Your Privacy, Our Responsibility

Kapten69 is committed to protecting the privacy and personal data of all users who access our online casino and sports betting platform. We recognise that Malaysian players entrust us with sensitive personal and financial information, and we take that responsibility seriously.

This Privacy Policy ("Policy") applies to all data processing activities conducted by Kapten69 in connection with the platform accessible at kapten69.cam, including its mobile interface, associated services, customer support channels, and any communications we send to registered players. It applies to players located anywhere in Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond.

This Policy should be read in conjunction with our Terms & Conditions, which govern the broader relationship between you and Kapten69. References to "personal data" in this Policy mean any information that identifies or could identify you as an individual.

For the purposes of this Privacy Policy, the following definitions apply:

• "Controller" — Kapten69, the entity that determines the purposes and means of processing your personal data.
• "Data Subject" — You, the individual whose personal data is being processed.
• "Personal Data" — Any information relating to an identified or identifiable natural person, including name, email address, date of birth, identity document number, payment information, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
• "Processor" — A third party that processes personal data on behalf of Kapten69 under a binding data processing agreement.
• "Special Category Data" — Particularly sensitive personal data such as health information, which Kapten69 does not routinely collect unless required for responsible gambling purposes.

Kapten69 collects personal data through several means. The categories of data we collect, and the context in which each is collected, are set out below.

3.1 Data Provided Directly by You

When you register an account, verify your identity, or contact our support team, you provide us with information such as:

• Full legal name;
• Date of birth (required to verify you are 21 or older);
• Email address and contact number;
• Malaysian identity card (MyKad) number or passport number for KYC verification;
• Bank account or e-wallet details used for deposits and withdrawals (e.g., Maybank account, Touch 'n Go eWallet identifier, DuitNow-linked details);
• Username and password chosen at registration;
• Communications with our support team, including live chat transcripts and emails.

3.2 Data Collected Automatically

When you use the Kapten69 platform, certain technical data is collected automatically, including:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Session data, including login times and duration of play;
• Pages visited and features accessed on the platform;
• Betting and gaming history;
• Cookie identifiers and similar tracking technologies (see Section 7).

3.3 Data from Third Parties

We may receive limited personal data from third-party identity verification providers where we use their services to confirm your age and identity during the KYC process, and from payment processors to confirm the status of transactions processed in MYR.

We use the personal data we collect for the following purposes:

We do not use personal data for any purpose beyond those described above without obtaining your prior consent or being required to do so by applicable law.

Kapten69 processes your personal data on one or more of the following legal grounds:

• Contractual Necessity — Processing required to fulfil our obligations under our Terms & Conditions and to provide you with the services you have requested, including account management, payments, and customer support.
• Legal Obligation — Processing required to comply with applicable law, including anti-money laundering (AML) obligations, age verification requirements, and regulatory reporting duties.
• Legitimate Interests — Processing necessary for our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent — Where we send direct marketing communications, we rely on your consent. You may withdraw this consent at any time by contacting our support team or using the unsubscribe link in any promotional email.

Kapten69 does not sell, rent, or trade your personal data. We share your data only in the following circumstances:

6.1 Payment Processors. We share relevant transaction and identity data with payment service providers to facilitate deposits and withdrawals. These include but are not limited to: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency network processors for BTC and USDT transactions. These parties are bound by data processing agreements and may only use your data to complete the transaction.

6.2 Identity Verification Partners. During the KYC process, we share identity document data with third-party verification service providers. These providers are contractually bound to handle your data securely and in accordance with applicable data protection standards.

6.3 Regulatory and Legal Authorities. We may disclose personal data to government bodies, law enforcement agencies, or regulatory authorities where we are legally required to do so — for example, in response to a valid court order, regulatory inquiry, or anti-money laundering obligation.

6.4 Corporate Transactions. In the event of a merger, acquisition, or sale of assets involving Kapten69, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

Kapten69 uses cookies and similar technologies to ensure the platform functions correctly and to improve the player experience. A "cookie" is a small text file stored on your device by a website.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies — Required for core platform functionality, including maintaining your login session, remembering language preferences, and processing in-play bets. These cannot be disabled without impairing platform use.
• Analytics Cookies — Used to collect anonymised aggregate data on how players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data helps us improve performance and user experience.
• Functional Cookies — Used to remember your preferences, such as game display settings and notification preferences, to personalise your experience.

7.2 Managing Cookies. You may disable or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may affect your ability to log in or use certain features of the platform. Kapten69 does not deploy third-party advertising or retargeting cookies.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active Account Data — Retained for the duration of your account relationship with Kapten69.
• Transaction Records — Retained for a minimum of five (5) years following the date of the transaction, in accordance with anti-money laundering record-keeping obligations.
• KYC Documents — Retained for the duration of account activity plus a minimum of five (5) years following account closure.
• Support Communications — Retained for a period of three (3) years following the resolution of the relevant support interaction.
• Marketing Consent Records — Retained until consent is withdrawn and for a reasonable period thereafter as evidence of compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

Kapten69 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data fields (including payment details and identity document numbers) at rest;
• Strict access controls limiting data access to authorised personnel on a need-to-know basis;
• Regular security assessments and penetration testing of platform infrastructure;
• Two-factor authentication options for player accounts;
• Incident response procedures to detect and address data breaches promptly.

As a data subject, you have the following rights in respect of your personal data held by Kapten69. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your account username.

• Right of Access — You may request a copy of the personal data we hold about you.
• Right to Rectification — You may request correction of any inaccurate or incomplete personal data.
• Right to Erasure — You may request deletion of your personal data, subject to our legal retention obligations (see Section 8).
• Right to Restriction — You may request that we restrict processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability — You may request a copy of data you have provided to us in a structured, commonly used, machine-readable format.
• Right to Object — You may object to the processing of your data where we rely on legitimate interests as the legal basis, or to the use of your data for direct marketing purposes.
• Right to Withdraw Consent — Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

We will respond to all verified data rights requests within thirty (30) days of receipt. We may request proof of identity before processing any request.

Kapten69 does not knowingly collect personal data from any individual under the age of 21. Our platform is strictly intended for adults aged 21 and above. Age verification is a mandatory component of the account registration and KYC process.

If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any deposits made by an underage individual will be handled in accordance with our Terms & Conditions.

Parents and guardians who believe their child may have registered on the Kapten69 platform are urged to contact us immediately at [email protected] so that we may investigate and take appropriate action.

The majority of the personal data we process in connection with Malaysian players is handled within systems and by service providers operating in jurisdictions with adequate data protection frameworks. Where data is transferred to third-party processors located in other jurisdictions, we ensure that appropriate safeguards are in place, including:

• Binding contractual obligations on the receiving party to protect your data to a standard equivalent to that described in this Policy;
• Transfer to jurisdictions that have been assessed as providing an adequate level of data protection.

We do not transfer your personal data to any jurisdiction where we cannot ensure adequate protection.

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. The "Last Updated" date at the top of this page will be revised accordingly.

Where changes are material — for example, where we introduce a new category of data collection or a new third-party sharing arrangement — we will notify registered players via email or a prominent notice on the platform prior to the change taking effect.

Your continued use of the Kapten69 platform following publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes, you may request closure of your account in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data we hold about you, please contact us through the channels below. All contact details are provided as plain text and are not clickable links.

Our support team operates on Malaysian Standard Time (MYT, UTC+8) and is able to assist in both English and Bahasa Malaysia.

For concerns regarding responsible gambling data or self-exclusion requests, please see our Responsible Gambling page for additional guidance.