Privacy Policy 96win –
Your Data, Our Responsibility

96win is an online gaming platform operating under the domain 96win.bar. We take the handling of every member's personal data with the utmost integrity, transparency, and responsibility. This Privacy Policy is our formal commitment to you.

This document clearly explains what data we collect, why we collect it, how we use it, who we may share it with, and how you can control your own information. It applies to all users accessing the 96win platform via our official website or our iOS and Android mobile apps.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection principles. If you do not agree with any provision in this policy, you should not use our services.

We collect several categories of information depending on how you interact with our platform. Below is a full description of each category:

We may also receive information about you from legitimate third-party sources such as identity verification providers, payment service providers, and fraud prevention bodies where necessary for security and legal compliance purposes.

The personal data we collect is used exclusively for legitimate, stated purposes. We do not use your data for any other purpose without first obtaining your consent:

• Account Management: Creating, verifying, and securely maintaining your member account.
• Transaction processing: Processing deposits, withdrawals, and all financial activities on the platform efficiently and accurately.
• Identity verification (KYC): Verifying that you meet age and identity eligibility requirements before accessing full services.
• Account security: Detecting and preventing unauthorised access, fraud, and suspicious activity on your account.
• Legal compliance: Meeting reporting obligations to relevant authorities under anti-money laundering (AML) and counter-terrorism financing (CTF) laws.
• Customer support: Responding to enquiries, resolving complaints, and providing the technical support you need.
• Platform improvements: Analysing usage patterns in aggregate to improve service quality and user experience.
• Marketing communications: Sending promotional information and exclusive offers (subject to your consent, which may be withdrawn at any time).
• Responsible gaming: Monitoring gameplay patterns to identify members who may need assistance and intervention.

96win does not sell or rent your personal data to any party for commercial purposes. However, we may need to share certain information with trusted third parties in the following circumstances:

• Payment service providers: Local banks, eWallets, and payment processors required to complete your transactions. They receive only the data necessary to process the payment.
• Identity verification providers: Third-party KYC companies that assist us in verifying member identities in accordance with regulatory compliance requirements.
• Game providers: Gaming software companies that provide game content on our platform. They receive only the minimum technical data required to run the games.
• Legal authorities: Police, courts, Bank Negara Malaysia, or other enforcement agencies when required by law or a valid court order.
• Infrastructure services: Cloud, hosting, and cybersecurity service providers that maintain our technical systems. They are bound by strict confidentiality agreements.

Data security is an absolute priority at 96win. We continuously invest in the latest security infrastructure and procedures to ensure your personal data is always protected against unauthorised access, loss, destruction, or improper disclosure.

Technical and organisational security measures we implement:

• 256-bit SSL Encryption: All data in transit is protected with the highest industry-standard encryption used by global financial institutions.
• Stored data encryption: Sensitive information such as passwords and financial details is stored in encrypted format using the latest hashing algorithms.
• Two-factor authentication (2FA): Additional layers of protection are available for your account to prevent unauthorised access even if your password is compromised.
• 24/7 security monitoring: Our cybersecurity team continuously monitors systems using automated threat detection tools.
• Regular security audits: Independent security assessments are conducted periodically by experienced third-party audit firms.
• Internal access controls: The "least privilege" principle is applied — staff can only access data that is strictly necessary for their role.

While we take all reasonable precautions, no digital system can be guaranteed 100% secure. You also play an important role by using a strong, unique password and never sharing your login credentials with anyone.

The 96win platform uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device when you visit our website.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect certain platform functions. For guidance on managing cookies in popular browsers, refer to your browser's support documentation.

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. The following are our general data retention guidelines:

• Active account data: Retained for the duration your account is active, plus 7 years after account closure (for AML compliance and tax law purposes).
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements on financial reporting.
• Support communication logs: Retained for 3 years after the case is resolved, for reference and service quality improvement.
• Technical data and server logs: Retained for 90 days for security threat detection and technical troubleshooting purposes.
• Marketing data: Retained until you withdraw consent or close your account.

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding the personal data we hold about you. We respect and facilitate the exercise of these rights:

To exercise any of the above rights, contact our Data Protection team at [email protected]. We will acknowledge your request within 3 business days and resolve it within 30 business days.

96win is a gaming platform exclusively for adults aged 18 years and above only. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

If you believe a minor has registered on our platform or provided their personal data without parental or guardian consent, please contact us immediately. We will take prompt action to investigate and delete the relevant data.

96win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. All amendments take effect immediately upon publication on this page.

How we notify you of important changes:

• A clear notice will be displayed on the main page of our platform.
• An email notification will be sent to the registered address for material amendments.
• The "Last Updated" date at the top of this policy will be revised to reflect the date of the latest amendment.

We encourage you to review this page periodically. Your continued use of the platform after any amendments take effect constitutes your acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist.