ST996 Privacy Policy – Personal Data Protection Malaysian Members

ST996 is an online entertainment and betting platform serving adult players in Malaysia. As a platform that handles members' personal and financial information, we understand that your trust is our most valuable asset. This Privacy Policy was written not merely to satisfy legal requirements — it is a true reflection of our commitment to protecting member data.

We believe you have the right to know exactly what happens to your personal data. That is why the ST996 Privacy Policy is written in plain, straightforward language rather than vague and confusing legalese. We want you to make informed decisions about the information you share with us.

ST996 operates in accordance with internationally recognised data protection principles and works to comply with applicable data protection regulations, including Malaysia's Personal Data Protection Act 2010 (PDPA 2010). Any changes in relevant regulations will be reflected in updates to this Privacy Policy.

ST996 collects personal data through several channels — directly from you during registration and platform use, automatically through platform technologies, and in certain cases from trusted third parties such as payment service providers. Below are the categories of data we collect and the purposes for which they are collected:

ST996 does not collect sensitive data categories such as health information, religious beliefs, political views, or biometric data, unless specifically required for a purpose permitted by law and with your explicit consent.

ST996 uses your personal data only for legitimate and permitted purposes. Each purpose is clearly stated below. We do not use your data for any other purpose without notifying you in advance.

• Account Management: To create, verify, and manage your member account on the ST996 platform. This includes identity verification during registration and the KYC process prior to your first withdrawal being processed.
• Transaction Processing: To process MYR deposits and withdrawals via your chosen payment method — whether Touch 'n Go eWallet, GrabPay, DuitNow, FPX via Maybank2u or CIMB Clicks, Boost, or ShopeePay.
• Service Provision: To give you full access to all games and features on the ST996 platform, including Sports Betting on the Malaysia Super League and EPL, e-sports, live baccarat and blackjack table games, jackpot slots, and lottery.
• Security & Fraud Prevention: To identify, investigate, and prevent fraudulent activity, money laundering, and any use of the platform that violates ST996's Terms & Conditions.
• Service Communications: To send you important account-related notifications — such as deposit confirmations, successful withdrawal alerts, policy updates, and security notices.
• Customer Support: To resolve complaints, respond to enquiries, and provide technical assistance via live chat, email, or other ST996 support channels.
• Responsible Gaming Monitoring: To identify gaming patterns that may indicate signs of problem gambling and to activate appropriate safeguards in line with ST996's responsible gaming policy.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including AML (Anti-Money Laundering) reporting requirements and lawful requests from relevant authorities.
• Platform Improvements: To analyse aggregated, anonymised usage patterns for the purpose of improving ST996's platform functionality, performance, and user experience.

ST996 does not sell member personal data to any third party. However, there are limited situations where we need to share certain information with trusted parties to keep the platform operating properly and securely.

Parties That May Receive Your Data:

• Payment Service Providers: Payment platforms such as Touch 'n Go, GrabPay, DuitNow, Maybank2u, CIMB Clicks, Boost, and ShopeePay receive the transaction information required to process your MYR deposits and withdrawals. This sharing is limited strictly to the information needed for each specific transaction.
• Licensed Game Providers: Live casino studio partners and game providers working with ST996 may receive anonymised member identifiers for session management purposes. They do not receive your full name or financial details.
• KYC Service Providers: Third-party identity verification services that assist ST996 in conducting the KYC process receive only the information necessary for verification. All such sharing is governed by strict data protection agreements.
• Legal Authorities: ST996 may disclose personal data to law enforcement agencies, regulators, or relevant authorities when required by law, court order, or for the purposes of a legitimate criminal investigation.
• Professional Advisors: Lawyers, accountants, or auditors involved in ST996's operations may access certain data in the course of providing their professional services, subject to strict confidentiality obligations.

Protecting members' personal and financial data is ST996's highest technical priority. We continuously invest in security infrastructure that is kept up to date against the latest cyber threats. The following are the security layers we employ:

• Encryption in Transit: All communications between your device and ST996 servers are protected by TLS 1.3 with 256-bit SSL encryption. This means any data you transmit — including passwords, MYR payment details, and personal information — cannot be read by third parties, even if they manage to intercept the connection.
• Stored Data Encryption: Sensitive data stored in ST996's databases is encrypted using AES-256 standards. This means that even if an unauthorised party were to gain access to our servers, the stored data would be unreadable without the correct decryption key.
• Role-Based Access Controls: Only ST996 staff with a legitimate operational need and who have passed background checks are permitted to access member data. Access is granted on a least-privilege basis — each staff member can only view data relevant to their specific responsibilities.
• Two-Factor Authentication (2FA): All ST996 internal systems storing member data are protected by two-factor authentication. Access from outside the corporate network requires an additional layer of verification.
• Real-Time Threat Monitoring: ST996's security monitoring system operates 24 hours a day to detect and respond to any suspicious activity, intrusion attempts, or abnormal access patterns.
• Regular Security Audits: ST996 conducts regular internal security audits and also engages independent third-party security firms to stress-test our infrastructure through penetration testing.

While we take all reasonable steps to protect your data, no security system can be guaranteed to be 100% secure. You also play an important role in keeping your account safe — use a strong password, never share your login credentials, and report any suspicious activity to the ST996 support team promptly.

The ST996 platform uses cookies — small text files stored on your device — to enhance user experience, maintain login session security, and analyse how the platform is used. Below are the types of cookies we use:

You can manage your cookie preferences through your web browser settings. Please note that blocking essential cookies may affect ST996's platform functionality, including the ability to log in or process transactions. Analytics and functional cookies can be blocked without impacting the platform's core functions.

As an ST996 member, you have certain rights regarding the personal data we collect and process. ST996 respects and supports the exercise of these rights, which are as follows:

ST996 retains personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by applicable law. The following are general retention guidelines by data category:

• Active Account Data: For as long as your account remains active with ST996, and for the period required after account closure to fulfil legal and compliance obligations.
• Financial Transaction Data (MYR): Records of all deposit and withdrawal transactions are retained for a minimum of seven years in accordance with Malaysian financial law requirements, including AML obligations.
• KYC and Identity Verification Data: Retained for the duration of the active account period and for a minimum of five years after account closure, in accordance with applicable compliance requirements.
• Security & Activity Logs: Retained for 12 months for security incident investigation and dispute resolution purposes.
• Support Communication Records: Retained for three years for quality control purposes and dispute reference.
• Analytics Cookie Data: Retained for the period specified in the cookie schedule (section 6), after which it is deleted or fully anonymised.

When data is no longer needed and there is no legal obligation to retain it, ST996 will securely delete or anonymise that data using methods that ensure it cannot be recovered.

The ST996 platform is exclusively for individuals aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. This is a commitment we take seriously.

If ST996 discovers that personal data has been collected from an individual below the stipulated minimum age without the necessary consent, we will take immediate steps to:

• Suspend the account in question immediately.
• Deleting all associated personal data from our systems.
• Returning all relevant financial balances to their original source where applicable.

If you believe that someone under the age of 21 has accessed or registered an ST996 account, please contact our support team immediately via live chat or email so we can take the appropriate action.

ST996 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or technological developments that affect how data is handled. We are committed to keeping you informed of any material changes.

When we make changes to this Privacy Policy, we will:

• Updating the "last updated" date at the top of this page.
• Displaying in-platform notifications for material changes.
• Email notifications will be sent for changes that directly affect how we use your data, where required.

Continued use of the ST996 platform after the effective date of any amendment constitutes acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account and request data deletion in accordance with the rights outlined in section 7 above.

If you have any questions, concerns, or requests regarding this Privacy Policy or how ST996 handles your personal data, we encourage you to reach out to us. ST996's compliance and privacy team is ready to assist.

Privacy-Related Contact Channels:

• Privacy Email: support@st996.click (use the subject line "Data Privacy Inquiry" for a faster response)
• Live Chat: Available 24/7 directly within the ST996 platform in Bahasa Melayu. For complex privacy matters, request that the conversation be escalated to the Compliance Department.

ST996 is committed to responding to all privacy-related inquiries within 14 business days. For more complex requests such as data access or data deletion requests, we may require up to 30 business days to fully process your request. You will be notified if a longer timeframe is needed.