Rojak99 is committed to protecting the personal data of every player who uses our platform. This Privacy Policy explains what information we collect, why we collect it, how it is used, and the rights available to you under applicable data protection law — including Malaysia's Personal Data Protection Act 2010 (PDPA). Please read this document carefully.
// Last updated: 1 January 2026 | Effective: 1 January 2026Six core commitments that define how Rojak99 handles your personal information. Full details are set out in the clauses below.
We only collect personal data that is strictly necessary to operate your account, verify your identity, process payments, and comply with legal obligations. We do not collect data for data's sake.
Rojak99 does not sell, rent, or trade your personal information to third-party marketers, data brokers, or advertisers under any circumstances. Your data is used only to deliver and improve our services to you.
All data transmitted between your device and Rojak99's servers is protected by 256-bit TLS encryption. Sensitive data at rest — including payment details and identity documents — is stored using AES-256 encryption.
Rojak99 processes the personal data of Malaysian users in accordance with the Personal Data Protection Act 2010 (PDPA). You retain the right to access, correct, and withdraw consent for certain uses of your data.
We do not retain your personal data indefinitely. Retention periods are determined by the purpose for which data was collected and applicable legal requirements — for example, financial records are retained for a minimum of seven years under AML regulations.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Rojak99 will notify affected individuals within a reasonable timeframe and take immediate remedial action.
This Privacy Policy ("Policy") applies to Rojak99 ("Rojak99", "we", "us", "our"), the operator of the online gaming platform accessible at rojak99.cam and all associated sub-domains, mobile-responsive interfaces, account management systems, and related services (collectively, the "Platform").
We respect the privacy of every individual who interacts with the Rojak99 platform and are committed to handling personal data responsibly, transparently, and in compliance with all applicable data protection legislation. For Malaysian users, this includes obligations under Malaysia's Personal Data Protection Act 2010 (PDPA).
By registering an account on Rojak99, accessing the Platform, or otherwise providing us with your personal data, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein. If you do not agree with any aspect of this Policy, you should not use the Platform and should contact us to close your account.
Scope: This Policy applies to all personal data collected from players across Malaysia, including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions. This Policy does not govern the privacy practices of third-party websites that may be linked from our platform.
The following definitions apply throughout this Privacy Policy:
Rojak99 is the Data Controller responsible for the personal data collected through the Platform. As Data Controller, Rojak99 determines the purposes for which personal data is collected and the means by which it is processed.
Where Rojak99 engages third-party service providers to process personal data on its behalf (for example, payment processors or KYC verification providers), those parties act as Data Processors under contractual data processing agreements that require them to process data only in accordance with Rojak99's instructions and to maintain appropriate security standards.
Contact for Privacy Enquiries: All requests, queries, and complaints relating to data privacy should be directed to Rojak99's support team at [email protected] with the subject line "Privacy Request". We aim to acknowledge all privacy enquiries within 3 business days.
Rojak99 collects the following categories of personal data, depending on the nature of your interaction with the Platform:
| Category | Examples of Data Collected | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, MyKad / passport number, nationality | Account registration & KYC verification |
| Contact Data | Email address, mobile phone number, residential address | Account registration & support enquiries |
| Financial Data | Bank account holder name, last 4 digits of account number, e-wallet ID (Touch 'n Go, Boost, GrabPay), transaction history | Deposit & withdrawal processing |
| Verification Documents | Copies of government-issued photo ID, proof of address documents, selfie photographs for liveness checks | KYC / AML compliance verification |
| Technical & Device Data | IP address, device type, operating system, browser type, session timestamps, geolocation (country/region level) | Automatic collection on platform access |
| Behavioural & Gaming Data | Game history, betting patterns, deposit/withdrawal frequency, session duration, bonus usage | Platform activity monitoring |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Marketing Preferences | Communication preferences, opt-in/opt-out status for promotional communications | Account settings & consent capture |
Note on Financial Data: Rojak99 does not store full bank account numbers or complete card details. Payment data is tokenised and processed by our PCI DSS-compliant payment processor partners, including those facilitating Maybank2u, CIMB Clicks, DuitNow, and FPX transactions. We retain only truncated references sufficient for withdrawal reconciliation.
Rojak99 collects personal data through the following mechanisms:
Information you provide directly to us when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
When you access the Platform, we automatically collect certain technical data including your IP address, device identifiers, browser type, operating system, referring URL, and session activity. This data is collected through server logs, session tracking, and first-party cookies.
We may receive data about you from third-party sources in the following circumstances:
Rojak99 processes your personal data for the following specific, legitimate purposes:
Rojak99 relies on the following lawful bases for processing your personal data, as recognised under the PDPA and applicable international data protection standards:
Withdrawing Consent: Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time by updating your account preferences or contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Rojak99 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to binding data processing agreements:
To process your deposits and withdrawals, we share necessary payment data with payment processors facilitating transactions via Maybank2u, CIMB Clicks, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency networks. These providers are bound by their own regulatory obligations and may retain transaction records for compliance purposes.
To fulfil our KYC obligations, we use licensed identity verification services that verify your identity against authoritative data sources. These providers process your identity documents and biometric data solely for verification purposes and under strict contractual controls.
We share data with fraud prevention and anti-money laundering screening services to detect and prevent financial crime. These services may maintain databases of flagged individuals, to which we both contribute and query under industry-standard agreements.
Our platform is hosted on secure cloud infrastructure. Hosting and database service providers process data on our behalf under data processing agreements that mandate appropriate technical and organisational security measures.
We may disclose your personal data to licensing authorities, financial intelligence units, law enforcement agencies, or courts where we are legally required or compelled to do so. We will, where permitted by law, inform you of such disclosure requests.
No Marketing Data Sales: Under no circumstances does Rojak99 share your personal data with third-party advertisers, data brokers, or marketing networks. Any promotional communications you receive from Rojak99 are sent directly by us, based on your consent and account preferences.
In operating a global gaming platform that serves Malaysian players, some of your personal data may be transferred to and processed in countries outside Malaysia. This may occur in the context of cloud hosting infrastructure, identity verification processing, or engagement with internationally operating payment partners.
Where personal data is transferred internationally, Rojak99 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to Malaysian PDPA requirements. Such safeguards may include contractual data protection clauses, verified compliance certifications, or adequacy decisions applicable to the recipient country.
By using the Rojak99 platform and providing your personal data, you consent to the transfer of your data to recipients in other jurisdictions as described in this Policy, subject always to the safeguards described above.
Rojak99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. The following retention guidelines apply:
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with industry best practices.
Cookies are small text files stored on your device when you access a website. Rojak99 uses first-party cookies to enable essential platform functionality and to improve your user experience. We do not use third-party advertising cookies or cross-site behavioural tracking technologies.
You may manage or delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will impair platform functionality, including the ability to log in and maintain a gaming session. Detailed cookie management instructions are available in your browser's help documentation.
As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data held by Rojak99. To exercise any of these rights, please contact our support team with your account details and a description of your request.
Request a copy of all personal data we hold about you, along with information about how it is being used.
Request correction of any inaccurate or incomplete personal data we hold about you. Minor corrections can often be made via your account settings.
Withdraw consent for processing activities based on consent — such as marketing communications — at any time, without affecting prior lawful processing.
Request that we restrict the use of your data in certain circumstances, for example while a correction request is being investigated.
Request deletion of your personal data where we no longer have a legitimate or legal basis to retain it. Note that regulatory retention obligations may limit this right in certain cases.
If you believe we have not handled your data lawfully, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).
Response Timeframe: Rojak99 will acknowledge your data rights request within 3 business days and will endeavour to fulfil the request within 21 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 14 days with prior notice.
Rojak99 is strictly an adult platform. Access is limited to persons who are at least 21 years of age. We do not knowingly collect personal data from individuals under 21. If we become aware that personal data has been collected from a minor, we will immediately suspend the relevant account, delete the collected data, and, where appropriate, report the matter to relevant authorities.
Parents and guardians who believe their child may have registered on the Rojak99 platform should contact us immediately at [email protected] with the subject line "Minor Account Report" so that we can take immediate action.
Age Verification: Rojak99 employs automated and manual age verification processes at registration and during KYC review. All accounts are subject to age confirmation requirements before withdrawal of winnings is permitted.
Rojak99 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:
Notwithstanding these measures, no transmission of data over the internet is completely secure. While we take all reasonable precautions, we cannot guarantee the absolute security of data transmitted to or from the Platform. Players are encouraged to use strong, unique passwords and to enable 2FA on their account.
Rojak99 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or business operations. The effective date of the current version is stated at the top of this document.
Where material changes are made to this Policy — such as changes to the categories of data collected, new sharing arrangements with third parties, or changes to your rights — we will notify registered players via the email address on file and/or through a prominent notice on the Platform at least 14 days prior to the changes taking effect.
Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. We recommend bookmarking this page and reviewing it periodically.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Rojak99, please contact our Data Privacy team through the following channels:
For formal complaints or if you are unsatisfied with our response to a privacy concern, you may escalate the matter to the Department of Personal Data Protection Malaysia (JPDP), the supervisory authority responsible for overseeing PDPA compliance in Malaysia.
Effective Date: This Privacy Policy is effective as of 1 January 2026 and supersedes all previous versions. Thank you for trusting Rojak99 with your personal information — we take that trust seriously.
We're committed to transparency, PDPA compliance, and keeping your personal information secure. Have questions about how we handle your data? Our support team is available 24/7. For players aged 21 and above only.
Read Our FAQ Return to Homepage