Privacy Policy

timur99 ("we", "us", "our", "the Operator") is committed to protecting and respecting the privacy of all individuals who access and use the timur99 online gaming and sports betting platform, available at timur99.cam (the "Platform").

This Privacy Policy ("Policy") sets out in clear, structured terms how timur99 collects, processes, stores, shares, and protects personal data in connection with the operation of the Platform and the delivery of services to our Members. It applies to all users of the Platform, including registered Members and visitors who browse without registering.

timur99 serves players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions of the country — and takes its obligations under applicable data protection law seriously. We process personal data only for the purposes described in this Policy, and we do not sell your personal information to any third party.

By registering an Account on the Platform or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read in conjunction with our Terms & Conditions.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including name, identification number, contact details, location data, financial information, and online identifiers.
• "Processing" — Any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Subject" — The natural person to whom Personal Data relates — in the context of this Platform, the registered Member or visitor.
• "Data Controller" — timur99, as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — Any third party engaged by timur99 to process Personal Data on the Operator's behalf, under a binding data processing agreement.
• "Cookies" — Small text files stored on a user's device by a web browser, used to recognise returning users and retain session or preference information.
• "KYC" — Know Your Customer — the identity verification process mandatory under anti-money laundering regulations, applicable to all Members seeking to withdraw funds.
• "Account" — A registered user profile on the Platform, created during the sign-up process and associated with a unique username and verified identity.

timur99 collects the following categories of Personal Data in connection with the operation of the Platform:

Identity Data

Contact Data

Financial Data

Technical & Device Data

Behavioural & Usage Data

We do not collect any special category data (such as health data, racial or ethnic origin, or biometric data for identification purposes) unless specifically required by applicable law or requested for responsible gambling intervention purposes with the Member's explicit consent.

timur99 collects Personal Data through the following channels and mechanisms:

• Direct Submission: Information you provide when creating an Account, completing the KYC verification process, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Technical Collection: Technical and device data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Payment Providers: Financial transaction data received from verified Malaysian payment partners, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and RHB, as well as cryptocurrency processors for BTC, ETH, USDT, and LTC transactions.
• KYC and Identity Verification Services: Data received from third-party identity verification service providers engaged to assist with the KYC process, where applicable.
• Fraud and Risk Detection Systems: Data generated or enriched by automated fraud detection tools used to protect the Platform and its Members.

timur99 processes your Personal Data for the following specific and legitimate purposes:

1. Account Registration and Management: Creating and maintaining your Account, verifying your identity, and enabling access to the Platform and its features.
2. KYC and Age Verification: Fulfilling our obligation to verify that all Members are aged 21 years or above, and confirming identity in compliance with applicable anti-money laundering (AML) requirements.
3. Transaction Processing: Processing deposits, withdrawals, and the application of promotional credits or VIP Programme rewards to your Account.
4. Customer Support: Responding to enquiries, resolving complaints, and managing disputes submitted through live chat, WhatsApp, WeChat, or email.
5. Platform Security and Fraud Prevention: Detecting and preventing fraudulent activity, account compromise, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
6. Regulatory Compliance: Meeting obligations under applicable law, including record-keeping requirements, AML reporting, and responding to lawful requests from competent authorities.
7. Responsible Gambling Monitoring: Identifying patterns of gambling behaviour that may indicate problem gambling, and administering self-exclusion, deposit limit, or loss limit requests made by Members.
8. Platform Improvement: Analysing aggregated usage data to improve the performance, stability, and content of the Platform.
9. Service Communications: Sending transactional notifications, Account-related alerts, and where you have opted in, promotional communications regarding timur99 offers and updates.

timur99 does not use Personal Data for automated individual decision-making that produces legal or similarly significant effects without human review, except as required for fraud prevention where such processing is necessary to protect the security of the Platform.

timur99 processes Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between timur99 and the Member — including Account management, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulatory obligations, including AML and KYC requirements.
• Legitimate Interests: Processing carried out in pursuance of timur99's legitimate interests in operating a secure, fraud-free Platform — where such processing does not override the fundamental rights and interests of the Data Subject.
• Consent: Where timur99 relies on consent as the legal basis for processing — such as for optional promotional communications — you retain the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

timur99 does not sell, rent, or trade your Personal Data to any third party. We share your data only in the limited circumstances described below:

• Payment Processors: Financial data is shared with verified payment service providers — including Malaysian e-wallet operators, FPX and DuitNow infrastructure providers, Malaysian banks, and cryptocurrency payment processors — solely to process your transactions.
• KYC and Identity Verification Providers: Identity documents and verification data may be shared with specialist third-party KYC service providers engaged to assist with identity and age verification, under strict data processing agreements.
• Game Software Providers: Wagering activity and session data is shared with the game software providers whose products are integrated into the Platform, as necessary for game operation and dispute resolution.
• Fraud and Security Services: Technical data and behavioural signals may be shared with fraud detection service providers for the purpose of identifying and preventing fraudulent activity on the Platform.
• Competent Authorities: timur99 will disclose Personal Data to law enforcement, regulatory authorities, or other competent bodies where required to do so by applicable law, court order, or lawful regulatory request.
• Professional Advisers: Personal Data may be shared with legal counsel, auditors, or other professional advisers engaged by timur99, where disclosure is necessary for the conduct of legitimate professional services.

timur99 retains Personal Data for no longer than is necessary for the purposes for which it was collected, taking into account applicable legal, regulatory, and operational requirements.

The following general retention guidelines apply:

• Account Data: Retained for the duration of an active Account, and for a period of not less than five (5) years following permanent Account closure, in compliance with AML record-keeping obligations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
• KYC Documents: Identity verification documents are retained for the duration required by applicable AML and regulatory frameworks — typically five (5) years from the date of verification or Account closure, whichever is later.
• Customer Support Records: Support interaction records are retained for a period of two (2) years following the resolution of the relevant enquiry or complaint.
• Technical and Log Data: Server log and technical data is retained for a period of twelve (12) months from the date of collection unless retention for a longer period is required for security investigation purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with established data disposal procedures.

timur99 implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the Platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive personal and financial data stored on timur99 servers is encrypted at rest using robust encryption standards.
• Access Controls: Access to Personal Data is restricted to timur99 personnel and authorised service providers with a genuine operational need, on a strictly need-to-know basis.
• System Monitoring: The Platform's infrastructure is subject to continuous security monitoring to detect, respond to, and investigate suspicious activity or potential data security incidents.
• Regular Security Reviews: timur99 conducts periodic security assessments and reviews to ensure that data protection measures remain effective and current relative to the evolving threat landscape.

In the event of a personal data breach that poses a risk to the rights and freedoms of Data Subjects, timur99 will notify affected Members and, where required by applicable law, relevant supervisory authorities, within the timeframes prescribed by law.

timur99 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable core features such as session authentication, security enforcement, and load balancing. They cannot be disabled without disrupting Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings or display preferences, to provide a more personalised experience.
• Analytical Cookies: Used to collect aggregated, anonymised data on how visitors interact with the Platform, enabling timur99 to identify areas for improvement in performance and user experience.
• Security Cookies: Used to support fraud detection, anti-bot measures, and session integrity verification.

timur99 does not deploy third-party advertising cookies or share behavioural data with advertising networks for the purpose of serving targeted advertisements on external websites.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to access and use the Platform.

In the course of operating the Platform and delivering services to Malaysian Members, timur99 may transfer Personal Data to service providers or infrastructure partners located outside Malaysia. Such transfers may occur in connection with cloud hosting, game software provision, KYC services, or payment processing.

Where Personal Data is transferred internationally, timur99 ensures that appropriate safeguards are in place to protect the transferred data to a standard equivalent to that applicable within Malaysia, including through:

• Contractual clauses that impose data protection obligations on recipient organisations equivalent to those applicable to the Operator.
• Transfer to organisations in jurisdictions that provide an adequate level of data protection as recognised by applicable standards.
• Implementation of technical security measures appropriate to the sensitivity of the data transferred.

As a Data Subject, you are entitled to exercise the following rights in respect of your Personal Data held by timur99. Requests may be submitted to [email protected] and will be responded to within a reasonable timeframe in accordance with applicable law.

timur99 will respond to all verifiable data subject requests within 30 days of receipt. Where a request is complex or voluminous, we may extend this period by a further 30 days, with prior notice to the requestor.

The timur99 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process Personal Data from persons under the age of 21.

Where timur99 identifies or reasonably suspects that Personal Data has been submitted by an individual under the age of 21 — whether during registration, through KYC verification, or through any other mechanism — the Operator will:

• Immediately suspend or close the associated Account.
• Permanently delete the Personal Data collected from the underage individual.
• Reverse any financial transactions associated with the Account to the extent practicable.

If you believe that an underage person has registered an Account on the Platform, please notify us immediately at [email protected].

The Platform may contain references to or integrations with third-party services, including game software providers, payment processors, and support tools. This Privacy Policy applies exclusively to Personal Data processed by timur99 in its capacity as Data Controller.

Third-party service providers — including payment partners such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank — operate under their own privacy policies and data protection frameworks. timur99 encourages Members to review the privacy practices of any third-party service with which they interact independently of the Platform.

timur99 is not responsible for the privacy practices or data security measures of third-party providers, except where timur99 has entered into a data processing agreement that imposes obligations on the third party equivalent to those applicable to the Operator.

timur99 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, Platform operations, or data processing practices.

All amendments will take effect from the "Last Updated" date displayed at the top of this page. Where a revision materially affects your rights as a Data Subject or changes how your Personal Data is processed, timur99 will provide notice of the change via a prominent announcement on the Platform homepage and, where practicable, by email to your registered address.

Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not agree with any amended provisions, you should discontinue use of the Platform and may request Account closure in accordance with the Terms & Conditions.

For any queries, concerns, or requests relating to this Privacy Policy or the exercise of your data subject rights, please contact timur99 through the following channels:

• Email (plain text): [email protected] — for data access requests, erasure requests, consent withdrawal, or general privacy queries. Please include "Privacy Request" in your subject line and your registered Account username where applicable.
• Live Chat: Available on the Platform 24/7 in English, Bahasa Melayu, and Mandarin for general privacy enquiries.
• WhatsApp: Contact details available within the Platform's support section.

timur99's customer support team is available around the clock to assist Malaysian players with privacy-related matters, including requests relating to data held about players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions of Malaysia.

All formal data subject requests will be acknowledged within 24 hours and substantively responded to within 30 days of receipt, in accordance with applicable data protection law.