mco99 Privacy Policy

1. Who We Are

This Privacy Policy applies to mco99 ("mco99", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at mco99.lat. mco99 provides online gambling services including live dealer casino games, slot games, 4D lottery, sportsbook betting, and related promotional services to eligible players in Malaysia and other permitted jurisdictions.

For the purposes of this Policy, mco99 acts as the data controller in respect of personal data submitted through the registration process, account management, and all platform interactions. Any queries regarding your personal data should be directed to our support team at support@mco99.lat.

2. Data We Collect

mco99 collects personal data in several ways — directly from you when you register, through your use of the platform, and in some limited circumstances from third-party verification providers. The categories of data we process are:

3. How We Use Your Data

mco99 uses your personal data for the following purposes. We link each purpose to the legal basis under which we process it (see Section 4):

• To create and manage your mco99 player account, and verify your identity in line with applicable regulatory requirements including Know Your Customer (KYC) checks.
• To process deposits and withdrawals made via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, RHB Now and other accepted payment methods.
• To detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes in accordance with anti-money laundering (AML) obligations.
• To fulfil our responsible gaming duties, including monitoring for signs of problem gambling and enforcing player-set deposit limits, cooling-off periods, or self-exclusion requests.
• To provide customer support and respond to your enquiries via live chat or email.
• To send you transaction confirmations, security alerts, and important account notifications.
• To send you promotional offers, bonus notifications, and personalised game recommendations — only where you have given explicit consent to receive marketing communications.
• To comply with legal, regulatory, and licensing obligations applicable to online gambling operators.
• To improve the mco99 platform through analytics, A/B testing, and performance monitoring.

4. Legal Basis for Processing

mco99 processes your personal data on one or more of the following legal grounds, consistent with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international standards:

• Contractual necessity: Processing required to deliver the services you signed up for, including account management and payment processing.
• Legal obligation: Processing required to comply with AML regulations, KYC rules, licensing conditions, and court orders or regulatory directives.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, which you may withdraw at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

mco99 does not sell your personal data. We share your information only in the limited circumstances described below, and always subject to appropriate contractual safeguards:

• Payment processors: We share financial data with licensed payment service providers (such as banks, FPX, DuitNow, and e-wallet operators) strictly to process your transactions.
• Identity verification providers: We may use regulated third-party KYC and AML screening services to verify your identity and check against sanctions lists.
• Technology partners: Game studios, platform providers, and hosting partners who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by law, a court order, or a regulator with jurisdiction over mco99's operations.
• Responsible gaming organisations: In limited circumstances, where required to support a self-exclusion request or problem gambling intervention.

6. Cookies & Tracking Technologies

mco99 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and — with your consent — deliver relevant promotions. The types of cookies we use are:

• Strictly necessary cookies: Essential for the platform to function. These cannot be disabled, as they support login sessions, security tokens, and basic navigation.
• Functional cookies: Remember your language preference, display settings, and recently played games to give you a smoother experience across sessions.
• Analytics cookies: Help us understand how players navigate the platform so we can improve page layouts, loading times, and game lobbies. These are only set with your consent.
• Marketing cookies: Used to show you promotions relevant to your gaming interests. Only activated where you have given explicit consent via the cookie preference centre.

You can manage or withdraw cookie consent at any time through your browser settings or the cookie preference panel available on the mco99 platform. Withdrawing consent for non-essential cookies will not affect your ability to play or manage your account.

7. Data Retention

mco99 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are:

• Account and identity data: Retained for the duration of your account and for a minimum of 6 years after account closure, in line with AML and financial record-keeping obligations.
• Transaction records: Retained for 7 years from the date of each transaction, as required under applicable financial regulations.
• Support communications: Retained for 3 years from the date of your last interaction with our support team.
• Marketing data: Retained until you withdraw consent, after which it is deleted or anonymised within 30 days.
• Technical and usage logs: Retained for up to 12 months for security and fraud detection purposes, then purged or anonymised.

When retention periods expire, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked back to you.

8. Your Rights

As a data subject under the PDPA and applicable international data protection frameworks, you have the following rights in relation to your personal data held by mco99:

• Right of access: You may request a copy of the personal data we hold about you, along with information on how it is processed.
• Right to correction: You may request that we correct any inaccurate or incomplete personal data without undue delay.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restrict processing: You may request that we limit how we use your data in certain circumstances, such as while a correction request is being verified.
• Right to data portability: Where technically feasible, you may request your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent (e.g. marketing emails), you may withdraw that consent at any time.
• Right to object: You may object to processing based on legitimate interests, including direct marketing, at any time.

To exercise any of these rights, contact our Data Protection Officer at support@mco99.lat with the subject line "Data Rights Request". We will respond within 30 calendar days. We may need to verify your identity before processing your request.

9. Data Security

mco99 implements a layered security framework to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• TLS 1.2 / 1.3 encryption for all data transmitted between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including financial credentials and identity documents.
• Multi-factor authentication (MFA) available for all player accounts.
• Role-based access controls ensuring only authorised personnel can access personal data on a strict need-to-know basis.
• Regular internal security audits, vulnerability assessments, and penetration testing.
• 24/7 monitoring for anomalous activity, brute-force attempts, and suspicious login patterns.

10. Minors & Age Restriction

mco99 is strictly an adults-only platform. You must be 21 years of age or older to register for an account and participate in any real-money gambling activity on mco99.lat. This age restriction applies to all players in Malaysia and all other jurisdictions where mco99 operates.

We do not knowingly collect personal data from individuals under the age of 21. As part of our KYC process, we verify the age of all registering players using identity documentation. If we discover that a player under the minimum age has registered, we will immediately suspend the account, return any deposited funds in accordance with our Terms & Conditions, and securely delete the associated personal data.

If you have reason to believe that a minor has registered on mco99, please notify us immediately at support@mco99.lat.

11. International Data Transfers

mco99 primarily stores and processes your data within secure data centres. In some cases, data may be processed by our technology and payment partners in other countries. Where such transfers occur, we ensure that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by relevant data protection authorities.
• Adequacy decisions recognising the recipient country's data protection standards as equivalent to those applicable in Malaysia.
• Binding corporate rules or other legally recognised transfer mechanisms.

We do not transfer your data to jurisdictions that do not provide an adequate level of data protection without implementing the safeguards described above.

12. Changes to This Policy

mco99 may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by posting a prominent notice on the mco99 platform and, where appropriate, by sending an email to the address registered on your account at least 14 days before the changes take effect.

Your continued use of the mco99 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your data.

The version date at the top of this page ("Last Reviewed") indicates when this Policy was most recently updated. Previous versions are available upon request.

13. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how mco99 handles your personal data, please contact our Data Protection team:

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. In Malaysia, data protection matters are overseen by the Department of Personal Data Protection (JPDP) under the Ministry of Communications and Digital.

We take all privacy complaints seriously and will work with you to resolve any concerns as promptly and fairly as possible.