96mas Privacy Policy – Your Personal Data Protection

This Privacy Policy ("Policy") is published by 96mas ("we", "Platform" or "96mas") to describe our personal data management practices in relation to information collected from users and registered members of the 96mas online betting platform operating under the domain 96mas.net.

As an online betting platform serving Malaysians, 96mas understands how fundamental trust is to our relationship with every member. Your privacy is not merely a legal obligation to us — it is the foundation of the trust you have placed in 96mas from the moment you registered with us.

This Privacy Policy applies to all individuals who access or use the 96mas platform, including website visitors, registered users, active members, and former members whose data is still retained in our systems in accordance with applicable legal requirements.

96mas only collects personal data that is strictly necessary to provide the platform's services to you. We do not collect excessive or irrelevant data. Below are the categories of data we collect and the purposes for which they are collected:

96mas does not collect sensitive category data such as health information, political views, religious beliefs, or biometric data, except where strictly required by law and with your express consent.

All personal data collected by 96mas is used for legitimate, clearly stated purposes. We process your data on a solid legal basis — whether contractual necessity, legal obligation, legitimate interest, or your freely given consent.

• Account Management: Creating and maintaining your member account, processing registration, verifying identity, and managing your access to the 96mas platform.
• Financial Transactions: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and handles withdrawals to your Malaysian bank account.
• Platform Security: Detecting and preventing fraud, multi-account usage, money laundering and any suspicious activity or violations of 96mas's terms of service.
• Customer Support: Assisting you with technical issues, account enquiries, transaction disputes, and any other support needs you raise with the 96mas support team.
• Service Communications: Sends you important account notifications, transaction updates, terms changes and relevant security information via email or SMS.
• Legal Compliance: Fulfilling reporting, audit, and verification obligations required under applicable Malaysian law.
• Service Improvements: Analysing aggregated usage patterns to enhance the platform experience, including slots performance, live casino, Sports Betting, and other features on 96mas.

96mas does not sell, rent, or trade members' personal data to third parties for marketing purposes. However, in the course of operating the platform, there are limited situations where we may need to share certain information with trusted parties:

• Payment Providers: Required transaction information is shared with payment providers such as FPX, DuitNow and approved Malaysian e-wallet service providers solely for the purpose of processing your transactions.
• Technology Service Providers: Technical partners who assist us in hosting the platform, analysing performance data and providing cybersecurity services — all bound by strict confidentiality agreements.
• Legal Authorities: Information required by Malaysian law, court orders, or directives from relevant government agencies will be disclosed in accordance with proper legal procedures.
• Anti-Fraud Agencies: In cases involving suspected fraud or money laundering, certain information may be shared with relevant anti-fraud agencies or platforms.

96mas continually invests in the latest cybersecurity infrastructure to ensure members' personal data is always protected to the highest standard. Our technical and organisational security measures include:

• 256-bit SSL/TLS end-to-end encryption for all transmitted data.
• Fully encrypted database with strict role-based access controls.
• Two-factor authentication (2FA) for staff access to internal systems.
• 24/7 monitoring by automated intrusion detection systems (IDS).
• Regular independent security audits and system penetration testing.
• A tested incident response plan to ensure a swift response in the event of a breach.
• Regular data backups stored at separate, secure locations.

While 96mas takes all reasonable measures to protect your data, no security system in the world can be guaranteed 100% secure. We encourage you to take your own precautions as well, such as using a strong and unique password for your 96mas account.

The 96mas platform uses cookies and similar tracking technologies to enhance your experience, understand how you use the platform, and secure your login session. There are three main types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Storing your preferences such as display settings, preferred language, and game preferences to enable a more personalised experience each time you visit 96mas.
• Analytics Cookies: Helps us understand aggregated, anonymised usage patterns to improve platform performance, test new features, and identify areas for enhancement.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect your experience on the 96mas platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a 96mas member have the following rights regarding the personal data we hold about you:

96mas retains members' personal data only for as long as necessary to fulfil the original purpose of collection, or as required by applicable Malaysian law. Our general data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account remains active on the 96mas platform, plus any mandatory period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with Malaysian financial and tax regulatory requirements.
• Communication Records: Customer support chat logs are retained for 2 years for reference and dispute resolution purposes.
• Security Log Data: Access logs and security audit trails are retained for 12 months for fraud detection and incident investigation purposes.
• Cookie Data: Session cookies expire automatically when you close your browser, while persistent cookies have an expiry period specified in the cookie settings.

Once the retention period has ended and there is no legal requirement to retain the data further, 96mas will securely and irreversibly delete or anonymise your data.

96mas reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements to the 96mas platform.

You will be notified of any material changes to this Privacy Policy through:

• Email notifications sent to your account's registered email address.
• A prominent notice displayed on the 96mas platform homepage.
• Updated on the date shown under "Last Updated" at the top of this document.

Continued use of the 96mas platform after an amendment's effective date constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, please discontinue use of the platform and contact us to close your account.

If you have any questions, concerns or complaints regarding how 96mas handles your personal data, or wish to exercise any of your privacy rights, please contact our Data Protection Officer (DPO) through the following channels:

• Email: support@96mas.net (subject: "Privacy Policy Enquiry")
• Live Chat: Available on the 96mas platform 24 hours a day, 7 days a week
• FAQ: Visit FAQ page us for an immediate response

Our privacy team is committed to responding to all enquiries within 14 business days. For more complex complaints requiring thorough investigation, we will keep you informed of the progress within the same timeframe.