Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by 966win ("966win", "we", "us", or "our"), the operator of the online gaming platform accessible at https://966win.cam. This Policy governs the collection, use, storage, sharing, and protection of personal data belonging to all individuals who access or use the 966win platform, including registered account holders, prospective users, and visitors to our website (collectively referred to as "Users", "Players", or "you").

966win is committed to handling personal data responsibly, in accordance with applicable international data protection standards and principles. This Policy is designed to be transparent — we want you to understand exactly what data we collect, why we collect it, and what control you retain over it.

By registering an account, making a deposit, or otherwise using any part of the 966win Services, you confirm that you have read and understood this Privacy Policy and that you consent to the data practices described herein. If you do not consent to any part of this Policy, you should discontinue use of the Services immediately.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" — any information that identifies, or could reasonably be used to identify, a living individual, either alone or in combination with other data.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transmission, modification, or deletion.
• "Data Controller" — 966win, as the entity that determines the purposes and means of processing personal data.
• "Data Processor" — a third party that processes personal data on behalf of 966win pursuant to a written agreement.
• "Consent" — freely given, informed, and unambiguous agreement by a User to the processing of their personal data for a specified purpose.
• "Services" — all products, games, betting markets, payment facilities, and support functions offered by 966win at https://966win.cam.
• "KYC" — Know Your Customer; the identity verification process required of all Players prior to withdrawal processing.
• "Cookie" — a small text file stored on a User's device by their web browser to retain information about their interaction with a website.
• "Third Party" — any individual or entity other than 966win and the relevant User.

3. Personal Data We Collect

3.1 Registration & Account Data

When you create an account on 966win, we collect the following information as part of the registration process:

• Full legal name;
• Date of birth (for age verification purposes);
• Email address;
• Contact telephone number;
• Country and city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam);
• Username and encrypted password credentials.

3.2 Identity Verification (KYC) Data

Prior to processing any withdrawal request, 966win requires identity verification. KYC data collected may include:

• Copies of government-issued photo identity documents — Malaysian MyKad, Passport, or Driver's Licence;
• Proof of residential address — utility bill, bank statement, or official correspondence dated within three months;
• Selfie photographs holding identity documents, for identity confirmation purposes.

3.3 Financial & Transaction Data

966win collects financial data related to deposits and withdrawals, including:

• Payment method details (e.g., e-wallet account identifiers for Touch 'n Go eWallet, Boost, GrabPay; bank account references for DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB; cryptocurrency wallet addresses for BTC and USDT transactions);
• Deposit and withdrawal amounts in MYR;
• Transaction timestamps and reference identifiers.

966win does not store full card numbers or CVV codes. Payment credentials are processed and secured by our licensed payment partners.

3.4 Gaming & Behavioural Data

We collect data about your activity on the platform, including:

• Game history, betting records, and wager amounts;
• Sports markets accessed and in-play betting activity;
• Session duration, frequency of play, and responsible gambling tool usage;
• Bonus claims and promotional engagement.

3.5 Technical & Device Data

When you access 966win, we automatically collect certain technical information:

• IP address and approximate geolocation;
• Device type, operating system, and browser type and version;
• Pages visited, navigation paths, and time spent on platform sections;
• Cookie identifiers and session tokens.

3.6 Communications Data

If you contact our support team via live chat, WhatsApp, or email, we retain records of those communications including the content of your messages, the date and time of contact, and the resolution reached.

4. How We Collect Your Data

966win collects personal data through the following means:

• Direct Provision — information you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting our support team;
• Automated Collection — technical and behavioural data collected automatically as you use the platform, via cookies, server logs, and analytics tools;
• Third-Party Sources — identity and fraud screening data received from KYC verification partners and payment processors, used to confirm the accuracy of information you have provided;
• Responsible Gambling Registries — where required by licensing obligations, we may receive notification from self-exclusion schemes that a User has requested to be excluded from gambling services.

5. Data Processing & Use

966win processes your personal data for the following purposes:

966win does not use personal data for purposes beyond those described in this Policy without providing prior notice and, where required, obtaining your consent.

6. Legal Basis for Processing

966win processes personal data under one or more of the following recognised legal bases:

• Contract Performance — processing necessary to provide the Services you have registered for, including account management, transaction processing, and customer support;
• Legal Obligation — processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, identity verification mandates, and responsible gambling compliance requirements imposed by our licensing authority;
• Legitimate Interest — processing necessary for 966win's legitimate business interests, including fraud prevention, platform security, internal analytics, and product improvement, where those interests are not overridden by your fundamental rights and freedoms;
• Consent — processing based on your explicit, freely given consent, particularly in relation to marketing communications. You may withdraw consent at any time by contacting our support team.

7. Data Sharing & Disclosure

7.1 Internal Sharing

Personal data is accessible only to 966win personnel who require it to perform their operational duties. Access is governed by role-based permissions and strict internal data handling protocols.

7.2 Third-Party Service Providers

966win shares personal data with trusted third-party service providers who assist us in delivering the Services, including:

• Payment processors and financial institutions (including Malaysian e-wallet operators and bank partners);
• KYC and identity verification providers;
• Fraud detection and anti-money laundering screening services;
• Cloud infrastructure and platform hosting providers;
• Customer support platform providers;
• Analytics and platform performance monitoring services.

All third-party processors are engaged under written data processing agreements that require them to handle personal data in accordance with applicable data protection standards and exclusively for the purposes specified by 966win.

7.3 Regulatory & Legal Disclosure

966win may disclose personal data to regulatory authorities, law enforcement agencies, or other competent bodies where required by applicable law, court order, or licensing obligation. Such disclosures are limited to the data strictly necessary for the purpose of the request.

7.4 No Sale of Personal Data

966win does not sell, rent, or lease personal data to third parties for their own marketing or commercial purposes under any circumstances.

8. Data Retention

966win retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active Account Data — retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements;
• KYC & Identity Documents — retained for a minimum of five (5) years following the conclusion of the business relationship, as required by applicable AML and compliance frameworks;
• Transaction Records — retained for a minimum of five (5) years for financial reporting and regulatory audit purposes;
• Marketing Communication Preferences — retained until you withdraw consent or request deletion, subject to retention for a reasonable period to record the withdrawal of consent;
• Support Communications — retained for a period of three (3) years following the resolution of the relevant matter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Data Security

966win implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between Users and the platform;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Role-based access controls restricting internal data access to authorised personnel only;
• Multi-factor authentication requirements for internal administrative systems;
• Regular security audits, penetration testing, and vulnerability assessments;
• Incident response procedures to detect, investigate, and remediate any potential data breach.

While 966win applies industry-standard security practices, no online system can guarantee absolute security. Users are responsible for maintaining the confidentiality of their own account login credentials. Any suspected unauthorised access to your account should be reported to our support team immediately.

10. Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files placed on your device by a web server when you visit a website. They are used to store information about your browsing session or preferences to improve your experience on subsequent visits.

10.2 Types of Cookies Used by 966win

• Strictly Necessary Cookies — essential for the platform to function. These cookies enable core functionality such as session management, login persistence, and security features. They cannot be disabled without impairing platform functionality;
• Functional Cookies — used to remember your preferences, such as language settings, display configurations, and responsible gambling tool settings;
• Analytics Cookies — used to collect aggregated, anonymised data about how Users navigate and interact with the platform, enabling us to improve features and performance;
• Fraud Prevention Cookies — used to detect and prevent fraudulent activity and multi-account abuse.

10.3 Managing Cookies

You may configure your browser settings to decline non-essential cookies. Please note that disabling certain cookies may affect the functionality of the 966win platform, including login persistence and preference retention. Strictly necessary cookies cannot be disabled through browser settings without impairing platform access.

11. Your Data Rights

Subject to applicable data protection law and our legal retention obligations, you have the following rights in relation to your personal data held by 966win:

To exercise any of the rights listed above, please contact our support team at [email protected] or via live chat. We will respond to all valid requests within 30 days of receipt. In certain circumstances, we may need to verify your identity before processing a request.

12. Children & Minors

966win is strictly an adult platform. Access to all Services is limited to individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from an individual who is under the age of 21, we will immediately suspend the relevant account, delete all associated personal data as permissible under applicable law, and report the matter to our compliance team for further review.

If you believe that a minor may have registered an account on 966win, please contact our support team immediately so that we can take appropriate action without delay.

13. International Data Transfers

966win operates on infrastructure that may involve the transfer and storage of personal data in countries outside of Malaysia and the User's country of residence. This includes transfers to jurisdictions where 966win's data hosting and processing partners are located.

Where personal data is transferred internationally, 966win ensures that appropriate safeguards are in place to protect the data, consistent with applicable data protection standards. These safeguards may include contractual clauses requiring recipient parties to maintain equivalent protections, or reliance on recognised legal frameworks for international data transfers.

14. Policy Amendments

966win reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform features. Where material changes are made, we will endeavour to notify registered Users by email or via a prominent notice on the platform prior to the changes taking effect.

The updated Policy will be published on this page with a revised "Last Updated" date. Your continued use of the Services following publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the Services and request account closure.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact 966win's Data Protection team through any of the following channels:

We aim to respond to all privacy-related enquiries and data subject access requests within 30 calendar days of receipt. Complex requests may require additional time, in which case we will notify you of the expected timeline.

Please note that email addresses displayed on this page are for support and data protection enquiries only. They are presented as plain text and are not clickable links. Please type the address directly into your email client to contact us.