OFFICIAL PRIVACY POLICY • PDPA 2010 • HIGHLAND 99

Highland 99 Privacy Policy – Our Commitment to Protecting Your Data

At Highland 99, your privacy is not merely a legal obligation — it is a responsibility we have taken seriously from day one. This document clearly explains how we collect, use, store and protect every piece of personal information you entrust to us.

Updated: January 2026 Malaysia PDPA 2010 256-bit SSL
256-bit
SSL Encryption
10
Policy Sections
0
Data Sales

Data Protection Commitment

Highland 99's Six Privacy Guarantees to You

This is the foundation of how Highland 99 handles your data — straightforward, transparent and trustworthy

Bank-Grade Encryption

Every bit of data travelling between your device and the Highland 99 is protected with 256-bit SSL encryption — the same security technology used by Maybank and CIMB. Whether you are depositing RM 20 via Touch 'n Go or checking your account balance, all information travels through fully secured channels.

Your Data Is Never Sold

Highland 99 has never and will never sell, rent, or trade your personal information to any third party for marketing or commercial purposes. The data you provide is used solely to process your account and transactions — not to be monetised by others.

Control Is in Your Hands

You have the right to access, correct, request a copy of, or request deletion of your personal data stored in the Highland 99 at any time. We make this process straightforward through your account settings or by contacting our support team directly.

Malaysia PDPA Compliance

This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means all our data collection and processing practices are lawful under Malaysian law and subject to oversight by the Personal Data Protection Commissioner of Malaysia.

Minimum Data Collection

We only collect information that is strictly necessary to operate our services — nothing more. Every type of data we collect has a clear and legitimate purpose. We do not collect data "just in case" or for purposes unrelated to the service Highland 99.

Immediate Notification in the Event of an Incident

In the event of any security incident involving your data, Highland 99 committed to notifying you within the timeframe required by Malaysian law. We have comprehensive incident response procedures in place to protect our members' interests under all circumstances.

Important Note: This Privacy Policy forms part of your agreement with Highland 99. By registering for or using our platform, you confirm that you have read and understood how we handle your personal data as described here. This Policy applies to all Malaysian players using the services of Highland 99.

1Introduction & Scope of This Privacy Policy

Highland 99 (operating under the domain highland99.onl) is the data controller for personal information collected through our platform. This Privacy Policy sets out in detail how we collect, store, use, disclose and protect your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and applicable international standards.

This Policy applies to all individuals who interact with the Highland 99 — including those browsing our website without registering, registered members, and anyone who contacts our customer support team. It covers all interaction channels, including the website, mobile application (where available), and email or chat communications.

We take your privacy seriously. As a platform that handles financial transactions and sensitive personal information, Highland 99 understands that your trust depends on how we handle that data. We are therefore committed to being fully transparent about our privacy practices and ensuring you always know what is happening with your information.

This Privacy Policy was last updated on January 2026. Any material changes to this policy will be communicated to members via email or in-platform notification.

2Types of Personal Data We Collect

Highland 99 collects various types of personal data depending on how you interact with our platform. The following are the categories of data we may collect:

Identity & Account Data

Full name MyKad number (national identity card) Date of birth Email address Phone number Residential address

Financial & Transaction Data

E-wallet information (Touch 'n Go, GrabPay, Boost, ShopeePay) Bank account details (for FPX/DuitNow) Deposit & withdrawal history Financial transaction records

Gaming Activity Data

Game & betting history Wins & losses records Session time & duration Frequently played games

Technical & Device Data

IP address Device type & operating system Web browser type Geographic location (state/district) Log & diagnostic data

We do not collect highly sensitive information such as your biometric data, medical records, or religious details. All data we collect is directly related to the provision of our services. Highland 99 to you.

3How We Use Your Personal Data

Highland 99 uses collected personal data solely for legitimate and transparent purposes. Below is a complete list of those purposes:

  • Identity Verification (KYC): Verifying your identity during registration and prior to withdrawal processing to ensure the security of your account
  • Transaction Processing: Processing your deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay or FPX, and withdrawals of winnings to your account
  • Account Management: Maintaining your account records, processing login requests, and recovering your account if needed
  • Customer Service: Answering enquiries, resolving issues and handling complaints submitted to our support team
  • Fraud Prevention: Detecting and investigating suspicious activity, fraud attempts, collusion, or money laundering
  • Legal Compliance: Meeting applicable Malaysian legal reporting and compliance obligations, including anti-money laundering (AML) requirements
  • Platform Enhancement: Analysing aggregated usage patterns (without identifying individuals) to improve user experience and platform performance
  • Service Communications: Sending important notifications relating to your account, transactions, promotions you are eligible for, or changes to our terms of service
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate assistance

Highland 99 does not use your data for any purpose unrelated to the services above. We do not sell your data to advertisers, data analysts or any commercial third parties.

4Legal Basis for Data Processing

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, Highland 99 processes your personal data on the following legal bases depending on the type of processing:

  • Performance of Contract: Data processing directly required to fulfil our service agreement with you — including deposit processing, withdrawals, and account management
  • Consent: For optional marketing communications and the use of data beyond what is required for the basic contractual relationship, we obtain your explicit consent.
  • Legitimate Interests: For fraud prevention, platform security, and service improvements necessary to operate our business responsibly
  • Legal Obligations: To meet reporting and compliance requirements mandated by applicable Malaysian law

You have the right to withdraw your consent at any time for processing that is based on consent. Withdrawal of consent does not affect the validity of processing that took place prior to the withdrawal. To withdraw consent, contact us through the channels stated in Section 10.

It is important to understand that certain data processing is necessary to provide the service Highland 99. If you object to the processing of data required for the performance of a contract, we may be unable to provide some or all of our services to you.

5Disclosure of Data to Third Parties

Highland 99 does not sell or trade your personal data. However, in the course of operating our business, your data may be shared with the following categories of third parties — but only to the extent necessary for the stated purposes:

  • Payment Service Providers: Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX providers receive the transaction information necessary to process your deposits and withdrawals. All these providers are subject to strict confidentiality agreements
  • Game Software Providers: Our gaming platform uses software from third-party providers who may receive limited technical data necessary to operate the games correctly
  • Technology Infrastructure Providers: Cloud computing and cybersecurity service providers that process data on our behalf under PDPA-compliant data processing agreements
  • Legal Authorities: Where required by court order, direction from a law enforcement authority, or applicable anti-money laundering (AML) compliance requirements in Malaysia
  • Auditors & Professional Advisors: External accountants, lawyers, and auditors who require limited access to data for audit, compliance, or legal advisory purposes

All third parties who receive your data from Highland 99 bound by strict confidentiality and data protection agreements. They are only permitted to use your data for agreed purposes and may not process it for their own benefit.

We do not transfer your personal data outside Malaysia except where the conditions for international transfers under the PDPA are met — that is, where the recipient country provides a level of data protection comparable to Malaysia's, or where you have given explicit consent.

6Our Data Security Measures

Protecting your personal data from unauthorised access, loss, alteration, or disclosure is an absolute priority. Highland 99. We implement multiple layers of technical and organisational security controls for this purpose:

  • 256-bit SSL Encryption: All communications between your browser and our servers are encrypted using TLS 1.3 with 256-bit encryption — the highest standard currently available
  • Encryption of Stored Data: Sensitive data such as financial information and identification details are encrypted in our database using robust encryption algorithms
  • Strict Access Controls: Only staff Highland 99 with a legitimate business need may access your data — on a least-privilege basis and subject to two-factor authentication
  • 24/7 Monitoring: Our systems are continuously monitored to detect any unauthorised access attempts, traffic anomalies, or suspicious activity
  • Regular Security Testing: Penetration testing and vulnerability assessments are conducted regularly by independent security experts
  • Data Backup: Your data is regularly backed up to a secure, separate location to ensure swift recovery in the event of any incident
  • Staff Training: All staff Highland 99 who handle personal data receive comprehensive and mandatory data protection training

While we take all reasonable steps to protect your data, no system can guarantee 100% absolute security. In the event of any security incident involving your data, we will notify you and the relevant authorities as required by law within the stipulated timeframe.

You also play an important role in protecting your account. Always use a strong and unique password, never share your login credentials, and contact us immediately if you suspect any suspicious activity on your account Highland 99 you.

7Data Retention Period

Highland 99 retains your personal data for as long as it is needed for the purpose it was collected, or as required by Malaysian law. General data retention periods are as follows:

  • Active Account Data: Retained for as long as your account is active and for 7 years after account closure, in line with Malaysia's legal record-keeping requirements
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with the Financial Services Act and Malaysian tax legislation
  • Identity Verification Records (KYC): Retained for a minimum of 5 years after the business relationship ends, in accordance with anti-money laundering requirements
  • Technical Log Data: Retained for 90 days for security and technical troubleshooting purposes, after which it is automatically deleted.
  • Support Communication History: Retained for 2 years for reference and dispute resolution purposes

Once the applicable retention period has elapsed, your data will be securely deleted or irreversibly anonymised from all our systems. Anonymisation means the data can no longer be linked back to you personally and may be used for general statistical analysis purposes.

8Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by Highland 99. We are committed to respecting and facilitating the exercise of all these rights:

Right of Access

You have the right to request a copy of all personal data we hold about you. We will provide this in a readable format within 21 days of your request.

Right to Rectification

If any of your data is inaccurate or incomplete, you have the right to request a correction. You can update most information directly in your account profile settings.

Right to Erasure

Under certain circumstances, you may request the deletion of your data. Such requests are subject to legal retention obligations that may prevent immediate deletion.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time. We will cease such processing immediately upon your request.

Right to Portability

You may request your data in a machine-readable format for transfer to another service provider, subject to technical availability.

Right to Withdraw Consent

For processing based on consent, you may withdraw your consent at any time without affecting the validity of any processing carried out prior to that withdrawal.

To exercise any of the above rights, contact our Data Protection Officer by email at support@highland99.onl with the subject line "Personal Data Rights Request". Please provide your account number and the details of your request. We will process your request within 21 working days from the date of receipt.

9Cookies, Tracking & Similar Technologies

Highland 99 uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Cookies are small text files stored in your web browser when you visit our website.

Types of cookies we use:

  • Strictly Necessary Cookies: These cookies are required for core platform functions such as login, session management, and security. Without them, our services cannot operate. These cookies cannot be disabled.
  • Performance Cookies: Collects information about how you use our website — pages visited, time spent, and any errors encountered. All data is aggregated and anonymised
  • Functional Cookies: Storing your preferences such as language, display settings, and saved login information for your convenience. These cookies enhance your personal experience
  • Analytics Cookies: Helps us understand aggregate usage patterns to improve the platform and overall user experience.

You can control and manage cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality and your experience on Highland 99. Please note that disabling necessary cookies will prevent you from logging into your account.

We do not use third-party cookies for targeted advertising or sell your behavioural data to advertising networks. Every cookie we use is directly in the interest of your experience and security on Highland 99.

10Contact Us for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how Highland 99 handles your personal data, we encourage you to reach out to us directly. We are committed to providing clear and helpful responses within a reasonable timeframe.

  • Data Protection Officer Email: support@highland99.onl (subject: "Privacy Inquiry")
  • Live Chat: Available 24 hours a day, 7 days a week within the Highland 99 platform
  • Response Time: General enquiries are responded to within 48 hours; formal data rights requests within 21 working days.

If you are unsatisfied with our response to your privacy complaint after going through our internal channels, you have the right to refer the complaint to Personal Data Protection Commissioner of Malaysia responsible for overseeing PDPA 2010 compliance in Malaysia.

Highland 99 values all privacy-related feedback. Your enquiries and complaints help us continually improve our data protection practices for the benefit of all members in Malaysia.

This Privacy Policy is a written commitment Highland 99 to every one of our members. We will continue to update it whenever there are changes to the law, our technology, or our practices — and we will always notify you of any significant changes.

Highland 99 Data Protection Guarantee

256-bit SSL
PDPA 2010
No Data Sales
Full Control
24/7 Support
Minimal Data

Privacy FAQs

Frequently Asked Questions About Highland 99's Privacy Policy

Absolutely not. Highland 99 has never sold, rented, or traded your personal data to advertisers, data brokers, or any commercial third party. Your data is shared only with service providers required to run our operations — such as payment providers for processing deposits via Touch 'n Go or DuitNow, and gaming software providers for technical functionality. All such third parties are bound by strict confidentiality agreements and are not permitted to use your data for their own purposes.

To request a copy of your personal data, email support@highland99.onl with the subject line "Personal Data Access Request". Please include your Highland 99 account number and the type of data you require. We will verify your identity before processing the request to ensure security. A copy of your data will be provided within 21 working days from the date your identity verification is completed. No fee is charged for your first request in each calendar year.

Yes, you have the right to request deletion of your data. However, please note that certain data cannot be deleted immediately due to legal obligations. Financial transaction records, for example, must be retained for a minimum of 7 years under Malaysian law. Identity verification (KYC) data must be kept for a minimum of 5 years after the business relationship ends, in accordance with anti-money laundering requirements. Data not subject to legal retention requirements will be securely deleted upon your request. Contact us at support@highland99.onl to initiate this process.

When you close your Highland 99 account, your active access will be terminated immediately. However, your data will be retained for the period required by law — typically 7 years for financial records and 5 years for KYC records. This data is needed for audit purposes, legal compliance and the resolution of any disputes that may arise after account closure. Once the relevant retention period has lapsed, all data will be securely deleted or fully anonymised across all our systems. You will receive an email confirmation once the account closure process is complete.

Related Policy Documents – Highland 99

Highland 99's Privacy Commitment to Malaysian Players

We understand that you are trusting us with highly personal information. Highland 99 takes this trust as a responsibility not to be taken lightly. This Privacy Policy is more than a compliance document — it is our commitment to every Malaysian member who uses our platform that your data is always in safe hands, used only for purposes you have agreed to, and protected with the best available technology.

Read Also: Full Terms & Conditions

Your Data Is Safe. Your Experience Is Guaranteed.

Register at Highland 99 with full confidence that your privacy and data security are our top priority. Over 500,000 Malaysian players have trusted us — and we will not let that trust down.

256-bit SSL PDPA 2010 Compliant No Data Sales Your Full Control
Bahasa Melayu