Privacy Policy — roll996

This Privacy Policy ("Policy") describes how roll996 ("roll996", "we", "us", "our") collects, processes, stores, uses, and protects personal data belonging to users ("Player", "User", "your") of the roll996 website located at roll996.cam, including all associated services, games, payment facilities, and customer support channels.

roll996 operates an online casino and sports betting platform primarily serving players in Malaysia, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other Malaysian cities and states. We are committed to protecting the privacy and personal data of every player who uses our Platform in accordance with applicable data protection principles.

This Policy should be read alongside our Terms and Conditions and Responsible Gambling Policy, both of which form part of the overall Agreement between you and roll996. By registering an Account or using any part of the roll996 Platform, you acknowledge that you have read and understood this Policy and consent to the data processing activities described herein.

If you do not agree with the terms of this Privacy Policy, you should not use the roll996 Platform. If you have questions about how we handle your personal data before registering, please contact us via the details in Section 14.

In this Privacy Policy, the following terms carry the meanings set out below:

roll996 collects personal data across several categories, depending on the nature of your interaction with the Platform. The categories of personal data we process are set out below.

3.1 Registration Data

Data collected when you create an Account with roll996:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (for age verification — you must be 21 years of age or older)
• Email address and contact number
• Residential address, including city and postcode
• Preferred username and encrypted password (passwords are never stored in plaintext)
• Preferred currency (Malaysian Ringgit — MYR)

3.2 KYC Verification Data

Data collected as part of the mandatory identity verification process prior to withdrawal processing:

• Scanned or photographed copy of your MyKad, Passport, or valid Malaysian Driver's License
• Proof of residential address — a utility bill, official bank statement, or government correspondence dated within the last three calendar months
• Selfie photograph holding your identity document, taken on the submission date
• Payment method verification documentation (e.g., screenshot of your Touch'n Go eWallet, Boost, or bank account showing your name and account identifier)

3.3 Financial Transaction Data

Data generated through deposits and withdrawals on the Platform:

• Deposit amounts, timestamps, and originating payment method identifiers (e.g., DuitNow ID, FPX reference, e-wallet transaction reference)
• Withdrawal amounts, timestamps, and destination payment method details
• Player Wallet balance history and bonus fund activity
• Cryptocurrency wallet addresses used for USDT TRC20 transactions

3.4 Gameplay & Betting Data

• Game session records including game type, stake amount, outcome, and timestamp
• Sports betting wager history including event, market, odds taken, stake, and settlement result
• Responsible gambling tool settings (deposit limits, cooling-off periods, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geographic location at time of login
• Device type, operating system, and browser version
• Session duration and navigation paths within the Platform
• Cookie data and locally stored session tokens (see Section 10)

3.6 Communications Data

• Content of live chat support sessions, including agent interactions
• Email correspondence with roll996 support (sent to [email protected])
• Complaint and dispute records where a formal case is opened

roll996 collects personal data through the following mechanisms:

• Direct submission by you: When you register an Account, complete KYC verification, initiate deposits or withdrawals, contact customer support, or update your Account profile, you provide us with data directly.
• Automated collection during Platform use: Technical and device data is collected automatically through server logs, session cookies, and browser storage APIs when you access and interact with the Platform.
• Payment processor data: When you initiate a transaction through a supported payment method — including Touch 'n Go eWallet, Boost, GrabPay, Maybank FPX, CIMB, DuitNow, or USDT TRC20 — our payment processing partners transmit transaction confirmation data to roll996 to credit or debit your Player Wallet.
• Third-party fraud and risk screening: When your Account activity triggers automated risk monitoring rules, roll996 may request supplemental information from third-party anti-fraud and KYC verification service providers to confirm your identity or investigate suspicious activity.
• Referal programme data: If you register an Account following a referral from an existing roll996 player, the referring player's unique referal code is associated with your registration for bonus attribution purposes only. No additional personal data about you is shared with the referring player.

roll996 processes your personal data for the following specific, documented purposes. We do not process personal data for purposes incompatible with those listed below without obtaining your prior consent.

roll996 relies on the following legal bases for processing your personal data, applied contextually depending on the processing activity in question:

• Performance of Contract: The majority of data processing on roll996 is necessary for the performance of the Agreement between you and roll996 — including Account management, payment processing, game provision, and customer support. Without this processing, roll996 cannot fulfil its contractual obligations to you as a player.
• Legal Obligation: Certain processing activities — particularly KYC identity verification, anti-money laundering (AML) monitoring, and the retention of financial transaction records — are required by applicable laws and regulations. roll996 is obligated to conduct this processing regardless of your consent.
• Legitimate Interests: roll996 processes technical and device data, conducts fraud prevention monitoring, on the basis of its legitimate interest in operating a secure, fair, and commercially viable gaming platform. Such processing is balanced against your privacy interests and does not override your fundamental rights.
• Consent: Where roll996 sends you marketing communications or uses optional analytics cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent for marketing communications at any time by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

roll996 does not sell, rent, or trade your personal data to third-party organisations for marketing purposes. We share personal data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose.

7.1 Payment Processors

To facilitate MYR deposits and withdrawals, roll996 shares transaction data with licensed Malaysian payment processors and gateway providers supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank FPX, CIMB Clicks, Public Bank, Hong Leong Bank, and USDT TRC20. These processors operate under contractual data processing agreements and are bound by applicable data security standards.

7.2 KYC and Identity Verification Providers

Where automated identity document verification is used as part of the KYC process, your identity documents and selfie data may be transmitted to a licensed third-party KYC verification service provider operating under a data processing agreement with roll996. These providers process your documents solely for verification purposes and are prohibited from using your data for their own commercial purposes.

7.3 Fraud Prevention and AML Screening

roll996 uses third-party fraud detection and anti-money laundering screening tools. Limited personal data — including registration details and transaction patterns — may be processed by these tools as part of risk assessment. Results are used solely by roll996's compliance team.

7.4 Legal and Regulatory Authorities

roll996 may disclose personal data to competent governmental, regulatory, or law enforcement authorities where required by applicable law, court order, or formal regulatory request. In such cases, roll996 will disclose only the minimum information necessary to satisfy the legal obligation and will, where legally permissible, notify the affected player of the disclosure.

7.5 Professional Advisors

roll996 may share personal data with its legal advisors, auditors, and professional consultants where necessary for the purpose of obtaining professional services. Such parties are bound by professional confidentiality obligations.

roll996 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by applicable law or legitimate business necessity. The following retention schedule applies as general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data that can no longer identify you may be retained indefinitely for analytical purposes.

roll996 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• Transmission Security: All data transmitted between your browser or device and the roll996 Platform is encrypted using Transport Layer Security (TLS 1.3) with 256-bit encryption. The presence of HTTPS in the Platform's URL and valid SSL certificate are verifiable through your browser.
• Password Storage: Player passwords are stored exclusively as salted cryptographic hashes using industry-standard algorithms. roll996 staff cannot retrieve or view your password in plaintext. In the event you forget your password, a reset process is used — never a password retrieval.
• KYC Document Handling: Identity documents submitted for KYC verification are stored in access-controlled, encrypted storage. Access is restricted to authorised compliance personnel only. Documents are not transmitted via unsecured channels.
• Payment Data Tokenisation: roll996 does not store complete payment instrument details (e.g., full bank account numbers or e-wallet account IDs beyond masked identifiers). Payment transactions are handled through tokenised references provided by our payment processors.
• Access Controls: Internal access to player data is governed by role-based access controls on a strict need-to-know basis. All internal data access events are logged for audit purposes.
• Penetration Testing & Monitoring: The Platform undergoes regular security assessments. Automated anomaly detection systems monitor for unusual login patterns, transaction volumes, and access events that may indicate compromise or fraud.

roll996 uses cookies and similar browser-based storage technologies to provide, maintain, and improve the Platform experience. This section explains what cookies we use, why, and how you can manage them.

10.1 Types of Cookies Used

10.2 Managing Cookies

You may manage cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by specific websites. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling analytical cookies will not affect your ability to play or transact.

Mobile browsers on Android and iOS devices also provide cookie management options through their privacy settings menus. Malaysian players accessing roll996 via mobile devices may refer to their specific browser documentation for cookie management instructions.

As a Data Subject whose personal data is processed by roll996, you hold the following rights in respect of your personal data. These rights are subject to applicable legal limitations, including retention obligations that may require roll996 to retain certain data even following a deletion request.

To exercise any of these rights, contact roll996 via live chat or by email at [email protected] (plain text — not a clickable link). roll996 will respond to verified data rights requests within thirty (30) calendar days. Complex or multiple simultaneous requests may require up to ninety (90) days, with notice provided explaining the extension.

roll996 operates a strict minimum age requirement of twenty-one (21) years for all players. The Platform is not intended for, and does not knowingly collect personal data from, persons under the age of 21.

Age verification is conducted through the KYC process before any withdrawal is processed, and roll996 employs automated systems to flag registrations that may indicate an underage applicant based on inconsistencies in provided data. If roll996 identifies that an Account has been registered by a person under 21, the Account will be immediately closed, all deposits will be returned via the original payment method, and any associated gameplay data will be deleted in accordance with our data retention schedule.

If you are a parent or guardian and have reason to believe that a person under the age of 21 in your care has registered an Account with roll996, please contact our support team immediately via live chat. We will investigate and resolve such cases as matter of priority.

roll996 does not direct marketing communications toward individuals under the age of 21. Our promotional materials are designed for a general adult audience and are not targeted at or appealing to minors.

roll996 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or business operations. The current version number and effective date are displayed at the top of this page.

Material changes to this Policy — particularly those that affect the types of data collected, the purposes for which data is used, or the rights available to Data Subjects — will be communicated to registered players via email notification to the address associated with their Account, or via a prominent notice displayed upon their next login to the Platform. Material changes will not take effect for a minimum of fourteen (14) days from the date of notification.

Non-material changes (such as typographical corrections, formatting updates, or clarifications that do not substantively alter your rights) may be made without advance notice and take effect upon publication.

Players are encouraged to review this Privacy Policy periodically. Continued use of the roll996 Platform following the effective date of any amendment constitutes your acknowledgement and acceptance of the revised Policy. If you do not accept the revised terms, you should discontinue use of the Platform and contact support to request Account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by roll996, please contact us through the following channels. We are committed to responding to all data-related enquiries promptly and with full transparency.