enquiries

Email: [email protected] (plain text — not a clickable link)

Live Chat: Available 24 hours a day, 7 days a week via the fly999 Platform. All communications are handled in English.

Response Commitment: We acknowledge all privacy-related enquiries within 5 business days and provide a full substantive response within 30 calendar days.

When submitting a data rights request, please include your full name, registered email address, and a clear description of your request to enable us to process it efficiently. We may ask you to provide additional proof of identity before fulfilling certain requests to protect against unauthorised data access.

This Privacy Policy was last reviewed and updated on 1 January 2026. fly999 — https://fly999.cam