Privacy Policy

This Privacy Policy ("Policy") describes how Tempur99 ("we", "us", "our", "the Platform") collects, uses, stores, discloses, and otherwise processes personal data relating to users ("you", "your", "Player") of the Tempur99 website and associated services accessible at tempur99.cam.

Tempur99 operates an online casino and sports betting platform serving the Malaysian market, offering live dealer games, slot games, sports wagering, crash games, and instant-win products to eligible players aged 21 and above. In delivering these services, we necessarily collect and process certain categories of personal data.

We take our data protection obligations seriously. This Policy is designed to give you clear, transparent information about our data practices so that you can make informed decisions about your privacy when using our platform.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Service and are incorporated into this Policy by reference.

For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, online identifiers, and behavioural data.
• "Processing" — any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, erasure, and destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, Tempur99 acts as the Data Controller in respect of user data.
• "Data Processor" — a third party that processes personal data on behalf of Tempur99 under a binding data processing agreement.
• "Sensitive Personal Data" — a special category of personal data that attracts heightened protection, including (but not limited to) financial account information, government-issued identification numbers, and health-related information.
• "Cookies" — small text files stored on your device by a website that enable functionality, performance monitoring, and personalisation.
• "KYC" — Know Your Customer, the identity and document verification process applied to Tempur99 account holders.

Tempur99 collects the following categories of personal data from users of the Platform:

Tempur99 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make deposits or withdrawals, contact our support team, or participate in promotions.
• Automatically: When you access and navigate the Platform, our servers and analytics tools automatically log technical and usage data including IP address, device identifiers, and browsing behaviour within the site.
• Through cookies and similar technologies: Session cookies, persistent cookies, and web analytics trackers collect data about how you interact with the Platform over time. See Section 10 for full details.
• From third-party payment processors: When you deposit or withdraw using Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or USDT, we receive transaction confirmation data from the relevant payment provider.
• From identity verification services: Where we use third-party KYC providers to verify your identity documents, we receive verification outcomes and related data from those providers.
• From fraud detection systems: We receive signals and risk scores from third-party fraud prevention services to protect the integrity of the Platform.

Tempur99 processes your personal data for the following specific purposes:

1. Account registration and management: To create, maintain, authenticate, and administer your Tempur99 account.
2. Service delivery: To provide access to casino games, sports betting markets, and all associated Platform features.
3. Payment processing: To process deposits and withdrawals in MYR via your chosen payment method (Touch 'n Go, Boost, DuitNow, FPX, bank transfer, USDT, etc.).
4. KYC and AML compliance: To verify your identity, age (21+), and payment method ownership in accordance with our anti-money laundering obligations.
5. Responsible gambling: To implement and monitor deposit limits, loss limits, self-exclusion requests, and other player protection tools.
6. Customer support: To respond to your enquiries, resolve disputes, and manage your account on your request.
7. Fraud prevention and security: To detect and prevent fraudulent activity, account takeover attempts, money laundering, and abuse of bonus promotions.
8. Legal compliance: To comply with applicable laws, regulations, and orders from competent legal authorities.
9. Platform improvement: To analyse usage patterns and improve the performance, design, and features of the Platform.
10. Direct communications: To send transactional messages (deposit confirmations, withdrawal notifications, security alerts) and, where consent has been given, promotional communications.

Tempur99 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your account, process transactions, and deliver the Service as described in our Terms & Conditions.
• Legal obligation: Processing necessary to comply with applicable laws, including KYC/AML requirements, responsible gambling regulations, and court orders.
• Legitimate interests: Processing conducted in pursuit of Tempur99's legitimate business interests — including fraud prevention, platform security, and performance analytics — where these interests are not overridden by your rights.
• Consent: Where we process data on the basis of your consent (for example, for marketing communications or non-essential cookies), you may withdraw that consent at any time by contacting our support team or adjusting your browser settings.

Tempur99 does not sell, rent, or trade your personal data to unaffiliated third parties for their independent commercial purposes. We may share your personal data in the following limited circumstances:

• Payment processors: We share necessary transactional data with our payment partners (including Touch 'n Go, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank) to process deposits and withdrawals.
• KYC and identity verification providers: We share identity documents and personal data with third-party KYC service providers solely for the purpose of verifying your eligibility to use the Platform.
• Game studios and technology providers: We share necessary technical identifiers with licensed game providers to deliver casino game content. These providers do not receive your full personal profile.
• Fraud prevention and security services: We share IP addresses, device fingerprints, and behavioural data with fraud detection partners to protect the Platform and its users.
• Legal and regulatory authorities: We may disclose personal data to competent law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or valid legal order.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of Tempur99's business, personal data may be transferred to the relevant acquiring entity, subject to equivalent data protection obligations.

Tempur99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, and reporting requirements.

• Active accounts: Personal data is retained for the duration of your account registration with Tempur99.
• Closed accounts: Following account closure, we retain identity data, transaction records, and KYC documents for a minimum period of five (5) years to comply with anti-money laundering regulations and applicable financial record-keeping obligations.
• Communications records: Support interactions and communications are retained for up to three (3) years following the last interaction.
• Technical and usage data: Aggregated and anonymised usage analytics are retained indefinitely for platform improvement purposes. Individual-level technical logs are retained for up to twelve (12) months.
• Self-excluded players: Where a player has requested self-exclusion, core identity data is retained for the duration of the exclusion period and for any legally required period thereafter to prevent re-registration.

Once the applicable retention period has expired, personal data will be securely deleted or anonymised.

Tempur99 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS) / SSL encryption for all data in transit between your browser and our servers.
• Encryption at rest for all sensitive personal data fields stored in our databases.
• Role-based access controls ensuring only authorised personnel can access personal data, and only to the extent required for their job function.
• Regular penetration testing and security audits by qualified third-party assessors.
• Intrusion detection and monitoring systems to identify and respond to security incidents.
• Multi-factor authentication requirements for administrative access to systems holding personal data.

Notwithstanding these measures, no method of data transmission or storage over the internet is completely secure. While we use commercially reasonable security measures, we cannot guarantee absolute security of your data. In the event of a data breach that poses a material risk to your rights, we will notify you and relevant authorities as required by applicable law.

Tempur99 uses cookies and similar technologies to operate the Platform, improve your user experience, and gather analytical data about platform usage. The types of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core functionality such as authentication, session management, and security. These cookies cannot be disabled without impairing the Service.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymised information about how visitors interact with the Platform — such as pages visited and time spent on each section — to help us improve performance and content.
• Functional Cookies: These cookies remember your preferences (such as language settings and display options) to provide a more personalised experience on return visits.
• Session Cookies: Temporary cookies that expire when you close your browser. Used to maintain your login session during a single visit to the Platform.

You may control cookie settings through your browser's preferences. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the Platform, including your ability to log in and access game content.

As an internationally operated platform serving the Malaysian market, Tempur99 may transfer your personal data to servers or service providers located outside of Malaysia. Where such transfers occur, we ensure that equivalent levels of data protection are maintained through the implementation of appropriate safeguards, including:

• Contractual data processing agreements incorporating standard data protection clauses.
• Transfers only to jurisdictions that provide an adequate level of personal data protection as recognised by applicable standards.
• Technical security measures equivalent to those applied within Malaysia.

By using the Tempur99 Platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards described above.

Subject to applicable law, you hold the following rights in respect of your personal data held by Tempur99. To exercise any of these rights, please contact our support team via the details in Section 15.

The Tempur99 Platform is strictly for use by persons aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If you are under 21 years of age, you must not access, register on, or use the Tempur99 Service.

In the event that Tempur99 discovers that personal data has been collected from a person under the age of 21, we will take immediate steps to delete such data and close the relevant account. If you believe a minor has registered an account on Tempur99, please notify us immediately via the contact details in Section 15.

Tempur99 employs age verification checks as part of the registration and KYC process. Any account found to have been created by a person under the age of 21 will be permanently closed and any funds held in the account will be subject to review in accordance with our responsible gambling and legal obligations.

Tempur99 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. The "Last Updated" date at the top of this document will be amended accordingly when changes are made.

Where material changes are made to this Policy, we will endeavour to notify registered Players via email or a prominent notice on the Platform prior to the changes taking effect. We encourage you to review this Policy periodically to stay informed about how we handle your personal data.

Your continued use of the Tempur99 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests in connection with this Privacy Policy or the processing of your personal data by Tempur99, please contact us through the following channels:

• Privacy & Data Enquiries (Email): [email protected] Please include "Privacy Request" in your subject line. We will respond within 4 business hours during normal operating hours.
• Live Chat Support: Available 24/7 via the Platform — typical response under 90 seconds. For urgent data security concerns (e.g., suspected account compromise), live chat is the fastest channel.

When submitting a data rights request, please provide your full name, registered email address, and a description of your request. We may need to verify your identity before processing the request to protect against unauthorised access to your data.

For responsible gambling-related concerns, please refer to our dedicated Responsible Gambling page. For terms governing your use of the Service, please refer to our Terms & Conditions.

This Privacy Policy was last reviewed and updated on 1 January 2026. The most current version is always accessible at tempur99.cam/privacy-policy.