96mas ("we", "us", "our") operates the online gaming and sports betting platform accessible at https://96mas.cam (the "Platform"). We are committed to protecting the privacy and personal data of every individual who visits, registers with, or uses the Platform.
This Privacy Policy ("Policy") explains in plain and precise terms what personal data we collect from you, the purposes for which that data is processed, how long we retain it, who we may share it with, and what rights you hold in respect of your personal information. This Policy applies to all users of the 96mas Platform, including registered players, visitors who browse without registering, and individuals who contact our customer support team.
This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the agreement between you and 96mas.
The following terms are used throughout this Privacy Policy with the meanings assigned below:
96mas collects Personal Data from you through a number of channels depending on your interaction with the Platform. The categories of data we collect include the following:
When you create an account on the 96mas Platform, we collect:
To comply with our regulatory obligations and process financial transactions, we collect:
When you make deposits or withdrawals, we collect:
As you use the Platform, we automatically collect:
When you contact our support team or respond to communications from us, we collect:
Where you voluntarily engage with our responsible gambling tools — including deposit limit requests, self-exclusion requests, or problem gambling disclosures — we collect and retain data relating to those interactions as Special Category Data with your explicit consent, processed for the specific purpose of protecting your wellbeing.
96mas processes your Personal Data for the following purposes:
| Purpose | Description |
|---|---|
| Account Administration | Creating and managing your account, processing login authentication, and maintaining account records. |
| Identity & Age Verification | Conducting KYC verification to confirm your identity and that you meet the 21+ minimum age requirement. |
| Transaction Processing | Processing deposits and withdrawals in MYR via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, and other supported Malaysian payment methods. |
| Fraud Prevention & Security | Detecting and preventing fraudulent activity, multi-accounting, money laundering, and other prohibited conduct. |
| Regulatory Compliance | Meeting obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and gaming regulatory requirements. |
| Customer Support | Responding to your enquiries, resolving account issues, and processing complaints through our 24/7 live chat and email channels. |
| Responsible Gambling | Operating deposit limits, self-exclusion tools, session limits, and other player protection mechanisms. |
| Platform Improvement | Analysing aggregated and anonymised usage patterns to improve Platform performance, game selection, and user experience. |
| Promotional Communications | Sending bonus offers, promotional notifications, and product updates where you have provided consent or where permitted by applicable law. |
96mas processes your Personal Data on the following legal grounds, depending on the specific nature of the Processing activity:
96mas does not sell, rent, or trade your Personal Data to third-party marketers or data brokers under any circumstances. Your data may be shared with the following categories of recipients where strictly necessary:
We engage reputable third-party service providers who Process data on our behalf under binding Data Processing Agreements. These include:
We may be required by law, court order, or regulatory mandate to disclose certain Personal Data to government authorities, gaming regulators, law enforcement agencies, or financial intelligence units. We will only disclose the minimum data necessary to comply with such requirements and will, where legally permissible, notify affected users of such disclosures.
In the event of a merger, acquisition, business sale, or restructuring involving 96mas, Personal Data held by us may be transferred to a successor entity as part of that transaction. We will notify affected users of any material change in data controller identity with reasonable advance notice.
96mas retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is the longer. Our standard retention periods are as follows:
Upon expiry of applicable retention periods, Personal Data will be securely deleted or anonymised in accordance with our data destruction procedures.
The 96mas Platform uses cookies and similar tracking technologies to operate certain Platform features, remember your preferences, and analyse how the Platform is used. We use the following categories of cookies:
You may manage your cookie preferences through your browser settings. However, disabling strictly necessary cookies may prevent certain features of the Platform from operating correctly. 96mas does not use third-party advertising or behavioural targeting cookies.
96mas implements comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. Our security framework includes:
Subject to applicable law and certain conditions, you have the following rights in relation to the Personal Data that 96mas holds about you:
You have the right to request a copy of the Personal Data we hold about you, and to receive information about how it is processed.
You have the right to request correction of inaccurate or incomplete Personal Data held in your account without undue delay.
You may request deletion of your Personal Data where it is no longer necessary, subject to our legal retention obligations.
You may request that we restrict processing of your data in certain circumstances, such as while a data accuracy dispute is resolved.
Where processing is based on consent or contract, you may request a structured, machine-readable copy of your data for transfer elsewhere.
You may object to processing based on legitimate interests, including the receipt of direct marketing communications, at any time.
To exercise any of the above rights, please contact us via the 24/7 live chat on the Platform or by email at [email protected]. We will respond to all data rights requests within 30 calendar days. In complex cases, this may be extended by a further 60 days, in which case we will notify you of the extension within the initial 30-day period.
Please note that the exercise of certain rights may affect your ability to continue using the Platform. For example, a request to delete your account data will result in permanent account closure.
The 96mas Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. If you are under 21 years of age, you must not use the Platform, register an account, or submit any personal information to us.
As part of our KYC process, we verify the age of every registered player prior to granting full account access. Where we discover or reasonably suspect that Personal Data has been provided by a person under the age of 21, we will immediately suspend the associated account, delete the data, and — where legally required — report the matter to relevant authorities.
As an internationally operating platform, 96mas may transfer your Personal Data to and process it in countries outside of Malaysia. Such transfers occur in connection with our use of cloud infrastructure providers and certain third-party service providers whose operations are based in other jurisdictions.
When transferring Personal Data internationally, 96mas takes appropriate safeguards to ensure that your data receives a level of protection equivalent to that provided under applicable Malaysian personal data protection frameworks. These safeguards include contractual data protection clauses, data processing agreements, and — where applicable — transfers to jurisdictions assessed to provide adequate data protection standards.
The 96mas Platform may contain references to or integrations with third-party services, payment providers, and game suppliers. Each such third party operates under its own privacy policy and data protection framework, for which 96mas accepts no responsibility.
When you interact with a third-party payment provider — such as Touch 'n Go eWallet, Boost, GrabPay, or your Maybank, CIMB, or Public Bank online banking portal — any data you submit directly to that provider is governed by that provider's own privacy policy. 96mas only receives transaction confirmation data from payment providers; we do not receive or store your full payment credentials.
96mas reserves the right to update or revise this Privacy Policy at any time. Material changes — particularly those that affect the legal basis for processing, the categories of data collected, or your rights — will be communicated to registered users via email or a prominent Platform notice at least 14 days before the changes take effect.
The "Last Updated" date displayed at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically to remain informed of how we protect your Personal Data. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.
For any questions, concerns, or requests relating to this Privacy Policy or the Personal Data that 96mas holds about you — including the exercise of your data rights under Clause 10 — please contact us through the following channels:
Available 24 hours a day, 7 days a week via the chat widget on the Platform. For urgent account or data security matters, live chat is the fastest way to reach our team.
Data rights requests and privacy enquiries: [email protected]
Please include "Privacy Request" in the subject line. We aim to acknowledge all requests within 3 business days.
When submitting a data rights request, please provide your registered email address and a brief description of your request so that we can verify your identity and process your request efficiently.
Privacy at 96mas is not a compliance checkbox — it's a genuine operating principle. Here's how we put that into practice for every Malaysian player on our Platform.
Every page, every transaction, every login on 96mas is protected by bank-grade SSL/TLS encryption. Your data in transit is always secured against interception.
96mas will never sell, rent, or trade your Personal Data to third-party marketers or data brokers. Your information is used solely for operating and improving the Platform.
Access, rectification, erasure, portability — all data rights are honoured. Submit a request via live chat or email and we will respond within 30 days, no runaround.
Payment data for Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, and other Malaysian methods is handled by certified payment processors. We never store full card or account numbers.
We don't keep your data indefinitely. Clear retention periods are defined for every category of Personal Data, and data is securely deleted when those periods expire.
We collect only the data necessary to operate the Platform, verify identities, process transactions, and comply with regulations. We don't collect data just because we can.
Your privacy is protected by 256-bit SSL encryption, a strict no-data-sales policy, and transparent data practices built around the needs of Malaysian players. For players aged 21 and above only.