CEO99 is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you hold as a registered user of our platform. We process your data transparently and in accordance with applicable data protection principles.
📑 Contents
Last updated: 1 January 2026
CEO99 ("we", "us", "our", or "the Platform") operates the online gaming platform accessible at ceo99.cam. In the course of providing our services — including live casino games, sports betting, slots, account management, and related entertainment products — CEO99 collects and processes personal data relating to our registered users ("you", "your", or "the User").
This Privacy Policy ("Policy") sets out in clear and accessible terms: the categories of personal data we collect; the purposes and legal bases on which we process that data; the parties with whom we may share your data; your rights in relation to your personal data; and how you may exercise those rights.
CEO99 is committed to handling your personal data with integrity, discretion, and in full accordance with applicable data protection principles. We do not sell your personal data to third parties for marketing purposes, and we take robust technical and organisational measures to keep your information secure.
For the purposes of this Privacy Policy, the following definitions apply:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, email address, identification number, device identifiers, and financial data. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, and deletion. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. For the CEO99 platform, this is the operator of ceo99.cam. |
| "Data Processor" | A third party that processes personal data on behalf of the Data Controller under a contractual arrangement. |
| "KYC Data" | Identity and address verification documents collected during the Know Your Customer process, including government-issued ID, proof of address, and selfie photographs. |
| "Cookies" | Small text files placed on your device by the Platform to recognise returning users, maintain session state, and collect analytical data. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose. |
The Data Controller for all personal data collected and processed in connection with the CEO99 platform is the operator of ceo99.cam. The Platform is an English-language online entertainment service targeted at users in the Malaysian market, providing live casino games, sports betting, and associated gaming products.
For all data protection enquiries, subject access requests, or requests to exercise any of your rights set out in Section 11 of this Policy, please contact our dedicated data protection contact via the details provided in Section 15.
CEO99 collects personal data through multiple channels during your use of the Platform. The categories of data we collect are as follows:
Identity Information
Full name, date of birth, gender, and nationality provided during account registration.
Contact Details
Email address, phone number, and residential address (including city references such as Kuala Lumpur, Penang, or Johor Bahru).
Login Credentials
Username and encrypted password. CEO99 stores passwords in hashed form only — plain-text passwords are never retained.
KYC Documents
Government-issued photo ID (MyKad, driver's licence, or passport), proof of address, and selfie photographs submitted for identity verification.
Payment Information
Payment method details (bank account identifiers, e-wallet references for Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, DuitNow, FPX). Full card or account numbers are not retained by CEO99 — these are processed by our payment partners.
Transaction History
Records of all deposits, withdrawals, bonus claims, and gaming transactions, including amounts in MYR and timestamps.
Cryptocurrency Data
Wallet addresses used for BTC, ETH, USDT, or LTC deposits and withdrawals, and corresponding MYR-equivalent transaction values.
When you access and use the CEO99 platform, we automatically collect certain technical and behavioural data, including:
Records of communications between you and CEO99's support team, including live chat transcripts, email correspondence, and WhatsApp messages sent through our support channels, are retained for quality assurance, dispute resolution, and training purposes.
Where you utilise responsible gambling tools — including deposit limits, cooling-off requests, or self-exclusion orders — we retain records of these elections. This data is used to enforce your stated preferences, prevent re-registration during self-exclusion periods, and comply with our duty of care obligations.
CEO99 processes your personal data on one or more of the following legal bases:
CEO99 uses the personal data we collect for the following purposes:
CEO99 engages carefully selected third-party service providers who process personal data on our behalf in their capacity as Data Processors. These include payment processing partners (including FPX, DuitNow, and e-wallet providers), identity verification services, cloud infrastructure providers, game software providers, and fraud detection services. All Data Processors are contractually bound to process personal data only for specified purposes and to maintain appropriate security standards.
CEO99 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where we reasonably believe disclosure is necessary to: prevent or detect crime; comply with a legal obligation; protect the rights, property, or safety of CEO99, our users, or third parties.
CEO99 does not sell, rent, or trade your personal data to any third party for marketing, advertising, or commercial purposes. Your data is used exclusively for the purposes described in this Policy.
In the event of a merger, acquisition, restructuring, or sale of assets involving CEO99, personal data held by CEO99 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via a prominent notice on the Platform or by email prior to any change in the applicable privacy terms.
CEO99 retains personal data for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by applicable law. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.
Cookies are small text files placed on your device when you access the CEO99 platform. They allow the Platform to recognise your device across sessions, maintain login state, and collect data about how you interact with the Platform. CEO99 also uses similar tracking technologies including local storage and session storage.
You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the CEO99 platform, including the ability to log in and maintain an active session. Disabling analytical or functional cookies does not affect core Platform access.
CEO99 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. These measures include:
While CEO99 takes reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying CEO99 promptly if you suspect any unauthorised access to your account.
As a user whose personal data is processed by CEO99, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details set out in Section 15.
Right of Access
Request a copy of the personal data CEO99 holds about you, including the categories of data, the purposes for which it is processed, and the recipients with whom it has been shared.
Right to Rectification
Request correction of inaccurate or incomplete personal data. You may also update certain account details directly through your CEO99 account profile.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to CEO99's legal retention obligations (see Section 8).
Right to Restriction
Request that CEO99 restricts the processing of your personal data in specified circumstances — for example, while the accuracy of data is being contested.
Right to Portability
Request that personal data you have provided to CEO99 be made available to you in a structured, commonly used, machine-readable format.
Right to Object
Object to processing carried out on the basis of legitimate interests. CEO99 will cease such processing unless compelling legitimate grounds override your interests, or the processing is necessary for legal claims.
CEO99 will respond to all valid data rights requests within a reasonable timeframe. Please note that certain rights are subject to limitations where data must be retained for legal compliance purposes — for example, KYC records and financial transaction history required under AML obligations cannot be deleted upon request during the applicable retention period.
The CEO99 platform is strictly restricted to individuals aged 21 years and above. CEO99 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process prior to the approval of any withdrawal.
If CEO99 becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, the data will be reviewed and deleted where legally permissible, and any funds associated with the account will be handled in accordance with our Terms & Conditions and applicable regulatory requirements.
If you are aware of an individual under the age of 21 who has registered with CEO99, please contact our support team immediately.
The CEO99 platform may reference or display content from third-party payment providers (such as Maybank2u, Touch 'n Go eWallet, or DuitNow) or game software suppliers. Where you interact with third-party services, your personal data may be processed by those third parties under their own privacy policies, which are independent of this Policy.
CEO99 is not responsible for the privacy practices of any third-party service, and we encourage you to review the privacy policies of any external services you use in connection with your CEO99 account. Our Data Processor agreements require that all third-party processors maintain appropriate data security standards and process personal data only for the purposes for which it was shared.
CEO99 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made — for example, changes to the categories of data collected, the purposes of processing, or the parties with whom data is shared — CEO99 will notify registered users via email or a prominent notice on the Platform prior to the changes taking effect.
The date of the most recent revision is shown at the top of this Policy. Your continued use of the CEO99 platform following publication of a revised Policy constitutes acceptance of the updated terms. If you do not agree to the amended Policy, you should cease using the Platform and request account closure.
For all data protection enquiries, requests to exercise your rights (as set out in Section 11), questions about this Privacy Policy, or concerns about how your personal data is being handled, please contact CEO99 through the following channels:
Data Protection Contact
Email: [email protected]
Subject Line: Please mark data-related enquiries with "Privacy / Data Request" for priority routing.
Live Chat: Available 24/7 via the Platform in English, Bahasa Melayu, and 中文
Response Time: CEO99 will acknowledge data rights requests within 5 business days and provide a substantive response within 30 calendar days.
Verification: To protect your personal data, CEO99 will verify your identity before fulfilling any data rights request. You may be asked to provide your registered email address and account details as part of this process.
Our Privacy Commitments
A summary of the six core principles guiding how CEO99 handles your personal information.
256-Bit SSL Encryption
All data transmitted between your device and CEO99 is protected by industry-standard 256-bit SSL/TLS encryption. The padlock in your browser confirms your connection is secure at all times.
No Data Selling
CEO99 does not sell, rent, or share your personal data with third parties for commercial or marketing purposes. Your information is used solely to deliver and improve our services to you.
Full Transparency
This Policy is written in clear, accessible English so you understand exactly what data we collect and why. No hidden processing, no undisclosed uses — what you read here is what we do.
Data Rights Respected
You have the right to access, correct, delete, restrict, or port your personal data. CEO99 responds to all valid data rights requests within 30 days via our dedicated support channels.
Defined Retention Periods
We keep your data only as long as necessary — account records for 5 years post-closure, support logs for 2 years, and usage data for 12 months. After that, data is securely deleted or anonymised.
Strict 21+ Enforcement
CEO99 does not knowingly collect data from individuals under 21. Under-age accounts are closed immediately upon detection and associated data is deleted where legally permissible.
Questions About Your Privacy?
If you have any questions about how CEO99 handles your personal data, our multilingual support team is available 24/7. You can also explore our full Terms & Conditions for a complete picture of your rights on the Platform.
21+ only. Play responsibly. Privacy Policy last updated 1 January 2026.