Privacy Policy — Victory996

This Privacy Policy ("Policy") sets out the data practices of Victory996 ("Victory996", "we", "our", "us") in relation to the personal data of individuals ("you", "your", "User") who access, register with, or use the Victory996 online gaming platform available at https://victory996.cam and any associated mobile interfaces or services (collectively, "the Platform").

Victory996 is committed to safeguarding the privacy of all Users. We handle personal data responsibly, in accordance with applicable data protection legislation and privacy best practices. This Policy describes what personal data we collect, the purposes for which it is processed, the conditions under which it may be shared, how long we retain it, and the rights available to you as a data subject.

By registering an account, accessing the Platform, or otherwise interacting with Victory996's services, you acknowledge that you have read and understood this Privacy Policy. Where we require your consent to process personal data, we will request it expressly. You may withdraw consent at any time, subject to the limitations set out in this Policy.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including names, identification numbers, location data, online identifiers, or one or more factors specific to the physical, physiological, genetic, mental, economic, or social identity of that person.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, transmission, restriction, or deletion.
• "Data Controller" means Victory996, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third-party service provider that processes personal data on behalf of Victory996, acting under our instruction and in accordance with contractual data processing agreements.
• "KYC" means Know Your Customer — the regulatory identity and age verification process required of users prior to depositing, withdrawing, or accessing certain platform features.
• "Cookies" means small text files placed on a user's device by a website, used to store session information, preferences, and analytics data.

Victory996 collects personal data in three principal ways: data you provide directly, data collected automatically through platform use, and data obtained from third parties where permissible. The categories of personal data we collect include:

A. Data You Provide Directly

• Full legal name and date of birth (for account registration and age verification)
• Residential address, including postcode and state (Malaysia)
• Email address and phone number
• Government-issued identification documents (e.g., MyKad, passport) submitted for KYC verification
• Source of funds documentation where required for high-value transaction verification
• Payment method details, including e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account numbers (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency wallet addresses
• Communications submitted via live chat, email, or support tickets

B. Data Collected Automatically

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session duration, pages visited, and interaction patterns on the Platform
• Login timestamps and frequency of access
• Betting history, game activity, wagering amounts, and win/loss records
• Cookie identifiers and similar tracking technologies (see Section 8)

C. Data From Third Parties

• Identity verification results from authorised KYC service providers
• Payment confirmation and transaction data from payment processors and banking partners
• Fraud screening signals from risk management and anti-money-laundering (AML) service providers

Victory996 processes personal data only for specific, documented purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process your personal data include:

• Account Management: Creating, maintaining, verifying, and securing your Victory996 account.
• KYC & Age Verification: Confirming your identity and verifying that you meet the minimum age requirement of 21 years.
• Payment Processing: Facilitating deposits and withdrawals via Malaysian payment channels including DuitNow, FPX, Touch 'n Go eWallet, Maybank, CIMB, Public Bank, and cryptocurrency networks.
• Anti-Money Laundering (AML) Compliance: Monitoring transactions and account activity to detect and prevent financial crime, in compliance with applicable regulations.
• Platform Security: Detecting, preventing, and investigating fraud, unauthorised access, and abuse of the platform or its promotional systems.
• Customer Support: Responding to your queries, resolving disputes, and maintaining records of support interactions.
• Personalisation: Tailoring game recommendations, promotional offers, and platform experience based on your activity and preferences.
• Responsible Gambling: Monitoring patterns of play to identify and support users who may exhibit signs of problem gambling behaviour.
• Legal Obligations: Retaining records and producing reports as required by applicable law or regulatory authority.
• Platform Improvement: Analysing aggregated usage data to improve platform performance, stability, and user experience.

All personal data processed by Victory996 is done so under one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform our obligations under the agreement established when you register an account with Victory996 (e.g., operating your account, processing deposits and withdrawals).
• Legal Obligation: Processing required to comply with applicable laws, including KYC, AML, and data retention obligations.
• Legitimate Interests: Processing necessary to pursue Victory996's legitimate interests, including fraud prevention, platform security, and responsible gambling monitoring, where those interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent to send marketing communications or deploy non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Victory996 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may share your data with the following categories of recipient, strictly as necessary for the purposes described in this Policy:

• KYC & Identity Verification Providers: Third-party services engaged to verify your identity, age, and document authenticity as part of the account registration process.
• Payment Processing Partners: Financial institutions, e-wallet operators, and payment gateway providers facilitating transactions on your behalf — including Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, and cryptocurrency processing services.
• Fraud Prevention & AML Services: Specialist service providers engaged to screen transactions, detect suspicious activity, and support compliance with anti-money-laundering obligations.
• IT & Platform Infrastructure Providers: Cloud hosting, database management, and platform support vendors who process data on our behalf under data processing agreements.
• Regulatory & Law Enforcement Authorities: Where legally required or compelled by a court order or equivalent regulatory directive, we may disclose personal data to relevant authorities.
• Professional Advisers: Lawyers, auditors, and compliance consultants engaged to advise Victory996, subject to applicable professional confidentiality obligations.

Victory996 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

Victory996 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device when you visit our website. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These include session management cookies that keep you logged in and security cookies that prevent fraudulent use. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, game history, and display options, to personalise your experience on Victory996.
• Analytics Cookies: Used to collect anonymised data about how users interact with the Platform — including pages visited, session duration, and navigation paths — to help us identify areas for improvement.
• Marketing & Preference Cookies: Used, with your consent, to deliver relevant promotional content and bonus offers based on your activity and preferences. You may opt out of these at any time.

You may manage cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of specific platform features. Most modern browsers allow you to refuse cookies, delete existing cookies, or receive alerts when new cookies are set.

As a data subject, you hold the following rights in relation to your personal data held by Victory996. To exercise any of these rights, please contact our support team as described in Section 14.

• Right of Access: You may request a copy of all personal data we hold about you, together with information about how it is being processed.
• Right to Rectification: You may request the correction of inaccurate or incomplete personal data held on your account.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to applicable legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing of your personal data where it is carried out on the basis of legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

Victory996 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL (Secure Socket Layer) encryption on all data transmissions between your device and our servers
• Two-factor authentication (2FA) available for all user accounts
• Access controls ensuring that internal staff access to personal data is limited to those with a documented business need
• Regular security audits, vulnerability assessments, and penetration testing of the Platform
• Encrypted storage of all sensitive personal and financial data at rest
• Incident response procedures for the identification, containment, and notification of personal data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Victory996 will notify affected users without undue delay and in compliance with applicable breach notification requirements.

Victory996 is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Where age verification procedures reveal that a user is under 21, the account will be immediately suspended, all funds returned where lawfully possible, and all personal data relating to that account deleted without undue delay.

If you believe that a minor has registered an account on Victory996 or has otherwise provided personal data to the Platform, please contact our support team immediately so that we can investigate and take appropriate action.

In the course of operating the Platform and fulfilling the purposes described in this Policy, your personal data may be transferred to and processed in countries outside Malaysia. Such transfers may occur, for example, when we use cloud infrastructure or KYC service providers based in other jurisdictions.

Where personal data is transferred internationally, Victory996 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection law. Safeguards may include contractual data transfer agreements, adequacy determinations, or other legally recognised mechanisms.

Victory996 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data practices, or the services we provide. The date of the most recent update is displayed at the top of this page.

Where changes are material, we will notify registered users by posting a notice on the Platform or by sending a communication to the email address associated with your account. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should discontinue use of the Platform and request account closure.

If you wish to exercise any of your data subject rights, have a question about this Privacy Policy, or wish to raise a concern about how your personal data is being handled, please contact our Data Privacy team through the following channel:

Our team is available 24 hours a day, 7 days a week via live chat on the Platform. For written privacy-related requests, we aim to acknowledge receipt within 2 business days and provide a substantive response within 30 calendar days.