Privacy Policy Win96 – Data Protection & Privacy for Malaysian Players

This Privacy Policy explains how Win96 collects, uses, stores, protects, and in certain circumstances shares your personal information. It covers all services provided by Win96 through the win96.fun platform, including online casino games, Sports Betting, lottery, Mobile Legends and DOTA 2 e-sports, virtual sports, and all customer support interactions.

Win96 is the data controller for the personal information you provide to us. This means we are responsible for ensuring your data is processed in accordance with applicable law, including Malaysia's Personal Data Protection Act 2010 (PDPA).

Win96 collects your personal data through various means — directly when you provide it (for example, during registration), automatically as you use the platform, and occasionally through legitimate third parties. The following are the categories of data we collect:

• Full name as stated on your Malaysian identity card (MyKad)
• Date of birth for age verification (must be 18 years of age or older)
• An active Malaysian mobile number
• A valid email address
• The username you choose for your Win96 account

• Malaysian bank account number or e-wallet ID (Touch 'n Go, GrabPay, Boost, ShopeePay) for withdrawal purposes
• Deposit and withdrawal history including amounts in MYR and the payment methods used
• Betting and gaming history on the Win96 platform
• Account balance and records of bonuses received

• The IP address of your device when accessing the Win96 platform
• Device type (smartphone, tablet, desktop), operating system, and web browser used
• Login session data including the date, time, and duration of each session
• Games you access and the time spent on them
• Cookie data and device identifiers as described in section 6

Where required for legal compliance or pre-withdrawal verification purposes, Win96 may request copies of documents such as your MyKad, a recent bank statement, or proof of e-wallet account ownership. These documents are handled with the highest level of security and retained only for as long as necessary for verification purposes.

Win96 collects and processes your personal data only for legitimate purposes that have been made known to you. We do not process your data for any other purpose without first obtaining your consent.

• Service Provision: To create and manage your Win96 account, process deposits and withdrawals in MYR, and give you full access to all games and betting options on the platform.
• Identity Verification & Compliance: To fulfil legal obligations related to anti-money laundering (AML), verify player age (18+), and comply with applicable KYC requirements.
• Account Security: To detect and prevent fraud, unauthorised access, multi-account usage, and other suspicious activities that could compromise the integrity of the Win96 platform.
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance via live chat, WhatsApp, and email.
• Platform Enhancements: To understand Win96 platform usage patterns for the purpose of improving our products, services, and overall user experience.
• Marketing Communications: To send notifications about Win96 promotions, latest bonuses, and special offers – only if you have consented to receive such communications.
• Responsible Gaming: To monitor gaming patterns and identify players who may need support related to responsible gaming, in line with Win96's commitment to player well-being.

Win96 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, there are circumstances where we need to share your data with certain parties:

Win96 works with third-party technology providers that assist in running the platform — including game software providers, payment processors for Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks), cloud service providers, and customer support systems. All these providers are bound by data processing agreements that prohibit them from using your data for any purpose other than the services they provide to Win96.

Win96 may disclose your personal data to the relevant Malaysian authorities when required by law, court order, or directive from a competent government agency such as Bank Negara Malaysia, the Securities Commission, or the police. In such cases, Win96 will disclose only the minimum information necessary to satisfy the applicable legal requirement.

Should Win96 be involved in any merger, acquisition, or asset sale, player personal data may be transferred as part of that transaction. In such cases, Win96 will ensure that the receiving party is bound by privacy protection obligations no less stringent than those set out in this Privacy Policy, and players will be notified in advance.

Win96 has implemented a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or accidental destruction:

• Encryption in Transit: All communications between your device and Win96's servers are encrypted using TLS 1.3 protocol with 256-bit SSL encryption, ensuring your data cannot be read by any party attempting to intercept the connection.
• Encryption at Rest: Sensitive data such as bank account information and identity verification documents is encrypted at rest on Win96's servers using the latest industry-standard encryption protocols.
• Internal Access Controls: Internal access to player data within Win96 is restricted on a need-to-know basis – only staff who require access to perform their duties are granted permission, and every access is logged.
• Two-Factor Authentication: All Win96 internal systems that store or process player data are protected by multi-factor authentication to prevent unauthorised access.
• Regular Security Audits: Win96 conducts regular internal and external security assessments to identify and address potential vulnerabilities before they can be exploited.
• Staff Training: All Win96 staff who handle player data undergo regular data protection training to ensure they understand their responsibilities.

While Win96 takes all reasonable steps to protect your data, no security system is entirely foolproof. You also play an important role in keeping your Win96 account safe by using a strong password and never sharing it with anyone.

Win96 uses cookies and similar tracking technologies to enhance your experience on the platform, secure your login session, and understand how the platform is being used. The following are the types of cookies we use:

You can manage your cookie settings through your web browser. However, disabling essential cookies will affect your ability to log in and use the Win96 platform normally.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to the personal data Win96 holds about you:

To exercise any of the rights above, please contact the Win96 team at [email protected] with the email subject "Data Privacy Rights Request". Include your full name, Win96 account number, and a detailed description of your request. Win96 will process your request within the timeframe stipulated by Malaysia's PDPA.

Win96 does not retain your personal data longer than necessary for the purposes stated in this Privacy Policy or as required under applicable Malaysian law. The following are general guidelines on retention periods:

• Active account data: Retained for the duration your account remains active and for up to seven years after account closure, to meet legal compliance requirements and to resolve any disputes that may arise.
• Financial transaction records: Retained for a minimum of seven years in accordance with Malaysian financial regulatory requirements, including records of deposits and withdrawals in MYR.
• Security logs: Retained for 12 months for cybersecurity and fraud detection purposes.
• KYC Documents: Retained for the duration of the active account and up to five years after account closure for anti-money laundering (AML) requirements.
• Customer support communications: Retained for two years for service quality and recurring complaint resolution purposes.

Once the retention period expires, your personal data will be securely deleted or anonymised in a manner that ensures it can no longer be associated with you as an individual.

In the course of its operations, Win96 may utilise technical infrastructure or service providers based outside Malaysia. Where your personal data is transferred outside Malaysia, Win96 ensures that such transfers are carried out with protections equivalent to or exceeding those required under the Malaysian PDPA.

The safeguards we apply to international data transfers include data processing agreements with standard data protection clauses, ensuring that data recipients operate under recognised privacy laws, and conducting regular audits of our international service providers' privacy practices.

The Win96 platform is intended solely for individuals aged 18 and above. Win96 does not knowingly collect or process personal data from individuals under the age of 18. If we discover or are made aware that we have inadvertently collected data from an underage individual, we will take immediate steps to:

• Suspend the account in question immediately
• Deleting all personal data collected from the individual concerned
• Refunding any deposited funds
• Reporting cases to the relevant authorities when required

Parents and guardians who suspect their child has registered a Win96 account are asked to contact us immediately at [email protected] so that prompt action can be taken.

Win96 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. The latest version of the Privacy Policy, along with its amendment date, will always be available on this page.

For material amendments that significantly affect how we process your personal data, Win96 will notify you via your registered email or through a prominent in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the amendments and decide whether you wish to continue using the Win96 platform.

Your continued use of the Win96 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you may close your Win96 account and request data deletion in accordance with the procedure set out in section 7.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Win96 handles your personal data, please reach out to us through the following channels:

Win96 will respond to all legitimate privacy enquiries within the timeframe stipulated by Malaysia's PDPA. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) through their official channels.