1. Home
  2. Privacy Policy
st996 Official Data Protection Document

St996 Privacy Policy — How We Protect Malaysian Players' Personal Data

Your privacy is st996's top priority. This document clearly outlines the types of data we collect, how it is used, how we protect it, and your rights as a platform user. We operate in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010.

Updated: January 2026 Language: Bahasa Malaysia Version: 3.1

Page Contents

St996's Six Privacy Protection Principles

Before reading the full policy, here are the core principles that guide how st996 handles the personal data of all Malaysian players on our platform.

256-Bit SSL Encryption Across All Levels
Every connection between your device and st996's servers is protected by 256-bit SSL encryption — the same technology used by Maybank, CIMB, and other leading Malaysian financial institutions. This means your data, including bank account details, Touch 'n Go e-Wallet, GrabPay or DuitNow numbers, and transaction records, cannot be read by any third party during transmission. Network security is the first layer of protection we provide to every st996 user.
Your Data Is Not for Sale
st996 does not sell, rent or trade player personal data to advertisers, data brokers or any third party for marketing purposes. The data you provide upon registration — full name, Malaysian phone number, date of birth and payment information — is used solely for the purposes stated in this policy. This is not merely a moral commitment; it is our legal obligation under Malaysia's PDPA 2010, and one we take seriously.
Restricted & Controlled Internal Access
Not all st996 staff have access to user personal data. Access to sensitive data — such as payment information, IC numbers and transaction records — is restricted to personnel who require it for specific job functions only, and every access instance is logged and regularly audited. This role-based access control ensures your data is not unnecessarily exposed to internal risks.
Malaysia PDPA 2010 Compliance
st996 operates in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. This means we have a legal obligation to ensure personal data is collected lawfully, used only for stated purposes, stored securely and deleted when no longer needed. PDPA compliance is not optional — it is the foundation of trust between st996 and every Malaysian player on our platform.
Data Breach Notification
In the event of any security incident involving st996 user personal data, we are committed to notifying affected players within a reasonable timeframe — no later than 72 hours from the time the incident is detected. The notification will include details on the type of data affected, the actions we have taken, and steps you can take to protect yourself. Transparency in critical situations is our standard.
Full Control Over Your Data
You have the full right to access, amend, transfer, and request deletion of your personal data from st996's systems at any time. These rights are guaranteed under the PDPA and we respect them fully. How to exercise these rights is explained in detail in section 6 of this policy. The st996 privacy team will process all data-related requests within 14 working days.

1Personal Data We Collect

St996 collects your personal data through two main channels: directly when you register or use the platform, and automatically through standard technologies such as cookies and server logs. We only collect data that is necessary to provide you with a better experience.

Data Minimisation Principle: st996 adheres to the principle of data minimisation — we only collect data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant data beyond what is needed to operate the platform.

Data Category Sample Data How It Is Collected
Identity Information Full name, date of birth, Malaysian IC number (MyKad), profile photo Account registration & KYC process
Contact Information Malaysian phone number, email address, residential address Account Registration
Financial Information Malaysian bank account numbers, e-Wallet account numbers (Touch 'n Go, GrabPay, DuitNow), deposit & withdrawal records Payment processing
Activity Data Betting records, games played, wins & losses, active session duration Automated platform usage
Technical Data IP address, device & browser type, operating system, server access logs Automatically during use
Communication Data Live chat transcripts, customer support emails, and feedback submitted Interactions with the st996 team
  • Identity data is collected at registration and may need to be updated during the identity verification (KYC) process, which is triggered when an account reaches certain transaction thresholds or before a significant first withdrawal.
  • Financial information such as Touch 'n Go e-Wallet, GrabPay or DuitNow account numbers is stored in encrypted format and is never held in plain text within st996's systems.
  • Gaming activity data is collected automatically for the purposes of game integrity, fraud detection and compliance with responsible gambling requirements — including identifying patterns of excessive play.
  • st996 does not collect sensitive data such as health information, religious beliefs or political views. Should you voluntarily share such information in communications with us, it will be used solely within the context of that communication.

2Purpose of Personal Data Use

Personal data collected from Malaysian players is used for specific, transparent purposes. st996 does not use your data for any purpose beyond those stated below without first obtaining your renewed consent.

  • Account management: Creating, verifying, and managing your st996 account, including secure login, password recovery, and two-factor authentication to protect your account from unauthorised access.
  • Payment processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay, as well as handling withdrawal of winnings to your registered bank account or e-Wallet. All transactions are in Malaysian Ringgit (MYR).
  • Anti-fraud & AML compliance: Identifying and preventing payment fraud, money laundering (AML — Anti-Money Laundering) and other suspicious activities that violate Malaysian law or st996's platform terms.
  • Customer support: Responding to enquiries, resolving complaints, and providing technical support to Malaysian players via live chat, email, and other communication channels available on st996.
  • Responsible gaming: Monitoring gameplay patterns to identify players who may need responsible gambling support, and providing relevant self-control tools based on account activity.
  • Platform improvement: Analysing aggregated usage data (not individual data) to understand platform usage patterns and improve the overall experience for all st996 users in Malaysia.
  • Promotional communications: Sending information about promotions, bonuses, and new offers from st996 — but only if you have opted in to receive such communications during registration or through your account settings.

Important: st996 never uses your data to make automated decisions that have a legal effect on you — such as credit or insurance denial — based solely on a data profile. Every decision affecting your account involves human review.

3How Data Is Shared with Third Parties

St996 does not sell or disclose players' personal data to third parties for marketing or commercial purposes. However, there are limited circumstances in which we need to share data with certain parties to enable the platform to function properly and to meet our legal obligations.

  • Payment providers: Information required to process transactions is shared with the e-Wallet and banking providers integrated into the st996 platform — such as Touch 'n Go, GrabPay, DuitNow and FPX institutions. This sharing is limited strictly to what is necessary to process the transaction.
  • Technical service providers: Companies that help us operate the st996 platform — such as cloud service providers, casino software vendors and cybersecurity firms — may have limited access to certain data as part of their service contracts. All such providers are bound by strict data protection agreements.
  • Legal authority: st996 will disclose personal data to Malaysian authorities (such as PDRM, BNM or the courts) if required to do so by a court order, warrant or valid legal directive. We will not voluntarily disclose such data without proper legal process.
  • Business transfers: If st996 is involved in a merger, acquisition or asset sale, user data may be transferred as part of that transaction. In such cases, players will be notified in advance and the new entity will be bound by a privacy policy at least equivalent to this one.
  • st996 does not share player data with advertising companies, social media platforms or data brokers for targeted marketing purposes. None of your data is sold to any third party.

Third-Party Providers: All third-party providers working with st996 are required to sign a Data Processing Agreement (DPA) ensuring they handle user data to a standard equivalent to or stricter than this st996 privacy policy.

4Data Security Measures

St996 continually invests in security infrastructure to protect the personal data of all Malaysian players. Our approach to data security is multi-layered — we do not rely on any single protection mechanism.

  • Data encryption in transit: All communications between your browser or app and st996's servers are encrypted using TLS 1.3 with 256-bit SSL certificates. This ensures no third party can intercept or read your data while it is in transit over the network.
  • Data encryption at rest: Sensitive data such as financial information, IC numbers, and payment details are stored in encrypted form within the st996 database. Even if unauthorised access to the database were obtained, the data cannot be read without the correct encryption key.
  • Two-factor authentication (2FA): st996 accounts are protected by a two-factor authentication option that we encourage all players to enable. 2FA ensures that even if your password falls into the wrong hands, no one can log in without the second verification factor.
  • Regular security audits: st996 conducts regular vulnerability assessments and penetration testing through independent cybersecurity firms. Any identified vulnerabilities are addressed promptly in accordance with our incident response protocol.
  • 24/7 monitoring: st996's security monitoring system operates around the clock to detect unusual activity, suspicious login attempts, or any signs of a cyberattack. Our security team responds in real time to any identified threats.
  • Physical access controls: Servers storing st996 user data are housed in certified data centres protected by strict physical access controls, including biometric authentication, 24/7 CCTV surveillance and advanced alarm systems.

Despite all these security measures, no system can guarantee absolute 100% security. We encourage Malaysian players to take personal protective steps as well — such as using a strong, unique password for your st996 account, not sharing your login credentials, and promptly reporting any suspicious activity to our support team.

5Cookies & Tracking Technologies

The st996 platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how players interact with our platform. Below is an explanation of the types of cookies we use.

  • Essential cookies: These cookies are required for the core functions of the st996 platform — such as maintaining your login session, keeping your account secure, and ensuring the bet slip works correctly. This type of cookie cannot be disabled without affecting your ability to use the platform.
  • Performance cookies: Collecting information on how users interact with the st996 platform — including the most frequently visited pages, time spent in each section, and any error messages encountered. This data is used in aggregate to improve the platform and not to identify individual users.
  • Preference cookies: Saving your preferences such as display language (Bahasa Malaysia), currency (RM), and other display settings so you do not have to reconfigure them each time you visit the st996 platform.
  • Cookie duration: Session cookies are deleted automatically when you close your browser. Persistent cookies are stored on your device for a set duration (typically 30 to 90 days) and can be manually deleted via your browser settings.
  • Managing cookies: You can manage or delete cookies at any time through your browser settings. Keep in mind, however, that disabling essential cookies may affect certain features of the st996 platform. Guidance on managing cookies is available in the help section of your browser.

Important Note: st996 does not use third-party cookies for advertising or targeted marketing purposes. We do not share cookie data with advertising networks or social media platforms to serve st996 ads to you on other websites.

6Your Rights as an st996 User

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding the personal data held by st996. We respect and facilitate the exercise of all these rights.

Right of Access
You have the right to request a copy of all personal data we hold about you. st996 will provide a complete data report in a readable format within 14 working days of your request.
Right to Rectification
If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Basic information updates can be made directly via your st996 account settings. More complex data corrections can be requested by emailing our support team.
Right to Erasure
You have the right to request the deletion of your personal data from st996's systems. Requests will be processed in accordance with our legal obligations — certain records may need to be retained for a specified period for regulatory compliance purposes.
Right to Object
You have the right to object to the processing of your data for certain purposes — particularly marketing communications. You may withdraw your consent to receive promotional emails from st996 at any time via your account settings or by contacting us directly.
Data Portability Right
You have the right to receive your personal data in a machine-readable format (such as JSON or CSV) for transfer to another service provider of your choice. Data portability requests are processed within 21 business days.
Right to Restrict Processing
You have the right to request that st996 restrict the processing of your data in certain circumstances — for example, while you are verifying the accuracy of your data or awaiting the outcome of an objection. During this period, your data is retained but not used for active processing.

To exercise any of the rights above, contact the st996 privacy team by email at support@st996.xyz with the subject line "Privacy Rights Request", along with your full name and account number. We will process your request within 14 business days. For more complex requests, we may require additional identity verification to ensure we are disclosing data to the right person.

7Data Retention Period

St996 does not store your personal data indefinitely. Each data category has a defined retention period based on our operational requirements and legal obligations.

  • Active account data: For as long as your account remains active with st996, we retain all data necessary to manage your account and provide services to you. This data is reviewed annually to ensure it remains relevant and accurate.
  • Financial transaction data: Records of all deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, FPX, and other e-Wallets are retained for a minimum of 7 years from the transaction date, in accordance with Malaysian legal requirements for financial records and AML compliance.
  • Identity data (KYC): Identity verification documents such as copies of your MyKad are retained for 5 years after account closure, in line with applicable KYC compliance legal requirements.
  • Customer support communication records: Live chat transcripts and customer support email records are retained for 2 years for quality control purposes and to assist with any disputes that may arise.
  • Cookie data: Session cookies are deleted automatically when your session ends. Persistent cookies are removed after a set period (30 to 90 days). Aggregated analytics data that contains no personal information may be retained longer for platform improvement purposes.
  • Following account closure: When your account is closed at your request, personal data that is not required for legal compliance purposes will be deleted within 90 days. Data that must be retained for legal purposes will be securely archived and will not be used for any active processing.

Account Closure Due to Breach: If an account is closed due to a terms violation or suspected fraud, st996 reserves the right to retain relevant data for a longer period for investigation and potential legal action. In such cases, the player concerned will be informed of the applicable retention period.

8Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding how st996 handles your personal data, our privacy team is here to help. We take every privacy enquiry seriously and are committed to providing accurate, helpful responses.

  • Privacy email: Send an email to support@st996.xyz with a clear subject line such as "Privacy Enquiry" or "Data Deletion Request". We aim to respond within 2 business days for general enquiries and 14 business days for formal data rights requests.
  • In-platform live chat: For general enquiries about our privacy policy that do not require disclosure of sensitive account information, you may use the live chat function on the st996 platform, available 24/7 in Bahasa Malaysia.
  • Official complaints: If you are not satisfied with how st996 has handled your personal data after contacting us directly, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (JPDP), the regulatory body responsible for enforcing PDPA in the country.
  • Policy amendments: st996 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be displayed on this page with a clear update date. Players will be notified of material changes via in-platform notices or email.

st996 Privacy Contact Information

Support & Privacy Email
support@st996.xyz
Email Response Time
Within 2 hours (during business hours)
Live Chat
24/7 in Bahasa Malaysia
Data Rights Request
Processed within 14 business days
Quick Navigation

Privacy questions? Contact us at support@st996.xyz

FAQs Terms & Conditions Responsible Gambling
st996's Privacy Commitment: This Privacy Policy is to be read together with Terms & Conditions st996. By registering and using the st996 platform, you agree to how we process your personal data as described in this document. We will not use your data for any other purpose without obtaining your renewed consent. If you have any privacy concerns, contact us at support@st996.xyz — we are committed to resolving every privacy enquiry transparently and respectfully.

Privacy & Responsible Gaming — Two Core Commitments of st996

Protecting your personal data and promoting responsible gambling are two core st996 values that go hand in hand. Your gaming activity data is used in part to identify patterns of excessive play and to offer assistance to players who may need it — a use of data we believe you understand and appreciate. Individuals under the age of 21 are not permitted to use this platform. For responsible gambling guidance, visit our dedicated page.

Learn More

FAQs — st996 Privacy Policy

The most frequently asked questions from Malaysian players about privacy and data protection at st996.

No, st996 never sells, rents or trades player personal data to any third party for marketing or commercial purposes. This is a non-negotiable commitment. We only share data with service providers that help us operate the platform — such as Touch 'n Go, GrabPay and DuitNow for processing your payments — and all such providers are bound by strict data protection agreements. We may also be required to disclose data to Malaysian authorities if mandated by law, but this applies only in very specific circumstances and is not standard practice.

To request deletion of your personal data, send an email to support@st996.xyz with the subject line "Data Deletion Request" and include your full name and st996 account number. We will process the request within 14 business days. Please note that some data may need to be retained for a specified period to fulfil legal obligations — for example, financial transaction records must be kept for a minimum of 7 years under Malaysian law. Data retained for this purpose will be securely archived and not used for active processing. We will provide you with a detailed breakdown of what has been deleted and what must be retained, along with the reasons.

When your st996 account is closed — whether at your own request or for other reasons — your personal data is handled as follows. Basic account data and personal information not required for legal compliance will be deleted within 90 days of the closure date. Financial transaction records (deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, and others) are retained for 7 years as required by law. KYC documents such as copies of your MyKad are retained for 5 years after closure. All archived data is stored securely and is not used for any marketing or active processing purposes.

Yes, you can opt out of marketing communications from st996 at any time. There are two straightforward ways to do this. First, log in to your st996 account, go to account settings and locate the "Communication Preferences" section — uncheck the "Receive promotional emails" option. Changes will take effect within 24 hours. Second, click the "Unsubscribe" link found at the bottom of any promotional email from st996. Please note that opting out of promotional emails does not stop essential account-related communications — such as deposit and withdrawal notifications, password changes and security alerts. These will continue to be sent as they are necessary for the security of your account.
View All FAQs

Privacy Protected, Gaming Secured — Join st996 Today

Your data is protected, our platform is secure, and your winnings are processed fast. Create a free account in just 3 minutes and enjoy over 500 games — Sports Betting, Live Casino, and jackpot slots. Easy deposits via Touch 'n Go, GrabPay, or DuitNow.

Register for Free Now Log In

By registering, you agree to the Terms & Conditions and Privacy Policy st996. For ages 21 and above only.

Bahasa Melayu