This Privacy Policy explains how flay99 collects, uses, stores, shares, and protects the personal data of Players and visitors to the flay99 platform. By registering an account or using any flay99 service, you acknowledge and consent to the data practices described in this Policy.
Last Updated: 1 June 2026flay99 ("we," "us," "our") is the data controller responsible for the personal data collected through the flay99 platform at flay99.com. flay99 operates under international gaming authority licensing requirements and is committed to maintaining the privacy and security of all personal data entrusted to it by Players and visitors. References to "Player," "you," or "your" in this Policy refer to any registered account holder or visitor to the flay99 platform.
This Policy applies to personal data collected via the flay99 website, mobile web interface, customer support interactions, and any other channel through which flay99 receives personal data from individuals.
When you register a flay99 account, we collect your full legal name, date of birth, residential address, email address, phone number, and username. This information is required to create and manage your account and to fulfil our regulatory obligations, including age verification and Know Your Customer (KYC) requirements.
To process withdrawals and comply with anti-money laundering (AML) requirements, flay99 collects copies of government-issued identification documents (Malaysian MyKad, passport, or equivalent) and proof of address (utility bills, bank statements dated within 3 months, or equivalent). This data is processed solely for KYC compliance purposes.
flay99 records transaction data including deposit amounts, withdrawal amounts, payment method identifiers (e.g., partial e-wallet account numbers), transaction timestamps, and transaction reference numbers. flay99 does not store full payment card numbers or complete bank account details on its own servers — payment processing is handled by PCI-DSS compliant third-party payment processors.
flay99 logs all wagering activity associated with your account, including game type, wager amounts, outcomes, session durations, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.
When you access the flay99 platform, we automatically collect technical data including IP address, device type and operating system, browser type and version, referring URL, pages visited, session timestamps, and geolocation data derived from IP address. This data is used for security monitoring, fraud prevention, and platform performance optimisation.
If you contact flay99 via live chat, email, or any other support channel, we retain records of those communications including the content of messages, timestamps, and any personal data you provide in the course of the communication.
flay99 collects personal data through the following means:
flay99 processes personal data for the following purposes and on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (Terms & Conditions) |
| Identity verification (KYC) and AML compliance | Legal obligation under gaming authority requirements |
| Processing deposits and withdrawals | Performance of contract |
| Fraud detection and security monitoring | Legitimate interest in protecting platform integrity |
| Responsible gaming monitoring and intervention | Legal obligation and legitimate interest |
| Customer support and dispute resolution | Performance of contract and legitimate interest |
| Promotional communications (where opted in) | Consent |
| Platform analytics and performance improvement | Legitimate interest |
| Regulatory reporting | Legal obligation |
flay99 shares personal data with carefully selected third-party service providers who process data on our behalf, including: identity verification providers, payment processing companies (including Touch n Go eWallet, Boost, and FPX bank partners), fraud detection and cybersecurity vendors, gaming software providers, customer support platform operators, and cloud infrastructure providers. All such providers are bound by data processing agreements requiring them to handle personal data in accordance with flay99's standards and applicable law.
flay99 may disclose personal data to gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory obligation. Such disclosures are made only to the extent required and without prior notification to the data subject where disclosure would compromise an investigation.
flay99 does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes. Personal data shared with third parties is limited to what is necessary to deliver the service or fulfil the legal obligation in question.
In the event of a merger, acquisition, restructuring, or sale of all or part of flay99's business, personal data held by flay99 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer via the registered email address.
flay99 uses cookies and similar tracking technologies on the flay99 platform. Cookies used by flay99 fall into the following categories:
You may manage cookie preferences via your browser settings. Disabling non-essential cookies may affect certain platform features but will not prevent you from accessing core flay99 services.
flay99 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by our regulatory obligations:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with flay99's data destruction procedures.
flay99 implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, role-based access controls limiting staff access to personal data on a need-to-know basis, multi-factor authentication requirements for platform administrative access, regular third-party penetration testing and vulnerability assessments, and documented incident response procedures.
Notwithstanding the above, no data transmission over the internet or storage system can be guaranteed to be 100% secure. Players are responsible for maintaining the confidentiality of their own account credentials and for promptly notifying flay99 of any suspected unauthorised account access.
Subject to applicable law and flay99's regulatory obligations, Players have the following rights in relation to their personal data:
To exercise any of the above rights, contact flay99 via 24/7 live chat or at [email protected]. flay99 will respond to verified data rights requests within 30 days.
The flay99 platform is strictly for individuals aged 21 and above. flay99 does not knowingly collect personal data from individuals under the age of 21. If flay99 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all balances will be forfeited, and the personal data will be deleted in accordance with our data deletion procedures. Parents or guardians who believe a minor may have registered on flay99 should contact our support team immediately.
flay99 may transfer personal data to jurisdictions outside Malaysia in the course of delivering its services, including to cloud infrastructure providers and third-party service providers whose systems are located in other countries. Where personal data is transferred internationally, flay99 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent data transfer mechanisms — to maintain an equivalent level of data protection to that which applies within Malaysia and under flay99's licensing jurisdiction. Players whose data is transferred internationally retain the same data rights described in Section 9 of this Policy.
The flay99 platform may contain links to third-party websites or services. flay99 is not responsible for the privacy practices of third-party websites and this Privacy Policy does not apply to any website not operated by flay99. Players are encouraged to review the privacy policies of any third-party website they visit via a link from the flay99 platform.
flay99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform functionality. Material amendments will be communicated to Players via the registered email address and/or via a prominent notice on the flay99 platform at least 14 days prior to the amended Policy taking effect. Continued use of the flay99 platform following the effective date of an amended Policy constitutes acceptance of the revised terms.
For any questions, concerns, or requests relating to this Privacy Policy or flay99's data handling practices, please contact our data protection team via the 24/7 live chat support available on the flay99 platform, or by written correspondence to: [email protected] (plain text — not a clickable link).
If you are not satisfied with flay99's response to a data rights request or privacy concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
Privacy at a Glance
All personal and financial data transmitted between your device and flay99 servers is protected by 256-bit SSL encryption — the same standard used by Malaysian banks such as Maybank2u and CIMB Clicks for their internet banking platforms.
flay99 does not sell, rent, or trade your personal data to third parties for marketing purposes. Your data is shared only with service providers necessary to deliver the platform, and only under strict data processing agreements.
flay99 Players can access, correct, export, and request deletion of their personal data at any time. Data rights requests are processed within 30 days. Contact the flay99 support team via live chat to initiate a request.
flay99 operates under international gaming authority licensing requirements that mandate strict data protection standards. KYC and AML data handling procedures are audited as part of ongoing licensing compliance obligations.
flay99 publishes explicit data retention periods for every category of personal data it holds. When retention periods expire, data is securely deleted or anonymised — not kept indefinitely. We only hold what we need for as long as we need it.
Have a question about how your data is handled? flay99's support team is available around the clock via live chat. Data rights requests receive dedicated handling with a 30-day response commitment under this Privacy Policy.
Your Privacy Is Protected
Your personal and financial data is protected by enterprise-grade security and strict data handling standards. Live casino, sportsbook, and 500+ slots — all under one secure flay99 account. 21+ only.
Questions about your data? Reach our 24/7 support from the flay99 homepage.