Quick Summary: cc98 only collects data that is strictly necessary, uses it solely for the stated purposes, protects it with the latest encryption, and never sells it to anyone. You always have the right to access, correct, or request deletion of your data.
1. Information We Collect
Cc98 collects your personal information through several channels — directly when you register or use the platform, automatically through tracking technologies, and in certain cases, through trusted third parties. The categories of information we collect are as follows:
1.1 Registration and Identity Information
- Full name as stated in official identification documents
- National identification number (MyKad) or passport number
- Date of birth for age verification
- Active email address
- Malaysian mobile phone number
- Current residential address
1.2 Financial Information
- Bank account number for withdrawal purposes
- Digital wallet information (Touch 'n Go, GrabPay, Boost)
- Deposit and withdrawal transaction history
- Wagering records and game activity
1.3 Automatically Collected Technical Information
When you browse the cc98 platform, our systems automatically record the following technical information for security and experience improvement purposes:
- IP address and general geographic location
- Device type, operating system and web browser used
- Pages visited, visit duration and navigation patterns
- Login session data including access time and location
KYC Note: All information collected as part of the Know Your Customer (KYC) process is used solely for identity verification and anti-money laundering compliance. KYC documents are stored in a secure, integrated server environment.
| Data Category | Example | Primary Purpose | Retention Period |
|---|---|---|---|
| Identity | Name, MyKad, date of birth | KYC | For the duration of the active account + 7 years |
| Contact | Email, phone number | Communication | For the duration of the active account |
| Financial | Bank account, transaction history | Payment | 7 years (tax requirement) |
| Technical | IP address, browser, device | Security | 90 days |
| Games | Betting history, wins | Audit | 3 years |
2. How We Use Your Data
Cc98 uses your personal information on a valid legal basis — whether on contractual grounds, legitimate interest, legal compliance, or with your explicit consent. The specific purposes for which data is used are as follows:
2.1 Account Management and Services
Your data is used to create and manage your cc98 account, verify your identity during login, securely process deposits and withdrawals, and provide effective customer support whenever you need assistance.
2.2 Security and Fraud Prevention
Cc98 uses technical data and usage patterns to detect suspicious activity, prevent unauthorized access to your account, and maintain the overall integrity of the platform. This includes continuous monitoring for abnormal login attempts and unusual transactions.
2.3 Legal Compliance
Some of your data is stored and processed due to legal obligations we cannot avoid, including anti-money laundering (AML) reporting requirements, age verification, and the retention of financial records for audit and tax purposes.
2.4 Experience Improvement and Marketing
With your consent, cc98 uses usage pattern data to personalise promotional offers, suggest games you may enjoy, and send notifications about the latest bonuses and promotions. You may withdraw this consent at any time through your account settings.
3. Data Sharing with Third Parties
Cc98 does not sell or rent your personal data. However, in the course of operating the platform, we share certain data with the following categories of third parties, strictly for the stated purposes:
- Payment Providers — DuitNow, FPX, Touch 'n Go, GrabPay, and Boost receive only the minimum transaction data required to process your payment.
- Game Providers — Game companies partnering with cc98 receive anonymous user IDs for technical purposes only, with no full identity information.
- Integrated Cloud Services — Data is stored on cloud servers compliant with ISO 27001 international security standards.
- Regulatory Authorities — cc98 will disclose data when required by court order, official investigation, or legal obligation.
Warning: cc98 never shares your password, PIN, or login credentials with any party, including authorities. If anyone claims to require such information on behalf of cc98, it is a scam.
4. Data Security and Protection
Cc98 invests seriously in information security infrastructure to ensure your data is protected at every stage — during transmission, during processing, and during storage.
4.1 Technical Measures
- 256-bit SSL/TLS encryption for all communications between browser and server
- Databases encrypted with AES-256 encryption at the storage level
- Two-factor authentication (2FA) is available and encouraged for all accounts
- Independent security audits are conducted quarterly by third-party firms
- 24/7 threat monitoring by the cc98 cybersecurity team
4.2 Internal Access Controls
Access to cc98 members' personal data among staff is restricted to individuals who genuinely require it to perform their duties. All employees with access to personal data are bound by strict confidentiality agreements and undergo regular data protection training.
5. Your Rights Under PDPA
As a data subject under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights, which you may exercise at any time:
Right of Access
You have the right to request a copy of the personal data cc98 holds about you. We will provide a full report within 14 business days.
Right to Rectification
If your data is inaccurate or outdated, you have the right to request a correction. Updates will be carried out within 7 business days.
Right to Erasure
You may request the deletion of your personal data upon account closure, subject to applicable legal retention obligations.
Right to Object
You have the right to object to the processing of your data for direct marketing purposes. Your objection will be enforced within 48 hours.
Right to Data Portability
You may request an export of your personal data in a machine-readable format (JSON or CSV) for transfer to another platform.
Right to Withdraw Consent
Any consent you have provided for data processing may be withdrawn at any time without affecting the validity of prior processing.
How to Exercise Your Rights: To exercise any of the above rights, contact the cc98 Data Protection Officer via live chat on the platform or by email [email protected]. Include your account number and request type for faster processing.
6. Cookies and Tracking Technologies
The cc98 platform uses cookies and similar tracking technologies to ensure a smooth and secure user experience. There are three types of cookies we use:
6.1 Essential Cookies
These cookies are required for core platform functions such as login session authentication, language preference storage and form security. Without them, the platform cannot function properly. Essential cookies do not require your consent as they are part of cc98's core service.
6.2 Analytics Cookies
With your consent, cc98 uses analytics cookies to understand overall platform usage patterns — which pages are most popular, how long users spend in each section, and where users encounter difficulties. This data helps us continuously improve the user experience.
6.3 Preference and Marketing Cookies
Preference cookies store settings such as display mode and text size. Marketing cookies allow us to show you more relevant promotions based on your interests. Both types of cookies are only activated with your explicit consent and can be disabled at any time via the cookie settings within the platform.
7. Cross-Border Data Transfers
In the course of platform operations, some of your personal data may be transferred to or processed on servers located outside Malaysia. cc98 ensures that any such data transfers are safeguarded by protection mechanisms equivalent to Malaysia's PDPA standards, including standard data processing agreements and approved contractual clauses.
Our Commitment: Regardless of where your data is physically processed, the same privacy protection standards — as outlined in this Privacy Policy — apply in full. cc98 will not transfer your data to countries that do not provide an adequate level of data protection.
8. Child Protection
The cc98 platform is strictly for adults aged 18 and above. cc98 does not intentionally collect, store or process any personal data of individuals under the age of 18. Should we discover that a minor's data has been collected inadvertently, that data will be deleted immediately and the account in question will be closed without notice.
If you believe that someone under the age of 18 has registered a cc98 account, please notify us immediately at [email protected] so that immediate action can be taken.
9. Changes to the Privacy Policy
Cc98 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. Whenever the Privacy Policy is updated, the "Updated" date at the top of this page will be revised.
For significant changes that affect how we process your data, cc98 will provide clear notice via registered email or in-app notification at least 14 days before the changes take effect. Continued use of the cc98 platform after that notice period is considered your acceptance of the updated policy.
10. Contact Our Data Protection Officer
Cc98 has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this Privacy Policy and handling all member privacy-related inquiries. If you have any questions, concerns, or complaints regarding the processing of your personal data, please contact us through the following channels:
- Live Chat: Available 24/7 on the cc98 platform
- Privacy Email: [email protected]
- Response Time: Within 3 business days for general enquiries, 14 business days for formal data rights requests
If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia through the official channels designated by the Ministry of Communications and Digital.
Related References: This Privacy Policy should be read together with Terms and Conditions as well as Responsible Gaming Policy cc98 for a comprehensive understanding of how we operate and protect members' interests.