Privacy Policy my96 – Personal Data Protection for Malaysian Members

This Privacy Policy is issued by my96, an online betting platform operating at https://my96.best, and applies to all registered members, website visitors, and users of the my96 mobile app. This document outlines our comprehensive privacy practices and our commitment to protecting your personal information at all times.

My96 is the responsible data controller for all personal data collected through our platform. This means we determine the purpose and manner in which your data is processed, and we are fully accountable for ensuring that such processing is carried out in a lawful, fair, and transparent manner in accordance with applicable law.

This policy applies to all channels through which you interact with my96 — including the main website, Android and iOS apps, email communications, WhatsApp and live chat CS interactions, and any other interaction that involves sharing personal data with my96.

My96 takes this responsibility seriously. We continuously invest in data protection technologies and procedures to keep your information secure at all times, and we comply with all applicable data protection obligations under Malaysian law.

My96 collects your personal data through several methods — directly when you register or use our platform, automatically as you browse the my96 website or app, and occasionally from legitimate third-party sources. The following are the main categories of data we collect:

My96 only collects data that is strictly necessary for the stated purposes. We do not collect sensitive personal data such as health information, biometric data, or political affiliations, except where required by law in very limited circumstances.

My96 uses your personal data for legitimate and transparent purposes. Below are the primary purposes for which we process your data, along with the legal basis for each:

• Account management: Creating and managing your my96 account, verifying your identity at login, processing registrations, and updating your profile information when required.
• Service provision: Allows you to make deposits using Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX; process withdrawals to your Malaysian bank account; and access all games and betting markets on my96.
• Security & fraud prevention: Detecting and preventing fraudulent activity, money laundering, duplicate account ownership and unauthorised access using my96's automated detection systems.
• Legal compliance: Fulfilling KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations, and reporting to the relevant authorities as required under Malaysian law.
• Customer support: This enables the my96 CS team to assist you in resolving any issues related to your account, payments, or platform use via live chat, WhatsApp, or email.
• Platform improvements: Analysing usage patterns in aggregate (not at an individual level) to improve the interface, performance, and overall user experience of the my96 platform.
• Service communications: Sending important account-related notifications — such as deposit confirmations, security alerts, or changes to terms that affect you.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling and reaching out to members who may need support, in line with my96's commitment to Responsible Gaming.

My96 does not sell, rent, or commercialise your personal data to any third party for marketing or any other purpose. However, there are limited situations where my96 needs to share your data with specific parties — always for legitimate purposes and with appropriate safeguards in place:

• Payment service providers: Providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banking institutions need to receive the transaction information required to process your deposits and withdrawals in RM. This sharing is limited strictly to the data necessary for that purpose.
• Game software providers: Companies such as Pragmatic Play, PG Soft, and Microgaming receive limited technical data necessary to run their games on the my96 platform — no full identity information is shared.
• IT service providers: Companies providing server hosting, cybersecurity systems, and technical infrastructure for my96 may have limited access to data in the course of delivering their services, and are bound by strict data protection agreements.
• Legal authorities: my96 will disclose personal data when required by Malaysian law, court order, or a request from a competent law enforcement agency — and only to the extent mandated by such directions.
• Independent auditors: Audit and certification bodies that verify the fairness of my96's RNG games may receive anonymised technical data strictly for audit purposes.

Every third party that receives data from my96 is bound by a data protection agreement requiring them to handle that data to a standard equivalent to my96's own. We conduct regular reviews of third-party compliance.

Data security is my96's highest technical priority. We employ multiple layers of protection to ensure your personal data is always safeguarded against unauthorised access, loss, or misuse:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and my96's servers is fully encrypted using TLS 1.3 — the same level of protection used by Malaysian online banking systems.
• Encryption of data at rest: Sensitive data stored in the my96 database — including passwords (stored as irreversible hashes) and bank account numbers — is encrypted using AES-256 standards.
• Multi-layered access control: Access to member data within my96's internal systems is governed by a least-privilege principle — staff can only access the data strictly necessary for their role, and all access is automatically logged.
• Intrusion detection system: my96 operates a 24/7 security monitoring system capable of detecting and responding to intrusion attempts, brute force attacks, and other suspicious activity in real time.
• Two-factor authentication (2FA): 2FA is available for all my96 accounts — we encourage all members to enable this feature for added protection against unauthorised access.
• Regular security audits: my96 conducts regular security assessments and penetration testing carried out by independent cybersecurity firms to identify and address any vulnerabilities.

My96 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by Malaysian law. The following are the data retention guidelines we adhere to:

Once data is no longer needed and the minimum retention period has elapsed, my96 will securely delete or anonymise it. Anonymised data cannot be re-linked to your identity and may be retained for longer for statistical analysis purposes.

The my96 website and app use cookies and similar tracking technologies to enhance your user experience and ensure the platform operates correctly. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for the core functionality of the my96 platform — including login session management, account security and transaction processing. Without them, the platform cannot operate properly and you will be unable to use my96 services. These cookies cannot be disabled.
• Preference Cookies: Stores your preferences such as language selection, display settings, and login details you've chosen to remember. These cookies improve your overall experience on the my96 platform.
• Analytics Cookies: This helps us understand, on an aggregate level, how members use the my96 platform — the most visited pages, time spent, navigation paths, and so on. This data is used to improve the platform and is not linked to any individual's identity.
• Security Cookies: Used by the my96 fraud detection system to identify suspicious activity and protect your account from unauthorised access.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies will affect the functionality of the my96 platform. For more details on the cookies we use, please contact our CS team.

As a my96 member and data subject under applicable data protection law, you have the following rights regarding your personal data. my96 is committed to respecting and facilitating the exercise of all these rights:

When it comes to your financial data at my96, we apply the strictest protection measures given the sensitivity of this information. All financial transactions on my96 are processed in MYR (RM) using trusted local Malaysian payment methods.

The financial information we hold includes deposit records (via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX), withdrawal records to your Malaysian bank account, and your complete transaction history within your my96 account. All this information is encrypted and stored in a secured environment.

The KYC (Know Your Customer) process may be required by my96 in the following situations:

• Before your first withdrawal from your my96 account
• When cumulative withdrawal amounts exceed a specified limit
• If there is any unusual account activity that requires identity verification
• When required by AML (Anti-Money Laundering) compliance obligations

KYC documents that may be requested include a valid copy of your MyKad or Malaysian passport, a recent Malaysian bank statement, and any other relevant supporting documents. All KYC documents received by my96 are stored at the highest security level and used solely for identity verification and legal compliance purposes.

My96 may send you various types of communications relating to our platform and services. It is important to understand the difference between essential service communications and optional marketing communications:

• Service communications (non-unsubscribable): Deposit or withdrawal confirmation emails, account security notifications (such as logins from a new device), important updates relating to changes in terms or policies that affect you, and responses to your support enquiries. These communications are part of the my96 service and cannot be unsubscribed from.
• Marketing communications (optional): Promotional emails covering new bonuses, special IPL or Malaysia Super League offers, new game announcements, and my96's weekly newsletter. All marketing communications are sent only with your consent and can be unsubscribed from at any time.

To manage your communication preferences or opt out of my96 marketing emails, click the "Unsubscribe" link in any of our marketing emails, or update your notification preferences in your my96 account settings. Unsubscribe requests will be processed within 5 business days.

My96 services are strictly limited to individuals aged 18 and above, with no exceptions. my96 does not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data belonging to a minor under the age of 18 has been collected without our knowledge — for example, as a result of a false date of birth being provided during registration — we will take immediate action to:

• Immediately suspending the account in question
• Delete all personal data associated with the minor in question
• Returning any deposited funds where it can be proven that the deposit did not originate from a suspected source
• Reporting the case to the relevant authorities if required

If you know or suspect that a minor has registered for or is using a my96 account, please contact us immediately at support@my96.best so that prompt action can be taken.

My96 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or technological developments. The "Updated" date at the top of this document will indicate the latest version currently in effect.

For any material changes to how we process your personal data, my96 will notify you via your registered email or an in-platform notification at least 14 days before the changes take effect. Your continued use of the my96 platform after the effective date will be considered acceptance of the updated policy.

If you have any questions or concerns, or wish to exercise your data privacy rights in relation to this Privacy Policy, please contact us through the following channels:

• Email: support@my96.best (subject: "Data Privacy Enquiry")
• Live Chat: Available 24/7 on the my96 platform in Bahasa Melayu
• WhatsApp: Number listed in the Contact Us section of the my96 platform