Octopus99 takes every member's privacy seriously. This document clearly sets out what data we collect, how it is used, who can access it, and your rights as a registered Malaysian player.
Six core principles that underpin how octopus99 manages and protects the personal data of its Malaysian members.
Octopus99 only collects data that is genuinely necessary to operate your account, process transactions and meet legal requirements. We do not collect data beyond the minimum needed to run the platform.
All personal data and financial transaction information is protected with 256-bit SSL encryption — the same security standard used by major Malaysian banking institutions such as Maybank and CIMB.
Octopus99 has never and will never sell, rent or disclose members' personal data to third parties for marketing or commercial purposes without your explicit prior consent.
As an octopus99 member, you have the right to access, correct, export, and in certain circumstances request the deletion of your personal data. All requests are handled through our support team.
Your e-wallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and FPX information are encrypted and never stored in plain text. The octopus99 team cannot view your full payment account numbers.
The octopus99 Privacy Policy is built in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to meeting all data protection requirements applicable to our platform.
Important Note: This Privacy Policy explains how octopus99 collects, uses, stores and protects your personal data. By registering for and using the octopus99 platform, you agree to the practices described in this policy. Please read it carefully and contact us if you have any questions.
Octopus99 ("we", "the platform") respects the privacy of every individual who uses our services. This Privacy Policy outlines our personal data collection and management practices for all users of the octopus99 platform at octopus99.best, including visitors, registered members and VIP members.
This document has been prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010), which governs the processing of personal data in commercial transactions in Malaysia. As a platform operating for the Malaysian market, octopus99 treats PDPA compliance as our minimum obligation, and in many respects we strive to go beyond those minimum standards in order to provide our members with stronger privacy protections.
This policy applies to all personal data you share with octopus99 through the registration process, platform use, deposit and withdrawal transactions, communications with our support team, and any other interaction with the octopus99 platform.
Octopus99 collects personal data from several sources across the following categories:
Data You Provide Directly:
Data Collected Automatically During Platform Use:
Data from Third-Party Sources:
Note: Octopus99 does not collect information considered sensitive under Malaysia's PDPA unless specifically required for legal compliance purposes, in which case your explicit consent will be obtained beforehand.
Personal data collected by octopus99 is used solely for the following purposes:
| Purpose of Use | Type of Data Used |
|---|---|
| Account registration and management | Name, email, phone number, date of birth |
| Processing of deposits and withdrawals | Payment method details, transaction records |
| Identity Verification (KYC/AML) | Name, date of birth, identification documents |
| Customer support | Account information, communication records, transaction records |
| Fraud detection & security | IP address, session data, activity patterns |
| Legal & regulatory compliance | All relevant data as required |
| Platform improvement & analytics | Anonymised usage data |
| Essential service communications | Email, phone number |
Octopus99 does not use your personal data for any third-party marketing purposes without your consent. If you wish to receive promotional communications from octopus99 itself, you may opt in to receive promotional notifications via your account settings, and you may withdraw that consent at any time.
Octopus99 processes your personal data on the following legal bases in accordance with Malaysia's PDPA 2010:
Where you have given consent as the basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing that took place prior to the withdrawal.
Octopus99 does not sell, rent, or disclose your personal data to third parties for commercial purposes. However, in the course of operating the platform, octopus99 may share certain data with the following categories of parties, strictly for the purposes stated:
All third parties that receive data from octopus99 are bound by strict data processing agreements and are only permitted to use that data for the specific purposes defined. Octopus99 is not responsible for the privacy practices of third parties beyond the terms of those agreements.
Reminder: Octopus99 will never ask for your payment account password or PIN through any communication channel. If you receive such a request claiming to be from octopus99, it is a fraudulent attempt — please contact our support team immediately.
Octopus99 employs multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The key measures we have in place are as follows:
Octopus99 retains your personal data for as long as your account is active or as long as necessary to provide services to you. After account closure, your personal data will be retained for the period required based on the following:
Once the applicable retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity.
The octopus99 platform uses cookies and similar tracking technologies to enhance the user experience and to understand how the platform is being used. The following categories of cookies are in use:
You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the octopus99 platform, and you may be unable to log in or use certain platform features properly.
Octopus99 does not use any third-party tracking tools that transmit your personal data to social media platforms or external advertisers without your consent.
Under Malaysia's Personal Data Protection Act 2010 and octopus99's privacy practices, you have the following rights regarding your personal data:
As an octopus99 member, you have full control over your personal data.
You may request a copy of all personal data held by octopus99 about you. We will provide this information within 21 days of receiving your request.
If your personal data in the octopus99 system is inaccurate or out of date, you may request that we correct or update it. Please contact our support team with the relevant details.
In certain circumstances, you may request the deletion of your personal data. Please note that legal obligations such as financial record retention requirements may limit this right.
You may request that octopus99 restrict the processing of your personal data under certain circumstances, such as when the accuracy of the data is disputed or while a deletion request is being processed.
You have the right to receive the personal data you have provided to octopus99 in a structured, machine-readable format, and to transmit that data to another data controller where applicable.
You may object to the processing of your personal data where it is based on octopus99's legitimate interests, including processing for direct marketing communications from octopus99.
How to Exercise Your Rights: To submit any privacy rights request, email support@octopus99.best with the subject line "Privacy Rights Request" along with your full name and account number. We will verify your identity before processing the request and will respond within 21 business days.
The octopus99 platform is strictly for individuals aged 18 and above. Octopus99 does not knowingly collect personal data from individuals under the age of 18. All registration procedures include age verification steps to prevent access by underage individuals.
If you are a parent or guardian and believe that your child under the age of 18 has registered or used the octopus99 platform, please contact us immediately at support@octopus99.best. We will investigate the matter, close the account in question and delete all associated personal data promptly once confirmed.
Octopus99 takes its child protection responsibilities very seriously as part of our commitment to responsible gaming and the protection of younger users.
Octopus99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or changes to the services we offer. Where material changes are made, we will notify members via their registered email address or through an in-platform notification at least 14 days before the changes take effect.
The "Updated" date at the top of this document will always reflect the date of the latest version. It is your responsibility to review this policy from time to time. Your continued use of the octopus99 platform after any amendments take effect will be considered acceptance of those changes.
For any questions, concerns or requests relating to your privacy and personal data protection, please contact the octopus99 Data Protection Officer at:
This policy is effective as of: 1 January 2026. This version supersedes all previous versions of the octopus99 Privacy Policy.
Complaints to the Relevant Authority: If you are not satisfied with how octopus99 has handled your personal data after contacting us, you have the right to lodge a complaint with the Department of Personal Data Protection under the Malaysian Ministry of Communications, which is responsible for overseeing PDPA 2010 compliance in Malaysia.
When you register on any online casino platform, you are effectively entrusting it with your personal information. Your phone number, email address, and e-wallet details such as Touch 'n Go or GrabPay – all of this is sensitive data that, in the wrong hands, can cause serious problems. That is why choosing a platform with a strong and transparent privacy policy matters, not just for the games or the bonuses.
Octopus99 is built on a privacy by design approach – meaning privacy protection is considered from the ground up in every platform development decision, not bolted on as an afterthought. This is reflected in how the platform is structured: payment card details are never stored in full within octopus99's systems – only secure tokens are retained to facilitate repeat transactions. Passwords are stored as cryptographic hashes that cannot be decrypted by anyone, including octopus99 staff.
This is a fair question to ask. The answer is straightforward: the data collected is the minimum necessary for this platform to operate securely and in compliance with Malaysian law. Your name and phone number are required to verify your identity and to communicate with you. E-wallet details are required to process deposits via Touch 'n Go eWallet or GrabPay and to send your winnings back to you. Game session data is retained to resolve any disputes that may arise and to ensure game RTP performs as stated.
KYC (Know Your Customer) requirements are a legal compliance obligation under anti-money laundering (AML) regulations that apply to all financial platforms in Malaysia, not just online casinos. This is why octopus99 may request a copy of your identity card at certain stages, particularly prior to larger withdrawals. This is there to protect you — it ensures that no one else can withdraw funds from your account without proper identity verification.
Many Malaysian internet users have experienced receiving unsolicited calls or promotional messages from companies they never gave their number to – this typically happens because their personal data was sold by a platform they used to advertisers or data brokers. Octopus99 is fully committed to never engaging in such practices.
The only marketing communications you will receive from octopus99 are promotions and offers from octopus99 itself – such as deposit bonuses, VIP cashback, or newly launched games. Even then, you have the option to opt out by disabling promotional notifications in your account settings. You will never receive third-party promotions through any information shared by octopus99.
While octopus99 provides robust technical security protections, the safety of your account also depends on the steps you take yourself. A few simple measures can help: use a strong, unique password for your octopus99 account that is different from your email or e-wallet passwords. Enable two-factor authentication (2FA) – this adds a significant layer of security. Avoid logging in to your octopus99 account from public devices or unsecured public WiFi networks, such as those at internet cafes, shopping malls, or airports.
One important thing to keep in mind: octopus99 will never ask for your account password or e-wallet PIN via WhatsApp, Telegram, email, or any other communication channel. If you receive a message claiming to be from octopus99 requesting such information, it is a phishing attempt or scam – do not respond, and report it to the octopus99 support team via the official in-platform live chat.
Many users are unaware that they have legally enforceable rights over their personal data under Malaysia's Personal Data Protection Act 2010. At octopus99, we make this process straightforward. If you want to know what data we hold about you, simply send an email to support@octopus99.best with a written request. If any data is inaccurate, we will correct it. If you wish to close your account and request deletion of data that is eligible for removal, we will process this in accordance with the applicable legal guidelines.
Privacy is not merely a word in this document – it is a core value that underpins everything octopus99 does. Every member who entrusts us with their personal data deserves to be treated with transparency, accountability and respect for their privacy. That is a commitment octopus99 will never waver on.
256-bit SSL encryption, no data sales, and full Malaysia PDPA compliance – register and play with complete confidence that your privacy is protected.
Casino games at octopus99 are for entertainment purposes only. We encourage all members to set appropriate time and spending limits. Never wager money you cannot afford to lose or funds that are borrowed.
Octopus99 provides deposit limit, betting limit, and account break features accessible from your profile settings. The platform is restricted to users aged 18 and above. For more information, visit the Responsible Gaming us.
Over 500,000 Malaysian players have trusted octopus99 with their personal data. Register for free in two minutes, make a minimum deposit of RM10 via Touch 'n Go eWallet, GrabPay or DuitNow, and enjoy casino entertainment with complete peace of mind.