This Privacy Policy sets out how kombo99 collects, processes, stores, and protects personal data belonging to users of the kombo99.cam platform. We are committed to handling your information responsibly, in full compliance with applicable data protection principles, and with complete transparency about how your data is used.
Kombo99 ("we", "our", "us", "the Platform") is committed to protecting the privacy and personal data of all users who access and interact with the kombo99.cam website and associated services. This Privacy Policy ("Policy") describes the types of personal information we collect, the purposes for which it is used, the legal bases that justify our processing activities, and the rights available to you as a data subject.
This Policy applies to all users accessing the kombo99 Platform from Malaysia and any other jurisdiction. It covers data collected through account registration, ongoing account use, payment processing, customer support interactions, and automated technical means such as cookies and server logs.
By registering an account or continuing to use the kombo99 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably identify a natural person, directly or indirectly. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, or deletion. |
| "Data Subject" | The natural person to whom the personal data relates — in this context, you, the registered user of the Platform. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — in this context, kombo99. |
| "Data Processor" | A third-party service provider that processes personal data on behalf of and under the instruction of the Data Controller. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data. |
| "Cookies" | Small text files stored on your device by a website to enable functional, analytical, or tracking capabilities. |
For the purposes of this Privacy Policy, kombo99 acts as the Data Controller in respect of all personal data collected from users of the Platform. As Data Controller, we are responsible for ensuring that all personal data collected and processed through kombo99.cam is handled lawfully, fairly, and transparently.
All data protection enquiries, subject access requests, and complaints regarding our data processing practices should be directed to our support team using the contact details provided in Section 15 of this Policy.
Kombo99 collects personal data from users through several distinct channels. The categories of data collected, and the circumstances in which they are collected, are described below.
When you create an account on kombo99.cam, we collect the information you provide directly, including:
To comply with anti-money laundering regulations and to verify your identity before processing withdrawals, we may collect:
We collect records of all financial transactions carried out through the Platform, including deposit amounts, withdrawal amounts and destinations, payment method used (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, BTC, USDT), transaction timestamps, and transaction reference numbers.
We maintain records of all bets placed, games played, odds accepted, and outcomes received on the Platform. This data is used for account management, fraud prevention, bonus compliance, and regulatory reporting purposes.
We automatically collect certain technical information when you access the Platform, including your IP address, device type, operating system, browser type and version, screen resolution, session duration, pages visited, and clickstream data. This information is collected via server logs and cookies as described in Section 10.
If you contact our customer support team, we retain records of all communications, including emails, live chat transcripts, and any attachments or documents you provide during the interaction.
Kombo99 processes personal data only where a lawful basis exists. The primary purposes for which we process data, together with the applicable legal bases, are set out in the table below.
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract (your account agreement with kombo99) |
| Processing deposits and withdrawals | Performance of a contract; compliance with legal obligations |
| Identity verification (KYC) | Legal obligation (anti-money laundering requirements) |
| Fraud prevention and security monitoring | Legitimate interests (protecting the Platform and its users) |
| Customer support services | Performance of a contract; legitimate interests |
| Responsible gambling monitoring | Legal obligation; legitimate interests (player welfare) |
| Promotional and marketing communications | Consent (you may withdraw consent at any time) |
| Platform analytics and improvement | Legitimate interests (improving the user experience) |
| Regulatory reporting and compliance | Legal obligation |
Kombo99 employs automated systems for certain processing activities, including fraud detection and responsible gambling monitoring. These systems may flag accounts for review or apply automatic controls (such as temporary holds on withdrawals pending additional verification) without human intervention at the initial stage. Where an automated decision significantly affects your account, you have the right to request a human review of that decision.
We may use transactional and behavioural data to generate player profiles for the purposes of responsible gambling monitoring, personalised promotional offers (subject to your marketing consent), and fraud risk assessment. No profiling is conducted on the basis of special category data, and profiles are not used to make decisions that negatively affect your legal rights without human oversight.
Where you have provided consent to receive marketing communications, we may contact you by email, SMS, or push notification with information about promotions, bonus offers, and new features on the Platform. You may withdraw your marketing consent at any time by updating your Account notification preferences or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of any processing that occurred prior to withdrawal.
Kombo99 does not sell your personal data to any third party for commercial purposes. We may share your data with third parties only in the following specific circumstances:
All third-party Data Processors are required to process your data only under our documented instructions and to maintain appropriate technical and organisational security measures.
Kombo99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years post-closure |
| KYC documentation | Duration of account + 5 years post-closure (regulatory requirement) |
| Transaction records | 7 years from transaction date (financial record-keeping) |
| Betting and gaming activity | 5 years from activity date |
| Customer support communications | 3 years from last interaction |
| Technical / server logs | 90 days from collection |
| Marketing consent records | Until consent is withdrawn + 2 years |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification. Where data is required for the defence of legal claims, we may retain it for the duration of the relevant proceedings.
Kombo99 implements robust technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our core security controls include:
Kombo99 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session, and analyse Platform usage patterns. The categories of cookies we deploy are described below.
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Maintain your login session, remember your cart/bet slip, enable site security functions. Cannot be disabled without breaking core site functionality. | No |
| Functional | Remember your preferences such as preferred odds format, language, and notification settings. | No |
| Analytics | Aggregate usage data to help us understand how users navigate the Platform and identify areas for improvement. Data is anonymised before analysis. | Yes |
| Marketing | Track visits across sessions to enable personalised promotional content. Only used where you have provided explicit marketing consent. | Yes |
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the Platform. Guidance on managing cookies in the most common browsers can be found via each browser's own help documentation.
As a data subject, you are entitled to exercise a number of rights in relation to the personal data that kombo99 holds about you. These rights are described below. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Subject Request".
You have the right to request a copy of the personal data we hold about you, together with information about how it is being processed.
You have the right to request correction of any inaccurate or incomplete personal data that we hold about you.
You may request deletion of your personal data where we no longer have a lawful basis to retain it, subject to overriding legal obligations.
You may request that we restrict the processing of your data in certain circumstances, such as where you contest its accuracy.
You have the right to receive your personal data in a structured, commonly used, machine-readable format, where technically feasible.
You may object to processing based on legitimate interests, including direct marketing. We will cease such processing unless compelling grounds exist.
We aim to respond to all data subject requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days and will notify you accordingly.
The kombo99 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If you believe that a minor has provided personal data to us through the Platform, please notify us immediately at [email protected].
Upon receipt of a verified notification regarding a minor's data, kombo99 will promptly take all reasonable steps to delete the relevant data from our records, close the associated account, and return any funds held to the minor's legal guardian through verified channels.
Kombo99 operates primarily to serve users in Malaysia, and the majority of data processing occurs within infrastructure located in the Asia-Pacific region. However, certain third-party service providers — including cloud infrastructure, identity verification, and fraud prevention providers — may be located outside Malaysia.
Where personal data is transferred to a jurisdiction that does not offer an equivalent level of data protection, kombo99 ensures that appropriate safeguards are in place to protect the transferred data. Such safeguards include contractual data protection clauses that impose obligations on the recipient equivalent to those required under applicable data protection law.
By using the kombo99 Platform, you consent to the transfer of your personal data to such third-party processors in accordance with the safeguards described above.
Kombo99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. We will provide reasonable notice of material changes by publishing the updated Policy on the Platform and, where appropriate, sending a notification to your registered email address.
The "Last Updated" date at the top of this page will be revised whenever the Policy is materially amended. We encourage you to review this Policy periodically to remain informed of how we protect and use your personal data.
Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should cease using the Platform and contact us to request account closure as described in our Terms & Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which kombo99 processes your personal data, please contact our support team using the details below. We will acknowledge your enquiry within 48 hours and provide a substantive response within 30 calendar days.
If you are unsatisfied with the way in which kombo99 has handled your personal data or responded to a data subject request, you are entitled to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. In Malaysia, matters relating to personal data protection may be referred to the relevant regulatory body under the Personal Data Protection Act 2010 (PDPA).
We encourage you to contact us directly in the first instance before approaching a regulatory authority. We are committed to resolving all data protection concerns fairly and transparently.
A brief summary of the six core commitments behind our approach to data privacy.
All personal data and KYC documents stored in our systems are protected with AES-256 encryption at rest. Data transmitted between your browser and our servers uses TLS 1.3, the current industry standard.
Kombo99 does not sell your personal data to advertisers, data brokers, or any third party for commercial purposes. Your information is used solely to operate your account and improve your experience on the Platform.
You can request a copy of all data we hold about you, ask for corrections, or request deletion — all free of charge. We respond within 30 calendar days of receiving a valid request at [email protected].
We don't hold data indefinitely. Clear retention schedules are applied to every category of data we collect — and once the retention period expires, data is securely deleted or anonymised.
We clearly categorise every cookie we deploy — strictly necessary, functional, analytics, and marketing — and seek consent for non-essential cookies. You can manage preferences via your browser at any time.
Our data handling practices are aligned with the Personal Data Protection Act 2010 (PDPA) of Malaysia, ensuring that the rights of Malaysian users are respected and protected throughout their engagement with the Platform.
Our support team is available 24/7 to address any data protection questions or to help you exercise your subject rights. Visit our homepage or FAQ for more information about the Platform.