Your privacy is a serious matter at 96win. This Policy explains precisely what personal data we collect from Malaysian players, why we collect it, how we use it, who we share it with, and how you can exercise your rights over it.
All personal data transmitted between your browser and 96win's servers is encrypted using 256-bit SSL — the same encryption standard used by Malaysian banking platforms including Maybank2u and CIMB Clicks.
96win does not sell, rent, or trade your personal data to third-party marketing organisations. Data is shared only where required for service delivery, payment processing, or regulatory compliance.
You have the right to request a copy of the personal data 96win holds about you, to correct inaccuracies, and in certain circumstances to request deletion of your data. Requests are processed within 30 days.
96win uses cookies for session authentication, security, and analytics. We do not use cookies for cross-site tracking or behavioural advertising. Cookie preferences can be managed via your browser settings.
KYC identity documents are stored in access-controlled, encrypted storage systems with strict internal access logging. Identity documents are never stored alongside gameplay or transaction data in the same system.
Promotional emails and SMS messages from 96win are opt-in only. You may withdraw marketing consent at any time via Account settings or by contacting 96win support. Withdrawal of consent does not affect your ability to use the Platform.
96win operates as a licensed online gaming platform serving players primarily in Malaysia and other permitted jurisdictions. In delivering our gaming, payment, customer support, and compliance services, we necessarily collect and process personal data about our players and platform visitors.
We are committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy sets out the full scope of our data processing activities in plain terms, organised to make it as easy as possible for you to understand what data we hold and why.
By registering an Account on the 96win Platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not register an Account or use the Platform.
For the purposes of applicable data protection legislation, the data controller responsible for personal data collected through the 96win Platform is the 96win operating entity holding the applicable international gaming authority licence under which the Platform operates.
All data subject rights requests, privacy enquiries, and data protection concerns should be directed to the 96win Data Protection contact as described in Section 16 of this Policy.
96win collects the following categories of personal data in connection with platform use:
| Category | Data Types | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad or passport number, photograph | KYC verification |
| Contact Data | Email address, Malaysian mobile number, residential address | Account registration |
| Account Data | Username, password hash, account settings, security preferences | Account registration and ongoing use |
| Financial Data | Payment method type, transaction reference numbers, deposit and withdrawal history, account balance | Cashier transactions |
| Gaming Data | Game history, bet amounts, win/loss records, session duration, responsible gaming tool usage | Platform use |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session identifiers | Platform access |
| Communications Data | Live Chat transcripts, email correspondence, support ticket records | Support interactions |
| Marketing Data | Promotional opt-in status, campaign attribution data, marketing preference records | Account registration and ongoing use |
96win does not collect or store full payment card numbers. All payment transactions are processed by PCI-DSS compliant third-party payment processors. 96win receives only transaction reference data and status confirmation, not raw card data.
96win collects personal data through the following channels:
Data you provide directly when registering an Account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in promotions. This represents the primary source of personal data 96win holds about registered players.
Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser fingerprint data, session logs, and gameplay event data. This data is collected via server logs, cookies, and platform analytics tools operated by 96win.
In certain circumstances, 96win may receive data about you from third parties, including:
96win processes personal data under the following legal bases, depending on the specific processing activity:
96win uses the personal data described in Section 3 for the following purposes:
96win does not sell, rent, or trade your personal data. We share personal data only in the following circumstances:
We engage third-party service providers to assist in operating the Platform. These providers act as data processors under our instruction and are contractually bound to process personal data only for the specific purposes for which it is shared. Categories of service providers include:
96win may disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, court order, or in response to a valid legal process. Where permitted by law, 96win will notify affected players of such disclosure requests.
Certain data may be required to be shared with 96win's licensing authority as part of ongoing regulatory oversight, audit processes, or in response to specific regulatory enquiries. Such sharing is a condition of the gaming licence under which 96win operates.
In the event of a merger, acquisition, sale of assets, or other business restructuring involving 96win, personal data held by 96win may be transferred to the successor entity. Players will be notified of any such transfer and of any changes to this Privacy Policy that result from it.
As an internationally licensed gaming platform, 96win may transfer personal data to and process it in countries other than Malaysia. Where such transfers occur, 96win ensures that appropriate safeguards are in place to protect the personal data being transferred, including contractual protections equivalent to those required by applicable data protection frameworks.
By using the 96win Platform, you acknowledge and consent to the transfer of your personal data as described in this Section. If you have concerns about international data transfers affecting your personal data, please contact the 96win Data Protection contact as described in Section 16.
96win retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for such additional periods as are required by law or regulatory obligation. The following general retention periods apply:
Where personal data is no longer required for any purpose, it is securely deleted or anonymised so that it can no longer be associated with any individual player.
96win uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:
96win does not use cookies for cross-site tracking, behavioural advertising, or to share browsing data with advertising networks. You may control cookie settings through your browser's privacy settings. Disabling non-essential cookies may affect the functionality of certain Platform features but will not prevent you from accessing core gaming services.
Subject to applicable data protection law and certain limitations inherent in 96win's regulatory obligations, you have the following rights in relation to your personal data held by 96win:
To exercise any of the above rights, please contact 96win as described in Section 16. We will respond to all valid requests within thirty (30) calendar days. In complex cases, this period may be extended by a further two months, in which case you will be notified of the extension and its reasons within the initial thirty-day period.
96win implements technical and organisational security measures appropriate to the risk level of the personal data processed. Key security controls in place include:
Despite these measures, no online system is completely immune from security risks. In the event of a data breach that poses a risk to your rights and freedoms, 96win will notify affected players and relevant regulatory authorities in accordance with applicable breach notification obligations.
The 96win Platform is strictly for adults aged 21 years and above. 96win does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an Account or use the Platform.
If 96win discovers or is informed that personal data has been collected from a person under the age of 21, that Account will be immediately closed and all associated personal data will be deleted, subject to any retention obligations imposed by law in connection with the account closure process.
If you believe that 96win may have inadvertently collected personal data from a person under 21, please contact 96win support immediately so that appropriate action can be taken without delay.
96win sends promotional emails, SMS messages, and in-platform notifications to players who have opted in to receive marketing communications. Marketing consent is obtained explicitly during the Account registration process and is recorded with a timestamp in 96win's systems.
You may withdraw your marketing consent at any time by:
Withdrawal of marketing consent will be processed within five (5) business days. Withdrawal of marketing consent does not affect the delivery of transactional communications — deposit confirmations, withdrawal notifications, account security alerts — which are required for platform operation and cannot be opted out of while your Account remains active.
96win may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform functionality. Material changes — those that significantly affect your rights or how your data is used — will be communicated to registered players via email notification to the registered email address or via a prominent notice on the Platform, with at least fourteen (14) days' notice before the changes take effect.
The "Last Updated" date at the top of this Policy will be revised each time a change is made. We encourage you to review this Policy periodically to stay informed about how 96win protects your personal data.
Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the changes. If you do not accept the updated Policy, you should discontinue use of the Platform and contact 96win to close your Account.
For all data protection enquiries, data subject rights requests, or questions about this Privacy Policy, please contact 96win through the following channels:
Please note that 96win may need to verify your identity before processing a data subject rights request to ensure that personal data is not disclosed to, corrected by, or deleted at the request of an unauthorised third party. Identity verification for such requests may require confirmation of your registered email address and, in some cases, submission of identity documentation.
256-bit SSL. No data selling. Transparent cookie usage. Opt-out marketing. Industry-standard security. Over 1,200 games, instant Touch n Go deposits, and 24/7 support.
21+ only. Play responsibly. Your data is handled in accordance with this Privacy Policy and 96win's international gaming authority licence conditions.