BS96 Privacy Policy – How We Protect Malaysian Players' Personal Data

1Information We Collect

BS96 collects various types of information from our players for the purposes of platform operations, identity verification, payment processing, and service improvement. The following are the categories of information we collect.

Account Registration Information

• Username that you chose when registering your bs96 account.
• Email address that is active and reachable — used for account verification and important communications.
• Malaysian phone number that is valid — used for two-factor authentication (2FA) and security alerts.
• Date of birth — to verify that you meet the minimum age requirement of 18 years.
• Password — stored in encrypted (hashed) form and is not visible to any bs96 staff.

Identity Verification (KYC) Information

• Copy of identity document — A valid Malaysian MyKad or passport, collected when KYC verification is required.
• Proof of address — such as Malaysian utility bills or bank statements, collected to verify your address when required.
• Proof of payment method — a screenshot or proof of ownership of the digital wallet or bank account used for transactions.

Financial & Transaction Information

• Deposit and withdrawal history, including amounts, methods (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks), and transaction dates and times.
• Bank account or digital wallet details registered for withdrawal of winnings.
• Bonus and cashback transaction history credited to your account.

Gaming Activity Information

• Game logs including game type, bet amounts, outcomes, and the date and time of each session.
• Lottery tickets purchased, numbers selected, and the relevant draw results.
• Your cricket, poker, and table game betting history played through your account.

Technical & Device Information

• Your IP address at each login session — used for fraud detection and account security.
• Device type, operating system, web browser, and version in use.
• Approximate geographic location (at state or city level) based on IP address.
• Cookie and session data as described in Section 5.

2Purpose of Data Collection

BS96 only collects data that is necessary for legitimate and clearly defined purposes. We do not collect information beyond what is required to operate the platform and protect the interests of our players.

• Account Management: Registration information is used to create, manage, and secure your bs96 account. This covers the login process, identity verification, and account recovery should you forget your password.
• Payment Processing: Financial information is used solely to process your deposits and withdrawals via your chosen Malaysian payment method — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and others.
• Legal Compliance & KYC: Identity verification documents are required to comply with anti-money laundering regulations and to ensure that accounts are not used by individuals under the age of 18.
• Security & Fraud Prevention: Technical data such as IP addresses and device information is used to detect and prevent unauthorised access, account fraud, and suspicious activity that could compromise the security of the platform and other players.
• Service Improvements: Anonymised usage data and gameplay activity are used to understand platform usage patterns, identify areas for improvement, and develop new features that better serve Malaysian players.
• Essential Communications: Your email address and phone number are used to send you account security notifications, transaction alerts, and notices of material changes to our terms. We do not send marketing emails without your consent.
• Responsible Gaming: Your game history data is used by the bs96 system to monitor play patterns and identify early signs of problem gambling, as part of our commitment to responsible gaming.

3How We Protect Your Data

Player data security is one of bs96's most significant investments. We employ multiple layers of protection to keep your information safe from unauthorised access, loss, or misuse.

• 256-bit SSL Encryption: All communications between your web browser or app and the bs96 servers are protected by 256-bit SSL encryption — the same security standard used by leading Malaysian banks such as Maybank and CIMB. Your data remains unreadable even if intercepted during transmission.
• Sensitive Data Encryption: Your password is stored in hashed form using modern cryptographic algorithms. This means no bs96 staff member can view your actual password — not even our own technical team.
• 24/7 Security Monitoring: The bs96 security monitoring system operates around the clock to detect unauthorised access attempts, cyberattacks, and suspicious activity in real time. Any threats identified are addressed promptly.
• Internal Access Controls: Access to players' personal data within the bs96 organisation is restricted to staff who genuinely require it to carry out their duties. All access is logged and reviewed on a regular basis.
• Data Segregation: Sensitive financial data is stored separately from regular gaming data in distinct systems with different access controls, reducing the overall risk of data exposure in the event of a security breach.
• Two-Factor Authentication (2FA): BS96 offers 2FA via your Malaysian phone number. We strongly encourage all players to enable this feature — it is one of the most effective ways to protect your account from unauthorised access.

4Information Sharing

BS96 does not sell, rent, or share players' personal information with any third party for marketing purposes. However, there are limited circumstances where we may need to share certain information with carefully selected third parties.

• Payment Providers: To process deposits and withdrawals, bs96 is required to share the necessary transaction information with the Malaysian payment providers used — such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX processing parties. This sharing is limited strictly to the information needed to complete the transaction.
• Game Providers: Some games on the bs96 platform are provided by reputable third-party game providers. Necessary game session information may be shared with these providers for game operation and result settlement purposes. These providers are bound by strict confidentiality agreements.
• Legal Requirements: BS96 may be required to disclose players' personal information to the relevant authorities if mandated by Malaysian law or a valid court order. In such circumstances, we will endeavour to notify the player concerned if permitted by law.
• Fraud Prevention: In cases involving suspected fraud or financial crime, bs96 may share relevant information with Malaysian authorities or industry fraud prevention bodies for investigation purposes.
• Business Transfer: Should bs96 be involved in a merger, acquisition, or business asset transfer, player data may be transferred as part of that transaction. In such circumstances, players will be notified in advance and equivalent or greater privacy protections will be guaranteed.

5Cookies & Tracking Technologies

BS96 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an overview of the types of cookies we use and their purposes.

• Essential Cookies: These cookies are required for the basic functions of the bs96 platform — including maintaining your login session, remembering your language preference, and ensuring session security. Without them, the platform cannot function properly. Essential Cookies cannot be disabled.
• Performance Cookies: These cookies help us understand how players interact with the bs96 platform — which pages are visited most often, how long sessions last, and where players may encounter difficulties. This data is used in aggregated, anonymised form to improve our platform.
• Functional Cookies: These cookies remember your personal preferences — such as text size, favourite games, and other settings — so you don't have to reconfigure them each time you use the bs96 platform.
• Security Cookies: Used to identify devices you use repeatedly, helping the bs96 security system detect access attempts from unrecognised devices.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the bs96 platform. For guidance on managing cookies in popular browsers such as Chrome, Firefox, or Safari, please refer to your browser's help documentation.

6Data Retention Period

BS96 retains players' personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements.

• Active Account Data: For as long as your account remains active on bs96, we retain all information associated with your account to ensure continuous and seamless service.
• After Account Closure: When an account is closed at the player's request, bs96 will retain the minimum records required under Malaysian law (including financial and transaction records) for the period prescribed by the relevant legislation, which is typically between 5 and 7 years.
• KYC Documents: Identity verification documents collected are retained for the period required under Malaysia's anti-money laundering laws, and will be deleted or anonymised once the mandatory retention period expires.
• Security Logs: Technical and security logs, including IP address records and login activity, are retained for 90 days for security investigation purposes, after which they are automatically deleted.
• Game Data: Detailed game history is retained for 12 months for dispute resolution purposes, after which the data is summarised or anonymised for long-term analytics.

7Your Rights as a Player

As a bs96 player protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data.

• Right of Access: You have the right to request a copy of the personal information we hold about you. This request can be submitted to the bs96 support team and will be processed within 14 business days.
• Right to Rectification: If the personal information we hold about you is inaccurate or incomplete, you have the right to request a correction. You can update certain details directly from your bs96 account settings.
• Right to Withdraw Consent: You may withdraw consent for marketing communications or the use of your data for specific purposes at any time. However, such withdrawal does not affect data retention required by law.
• Right to Complain: If you believe that bs96 has misused your data or breached this Privacy Policy, you have the right to lodge a complaint with us. If you are not satisfied with our response, you may escalate your complaint to the Department of Personal Data Protection Malaysia.

8Children's Data

The bs96 platform is strictly for adult players aged 18 and above. We do not knowingly collect, store, or process any personal information from individuals under the age of 18.

• All players are required to confirm that they are 18 years of age or older at the point of registration. Any registration by an individual under the age of 18 constitutes a breach of bs96's terms of use and will result in immediate account termination.
• Should bs96 discover that personal information belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that information and close the relevant account.
• If you are a parent or guardian who believes that your child under the age of 18 has registered a bs96 account, please contact our support team immediately via live chat or email at support@bs96.best so we can take prompt action.

9Privacy Policy Changes

BS96 reserves the right to update or amend this Privacy Policy from time to time. Changes may arise due to platform improvements, legal requirements, or the addition of new services.

• Change Notice: For material changes that directly affect how we use your personal data, bs96 will send a notification to your registered email address at least 14 days before the changes take effect. In-platform notifications will also be displayed.
• Effects of Continued Use: Your continued use of the bs96 platform after an updated Privacy Policy takes effect constitutes your acceptance of the changes. If you do not agree, you should stop using the platform and may request account closure.
• Check Regularly: We recommend reviewing this Privacy Policy page periodically, especially after receiving a notification about changes. The "effective from" date at the top of this page is always updated to reflect the latest version.

10How to Contact Us

If you have any questions, concerns, or requests regarding the bs96 Privacy Policy or the handling of your personal data, we encourage you to reach out to us directly.

• Live Chat: The fastest way to get a response is via the live chat button available directly within the bs96 platform. Our support agents handle privacy-related enquiries within minutes, and we operate 24 hours a day, 7 days a week.
• Email: For more detailed enquiries or those requiring documentation, you may reach us by email at support@bs96.best. Please include "Privacy Enquiry" in the subject line of your email for faster processing. We will respond within 2 business days.
• Data Access Request: To submit a formal request to access, correct, or delete your personal data, please contact us by email stating the type of request and your bs96 account number. We will process your request within 14 business days.