St996 Privacy Policy – Malaysian Member Personal Data Protection

1 Introduction

St996 is an online gaming platform that operates with full commitment to the privacy and data security of its members. We understand that your trust is our most valuable asset — and we do not take that responsibility lightly.

This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and global industry best practices. It explains in detail:

• The types of personal information we collect from you.
• The purpose and legal basis for processing that data.
• Parties who may receive your data and under what circumstances.
• The security measures we take to protect your data.
• Your rights as a data subject and how to exercise them.

This Privacy Policy should be read together with Terms and Conditions st996, which constitutes the entire agreement between you and our platform.

2 Personal Data We Collect

St996 only collects personal data that is strictly necessary to provide you with a quality service. This data falls into several key categories:

3 How We Use Your Personal Data

Every piece of data we collect is used for a clear and legitimate purpose. st996 uses your personal data for the following purposes:

• Account management: Creating, verifying and maintaining your member account on the st996 platform.
• Transaction processing: Processing deposits, withdrawals and all financial transactions securely and accurately.
• KYC and AML Compliance: Meeting the legal requirements of applicable Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance.
• Fraud prevention: Detecting and preventing fraudulent activity, multi-account usage or platform abuse.
• Service communications: Sending you important notifications regarding your account, transactions, promotions and policy updates.
• Platform enhancement: Analysing usage patterns to improve the functionality, design and user experience of the st996 platform.
• Responsible gambling: Monitoring gameplay patterns to identify early signs of problem gambling and offer appropriate support.
• Customer support: Resolving complaints, enquiries and technical issues reported to our team.

St996 will not use your data for purposes beyond the scope stated above without first obtaining your additional consent.

4 Data Sharing with Third Parties

St996 does not sell your personal data. However, there are limited situations where we need to share certain information with carefully selected third parties:

• Payment providers: Required financial data is shared with licensed payment processors such as FPX providers, e-wallet operators, and payment gateways for transaction processing purposes only.
• Game providers: Minimal session information is shared with game software providers for the purpose of content delivery and fraud prevention.
• Relevant authorities: st996 will fully comply with any court orders, regulatory authority requests, or legitimate legal requirements to disclose specific information.
• Auditors and consultants: Professional firms engaged for audit, compliance, or legal advisory purposes, subject to strict confidentiality agreements.

5 Cookies and Tracking Technologies

St996 uses cookies and similar tracking technologies to ensure our platform runs smoothly and to deliver a better experience for you. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as they are critical to platform operations.
• Analytics Cookies: Helping us understand how users interact with the platform so we can continuously improve the user experience. Data collected is anonymised and does not identify individuals.
• Functional Cookies: Saving your preferences such as language, display settings and login details to streamline repeat visits.
• Security Cookies: Helping detect and prevent fraud, unauthorised access and suspicious activity on your account.

You can manage your cookie settings through your web browser preferences at any time. Please note that disabling certain cookies may affect the functionality of some areas of the st996 platform.

6 Data Security

St996 continuously invests in robust data security infrastructure to protect your personal information from all threats. The key security measures we employ include:

• 256-bit SSL/TLS encryption for all data transmissions between users and servers.
• Passwords are stored using strong hashing algorithms — no password is ever stored in plain text.
• 24/7 system monitoring by our cybersecurity team to detect any anomalies.
• Independent security audits conducted at least twice a year by specialist external firms.
• Strict role-based access control (RBAC) among internal staff.
• A comprehensive incident response plan to address any data breach swiftly and effectively.

7 Your Rights as a Data Subject

Under Malaysian data protection law and international principles, you have the following rights regarding your personal data held by us:

To exercise any of the above rights, contact our data protection team via live chat or the support email listed in the footer of this site. All requests will be processed within 30 business days.

8 Data Retention and Deletion Policy

St996 does not retain your personal data longer than necessary. Data retention periods are as follows:

• Active account data: Retained for the duration your account remains active and for any additional period required by law following account closure.
• Financial transaction records: Retained for seven (7) years from the transaction date in accordance with Malaysian financial regulatory requirements.
• KYC Data: Retained for five (5) years after the termination of the business relationship for AML compliance purposes.
• Log and security data: Retained for 12 months for security investigation and fraud detection purposes.
• Support communication data: Retained for three (3) years after case resolution for reference and service improvement purposes.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be associated with any individual.

9 Changes to This Privacy Policy

St996 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technological developments. Any material changes will be communicated to you via:

• Email notifications sent to the address registered to your account.
• Prominent notices on the st996 website homepage.
• In-app notifications when you are logged in.

Changes take effect seven (7) days after the notice is published. Continued use of the st996 platform after that date is considered your acceptance of the updated Privacy Policy. You are advised to review this page periodically to ensure you are always up to date.

10 Contact Us for Privacy Enquiries

We welcome any enquiries, concerns or requests regarding your privacy and personal data protection. The st996 Data Protection Officer (DPO) team is ready to assist you through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the support icon at the corner of the platform.
• Support Email: Send your enquiry to the email address listed in the footer of this page. Responses are provided within 1–2 business days.
• Help Center: Visit the page FAQ us for answers to frequently asked questions about privacy and data security.

For formal complaints regarding data protection that our team is unable to resolve, you have the right to refer the matter to the Department of Personal Data Protection Malaysia (JPDP).