Claw99 AI
Privacy Policy
Last updated: 17 October 2026 · Applies to claw99.ai and the Claw99 AI assistant on WhatsApp and Telegram
This policy explains how Claw99 AI ("we", "us", "our") handles personal data when you use our website and AI assistant services in Malaysia. We process personal data in line with the Personal Data Protection Act 2010 (PDPA).
1. What we collect
- Account details — your name (if you give it), phone number, Telegram ID or WhatsApp number.
- Conversation content — the messages you send to the assistant, so it can answer you and keep context between sessions.
- Payment reference — the amount, date and reference number from DuitNow / ToyyibPay. We do not store your card or bank credentials.
- Technical data — device type, app version, approximate region and error logs, used to keep the service running.
2. Why we use it
- To provide the assistant: answering, writing, translation, image generation and results look-ups.
- To activate and renew your subscription and to send service notices (for example, expiry reminders).
- To prevent abuse, fraud and unauthorised sharing of accounts.
- To improve quality and fix faults (aggregated, or on individual conversations when investigating a problem).
3. Who we share it with
- Messaging platforms — Telegram and WhatsApp process messages on their own platforms under their policies.
- AI model providers — your message is sent to the model provider that powers the reply, solely to generate that reply.
- Payment providers — DuitNow / ToyyibPay for collection and reconciliation.
- Authorities — only where required by Malaysian law.
We do not sell your personal data, and we do not use your conversations for advertising.
4. How long we keep it
Conversation history is kept for as long as your account is active, and up to 90 days after your last activity or after your subscription ends. Payment records are kept for 7 years as required for accounting. Backups are rotated and expire automatically.
5. Security
We use encrypted connections (HTTPS), isolated per-customer storage, access controls on our admin systems, and short-lived admin sessions. No system is perfectly secure; if a breach affects you, we will notify you as required by law.
6. Your rights
Under the PDPA you may request access to your data, correction of inaccurate data, withdrawal of consent, or deletion of your conversation history. Contact us and we will respond within 21 days. Withdrawing consent may mean we can no longer provide the service.
7. Cookies and local storage
Our website uses only what is needed to work: a login token in your browser's local storage and a language preference. We do not use advertising or third-party tracking cookies.
8. Children
The service is not intended for anyone under 18. If we learn that a minor is using it, we will close the account.
9. Changes
We may update this policy. Material changes will be announced in the assistant or on this page, with a new "last updated" date.
10. Contact
WhatsApp: +60 11-1696 2037 · Telegram: @AI_CLAW99_BOT