Privacy Policy

wm996 ("we", "us", "our", "the Platform", "the Operator") is committed to protecting the privacy of all individuals who interact with our platform. This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which it is processed, the parties with whom it may be shared, and the rights available to you as a data subject.

This Policy applies to all visitors, registered users, and players ("you", "your", "the User") who access the wm996 website at https://wm996.cam, including players located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia.

By registering an account on wm996, depositing funds, or continuing to use the Platform after the date of this Policy, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which together form the complete agreement governing your use of the wm996 platform.

For the purposes of this Privacy Policy, the following definitions apply:

wm996 collects the following categories of personal data from users of the Platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your identity document
• Date of birth (for age verification — 21+ requirement)
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru)
• Email address and mobile phone number
• Username and encrypted password
• Nationality and country of residence

3.2 KYC Verification Documents

• Copies of government-issued photo identification (Malaysian IC, passport, or driving licence)
• Proof of address documents (utility bills, bank statements, or official correspondence)
• Payment method verification evidence (screenshots or documentation confirming ownership of e-wallets or bank accounts used)

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment methods used
• Transaction reference numbers and processing status records
• Account balance history and bonus redemption records
• Payment method identifiers (partial account or wallet numbers, not full credentials)

3.4 Gaming & Behavioural Data

• Game play history including game type, stake amount, outcome, and session duration
• Sports betting history including markets wagered on, stake amounts, and results
• Bonus claim and wagering activity records
• Responsible gambling tool settings and self-exclusion records

3.5 Technical & Device Data

• IP address and approximate geographic location derived therefrom
• Device type, operating system, and browser type and version
• Session timestamps, login and logout records
• Cookies and similar tracking technologies (see Section 10)

3.6 Communication Data

• Records of live chat conversations, email correspondence, and support ticket history with the wm996 support team
• Marketing preference settings and communication opt-in or opt-out records

wm996 collects personal data through the following channels and mechanisms:

1. Account Registration: When you create a wm996 account, you directly provide registration and identity data through the registration form.
2. KYC Submission: When you upload identity and address verification documents, either during registration or in response to a KYC request.
3. Deposits and Withdrawals: When you initiate financial transactions, data is collected from the transaction process itself and from our payment processing partners.
4. Platform Use: Automatically as you navigate and use the Platform — game activity, betting history, session data, and device/technical information are collected continuously during your use of the service.
5. Customer Support Interactions: When you contact the wm996 support team via live chat, email, or WhatsApp, the content and metadata of those communications are recorded.
6. Cookies and Tracking Technologies: Automatically through cookies and similar technologies placed on your device when you access the Platform (see Section 10 for full details).
7. Third-Party Verification Services: From KYC and identity verification service providers who assist in verifying the accuracy of the information you have provided.

wm996 processes your personal data for the following purposes:

wm996 processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to fulfil the contractual relationship established when you create a wm996 account and use the Platform's services, including account management, deposit and withdrawal processing, and customer support.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) regulations, KYC verification requirements, age verification (21+), and responsible gambling obligations imposed by our gaming licence conditions.
• Legitimate Interest: Processing carried out for the legitimate interests of wm996, including fraud prevention, platform security, responsible gambling monitoring, and analytics for service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit consent, specifically in relation to receiving marketing and promotional communications from wm996. You may withdraw this consent at any time without affecting the lawfulness of processing conducted before withdrawal.

wm996 does not sell, rent, or trade your personal data to third-party marketers. We share personal data only with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment Processing Partners: Providers facilitating deposits and withdrawals, including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency processing services. These providers receive only the minimum data necessary to complete your transaction.
• KYC & Identity Verification Providers: Third-party identity verification services that assist in validating submitted documentation and performing age verification checks. These providers operate under strict data processing agreements with wm996.
• Cloud Infrastructure & Hosting Providers: Providers hosting the wm996 platform and data storage infrastructure. All such providers are contractually bound to maintain data security standards equivalent to those applied by wm996 directly.
• Fraud Prevention & Security Services: Providers of fraud detection, IP analysis, and cybersecurity services used to protect the integrity of the Platform and its users.
• Regulatory Authorities: Competent regulatory bodies and law enforcement authorities where disclosure is required by law, court order, or under our gaming licence obligations. wm996 will disclose the minimum amount of data legally required in such circumstances.
• Professional Advisors: Legal counsel, accountants, and auditors acting under professional confidentiality obligations in connection with the operation or legal defence of wm996's business.

wm996 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with applicable legal, regulatory, accounting, and reporting obligations.

The following retention periods apply as general guidelines:

• Active Account Data: Retained for the full duration of your registered account relationship with wm996.
• Transaction and Financial Records: Retained for a minimum of 5 years following the relevant transaction, in compliance with anti-money laundering record-keeping requirements under applicable international licensing obligations.
• KYC Documents: Retained for a minimum of 5 years from the date of account closure or the date the document was submitted, whichever is later.
• Responsible Gambling Records: Self-exclusion records and responsible gambling tool activation history are retained for a minimum of 5 years to support re-registration risk assessments.
• Support Communication Logs: Retained for 2 years following the close of the relevant support interaction.
• Marketing Consent Records: Retained for 2 years from the date of last communication or withdrawal of consent.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

wm996 implements a comprehensive range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser and the wm996 platform is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial information, is stored in encrypted form on secure, access-controlled servers.
• Access Controls: Access to personal data within wm996's internal systems is strictly limited to authorised personnel with a demonstrable business need, on a principle of least privilege.
• Regular Security Audits: wm996 undertakes periodic security assessments, penetration testing, and vulnerability scanning to identify and address potential weaknesses in our systems.
• Incident Response: wm996 maintains an internal data breach response procedure. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify you and the relevant authorities as required by applicable data protection obligations.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) for their accounts to provide an additional layer of security beyond password protection.

While we take all reasonable steps to protect your data, no transmission over the internet or electronic storage method is completely infallible. You acknowledge that you share personal data with wm996 at your own risk and that wm996 cannot guarantee absolute security.

wm996 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain your session, remember your preferences, and collect analytical data about how the Platform is used.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without preventing access to core platform features.
• Functional Cookies: Store your preferences such as language settings, display preferences, and last-visited game type, enabling a more personalised experience on return visits.
• Analytical Cookies: Collect anonymised data about how users navigate and interact with the Platform, including which pages are visited most frequently and how long sessions last. This data is used to improve the platform.
• Performance Cookies: Used to monitor platform performance, identify errors, and optimise load times across different device types and network conditions.

10.2 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair the functionality of the wm996 platform, including your ability to log in and maintain an authenticated session. Disabling analytical or functional cookies will not prevent you from accessing the Platform but may affect certain personalisation features.

Subject to applicable data protection laws and the specific legal basis for processing, you have the following rights in relation to the personal data wm996 holds about you. To exercise any of these rights, please contact us using the details provided in Section 15.

1. Right of Access: You have the right to request a copy of the personal data wm996 holds about you, along with information about how it is being processed. We will respond to verified access requests within 30 days.
2. Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by wm996 be corrected or completed without undue delay. For minor updates (e.g., email address or phone number), you may also update your details directly through your account settings.
3. Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes it was collected, where you have withdrawn consent, or where you object to processing. Please note that certain data must be retained by wm996 to comply with legal obligations (e.g., AML and KYC record-keeping requirements) and cannot be deleted on request.
4. Right to Restriction of Processing: You may request that wm996 restricts the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or have objected to processing.
5. Right to Data Portability: Where processing is based on your consent or on a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
6. Right to Object: You have the right to object to processing based on legitimate interests, including profiling. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

wm996 will respond to all verified data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case you will be notified. wm996 will not charge a fee for handling data rights requests, except in cases of manifestly unfounded or excessive requests.

The wm996 platform is strictly for individuals aged 21 years and above. wm996 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If wm996 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to permanently close the account, delete the associated personal data, and return any deposited funds to the originating payment method.

If you are a parent or guardian and you believe that a minor in your care has registered on the wm996 platform, please contact our support team immediately at [email protected] so that we may investigate and take appropriate action.

wm996 operates as an international online gaming platform. Your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as Malaysia or the jurisdiction in which you are located.

Where personal data is transferred internationally, wm996 takes appropriate safeguards to ensure that the data continues to be protected to standards equivalent to those described in this Policy. Such safeguards include contractual data processing agreements with recipient entities requiring them to adhere to equivalent data protection standards.

By using the wm996 platform, you consent to the transfer of your personal data to jurisdictions outside Malaysia for the purposes described in this Policy, subject always to the protections described herein.

wm996 reserves the right to amend, update, or revise this Privacy Policy at any time. Where changes are material — meaning they significantly affect your rights or the way in which we process your personal data — we will notify registered Players via the email address associated with their account or through a prominent notice on the Platform.

For non-material updates, the revised Policy will be published on this page with an updated "Last Updated" date at the top. We recommend checking this page periodically to stay informed of how we handle your data. Continued use of the wm996 platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you object to any change in this Policy, you must immediately discontinue use of the Platform and contact support to close your account. You will not be penalised for closing your account solely on the basis of objecting to a material change in our Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data wm996 holds about you, please contact our Data Protection team through the following channels. We are committed to responding to all privacy-related enquiries promptly and thoroughly.

wm996 is committed to handling all privacy enquiries and data rights requests with the seriousness they deserve. We aim to acknowledge all formal requests within 2 business days and provide a substantive response within 30 calendar days.

This Privacy Policy was last reviewed and updated on 1 January 2026.