Highland99 is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over your own data. We encourage all players to read this document in full before registering an account.
This Privacy Policy (hereinafter referred to as "the Policy") issued by Highland99 (hereinafter referred to as "Highland99", "we", "us", or "the Company") and applies to all personal data collected, processed, stored, or transmitted by Highland99 through its online gaming platform accessible at highland99.cam, including all associated interfaces, mobile experiences, and related services (collectively, "the Platform").
Highland99 operates as an English-language online casino and sports betting platform built specifically for the Malaysian market, serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia. We take our responsibilities as a data controller seriously and are committed to processing your personal data in a lawful, fair, and transparent manner.
This Policy should be read in conjunction with Highland99's Terms and Conditions, which govern your use of the Platform. By registering an account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy.
For the purposes of this Policy, the following terms carry the meanings set out below:
Highland99 collects Personal Data from you in several ways throughout your interaction with the Platform. The categories of data we collect are set out below.
When you register an account, complete KYC verification, contact customer support, or interact with any feature that involves data input, you may provide us with:
When you access and use the Platform, certain technical data is generated automatically by our systems and infrastructure:
In limited circumstances, we may receive Personal Data about you from third-party sources, including:
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity | Name, MyKad number, date of birth, photo ID | Registration, KYC submission |
| Contact | Email address, mobile number, residential address | Registration, account settings |
| Financial | Bank details, e-wallet IDs, transaction history | Deposit / withdrawal processing |
| Technical | IP address, device info, browser type, session logs | Automatically on Platform access |
| Behavioural | Game history, bet patterns, promotional activity | Automatically during gameplay |
| Communications | Support chat transcripts, email correspondence | Customer support interactions |
Highland99 processes your Personal Data only for purposes that are lawful, necessary, and proportionate. The principal purposes for which we use your data are as follows:
Your identity, contact, and financial data are required to create and maintain your Account, authenticate your login sessions, process deposits and withdrawals through your chosen Payment Methods, and deliver the gaming and betting services you have signed up for.
We are obligated to verify the identity and age of all registered Players. Your identity documents and personal details are processed for this purpose in accordance with our applicable licensing obligations and anti-money laundering requirements. KYC verification is a precondition for withdrawal processing.
Technical and behavioural data — including IP addresses, login patterns, device fingerprints, and transaction histories — are analysed to detect and prevent fraudulent activity, account takeover attempts, collusion, money laundering, and other prohibited conduct. This processing is essential to the security of the Platform and the protection of all Players.
When you contact our support team via live chat or email at [email protected], we process your contact details and the content of your communication in order to respond to your query and resolve any issues with your Account.
We analyse game session data and account activity to identify patterns that may indicate problem gambling behaviour. Where such patterns are detected, we may take proactive steps to contact you with information about our Responsible Gambling tools, or to apply account-level restrictions in accordance with our responsible gambling obligations. This processing is carried out in the legitimate interest of player welfare.
Bonus activity, wagering history, and game participation data are processed to administer our promotional offers, verify compliance with bonus terms, and calculate VIP tier eligibility under our loyalty programme.
Where you have provided explicit consent, we may use your email address or mobile number to send you personalised promotional communications about offers, new games, and events on the Platform. You may withdraw consent for marketing communications at any time by contacting support or updating your Account communication preferences.
We are required by law and by the terms of our operating licence to retain certain records and to disclose information to regulatory or law enforcement authorities upon lawful request. Processing for this purpose is mandatory and cannot be withheld or restricted by the Data Subject.
Highland99 relies on the following lawful bases for processing your Personal Data, as applicable to each processing activity:
Highland99 does not sell, rent, or commercially transfer your Personal Data to unafiliated third parties. We share your data only in the following circumstances and only to the extent necessary for each purpose:
We engage third-party service providers who process data on our behalf under strict contractual obligations, including:
All third-party Data Processors are required to maintain appropriate security standards and may not use your data for any purpose other than providing the contracted service to Highland99.
Highland99 may disclose your Personal Data to competent regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where we are required to do so by law, by the terms of our operating licence, or pursuant to a valid legal order. We will, where permitted by law, inform you of any such request.
Where Highland99 has a notification arrangement with an external responsible gambling exclusion registry, we may share your exclusion status with that registry, and may receive notification of exclusions registered by you with that registry, for the purpose of enforcing self-exclusion obligations.
The Highland99 Platform uses cookies and similar tracking technologies to operate correctly, remember your preferences, and analyse how the Platform is used. By continuing to use the Platform after being presented with our cookie notice, you consent to the use of cookies as described in this section.
You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform, including your ability to log in or access certain features. Instructions for managing cookies are available in the help documentation of your browser.
Highland99 retains your Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our operating licence. The following retention principles apply:
Upon the expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with our data destruction procedures.
Highland99 implements a layered, risk-based approach to data security designed to protect your Personal Data against unauthorised access, loss, alteration, or disclosure. Our security measures include, but are not limited to:
Whilst we take all reasonable measures to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and should contact us immediately if you suspect any unauthorised access to your Account.
As an internationally licensed platform, Highland99 may process and store your Personal Data on servers or systems located outside of Malaysia. Where your data is transferred to a third country, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that applicable in the originating jurisdiction, including:
You may request further information about the specific safeguards applied to any international transfer of your data by contacting our support team.
Subject to applicable law and certain conditions, you have the following rights in relation to your Personal Data held by Highland99. To exercise any of these rights, please contact our support team using the details in Section 14.
You have the right to request a copy of the Personal Data we hold about you, together with information about how and why we process it. We will respond within30 days of a valid request.
You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. You may update certain details directly within your Account settings at any time.
In certain circumstances, you may request deletion of your Personal Data. Note that we are required to retain certain records for a minimum period under our legal and regulatory obligations — these cannot be deleted on request.
You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing and we are assessing whether our legitimate grounds override your objection.
Where processing is based on your consent or on a contract, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format, and to have it transferred to another data controller where technically feasible.
You have the right to object to processing based on legitimate interests, including profiling for responsible gambling monitoring. You also have an absolute right to object to processing for direct marketing purposes, which we will honour immediately upon receipt of your objection.
Highland99 will respond to all rights requests within 30 calendar days of receipt. Where a request is complex or Highland99 receives a high volume of requests concurrently, this period may be extended by a further 60 days, of which you will be notified in writing. We reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.
The Highland99 Platform is strictly restricted to persons who are 21 years of age or older. Highland99 does not knowingly collect or process Personal Data from any person below this age threshold. If we become aware that Personal Data belonging to a person under the age of 21 has been collected — whether through fraudulent misrepresentation of age at registration or otherwise — we will promptly close the relevant Account, delete the associated Personal Data to the extent permitted by our legal retention obligations, and take such other action as is required under our responsible gambling and regulatory obligations.
If you have reason to believe that a minor has registered an Account on the Highland99 Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.
Highland99 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services offered on the Platform. Where material changes are made to this Policy, we will notify registered Account holders via email or through a prominent notice on the Platform at least seven (7) days before the changes take effect, except where immediate changes are required by law or regulatory direction.
The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We recommend reviewing this Policy periodically. The current version is always accessible at highland99.cam/privacy-policy.
If you wish to exercise any of your rights under this Policy, have a question about how Highland99 handles your Personal Data, wish to withdraw consent for marketing communications, or have a concern about our data practices, please contact us through the following channels:
We aim to acknowledge all written data-rights requests within two (2) business days and to provide a substantive response within 30 calendar days. For privacy-related complaints that have not been resolved to your satisfaction through our internal process, you may escalate the matter to the relevant data protection authority or regulatory body applicable to Highland99's operating jurisdiction.
For questions about our responsible gambling tools or self-exclusion, please also refer to our Responsible Gambling page. For questions about account rules and bonus terms, see our Terms and Conditions.
Privacy is not a compliance checkbox at Highland99. These are the concrete practices that back our commitment to every player's data security.
Every connection between your device and Highland99 is protected by industry-standard TLS encryption. Your credentials, financial data, and personal details travel only over encrypted channels — never in plaintext.
Your Personal Data is never sold, rented, or commercially shared with third-party marketers. It is used exclusively to operate your Account, comply with legal obligations, and improve the Highland99 platform.
Access, rectify, delete, or port your data — all rights requests are acknowledged within two business days and resolved within 30 days. Our support team handles data rights requests in plain English, matched to Malaysian time zones.
Sensitive data fields stored in our databases — including payment credentials and KYC documents — are encrypted at rest using strong symmetric encryption. Even in a breach scenario, this data is not usable without the decryption keys.
We retain your data only for as long as is legally required or operationally necessary. Once the applicable retention period expires, data is securely deleted or irreversibly anonymised in accordance with our documented data destruction procedures.
We will always notify you of material changes to this Privacy Policy before they take effect, and we will inform you promptly if a security incident affects your Personal Data, as required by applicable law.
Our 24/7 support team handles data and privacy queries alongside the usual account support. For common questions, our FAQ is a fast first stop.
For players aged 21 and above only. Please gamble responsibly.