Your privacy is our priority. Find out exactly how kopitiam99 collects, uses, and protects your personal data — with full transparency and no confusing language.
Six core principles that guide how we manage the privacy and personal data of every member
Kopitiam99 ("Platform", "We", "kopitiam99") takes seriously our responsibility to protect the privacy and personal data of every member who uses our services. This Privacy Policy is formulated in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and global best practices in data protection.
This Policy applies to all information collected through the kopitiam99 website, betting platform, mobile application, and any other means of communication between you and kopitiam99, including email and live chat.
By registering a kopitiam99 account, accessing the platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and agree to the handling of your personal data as described herein.
When you register a kopitiam99 account, we collect the following information:
As part of the identity verification process that may be required before withdrawals exceed a certain amount, kopitiam99 may request:
Kopitiam99 records all financial transactions carried out on the platform, including deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u, and CIMB Clicks, withdrawal of winnings, bonuses received, as well as Sports Betting and casino game records. This data is required for account settlement, financial compliance, and the resolution of any disputes.
The kopitiam99 platform automatically collects technical data including:
Kopitiam99 collects data directly when you complete the registration form, submit KYC documents, contact our support team via live chat or email, fill in a feedback form, or update your account profile. All such direct data collection takes place with your full knowledge and consent.
The kopitiam99 platform automatically collects data through cookies, pixel tags, and session tracking technologies as you browse and use the platform. This data helps us understand how the platform is used and allows us to continually improve the user experience.
When you carry out a financial transaction on kopitiam99, the licensed third-party payment provider (such as the DuitNow or Touch 'n Go gateway) shares the necessary transaction information with us for account settlement purposes. Sensitive card or bank account details never pass directly through kopitiam99's servers.
Kopitiam99 uses members' personal data solely for the following purposes:
| Purpose of Use | Data Used | Legal Basis |
|---|---|---|
| Account management and verification | Name, phone number, email, date of birth | Performance of contract |
| Processing of deposits and withdrawals | Transaction data, payment information | Performance of contract |
| Identity verification (KYC) | Identity documents, proof of address | Legal obligation |
| Fraud prevention and security | IP address, log data, transaction patterns | Kopitiam99's legitimate interests |
| Customer Support | All data relevant to the complaint | Performance of contract |
| Promotional communications (with consent) | Name, email, phone number | Member consent |
| Platform improvement and analytics | Technical data and usage patterns | Kopitiam99's legitimate interests |
| Legal compliance | Data required by authorities | Legal obligation |
Kopitiam99 has never sold, and will never sell, rent, or commercialise members' personal data to any third party for marketing or any other purpose. This is our core commitment to member privacy, and it will not change.
Kopitiam99 may share limited data with third-party service providers involved in the operation of our platform, including:
All of these service providers are bound by strict data protection agreements and are only permitted to use your data for the purposes specified in those agreements.
Kopitiam99 will disclose member personal data to the relevant Malaysian authorities when required by law, court order, or in the context of a legitimate criminal investigation. We will notify affected members of any such disclosure unless prohibited by applicable law.
Kopitiam99 applies a range of technical measures to protect members' personal data against unauthorised access, alteration, disclosure, or destruction:
In addition to technical measures, kopitiam99 also enforces strict organisational controls:
In the event of a data breach affecting kopitiam99 members' personal data, we are committed to notifying affected members within 72 hours upon detection of the breach, in line with global data protection best practices. The notification will include details on the nature of the breach, the data potentially affected, and the steps kopitiam99 has taken to address it.
Kopitiam99 retains member personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy or as required by Malaysian law.
| Data Type | Retention Period |
|---|---|
| Active account information | For as long as the account is active |
| Financial transaction records | 7 years from the date of transaction (legal requirement) |
| KYC Documents | 5 years after account closure |
| Access and security logs | 2 years from the log date |
| Support communication records | 3 years after the case is resolved |
| Closed account data | 5 years after account closure |
Once the retention period has elapsed, personal data will be permanently deleted or anonymised so that it can no longer be linked to any specific individual.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the data protection principles we uphold, you have the following rights regarding your personal data at kopitiam99:
Cookies are small text files stored on your device when you visit the kopitiam99 platform. They help the platform remember your preferences, maintain your login session, and enable certain features to function properly.
You can manage and delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the kopitiam99 platform. For the best experience, we recommend keeping essential and functional cookies enabled.
Kopitiam99 is a platform designed exclusively for adults aged 18 years and above. We do not knowingly collect any personal data from individuals under the age of 18.
Should kopitiam99 discover that a child's personal data has been collected without the knowledge or consent of a parent or legal guardian, we will immediately delete that data and close the associated account. Parents or guardians who suspect their child has registered an account with kopitiam99 are advised to contact us promptly at support@kopitiam99.net.
Kopitiam99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to our services. Members will be notified of any material changes through:
We will provide at least 14 calendar days before any material changes take effect, giving you sufficient time to review and consider those changes. Your continued use of the kopitiam99 platform after the effective date of the changes will be deemed acceptance of the updated policy.
The effective date of the current version of this Privacy Policy is 1 January 2026. Previous versions are available upon request.
For any questions, concerns, or requests relating to this Privacy Policy or the management of your personal data at kopitiam99, please contact us through the following channels:
Our data privacy team will respond to your enquiry within 48 business hours. For requests relating to data access or deletion rights, please clearly state the type of request and provide the necessary identity verification information to help expedite the process.
In today's digital world, our personal information travels faster and further than we realise. Every time we sign up for a new platform, make an online transaction, or simply browse a website, we leave a digital footprint that needs to be managed responsibly. At kopitiam99, we are fully aware of the trust you place in us when you share your personal information — and we take that responsibility seriously.
For many Malaysian users, concerns about data privacy can be a barrier to trying a new online betting platform. Questions like "Is my information safe?", "Who can see my transaction records?", and "Will my phone number be sold to marketing companies?" are entirely valid. kopitiam99 is here to answer these questions clearly and directly — not to deflect or give vague responses.
Kopitiam99 does not view members' personal data as a business asset to be monetised. We view it as a trust — you entrust us with your personal information so we can provide you with better service, not so we can use it for other purposes. This is not mere rhetoric; it is how we actually operate. We do not sell member data to data brokers, share email lists with third-party advertisers, or use your information to build marketing profiles for sale.
The data we collect — your name, phone number, email, and transaction records — is used exclusively for purposes directly related to delivering kopitiam99 services to you. Transaction records allow us to resolve any disputes quickly and fairly. Identity verification information protects you from identity fraud. Technical data helps us detect and stop fraudulent activity before it affects your account. Every type of data we collect has a clear purpose, and you have the right to know what that purpose is.
One of users' biggest privacy concerns is the security of financial information during deposits and withdrawals. At kopitiam99, we integrate all major Malaysian local payment gateways — Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u, and CIMB Clicks — through fully encrypted connections. More importantly, sensitive details such as bank account information or card numbers never pass directly through kopitiam99's servers. Instead, they are handled directly between you and the licensed payment provider — adding a highly significant extra layer of protection.
This means that when you deposit RM100 using Touch 'n Go or make a withdrawal via DuitNow, kopitiam99 never sees your e-wallet PIN or password. We only receive a successful transaction confirmation from the payment provider, with no sensitive information included. This approach reflects industry best practice, and it is one we have been proud to follow since kopitiam99 first launched.
Many platforms state user rights in their privacy policies but make the process of exercising those rights so difficult and convoluted that most people give up before succeeding. kopitiam99 takes a different approach. If you want to know what data we hold about you, contact us and we will provide it within 14 working days. If you need to correct inaccurate information, we will do so promptly. If you wish to delete your account and data once there are no outstanding financial or legal obligations, we will honour that request.
These rights are enshrined in the Personal Data Protection Act 2010 (PDPA) of Malaysia, and kopitiam99 takes its responsibility to uphold them seriously — not because we are required to, but because we believe it is the right way to manage our relationship with our members. A platform that respects its users' privacy is one that deserves long-term trust — and that trust is what has built the kopitiam99 community, which now has over 850,000 active members across Malaysia.
The context of Sports Betting is unique from a privacy perspective because it involves highly personal information — your betting patterns, your favourite sports, and your win and loss records. kopitiam99 understands that this information is deeply personal, and we handle it with a commensurate level of protection. Your betting records — whether you wager on the Malaysia Super League, BWF badminton, MPL esports, or live roulette — are never shared with any external party except where required by law.
We believe that by managing privacy responsibly, kopitiam99 can continue to be Malaysia's most trusted online betting platform for the long term. Trust is built slowly through consistent action — it cannot be bought or advertised. Every decision we make regarding data management is guided by the same question: "Is this the right way to handle the information our members have entrusted to us?" When the answer is yes, we proceed. When it is not, we find a better way.
The technologies and standards we use to protect your data
Answers to the most frequently asked questions about member data protection and privacy
All your personal information and activity on kopitiam99 is fully protected with 256-bit SSL encryption. We do not share your data with any third party without your consent. Your use of this platform is governed by this Privacy Policy and Terms & Conditions us. For information on responsible gambling, please visit our Responsible Gambling us.