96won Privacy Policy

This Privacy Policy ("Policy") is issued by 96won ("the Platform", "we", "us", "our") and governs the collection, use, storage, disclosure, and protection of personal data submitted by or collected from individuals ("you", "User", "Player") who visit, register on, or use the services available at https://96won.cam.

96won is Malaysia's trusted online casino and sports betting platform, serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia. We process personal data responsibly, collect only what is necessary, and apply appropriate safeguards to protect the information entrusted to us by our players.

This Policy forms part of our broader legal framework alongside our Terms and Conditions and Responsible Gambling Policy, each of which is incorporated by reference. By registering a Player Account or using any service on the 96won platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

The following definitions apply throughout this Privacy Policy:

96won collects the following categories of personal data in connection with the operation of our platform:

When you register a Player Account, we collect your full legal name, date of birth, residential address (including city, state, and postcode), email address, and mobile telephone number. This information is used to create and administer your account and to verify that you meet the minimum age requirement of 21 years.

To comply with our anti-money laundering and player protection obligations, we collect copies of government-issued identity documents (Malaysian MyKad, Passport, or Driver's Licence), proof of residential address (utility bills, bank statements, or official correspondence dated within three months), and selfie photographs where required. KYC data is handled with heightened care and stored in encrypted, access-controlled systems.

We collect records of all deposits and withdrawals processed through your Player Account, including transaction amounts (in MYR), timestamps, payment method identifiers (such as masked bank account numbers or e-wallet references), and transaction status. This data is required for payment processing, fraud detection, and financial record-keeping.

We collect records of games played, bets placed, odds accepted, bonus usage, and gameplay session durations. This data is used for game operation, bonus validation, responsible gambling monitoring, fraud prevention, and platform improvement.

When you access the 96won platform, we automatically collect certain technical data including your IP address, device type, browser type and version, operating system, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation.

Records of communications between you and the 96won support team — whether via Live Chat, WhatsApp, or email — are retained for quality assurance, dispute resolution, and compliance purposes.

96won collects personal data through the following primary channels:

• Direct submission: Information you voluntarily provide during account registration, KYC document upload, withdrawal requests, support interactions, or participation in promotions.
• Automated collection: Technical data gathered automatically when you visit or interact with the platform, including via cookies, web beacons, and server log files.
• Payment processors: Transaction confirmation data shared by our approved payment service providers following a deposit or withdrawal via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency networks.
• KYC service providers: Identity verification results and associated risk signals returned by our third-party KYC processing partners following document review.
• Fraud and AML screening: Risk indicators and screening results returned by anti-money laundering and fraud detection services when your account undergoes compliance checks.

The table below sets out the primary purposes for which 96won processes your personal data, together with the category of data used for each purpose:

96won processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the Terms and Conditions — including account management, payment processing, and gameplay provision.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, KYC obligations, and financial record-keeping requirements.
• Legitimate interests: Processing carried out in furtherance of 96won's legitimate business interests — including fraud prevention, security monitoring, responsible gambling oversight, and platform improvement — where such interests are not overridden by your rights and freedoms.
• Consent: Where processing is not covered by the above bases (for example, optional marketing communications), 96won will seek your explicit consent prior to processing. You may withdraw consent at any time by contacting our support team.

96won does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment service providers: Data shared with FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency network processors as strictly necessary to process your financial transactions.
• KYC and identity verification partners: Document data shared with accredited third-party identity verification services for the purpose of completing your KYC review.
• Fraud prevention and AML screening services: Relevant account and transaction data shared with anti-fraud and anti-money laundering screening providers to detect and prevent financial crime.
• Technology and hosting providers: Infrastructure partners who host platform data on our behalf, subject to strict data processing agreements and equivalent security standards.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or lawful request from a competent authority, 96won may disclose personal data without prior notice to the affected player.

96won uses cookies and similar tracking technologies on our platform for the following purposes:

These cookies are strictly necessary for the operation of the platform. They enable core functions such as user authentication, session management, and security features. Essential cookies cannot be disabled without impairing your ability to use the platform.

We use analytical cookies to collect aggregated, anonymised data about how players interact with the 96won platform — including pages visited, time spent, and navigation paths. This data is used exclusively to improve platform performance and user experience.

Functional cookies store your preferences (such as language selection, display settings, or notification choices) to personalise your experience on return visits to the platform.

Security cookies assist in detecting fraudulent access attempts, bot activity, and suspicious login patterns. They form part of our multi-layer account security infrastructure.

You may manage cookie preferences through your browser settings. Please note that disabling non-essential cookies will not affect your access to core platform features, but may limit certain personalisation or analytical functions.

96won retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any overriding legal, regulatory, or contractual retention obligations. General retention periods are set out in the Data Processing table in Section 5 of this Policy.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures. Where data cannot be fully deleted due to backup or archive system constraints, it will be isolated from active processing until deletion is technically feasible.

Player Accounts that have been voluntarily closed will have associated personal data retained for a minimum of five years following account closure, to satisfy anti-money laundering regulatory requirements and to enable dispute resolution in connection with historical transactions.

96won implements a comprehensive information security programme comprising technical, organisational, and procedural safeguards designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the 96won platform — the same standard used by Maybank2u and CIMB Clicks.
• Encryption at rest for all sensitive personal data and KYC documents stored on our servers.
• Access controls ensuring that personal data is accessible only to staff members whose role requires it, enforced through role-based access permissions and mandatory two-factor authentication for internal systems.
• Regular security audits and penetration testing of our platform infrastructure, conducted by independent third-party security specialists.
• Fraud detection systems that monitor account activity in real time for anomalous patterns indicative of unauthorised access or financial crime.
• Incident response procedures enabling rapid containment, investigation, and notification in the event of a data security incident.

Notwithstanding the above measures, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. Players are responsible for maintaining the confidentiality of their account credentials and for notifying 96won support immediately of any suspected unauthorised access.

Subject to applicable law and verification of your identity, you hold the following rights with respect to your personal data held by 96won. To exercise any of these rights, please contact our support team using the details in Section 15.

The 96won platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. All Player Account registrations require a date of birth declaration, and age is verified through our KYC process before full account privileges — including withdrawal access — are granted.

If 96won becomes aware that personal data has been collected from an individual who is under the minimum age of 21, we will promptly close the account, delete the associated personal data to the extent permitted by law, return any deposited funds (subject to verification), and — where applicable — report the matter to relevant authorities.

Parents or guardians who believe their child may have registered on the 96won platform should contact our support team immediately at [email protected].

96won's primary operations serve players in Malaysia. However, certain third-party service providers — including cloud hosting infrastructure, KYC verification partners, and payment processors — may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, 96won ensures that adequate safeguards are in place, including:

• Contractual data processing agreements with receiving parties that impose obligations equivalent to applicable data protection standards.
• Transfer only to jurisdictions or recipients that offer an adequate level of personal data protection as assessed by competent regulatory bodies or through independent audit.
• Technical measures such as encryption during transmission to protect data integrity across international network paths.

By using the 96won platform, you acknowledge that your personal data may be processed in countries outside Malaysia as described in this section, subject to the safeguards outlined above.

96won reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or operational requirements. Material changes to this Policy will be communicated to registered players via the email address on file, with at least 7 days' advance notice prior to the effective date of the change.

The current version of this Privacy Policy — including the "Last Updated" date shown at the top of this page — is always accessible at https://96won.cam/privacy-policy. We encourage players to review this Policy periodically. Your continued use of the 96won platform following notification of an amendment constitutes acceptance of the revised Policy.

For any questions, concerns, or requests relating to this Privacy Policy — including the exercise of your privacy rights — please contact the 96won Data Protection team through our customer support channels. We are available 24 hours a day, 7 days a week in English, Bahasa Melayu, and Mandarin Chinese.