Privacy Policy

1. Who We Are

turbo99 is an online casino and sportsbook platform serving adult players (21 years of age and above) primarily across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, and surrounding regions. turbo99 operates under applicable international gaming regulations and accepts transactions exclusively in Malaysian Ringgit (MYR).

For the purpose of data protection, turbo99 acts as the data controller with respect to personal information you provide when registering, depositing funds, placing bets, or communicating with our support team.

2. Data We Collect

turbo99 collects personal data from you in the following categories:

2.1 Account Registration Data

• Full legal name (as per your NRIC or passport)
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Malaysian mobile number
• Preferred username and password (stored in hashed form)
• Residential address (for KYC verification)

2.2 Identity Verification (KYC) Data

• Copy of National Registration Identity Card (NRIC) or passport
• Proof of address (utility bill, bank statement)
• Selfie or liveness verification image, where required

2.3 Financial Transaction Data

• Deposit and withdrawal amounts in MYR
• Payment method details (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, bank transfer reference numbers)
• Transaction history and timestamps

2.4 Gaming Activity Data

• Bets placed, games played, session durations
• Sports betting history (EPL, Malaysia Super League, UFC, and other markets)
• Casino game outcomes and wager records
• Bonus and promotion participation records

2.5 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Pages visited, time spent, clickstream data
• Cookie identifiers and session tokens

2.6 Communications Data

• Live chat transcripts with our support team
• Email correspondence
• Feedback or survey responses you choose to submit

3. How We Use Your Data

turbo99 uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your turbo99 account.
• Identity Verification: Confirming you are 21 years of age or older and that your identity matches our records, as required by our operating regulations.
• Payment Processing: Facilitating deposits and withdrawals in MYR via your chosen payment method.
• Service Delivery: Enabling you to access sports betting, live casino, slots, roulette, and other platform features.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, and other unlawful conduct.
• Responsible Gaming: Monitoring play patterns to identify potential problem gambling behaviours and reaching out where appropriate, in line with our Responsible Gaming commitments.
• Customer Support: Responding to your queries, complaints, and requests via live chat or email.
• Legal Compliance: Meeting obligations under applicable gaming regulations, anti-money-laundering (AML) laws, and related requirements.
• Platform Improvement: Analysing aggregated usage data to enhance the turbo99 platform, fix bugs, and optimise user experience.
• Marketing & Promotions: Where you have given consent, sending you relevant offers, cashback bonus updates, and promotional communications. You may opt out at any time.

4. Legal Basis for Processing

turbo99 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform our services as described in our Terms & Conditions.
• Legal Obligation: Processing necessary to comply with applicable laws, including AML regulations, gaming licence conditions, and tax reporting requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where our interests do not override your fundamental rights.
• Consent: Where we rely on your consent — for example, for marketing communications — you may withdraw that consent at any time by contacting support or adjusting your account preferences.

5. Data Sharing & Disclosure

turbo99 does not sell your personal data to third parties. We may share your information in the following limited circumstances:

5.1 Operational Service Providers

We engage trusted third-party providers to assist with platform operations, including payment processors (for Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and bank transfer services), KYC verification providers, IT infrastructure partners, and customer support tools. These providers are contractually bound to process your data only on our instructions and to maintain appropriate security standards.

5.2 Regulatory & Law Enforcement Authorities

turbo99 may disclose personal data to relevant gaming regulators, financial intelligence units, or law enforcement agencies where required by law, a court order, or a regulatory directive. We will notify you of such disclosures where legally permitted to do so.

5.3 Fraud Prevention & AML Partners

To protect the integrity of our platform and comply with anti-money-laundering obligations, we may share account and transaction data with fraud screening and AML compliance partners. Such sharing is subject to strict data processing agreements.

5.4 Business Transfers

In the event of a merger, acquisition, or transfer of all or part of turbo99's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide reasonable notice before your data becomes subject to a different privacy policy.

6. Cookies & Tracking Technologies

turbo99 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for platform functionality, including session management, login authentication, and security tokens. These cannot be disabled without affecting core service delivery.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data on how visitors navigate the site, helping us identify technical issues and optimise page performance.
• Functional Cookies: Stored to remember your preferences, such as language settings, display options, and odds format choices.
• Marketing Cookies: Used, with your consent, to deliver relevant promotional content. You may opt out of marketing cookies via your browser settings or by contacting our support team.

Most web browsers allow you to control cookie settings through the browser's preferences menu. Please note that disabling certain cookies may impact your experience on the turbo99 platform.

7. Data Security

turbo99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit TLS/SSL encryption for all data in transit between your device and our servers
• Encryption at rest for sensitive personal and financial data stored in our databases
• Multi-factor authentication requirements for internal staff access to production systems
• Regular penetration testing and vulnerability assessments conducted by independent security firms
• Role-based access controls that restrict data access to personnel with a demonstrated business need
• Comprehensive audit logging of all administrative actions involving personal data
• Incident response procedures that are tested and reviewed on a periodic basis

Whilst turbo99 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorised access to your turbo99 account.

8. Data Retention

turbo99 retains your personal data for as long as is necessary to fulfil the purposes described in this policy, or as required by applicable law. The following retention periods generally apply:

• Active Account Data: Retained for the duration of your account relationship with turbo99 plus a minimum of five (5) years following account closure, in line with AML and gaming regulatory requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Transaction Records: Retained for a minimum of seven (7) years to comply with financial recordkeeping obligations.
• Support Communications: Retained for up to three (3) years from the date of the interaction, unless longer retention is required for an unresolved dispute.
• Marketing Consent Records: Retained for the period of consent and up to three (3) years thereafter as evidence of that consent.

When retention periods expire, turbo99 securely deletes or anonymises personal data in a manner consistent with industry best practices.

9. Your Rights

As a turbo99 user, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team using the details in Section 12.

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request that inaccurate or incomplete data be corrected or updated.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances, for example while a correction request is under review.
• Right to Object: You may object to processing of your data based on legitimate interests, including direct marketing. Where marketing is concerned, we will honour opt-out requests immediately.
• Right to Data Portability: Where technically feasible and legally applicable, you may request a structured, machine-readable copy of data you have provided to us.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10. Children's Privacy

The turbo99 platform is strictly intended for adults who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our registration process, and accounts found to belong to underage individuals will be suspended immediately and all funds held pending investigation.

If you believe that a minor has registered on the turbo99 platform or that their data has been inadvertently collected, please contact us immediately at the details provided in Section 12 so that we may take prompt remedial action.

Parents and guardians concerned about underage gambling are encouraged to use parental control tools and to visit our Responsible Gaming page for further guidance and self-exclusion resources.

11. Changes to This Policy

turbo99 reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Display a prominent notice on the turbo99 platform informing registered users of the change
• Where required by applicable law, seek fresh consent before applying the updated terms to existing users

We encourage you to review this Privacy Policy periodically to stay informed about how turbo99 protects your data. Continued use of the platform after the effective date of any updated policy constitutes your acceptance of the revised terms.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by turbo99, please reach out to our Data Protection team through any of the following channels:

• Email: [email protected] (response within 2 hours)
• Live Chat: Available 24/7 directly on the turbo99 platform, with responses in under 90 seconds

Please include your registered email address and a clear description of your request to help us process it efficiently. For identity verification purposes, we may ask you to provide additional proof of identity before actioning certain requests.