my96m Privacy Policy — Your Data, Handled with Care

1. Introduction

my96m operates an online sportsbook, live casino, and slot games platform that serves Malaysian players. In the course of providing those services, my96m necessarily processes personal data belonging to registered account holders, prospective players who have contacted support, and visitors to the website. This Privacy Policy describes that processing in accordance with good data-handling practice and the obligations applicable to my96m's operations.

This policy applies to all my96m products and services accessible through the my96m website, including the sportsbook, live casino tables, slot library, wallet, VIP programme, promotional features, responsible-gambling tools, and customer support. It should be read alongside the Terms & Conditions and the information provided on the Responsible Gambling page.

By registering an account, depositing funds, placing a wager, or otherwise using my96m, a player acknowledges that personal data will be collected and used as described in this policy. If a player does not agree with this policy, the player should not use my96m.

2. Definitions

In this policy, "personal data" means any information that identifies or could reasonably be used to identify a natural person, either directly or in combination with other data. "processing" covers any operation performed on personal data, including collection, storage, use, disclosure, transfer, and deletion. "player" means the individual who registers and uses a my96m account.

"KYC data" refers to identity verification documents and related information collected as part of the know-your-customer process. "payment data" covers bank account numbers, e-wallet identifiers (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX details), and cryptocurrency wallet addresses used in connection with my96m transactions. "technical data" means device identifiers, IP addresses, browser type, session data, and similar information collected automatically.

3. Personal Data We Collect

3.1 Registration and Account Data

When a player creates a my96m account, we collect the name, date of birth, email address, and phone number provided during registration. This data is used to create the account, send transactional communications, and verify that the player meets the minimum age requirement of 21 years.

3.2 Identity Verification (KYC) Data

To comply with applicable verification and anti-money-laundering obligations, my96m may request a copy of a Malaysian identity card (MyKad), passport, or other government-issued identification, as well as proof of residential address and, in certain circumstances, evidence of the source of funds used for deposits. This information is processed to verify the player's identity, confirm payment method ownership, and prevent fraud.

3.3 Financial and Payment Data

Transaction records, deposit amounts, withdrawal requests, wallet balances, bonus transaction history, and the identifiers associated with payment methods — including Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and USDT TRC20 wallet addresses — are recorded to operate the cashier, detect unusual financial activity, and fulfil reporting obligations.

3.4 Gameplay and Betting Data

Wager history, game session logs, odds data, settled results, sportsbook selections (including EPL and Liga Super Malaysia markets), casino table results, and slot play logs are stored to maintain accurate account records, resolve disputes, prevent match-fixing or fraud, and allow my96m to operate the VIP tier and cashback programme fairly.

3.5 Communications Data

Live chat transcripts, support emails, feedback submissions, and internal notes relating to contact with my96m's support team are retained to resolve complaints, train support staff, and maintain a record of commitments made to players.

3.6 Technical Data

IP address, device type, operating system, browser version, session timestamps, click paths, page views, and cookies are collected automatically when the my96m website is accessed. This data supports fraud prevention, platform security, product improvement, and the accurate attribution of session activity to the correct account.

3.7 Data We Do Not Collect

my96m does not collect payment card numbers through our platform. We do not collect biometric data beyond what a third-party liveness-check provider may use solely for identity verification. We do not monitor the content of private communications on third-party messaging platforms not operated by my96m.

4. How We Use Personal Data

The following table summarises the principal purposes for which my96m processes personal data and the basis for each use.

5. Disclosure and Data Sharing

5.1 Service Providers

my96m engages third-party service providers who process personal data on our behalf to support the operation of the platform. These include identity verification providers, payment processors, cloud infrastructure operators, game content suppliers, fraud-detection services, and customer support tools. Such providers are permitted to use data only for the purposes contracted by my96m and are required to implement appropriate data security standards.

5.2 Payment Networks

Completing a financial transaction necessarily involves sharing relevant payment details with the applicable network or institution — for example, passing DuitNow transaction references to the receiving Malaysian bank, or relaying e-wallet payment confirmation data to Touch 'n Go, Boost, or GrabPay systems. This sharing is limited to what is operationally required to complete the transaction.

5.3 Legal and Regulatory Disclosure

my96m may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts where required by a valid legal demand, court order, or applicable statutory obligation. Where permitted, my96m will take reasonable steps to inform the player of any such disclosure unless doing so would be unlawful or would undermine a lawful investigation.

5.4 No Sale of Personal Data

my96m does not sell, rent, exchange, or otherwise provide personal data belonging to players to any third party for their independent marketing, advertising, or commercial purposes. This restriction applies regardless of any compensation offered by the third party.

6. Cookies and Technical Tracking

my96m uses cookies and similar tracking technologies to maintain player sessions, remember account preferences, detect suspicious activity, and measure how different parts of the platform are used. Strictly necessary cookies, which are required to keep the website functioning and the player session active, are placed automatically. Other cookies used for analytics or platform improvement may be subject to a player's cookie preferences where a consent mechanism is implemented.

Players can manage or disable non-essential cookies through their browser settings. Disabling all cookies may affect the ability to log in, place bets, or complete financial transactions. my96m does not place cookies on devices for the purpose of tracking players across unrelated third-party websites.

7. Data Retention

my96m retains personal data for as long as necessary to fulfil the purposes described in this policy. The principal retention periods are as follows:

• Active account data: held for the duration of the account relationship and defined period after closure to allow dispute resolution and legal compliance.
• KYC and identity documents: retained for the period required by applicable anti-money-laundering and record-keeping obligations, which may be five years or longer from the end of the account relationship.
• Financial transaction records: retained for a minimum of five years to satisfy applicable financial reporting and audit requirements.
• Support communications: retained for a reasonable period sufficient to resolve complaints and maintain operational quality records.
• Technical and log data: retained for security monitoring and fraud-prevention purposes, typically for a shorter rolling period unless a specific investigation requires longer retention.

Upon expiry of the applicable retention period, personal data is deleted or anonymised in manner that prevents reconstruction. Deletion may be delayed if data is subject to an active legal hold, regulatory inquiry, or unresolved dispute.

8. Data Security

my96m implements technical and organisational security measures proportionate to the risks associated with processing personal data on a financial services platform. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between player devices and my96m infrastructure;
• encryption of sensitive fields within databases, including KYC document references and payment identifiers;
• access controls that limit staff access to personal data to those with a specific operational need;
• ongoing monitoring for suspicious access patterns, anomalous transactions, and potential security incidents;
• regular security reviews of platform components and third-party integrations; and
• two-factor authentication capabilities available to all registered accounts.

While my96m takes data security seriously, no internet-connected platform can guarantee absolute security. Players contribute to the protection of their own data by using a strong, unique password, not sharing credentials, logging out on shared devices, and promptly reporting any suspected unauthorised access to support.

9. Player Rights

Subject to applicable requirements, players may exercise the following rights in relation to their personal data held by my96m:

9.1 Right of Access

A player may request a copy of the personal data my96m holds about them. my96m will provide this in a structured, commonly used format, subject to verifying the identity of the requester and redacting data that relates to or would harm third parties.

9.2 Right of Rectification

A player may request the correction of inaccurate or incomplete personal data. In some cases, correction of certain fields (such as the registered name) will require additional documentation to prevent fraud.

9.3 Right to Object

Where my96m processes personal data on the basis of legitimate interests, a player may object to that processing in circumstances where the player's individual interests override my96m's stated purpose. Objections will be assessed on a case-by-case basis.

9.4 Right to Erasure

A player may request deletion of their personal data where it is no longer required for the purpose for which it was collected, where consent has been withdrawn (and no other basis applies), or in other applicable circumstances. This right does not apply where retention is required by law or is necessary to defend a legal claim. Players should be aware that requesting erasure of certain data may prevent my96m from maintaining the account.

9.5 Exercising Your Rights

Requests relating to any of the above rights should be submitted through my96m live chat support or by email at [email protected]. To protect player data, all requests will require identity verification before my96m takes any action. my96m aims to respond to valid requests within a reasonable period.

10. International Data Transfers

Some service providers engaged by my96m operate infrastructure or personnel outside Malaysia. Where personal data is transferred to such providers, my96m takes steps to ensure that the recipient applies appropriate data protection standards through contractual arrangements, accreditation requirements, or equivalent safeguards. Player data is not routed to third parties in jurisdictions that lack recognised data protection frameworks without implementing such protections.

11. Minors

my96m is strictly an adults-only platform. No person under the age of 21 is permitted to register an account or participate in any my96m service. If my96m discovers that personal data has been collected from a person under 21, that data will be deleted promptly and the associated account will be closed. If a parent or guardian suspects that a minor has registered with my96m, the matter should be raised immediately with support.

12. Changes to This Policy

my96m may update this Privacy Policy to reflect changes in data handling practices, applicable legal requirements, new products or services, or updates to third-party processing arrangements. The revised policy will be published on this page with an updated effective date. Where a change is material, my96m may provide additional notice through an account dashboard notification.

Continued use of my96m after the effective date of an updated policy constitutes acknowledgement of the changes. Players who do not accept a material change should contact support to discuss their options before continuing to use the platform.

13. Contact

Questions, concerns, or requests relating to this Privacy Policy or the handling of personal data by my96m should be directed to the support team through the on-site live chat or by email. The support email address is [email protected], displayed here as plain text. Players should not include passwords, one-time verification codes, or full payment card details in any communication with support.

For responsible gambling concerns or self-exclusion requests, please visit the Responsible Gambling page, which contains additional contact information and guidance on available support resources.