Privacy Policy 96vin — Personal Data Protection for Malaysian Players

1Introduction and Scope of This Privacy Policy

96vin ("we", "Platform", "company") is committed to protecting the privacy of every user who registers and uses our online entertainment platform. This Privacy Policy is provided to clearly and transparently explain how we handle your personal data — from collection through to deletion.

This Policy applies to all users accessing the 96vin website, mobile app, and any official channels operating under the 96vin brand. By registering or using any part of our platform, you agree to the terms set out in this Privacy Policy.

This document is to be read together with Terms and Conditions us, and both documents together form the complete user agreement. In the event of any conflict, this Privacy Policy shall prevail for matters relating to the handling of personal data.

2Personal Data We Collect

96vin only collects data that is strictly necessary for legitimate purposes. We do not collect excessive or irrelevant information beyond the scope of the services we offer. Below are the categories of data we collect and their respective purposes:

Biometric data or sensitive information such as medical records, religious beliefs, and political views are never collected by 96vin under any circumstances. We only request information that is directly relevant to account management and legal compliance.

3How We Use Your Personal Data

Every piece of data we collect has a clear and legitimate purpose. We will not use your data for purposes unrelated to the services you use, nor process it without a solid legal basis. The following are the primary purposes for data use:

• Account Management — Register, verify, and manage user accounts, including password resets and two-factor authentication (2FA).
• Transaction Processing — Securely process deposits, withdrawals, and fund transfers via supported payment methods.
• KYC Verification — Meet anti-money laundering (AML) legal requirements and verify user identity before the first withdrawal is processed.
• Fraud Prevention — Identify and block suspicious activity, including multiple account use, unauthorised access, and fraud attempts.
• Service Communications — Send important notifications relating to accounts, transactions, terms updates, and security alerts.
• Platform Improvement — Analyse usage patterns in aggregate (not individually) to improve game quality, platform speed, and the overall user experience.
• Legal Compliance — Comply with legal reporting requirements, respond to inquiries from lawful authorities, and maintain required records.
• Promotions & Bonuses (with consent) — Send relevant promotional offers and bonus information, only if you have consented to receive them.

4Data Sharing and Disclosure

96vin does not sell, rent, trade, or disclose your personal data to third parties for commercial purposes. This is our core commitment to user privacy. However, there are limited situations where data sharing is necessary or required by law:

• Payment Service Providers — Only the minimum transaction information required to process your deposits and withdrawals is shared with payment gateway providers (FPX, DuitNow, e-wallets).
• Identity Verification Provider — KYC documents are shared with approved third-party identity verification services, subject to strict confidentiality agreements
• Competent Authorities — Data may be disclosed to government authorities, regulatory bodies, or law enforcement agencies where required by court order or applicable law
• Business Transfer — In the event of a merger, acquisition, or asset sale, user data may be transferred to the successor entity provided that equivalent privacy policy standards are maintained
• Rights Protection — Data may be disclosed where necessary to protect the rights, property, or safety of 96vin, our users, or the public from a credible threat

All third parties that receive 96vin user data are bound by strict data protection agreements and may only use that data for specified purposes. We conduct regular reviews of all service partners to ensure ongoing compliance.

5Cookies, Tracking Technologies & Preferences

The 96vin platform uses cookies and similar tracking technologies to enhance user experience, maintain secure login sessions, and analyse platform performance. The use of these technologies is standard practice in the online services industry.

• Session Cookies — Automatically deleted when you close your browser. Used to maintain your login status and temporary settings during your active session
• Persistent Cookies — Stored on your device for a defined period. Helps us remember your preferences such as language, theme, and display settings
• Analytics Cookies — Used to understand platform usage patterns on an aggregated and anonymous basis for the purpose of continuous improvement
• Security Cookies — Help identify and prevent fraudulent activity, unauthorised access, and cyberattacks targeting user accounts.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect platform functionality, including the ability to stay logged in or access certain features. Third-party cookies are only permitted from approved providers and are not used for individually targeted advertising.

6Data Security Measures

96vin continuously invests in cybersecurity infrastructure to ensure your personal data remains protected at all times. Our approach is layered — meaning even if one line of defence is breached, subsequent layers will continue to safeguard your data.

• End-to-end encryption using TLS 1.3 protocol for all data communications between your device and our servers
• Encryption of data at rest using AES-256 — the same standard used by international-grade defence and financial institutions
• Two-Factor Authentication (2FA) is available for all accounts as an additional login security layer.
• Intrusion detection systems (IDS/IPS) that monitor network traffic 24/7 and issue immediate alerts when unusual activity is detected
• Network segmentation — database, application, and management servers are placed in separate network segments.
• Automatic daily data backup with full encryption, stored across geographically separate locations for disaster recovery.
• Mandatory cybersecurity training for all staff with access to user data systems.

7Data Retention Period

96vin retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal requirements. Once the retention period expires, data is securely deleted or permanently anonymised.

When an account is closed at the user's request, data not subject to legal retention requirements will be deleted within 30 days. Data that must be retained will be fully anonymised so that it cannot be linked to any specific individual.

8Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 and the international privacy principles we adhere to, you have the following rights regarding the personal data we hold. We fully respect and facilitate the exercise of these rights.

To exercise any of the above rights, contact our data protection team via customer support. Requests will be acknowledged within 3 business days and resolved within 14 business days. For more complex cases, we may require up to 30 business days and will notify you of the need for additional time.

9Cross-Border Data Transfers

As an online platform operating on global infrastructure, some user data may be processed or stored outside Malaysia by the cloud and payment service providers we use. 96vin ensures that all cross-border data transfers are carried out with adequate safeguards in place.

• All international data transfers are protected by data processing agreements (DPAs) that comply with recognised data protection standards
• The cloud providers we use comply with international security standards including ISO 27001 and SOC 2 Type II.
• The most sensitive financial and KYC data is prioritised for storage within Malaysia or Southeast Asia where possible
• We conduct ongoing reviews of all vendors to ensure a level of data protection equal to or higher than Malaysian legal requirements.

10Child Protection

96vin is an adult entertainment platform intended exclusively for users aged 18 and above. We have a strict zero-tolerance policy against registration or use of the platform by underage individuals.

• Our platform actively verifies age during the registration process through identity document verification
• We do not intentionally collect, store, or process personal data of individuals under the age of 18.
• Should we discover that data belonging to a minor has been collected without our knowledge, that data will be deleted immediately and the relevant account will be closed
• Parents or guardians who discover that their child has registered on our platform are encouraged to contact our customer support immediately.

11Privacy Policy Amendments and Updates

96vin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. All amendments will be handled transparently and responsibly.

• Material amendments will be communicated to users via their registered email and in-platform notifications at least 14 days before taking effect
• The "Updated" date shown at the top of this document will always reflect the latest version in effect
• Continued use of the platform after an amendment's effective date constitutes acceptance of the updated terms
• If you disagree with an amendment, you have the right to close your account before the amendment's effective date
• Previous versions of this Privacy Policy are available upon request through customer support, if needed for reference or dispute purposes

12Contact Our Data Protection Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our Data Protection Officer (DPO) team is ready to assist.

For unresolved data protection complaints within a reasonable timeframe, you also have the right to refer the matter to Malaysia's Department of Personal Data Protection (PDPD) or the relevant regulatory authority.