01 Introduction
tati99 is an English-language information and gaming platform serving adult
users in Malaysia. This Privacy Policy applies to all personal data we
receive through your use of the tati99 website, including account
registration, payment transactions, support requests, promotional
participation and any other interaction with our services.
In this document, "tati99", "we", "us" or "our" refers to the tati99
platform and its data-handling operations. "You", "user" or "player"
refers to the individual whose data is being collected or processed.
"Personal data" means any information that identifies or can reasonably
identify a natural person.
02 Definitions
-
Personal Data: Any information relating to an identified
or identifiable natural person, including name, email address, phone
number, device identifiers and payment reference details.
-
Processing: Any operation performed on personal data,
including collection, storage, organisation, retrieval, use, disclosure
and deletion.
-
Data Subject: The individual to whom personal data
relates — in this context, an eligible tati99 user.
-
Third Party: Any organisation or person other than
tati99 and the data subject, including payment processors, identity
verification providers and regulatory bodies.
-
Cookie: A small data file placed on a device by a
website to store session preferences, authentication tokens or
analytical identifiers.
03 Data We Collect
tati99 collects personal data through several channels. The categories below
describe information we may receive depending on how you use our platform.
-
Registration data: Full name, date of birth, email
address, residential address (including Malaysian state or city such
as Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru or Shah Alam),
phone number and chosen username.
-
Identity and verification data: Government-issued
identification documents, proof of address and any supplementary
materials required to confirm age, identity or payment ownership.
-
Payment and transaction data: Deposit amounts in MYR,
payment method references (such as a masked account or e-wallet
identifier associated with Touch 'n Go eWallet, Boost, GrabPay,
Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow or
FPX), withdrawal requests and transaction history.
-
Device and technical data: IP address, browser type,
operating system, device model, session duration, page views and
referral source.
-
Communication data: Records of support messages,
enquiries, feedback and other correspondence submitted to tati99.
-
Behavioural and gaming data: Game category preferences,
betting activity, promotional participation, session patterns and
responsible-gambling interaction records.
04 Legal Bases and Purposes of Processing
tati99 processes personal data only where a lawful basis applies. The
primary purposes and their corresponding bases are set out below.
-
Contract performance: Processing necessary to create
and maintain your account, execute deposits and withdrawals, settle
wagering activity and fulfil any promotional arrangement you have
accepted.
-
Legal obligation: Processing required to verify
identity and age, conduct anti-money-laundering checks, satisfy
responsible-gambling duties and comply with requests from competent
authorities.
-
Legitimate interest: Processing for fraud prevention,
platform security, detection of prohibited conduct, system stability,
technical support and audit functions where these interests are not
overridden by your fundamental rights.
-
Consent: Where we rely on your consent for a specific
processing activity — such as certain marketing or cookie preferences —
you may withdraw that consent at any time. Withdrawal does not affect
the lawfulness of processing carried out before withdrawal.
05 Cookies and Tracking Technologies
tati99 uses session and persistent cookies, along with similar tracking
technologies, to manage authentication, remember preferences, analyse
aggregated usage patterns and help maintain a stable browsing experience.
Session cookies are deleted when you close your browser. Persistent cookies
remain on your device for a defined period unless cleared manually. You may
adjust your browser settings to limit or refuse cookies; however, some
tati99 features may not function correctly without them. Adjusting cookie
preferences does not affect personal data already processed under another
lawful basis.
06 Disclosure and Data Sharing
tati99 does not sell personal data. We may share data with third parties
only where reasonably necessary and under appropriate obligations.
-
Payment processors: To facilitate MYR deposits,
withdrawals and transaction verification through the supported
Malaysian payment channels described in this policy.
-
Identity and compliance providers: To perform age
verification, document checks and anti-money-laundering screening
required by applicable obligations.
-
Technology and hosting providers: Service providers
who process data on our behalf under contractual data-protection terms.
-
Regulatory and law enforcement bodies: Where required
by law, court order or a request from a competent authority.
-
Business transfers: If tati99 undergoes a corporate
restructuring, relevant data may transfer as part of the transaction
under appropriate protections.
Where data is processed outside Malaysia, we take reasonable steps to
ensure appropriate safeguards are in place.
07 Data Retention
Personal data is retained for as long as it is necessary for the purpose
for which it was collected, subject to any applicable legal retention
requirement. Account data may be retained for a defined period after
account closure to satisfy audit, dispute, anti-money-laundering and
responsible-gambling obligations.
When data is no longer required and no legal basis exists for continued
retention, tati99 will delete or irreversibly anonymise it in accordance
with our internal data lifecycle procedures.
08 Your Privacy Rights
Eligible users may exercise the following rights in relation to their
personal data held by tati99, subject to applicable law and proportionate
verification of identity.
- Right of access: Request confirmation of whether we process your data and obtain a copy of that data.
- Right to rectification: Request correction of inaccurate or incomplete personal data.
- Right to erasure: Request deletion of personal data where no lawful basis for continued processing exists.
- Right to restriction: Request that we limit processing in defined circumstances.
- Right to object: Object to processing carried out on the basis of legitimate interest, including certain profiling activities.
- Right to data portability: Receive certain data in a structured, machine-readable format where technically feasible.
- Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
To exercise any right, submit a written request to the tati99 support
email below. We will respond within a reasonable period and may ask for
identity verification before processing a sensitive request.
09 Security Measures
tati99 applies technical and organisational measures designed to protect
personal data against unauthorised access, disclosure, alteration or
destruction. These include access controls, encryption in transit,
session management and periodic security review.
No internet-based service can guarantee absolute security. You share
responsibility for account protection by keeping your credentials
confidential, logging out of shared devices and reporting suspected
unauthorised access promptly. tati99 recommends enabling any available
two-step verification for your account.
10 Minors and Age Verification
tati99 casino-style services are strictly for persons aged 21 and above.
We do not knowingly collect personal data from individuals under this age.
Age verification checks may be applied at registration or at any subsequent
point where account activity or submitted documents indicate a potential
eligibility concern.
Where we determine that personal data belonging to a person under 21 has
been collected without verified parental authorisation, we will take
reasonable steps to delete that data and close the relevant account.
11 Responsible Gambling and Data
Personal data — including session activity, deposit patterns and betting
behaviour — may be processed to support responsible-gambling obligations.
This includes identifying unusual usage that may indicate problem gambling
and applying limits, cooling-off periods or self-exclusion where
appropriate.
Responsible-gambling records, including self-exclusion instructions, are
retained for a period sufficient to honour the exclusion and to prevent
re-registration during the stated period.
12 Updates to This Policy
tati99 may revise this Privacy Policy from time to time to reflect changes
in operations, technology, applicable law or regulatory guidance. Material
changes will be communicated through a prominent notice on the tati99
website or through an account notification where appropriate.
Continued use of tati99 after a revised policy takes effect constitutes
acceptance of the updated terms, subject to applicable legal requirements.
We encourage you to review this page periodically for the current version.