Privacy Policy

This Privacy Policy ("Policy") sets out how vs96 ("vs96", "we", "us", or "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your", or "Player") who access or use the vs96 online gaming platform at https://vs96.cam (the "Platform").

vs96 is committed to safeguarding the privacy of all players, whether they are based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere. We process personal data in accordance with applicable data protection legislation and maintain internal policies designed to ensure the security and confidentiality of all information entrusted to us.

By accessing or using the Platform, registering an account, or making a deposit, you acknowledge that you have read and understood this Policy. If you do not accept the terms of this Policy, please discontinue use of the Platform immediately.

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" — Any information that identifies or can identify a natural person, directly or indirectly, including name, identification number, contact information, financial data, and online identifiers.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — vs96, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — A third party that processes personal data on behalf of vs96 under documented instruction (e.g., payment service providers, KYC verification providers).
• "Consent" — A freely given, specific, informed, and unambiguous indication of your wishes by which you agree to the processing of personal data relating to you.
• "Cookie" — A small text file stored on your device by the Platform for the purposes of functionality, analytics, or personalisation.
• "KYC" — Know Your Customer — the identity verification process required to comply with anti-money laundering and responsible gambling obligations.

vs96 collects personal data through several channels in the ordinary course of operating the Platform. The categories of personal data we collect include:

3.1 Registration and Account Data

• Full legal name, date of birth, and nationality
• Email address, mobile phone number, and preferred contact details
• Residential address (including city, state, and postcode)
• Username and encrypted account password
• Security question responses and two-factor authentication credentials

3.2 Identity Verification (KYC) Data

• Copy of Malaysian identity document (MyKad, Driver's Licence, or Passport)
• Proof of residential address (utility bill, bank statement — dated within three months)
• Selfie photograph holding identity document
• Payment method verification documentation where required

3.3 Financial and Transaction Data

• Deposit and withdrawal history, including amounts, timestamps, and payment method references
• E-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay) and bank account details used for transactions
• Cryptocurrency wallet addresses where applicable
• FPX and DuitNow transaction reference numbers

3.4 Usage and Technical Data

• IP address, browser type and version, operating system, and device identifiers
• Pages visited, session duration, click patterns, and feature interactions
• Geolocation data (country and region level, not precise GPS coordinates)
• Login timestamps and session activity logs

3.5 Communication Data

• Customer support chat transcripts, emails, and support ticket records
• Promotional opt-in and opt-out preferences
• Survey or feedback responses where voluntarily submitted

vs96 processes your personal data for the following specific purposes. The table below provides a structured overview of each processing activity:

vs96 processes personal data only where a valid legal basis exists. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing necessary to fulfil our obligations under the Terms and Conditions you have entered into with vs96, including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) legislation, responsible gambling regulations, and tax reporting obligations.
• Legitimate Interest: Processing carried out in pursuit of vs96's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your rights and interests.
• Consent: Processing carried out with your explicit prior consent, specifically in relation to the receipt of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

vs96 does not sell, rent, or trade your personal data to third parties. We may, however, share personal data with the following categories of recipients where strictly necessary and proportionate:

• Payment Service Providers: Entities including FPX, DuitNow, and e-wallet operators (Touch 'n Go, Boost, GrabPay) and banking partners (Maybank, CIMB, Public Bank, Hong Leong) that process financial transactions on our behalf. These providers receive only the data necessary to complete the specific transaction.
• KYC and Compliance Providers: Licensed identity verification and anti-fraud service providers engaged to perform document verification, AML screening, and fraud risk assessment in connection with your account.
• Technology Infrastructure Providers: Hosting, database management, and cloud infrastructure providers operating under documented data processing agreements with vs96, who may hold personal data on servers on our behalf.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory direction, vs96 may disclose personal data to competent governmental or regulatory authorities. We will notify affected players where legally permitted to do so.
• Successor Entities: In the event of a merger, acquisition, or sale of all or a material part of vs96's assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

The vs96 Platform uses cookies and similar technologies to deliver functional, personalised, and secure user experience. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable core features such as session management, login authentication, and secure payment flows. They cannot be disabled without rendering core functionality inoperative.
• Analytical and Performance Cookies: Collect aggregated, anonymised data about how players navigate and use the Platform — including page views, session lengths, and error logs — enabling us to improve site performance and user experience.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and responsible gambling tool configurations to deliver a personalised experience across sessions.
• Security Cookies: Used to detect fraudulent or anomalous behaviour, identify duplicate session risks, and support two-factor authentication processes.

You may manage cookie preferences through your browser settings. Please be aware that disabling strictly necessary cookies will impair or prevent your ability to use the Platform. vs96 does not use third-party advertising cookies or cross-site tracking technologies.

vs96 retains personal data only for as long as is necessary for the purpose it was collected, or as required by applicable legal and regulatory obligations. The general retention periods applied are as follows:

• Account and KYC Data: Retained for the duration of your active account, and for a minimum of five (5) years following account closure, in compliance with anti-money laundering and responsible gambling regulations.
• Transaction Records: Retained for a minimum of seven (7) years following each transaction to meet financial record-keeping regulatory requirements.
• Customer Support Records: Retained for three (3) years from the date of the support interaction, or longer where relevant to an ongoing dispute or investigation.
• Marketing Opt-In Records: Retained for the duration of your consent, plus one (1) year following withdrawal of consent as evidence of prior lawful processing.
• Technical and Usage Logs: Retained in identifiable form for up to twelve (12) months, after which data is anonymised for aggregate analytical use.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised in manner that prevents re-identification.

As a data subject, you hold the following rights in respect of your personal data held by vs96. You may exercise any of these rights by contacting our support team at [email protected]:

vs96 will respond to all verified data subject requests within thirty (30) calendar days of receipt. Where requests are complex or numerous, we may extend this period by a further sixty (60) days and will notify you accordingly.

vs96 implements and maintains comprehensive technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security: All data transmitted between your browser and the vs96 Platform is encrypted using TLS 1.3 with AES-256 encryption, ensuring communications cannot be intercepted in transit.
• Password Security: Passwords are stored in hashed and salted format using industry-standard cryptographic algorithms. Plaintext passwords are never stored or transmitted.
• Access Controls: Access to personal data within vs96 is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Two-Factor Authentication: vs96 offers and recommends two-factor authentication (2FA) for all player accounts as an additional layer of protection.
• Security Audits: Regular third-party security assessments, penetration testing, and vulnerability scanning are conducted to identify and remediate potential weaknesses in our systems.

The vs96 Platform is strictly intended for use by individuals aged 21 and above. vs96 does not knowingly collect personal data from any person under the age of 21. All registrants are required to confirm their age at registration, and age verification is conducted as part of the KYC process.

If vs96 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate parental consent, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on the Platform, please contact us immediately at [email protected].

The vs96 Platform does not contain links to external third-party websites in its standard navigation. Should the Platform ever reference or link to a third-party resource, please be aware that such websites operate independently and have their own privacy policies. vs96 accepts no responsibility or liability for the privacy practices, content, or data handling of any third-party website or service.

We encourage you to review the privacy policy of any third-party website you access in connection with payment processing (e.g., your bank's or e-wallet provider's own platform) to understand how your data is handled by those separate services.

In order to deliver the vs96 Platform and supporting services, personal data may be transferred to and processed in countries other than Malaysia, including countries where our technology infrastructure providers and licensed game studio partners operate. Such transfers will only occur where:

• The recipient country provides an adequate level of data protection as recognised under applicable law, or
• Appropriate contractual safeguards are in place (such as standard contractual clauses or equivalent data processing agreements), or
• The transfer is otherwise permitted or required under applicable law.

vs96 maintains documented data transfer agreements with all international data processors and conducts periodic reviews to ensure continued adequacy of protection.

vs96 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we provide. The effective date of the most current version is stated at the top of this document.

Material changes to this Policy will be communicated to registered players via email notification or a prominent notice on the Platform prior to the changes taking effect. We encourage you to review this Policy periodically to remain informed about how we protect your personal data.

Your continued use of the vs96 Platform following the publication of changes to this Policy constitutes your acknowledgement of the updated Policy. If you object to any changes, you may contact us to discuss your options or request account closure in accordance with our Terms and Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by vs96, please contact our Data Protection team through the following channel:

When contacting us regarding a data rights request, please include your registered account email address and a clear description of your request. We may require identity verification before processing requests that involve access to or deletion of personal data, to ensure we disclose or act upon data only to the legitimate account holder.

All privacy-related correspondence marked "Data Privacy Request" will be directed to vs96's designated data protection point of contact, who will handle your enquiry in accordance with the timelines set out in Section 9 of this Policy.