Privacy Policy my96 — Malaysia Players' Personal Data Protection

My96 ("we", "our platform") takes the privacy of all users who register and use services on my96.xyz seriously. This Privacy Policy is established to ensure you fully understand how your personal data is collected, used, stored, and protected when you use the my96 platform.

This Policy is formulated in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia — Malaysia's principal legislation governing the processing of personal data in commercial transactions. We are committed to fulfilling all obligations imposed by the PDPA on data processors such as my96.

This Privacy Policy applies to:

• All registered users of the my96.xyz platform.
• Visitors to my96.xyz who have not yet registered.
• Users who interact with my96 via Live Chat, email, or any other customer support channel.
• Any individual whose data is processed by my96 in the course of providing platform services.

My96 only collects personal data that is necessary to provide platform services safely and efficiently. The following are the categories of data we collect:

Identity & Contact Data

Financial & Transaction Data

Technical & Usage Data

My96 collects your personal data through the following channels:

My96 uses your personal data only for legitimate, clearly stated purposes. We will not use your data for any other purpose without first obtaining your additional consent:

• Platform Service Provision: To activate your account, process deposits and withdrawals, and enable you to access all games and features on my96.
• Identity Verification & Security: To verify your identity during login, detect suspicious activity, prevent fraud, and protect your account from unauthorised access.
• Service Communications: To send important notices relating to your account, including transaction confirmations, security alerts, and updates to our terms or policies.
• Customer Support: To assist you whenever you contact my96 support — whether via Live Chat, email, or any other channel.
• Platform Improvements: To analyse usage patterns at an aggregate level (not individual) in order to improve the interface, performance, and user experience of the my96 platform.
• Legal Compliance: To fulfil applicable legal and regulatory obligations, including anti-money laundering (AML) requirements and PDPA data protection compliance.
• Marketing Communications (With Consent): To send you information about promotions, VIP offers, and my96 updates — only if you have given consent to receive marketing communications at registration or at a later date.

My96 does not sell, rent, or commercialise your personal data to third parties. However, there are limited situations where we may share your data with certain parties for legitimate purposes:

All third parties that receive my96 data are bound by data protection obligations equivalent to, or stricter than, those imposed on my96 itself under Malaysia's PDPA.

My96 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, modification, disclosure, or destruction:

• Encryption in Transit: All communications between your browser and my96's servers are secured with TLS 1.3 protocol using AES-256 encryption, ensuring your data cannot be intercepted in transit.
• Storage Encryption: Sensitive data stored in my96's database — including account verification information — is encrypted using one-way hashing that cannot be decrypted.
• Access Controls: A role-based access control (RBAC) system ensures that only staff who require specific data to perform their duties can access it. All access is logged and monitored.
• 24-Hour Monitoring: An intrusion detection system (IDS) monitors my96's network activity around the clock to detect and block any security threats.
• Two-Factor Authentication: my96 supports two-factor authentication (2FA) for all user accounts as an added layer of protection.
• Regular Security Audits: Independent security assessments and penetration testing are conducted on a regular basis to identify and address any system vulnerabilities.

My96.xyz uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

You can control or delete cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the my96 platform. For instructions on managing cookies in your browser, refer to the help documentation for your browser of choice (Chrome, Firefox, Safari, Edge).

As an individual whose data is processed by my96, you have the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA):

To exercise any of the above rights, submit a written request to support@my96.xyz with the subject line "PDPA Request", along with your full name and the phone number registered to your my96 account for identity verification. my96 will process your request within the timeframe stipulated by PDPA.

My96 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy or as required by Malaysian law. The following are our data retention guidelines:

• Active Account Data: Retained for as long as your account remains active, plus any additional period required by law.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with Malaysian legal requirements governing financial records and anti-money laundering.
• Support Communication Logs: Retained for 2 years from the date of communication for reference in the event of a dispute.
• KYC Data (Identity Verification): Retained for the duration of the active account plus 5 years after account closure for AML compliance.
• Analytics Data & Technical Logs: Deleted or anonymised after 2 years.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. For data stored in physical form (where applicable), secure destruction methods such as shredding or degaussing will be used.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact my96's Data Protection Officer (DPO) through the following channels:

• Email: support@my96.xyz (subject: "Privacy Inquiry" or "PDPA Request")
• Live Chat: Available on my96.xyz — 24 hours a day, 7 days a week

My96 is committed to addressing all privacy complaints seriously and within a reasonable timeframe. We will acknowledge receipt of your complaint within 2 business days and provide a full response within 14 business days.

If you are not satisfied with my96's response, you have the right to submit a complaint to Department of Personal Data Protection (JPDP) Malaysia — the regulatory body responsible for overseeing PDPA compliance in Malaysia.

In today's digital age, personal data is incredibly valuable. When you register on any online platform — including my96 — you are entrusting your personal information to that platform. my96 does not take that trust lightly.

Many Malaysian players have heard stories of online platforms selling user data to marketers, or failing to take the protection of their users' financial information seriously enough. my96 operates on a different principle: your privacy is a fundamental right, not an optional extra. This means we do not collect data we do not need, we do not retain data longer than necessary, and we do not share your information with anyone who has no legitimate reason to receive it.

When it comes to financial transactions — the most sensitive matter for most users — my96 never stores your full payment method details. When you deposit via DuitNow or Touch 'n Go eWallet, your payment information is handled directly by a certified, regulated payment processor. my96 only receives confirmation that a payment was successful — not your account details or PIN.

We also want you to know that my96's customer support team cannot view your account password. This is by design — passwords are stored in hashed form that cannot be read by anyone, including my96's own engineers. This means that if you forget your password, the only option is to reset it via email — not to request it from support.

With regard to PDPA, my96 does not view legal compliance as a burden — we treat it as a minimum standard to be exceeded. The rights granted to you under PDPA — including the right of access, correction, and erasure — can be exercised by emailing support@my96.xyz, and our team will handle your request thoroughly and within the stipulated timeframe.

To players who have concerns about privacy while using an online entertainment platform: we understand those concerns are valid. Our answer is action, not words. SSL encryption, strict internal access controls, a no data-selling policy, and PDPA compliance you can verify yourself — these are the concrete proof of my96's commitment to protecting your privacy as a Malaysian player who deserves nothing less.