This document explains how Highland 99 collects, uses, stores, and protects your personal data. Your privacy is our priority — not merely a legal obligation.
Six core principles governing how Highland 99 handles players' personal data.
Highland 99 only collects personal data that is strictly necessary for the stated purposes — account registration, transaction processing, customer support, and legal compliance. No excessive data collection takes place.
All data transmitted between your device and Highland 99's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's online banking systems. Your data cannot be intercepted by third parties.
Your personal data is never sold, rented, or shared with advertisers or third-party marketing companies. Your information is only shared in situations explicitly defined in this policy.
Highland 99 operates fully in compliance with Malaysia's Personal Data Protection Act 2010. Data processing is carried out with your consent, for legitimate purposes, and with adequate safeguards in place.
You have the right to access the personal data held by Highland 99, request corrections to inaccurate data, and in certain circumstances, request the deletion of your data.
You may opt out of receiving any marketing communications from Highland 99 at any time via your account panel or by contacting our support team.
Important Note: This Privacy Policy describes Highland 99's privacy practices with respect to personal data we collect from players on our platform. By registering for or using Highland 99's services, you agree to the terms of this Privacy Policy. Please read it carefully — it is written in plain language, not confusing legal jargon.
Highland 99 is a digital entertainment platform operating at highland99.click. We understand that players' trust in us depends not only on the quality of our games and the speed of our payouts, but also on how we handle the personal information you entrust to us.
This Privacy Policy is written to give you a clear and honest picture of what data we collect, why we need it, what we do with it, and who may have access to it. We also explain your rights under Malaysia's Personal Data Protection Act 2010 (PDPA) and how to exercise them.
Highland 99 is the data controller for personal information collected through our platform. This means we are responsible for ensuring your data is processed lawfully, fairly, and transparently in accordance with the PDPA 2010. If you have any questions about how we handle your data, you can reach us at any time by email at support@highland99.click.
Scope of This Policy: This Privacy Policy applies to all data collected through highland99.click, our email communications, our customer support system, and all other digital services operated by Highland 99. It does not apply to third-party websites or services that may be linked from our platform.
Highland 99 collects various types of personal data depending on how you interact with our platform. Below is a detailed breakdown of the data that may be collected:
| Data Category | Type of Information | Requirements |
|---|---|---|
| Identification Data | Full name, MyKad number, date of birth, gender | Mandatory (KYC) |
| Contact Data | Malaysian phone number, email address, residential address | Mandatory |
| Financial Data | Deposit and withdrawal records, payment methods used (Touch 'n Go, DuitNow, GrabPay, FPX, etc.), transaction history | Mandatory |
| Gaming Data | Game history, betting records, account balance, wins and losses, favourite games | Mandatory |
| Technical Data | IP address, browser type, operating system, device information, login records and activity logs | Automatic |
| Usage Data | Pages visited, time spent, features used, and navigation patterns within the platform | Automatic |
| Support Data | Live chat transcripts, support emails, complaints, and resolutions | Where applicable |
| Responsible Gambling Data | Self-imposed limits, account cooling-off periods, deposit and loss limit history | When activated |
Highland 99 does not collect sensitive data such as health information, political views, religious beliefs, or biometric data unless it is a specific requirement for a particular identity verification process, and only with your explicit consent.
Your personal data is collected by Highland 99 through the following methods:
Highland 99 does not purchase data lists from third-party data brokers and does not collect your personal data from social media without your explicit consent. All data collection is based on legitimate business needs and consent provided by you.
Highland 99 uses your personal data solely for the following purposes. Any use beyond this scope requires your additional consent:
Under Malaysia's PDPA 2010, all processing of personal data must have a valid legal basis. Highland 99 processes your data on the following grounds, depending on the type of processing involved:
Your Rights Regarding Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal. Please note that withdrawing consent may affect our ability to provide certain services to you.
Highland 99 does not sell your personal data. However, to deliver complete services and meet legal obligations, we may share your data with the following categories of third parties in limited and controlled circumstances:
In all of the above situations, Highland 99 shares only the minimum data necessary for the stated purpose. We ensure that all data recipients have adequate data protection measures in place and agree to use the data solely for the permitted purpose.
Highland 99 does not share player data with advertising companies, data aggregators, social media platforms, or any third party whose purpose is unrelated to the delivery of Highland 99 services to you.
Highland 99 invests seriously in security infrastructure to protect our players' personal data. This is not a marketing phrase — we operate a multi-layered security system running 24 hours a day to keep your data safe.
All communications between your device and Highland 99's servers are encrypted using TLS 1.3 with 256-bit SSL certificates. This ensures your data cannot be intercepted in transit.
Sensitive data stored in our databases — including identification details and financial information — is encrypted using AES-256 standards. Even in the event of unauthorised database access, the data cannot be read without the encryption key.
Our automated monitoring system continuously tracks activity across the platform to detect unauthorised access attempts, suspicious activity patterns, and other cybersecurity threats.
Highland 99 staff are only granted access to the data necessary to perform their role — a strict least-privilege principle. All access to player data is logged and audited on a regular basis.
2FA is available for all Highland 99 player accounts. We also use 2FA internally for all staff access to systems containing player data.
Critical data is automatically backed up on a strict schedule to secure, separate locations. Data recovery procedures are tested regularly to ensure they work when needed.
While Highland 99 takes all reasonable steps to protect your data, no security system is entirely foolproof. In the event of a data breach that may affect your rights, Highland 99 is committed to notifying you and the relevant authorities within the timeframe required by the PDPA 2010.
Highland 99 does not retain your personal data longer than necessary for the stated purposes, or longer than required under Malaysian law. The following are our data retention guidelines:
| Data Type | Retention Period | Reason |
|---|---|---|
| Financial transaction records | Minimum 7 years | Malaysian legal requirements (Income Tax Act, AML) |
| Identification data (KYC) | 5 years after account closure | Anti-money laundering compliance requirements |
| Game history | 2 years | Dispute resolution, game fairness audits |
| Live casino records | 30 days video; 1 year data logs | Audit and dispute resolution |
| Customer support records | 3 years | Historical reference and recurring issue resolution |
| Technical data & system logs | 90 days | Fraud detection and security analysis |
| Marketing data | Until consent is withdrawn | Consent-based communications |
| Responsible gaming data | 5 years | Protecting vulnerable players from re-registering |
Once the retention period expires, data is securely disposed of in accordance with industry-standard procedures that ensure it cannot be recovered. Fully anonymised data — where no individual can be identified — may be retained for longer periods for statistical analysis purposes.
Malaysia's Personal Data Protection Act 2010 grants you several important rights regarding your personal data held by Highland 99. Below is an explanation of those rights and how to exercise them:
You have the right to obtain a copy of the personal data we hold about you. Requests will be processed within 14 business days. The first request is free of charge; subsequent requests may be subject to a small fee.
If the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Corrections are typically processed within 7 business days.
Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time via your account panel or by contacting us.
You have the right to object to the processing of your data for direct marketing purposes at any time. Your objection will be acted on immediately and you will no longer receive any marketing communications.
In certain circumstances, you may request the deletion of your personal data. This right is not absolute — deletion may not be possible if the data is required for legal compliance or contract management.
You may request that we restrict the processing of your data in certain circumstances — for example, while you dispute the accuracy of your data or while we review your objection.
You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform, for processing based on consent or contract.
Send an email to support@highland99.click with the subject line "PDPA Rights Request", along with your account number and a copy of your MyKad. We will respond within 14 business days.
Highland 99 uses cookies and similar tracking technologies to improve your experience on our platform, maintain session security, and analyse how the platform is used. The following are the types of cookies we use:
You can manage your cookie settings through your browser settings. Disabling certain cookies may affect the functionality of the Highland 99 platform. A cookie notice will be displayed when you first visit our platform to obtain your consent.
Third-Party Cookies: Third-party game providers operating within the Highland 99 platform may set their own cookies. The use of such cookies is subject to each provider's own privacy policy. Highland 99 does not have direct control over these third-party cookies.
Highland 99 services are strictly for individuals aged 21 and above. Our platform is not designed for children or minors, and we do not knowingly collect personal data from individuals under the age of 21.
During registration, all players are required to confirm that they are at least 21 years of age. The KYC (Know Your Customer) process conducted prior to certain withdrawal amounts also requires age verification through an official identification document.
If Highland 99 discovers that personal data belonging to an individual under the age of 21 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Any funds held in that account will be handled in accordance with established procedures depending on the circumstances.
If you believe your child under the age of 21 may have an account with Highland 99, please contact us immediately at support@highland99.click with the relevant supporting documents.
In the operation of the Highland 99 platform, some of the third-party service providers we work with — including game providers such as Evolution Gaming and Pragmatic Play, as well as cloud infrastructure providers — may operate outside Malaysia. This means your data may be transferred to and stored on servers located outside Malaysia.
Before any cross-border data transfer takes place, Highland 99 ensures that adequate safeguards are in place, including:
In all cases, only the minimum data necessary for the provision of the relevant service is transferred, and all data recipients agree to use it solely for the permitted purpose and to protect it with an adequate level of security.
Highland 99 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. When material changes are made, we will notify you through one or more of the following methods:
The "Updated" date at the top of this page indicates when this Privacy Policy was last reviewed. We recommend checking this page periodically to stay informed of Highland 99's latest privacy practices.
Continued use of the Highland 99 platform after any amendments take effect will be considered acceptance of the updated privacy terms. If you do not agree with the changes, please stop using the platform and contact us to request account closure.
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by Highland 99, please contact us through the following channels:
If you are not satisfied with how Highland 99 has handled your privacy complaint, you have the right to lodge a complaint with Malaysia's Personal Data Protection Commissioner under the PDPA 2010.
Answers to the questions players ask most often about their privacy and data protection.
Read the other policy documents that complement this Privacy Policy for a more complete understanding.
Terms of use for the Highland 99 platform, covering account rules, deposits, withdrawals, and bonuses for players in Malaysia.
Read NowSelf-exclusion features, responsible gambling support resources, and Highland 99's commitment to player wellbeing.
Read NowGet to know Highland 99 — our history, mission, core values, and commitment to Malaysian players since 2018.
Read NowAnswers to the most frequently asked questions about accounts, deposits, withdrawals, bonuses, and games at Highland 99.
View FAQ256-bit SSL, PDPA 2010 compliance, no data sales. Join over one million Malaysian players who trust Highland 99.
All your personal information and transaction data at Highland 99 is fully protected under Malaysia's Personal Data Protection Act 2010 (PDPA). Your data is not sold, not shared with any third party for commercial purposes, and not used for any purpose other than those stated in this Privacy Policy. For more information or to exercise your PDPA rights, please email us at support@highland99.click or refer to Terms & Conditions us.
Highland 99's Malay-speaking customer support team is available 24 hours a day. Reach us via live chat or email for any questions regarding this Privacy Policy or your PDPA rights.