Official Privacy Documents

Roll96 Privacy Policy – Your Data Protection

Roll96 is committed to protecting the privacy and personal data of every member in Malaysia. This policy clearly outlines how we collect, use, store, and safeguard your information in accordance with applicable laws.

Effective Date: 1 January 2026 | Version: 2.4
Roll96's Privacy Commitment

Roll96 respects the privacy rights of every member. This Privacy Policy has been drawn up in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and international data protection best practices. Your personal data will not be sold to any third party for marketing purposes without your consent.

Introduction & Scope of Privacy Policy

Welcome to the Privacy Policy Roll96, a Malaysian online betting platform operating under a valid licence. This document explains how Roll96 ("we", "the company") collects, uses, discloses, and protects your personal information when you use our website, mobile application, or any services we provide ("Platform").

This Privacy Policy applies to all users of the Roll96 Platform, including website visitors, prospective members, and registered members. By using our Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any of the terms herein, please discontinue use of our Platform.

This Privacy Policy should be read together with Terms & Conditions and policies Responsible Gaming Roll96, forming a comprehensive protection framework for every one of our members.


Categories of Personal Data We Collect

Roll96 collects various types of information to ensure our services run smoothly, securely, and in compliance with regulatory requirements. The information we collect can be grouped into the following categories:

2.1 Information You Provide Directly

  • Identity Information: Full name, date of birth, identity card or passport number, gender, and nationality.
  • Contact Information: Email address, mobile number, and mailing address.
  • Financial Information: Bank account numbers, digital wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay), and DuitNow or FPX transaction history.
  • Verification Documents: Malaysian identity card copy, bank statements, or other KYC documents required for AML compliance.
  • Account Information: Username, password (stored in hashed form), game preferences, and account settings.

2.2 Automatically Collected Information

  • Technical Data: IP address, web browser type and version, device operating system, screen resolution, and device identifier.
  • Usage Data: Pages visited, time spent, games played, bet amounts, wins and losses, and platform usage patterns.
  • Location Data: Approximate location information derived from your IP address, for regulatory compliance and region verification purposes.
  • Cookie Data: Information stored by cookies and similar tracking technologies — explained further in Section 9.
Data Category Example Requirements
Identity Name, IC number, date of birth Mandatory — for registration
Contact Email, phone Mandatory — for communication
Finance Bank account number, TnG eWallet Mandatory — for payments
Technical IP address, browser type Automatic — for security
Usage Game history, betting records Automatic — for service improvement
Marketing Communication preferences, promotional responses Optional — consent-based

Purposes for Using Personal Data

Roll96 uses your personal data for the following purposes, all of which are legally valid and necessary to deliver a high-quality service to our members:

3.1 Service Provision & Management

  • Processes account registration and verifies your identity in accordance with KYC requirements.
  • Processes deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks).
  • Managing your account, including betting limits, balance, transaction history, and VIP programme.
  • Providing 24/7 customer support in Bahasa Melayu and resolving your complaints.

3.2 Security & Compliance

  • Detecting and preventing fraud, money laundering, and other suspicious activity.
  • Complying with legal requirements including PDPA 2010, AML regulations, and regulatory body directives.
  • Verifies age to ensure only individuals aged 18 and above access the platform.
  • Monitoring gaming activity to identify signs of problem gambling and offer appropriate assistance.

3.3 Marketing & Personalisation

  • Sending promotional information, bonus offers, and Roll96 VIP programme updates — only where you have given your consent.
  • Personalising your gaming experience based on your preferences and activity history on the platform.
  • Conducts member satisfaction surveys and studies to improve Roll96's services.
Marketing Opt-Out Options

You may opt out of marketing communications from Roll96 at any time by clicking the "unsubscribe" link in our emails, or by contacting our support team. Requests will be processed within 5 business days.


Legal Basis for Data Processing

All personal data processing carried out by Roll96 is based on at least one valid legal ground under Malaysia's PDPA 2010:

  • Contractual Performance: Processing required to fulfil our agreement with you — for example, processing DuitNow or FPX deposits and managing your gaming account.
  • Legal Obligation: Processing required to comply with Malaysian law, including AML obligations and tax reporting requirements.
  • Legitimate Interests: Processing for fraud detection, platform security, and service improvement purposes — where our interests do not override your fundamental rights.
  • Consent: For direct marketing activities and non-essential cookies — you may withdraw this consent at any time.

Third-Party Data Sharing & Disclosure

Roll96 does not sell your personal data to any third party. However, we may share your data with specific parties in limited circumstances as follows:

5.1 Approved Service Providers

We work with a carefully selected network of trusted third-party service providers to help operate our Platform. These include payment processors for Touch 'n Go eWallet, GrabPay, and FPX banking; cloud service providers that store your data securely; and identity verification companies for the KYC process. All providers are bound by strict confidentiality agreements and are only permitted to process your data for specified purposes.

5.2 Legal & Regulatory Requirements

Roll96 may disclose your personal data to Malaysian government authorities, regulatory bodies, or law enforcement agencies when required by law, court order, or a valid official investigation. We will notify you of any such disclosure unless prohibited by law.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of Roll96's assets, your personal data may be transferred as part of that transaction. You will be notified in advance and your rights under this Privacy Policy will continue to be protected.

Cross-Border Data Transfers

If your data needs to be transferred outside Malaysia — for example, to international cloud servers — Roll96 ensures an equivalent level of protection to the PDPA 2010 is applied through lawful data transfer agreements and appropriate safeguarding mechanisms.


Data Security Measures

Roll96 implements a range of robust technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or disclosure:

  • 256-bit SSL/TLS Encryption for all data transmitted between your browser and Roll96's servers.
  • Data-at-rest encryption for all personal and financial data stored in our databases.
  • Layered access controls — only authorised personnel are permitted to access personal data, and all access is automatically logged.
  • Two-Factor Authentication (2FA) for all Roll96 internal admin accounts.
  • Security penetration testing conducted by independent security experts on a quarterly basis.
  • 24/7 threat monitoring using intrusion detection systems (IDS) and security information and event management (SIEM) systems.
  • Encrypted data backups daily across multiple data centres to ensure service continuity.

While we take all reasonable steps to protect your data, no system is entirely risk-free. In the unlikely event of a data breach that affects your rights, Roll96 is committed to notifying you and the relevant authorities within the timeframe required by law.


Data Retention Period

Roll96 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required by Malaysian law. The following are our general data retention guidelines:

  • Active account data: Retained for the duration your Roll96 account remains active.
  • Financial transaction data: Retained for 7 years in accordance with Malaysia's taxation and AML legal requirements.
  • KYC records & identity verification: Retained for 5 years following account closure, in accordance with Bank Negara Malaysia guidelines.
  • Customer support communication logs: Retained for 3 years for reference and service improvement purposes.
  • Marketing & communication preferences data: Retained until you withdraw consent or request deletion.
  • Technical data & server logs: Retained for 12 months for security and technical debugging purposes.

Once your data is no longer needed, Roll96 will securely delete or anonymise it in accordance with approved data disposal procedures.


Your Rights Under PDPA 2010

As a data subject in Malaysia, you have the following rights regarding your personal data held by Roll96. We fully respect and facilitate the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you. Roll96 will provide this within 21 business days.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request a correction promptly and at no charge.

Right to Erasure

You may request the deletion of your personal data, subject to any legal retention requirements still in force.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another party.

Right to Restrict Processing

In certain circumstances, you may request that we limit how we process your data while an issue is being resolved.

How to Exercise Your Rights

To exercise any of the rights above, please contact the Roll96 Data Protection Officer (DPO) by email at privacy@roll96.my or via our platform's live chat. Please specify the right you wish to exercise and your identifying information. We will respond within 14 business days.


Cookies, Tracking Technologies & Analytics

The Roll96 Platform uses cookies and similar tracking technologies to enhance your experience, ensure security, and understand how users interact with our platform. Cookies are small text files stored on your device by your web browser.

9.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled.
  • Performance & Analytics Cookies: Helps us understand how users navigate the platform, which pages are most visited, and where technical issues occur.
  • Functional Cookies: Remembering your preferences such as language, display settings, and username for a smoother login experience.
  • Marketing Cookies: Used to display Roll96 ads and promotions relevant to your interests — with your consent only.

9.2 Managing Cookie Preferences

You can manage and control cookies through your web browser settings at any time. Please note that disabling essential cookies may affect the functionality of the Roll96 Platform. For more information on managing cookies in popular browsers such as Chrome, Firefox, and Safari, please refer to your browser's support documentation.


Links to Third-Party Websites

The Roll96 Platform may contain links to third-party websites or services for your convenience. This Privacy Policy does not apply to those third-party sites, and Roll96 is not responsible for their privacy practices or content.

We encourage you to review the privacy policy of every website you visit, especially before providing any personal information. The presence of a link on the Roll96 Platform does not constitute our endorsement or verification of that website.


Child Protection

Roll96 strictly prohibits use of the Platform by individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has registered an account on Roll96 or provided us with their personal data, please contact us immediately at privacy@roll96.my and we will take immediate action to delete the data and close the account in question.


Contact Our Data Protection Officer

Roll96 has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this Privacy Policy and PDPA 2010. If you have any questions, concerns, or complaints regarding your privacy or personal data, please do not hesitate to contact us:

  • DPO Email: privacy@roll96.my
  • General Support Email: support@roll96.my
  • Live Chat: Available 24/7 on the Roll96 Platform
  • Response Time: Within 14 business days for privacy-related enquiries

If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection Malaysia under the purview of the Malaysian Ministry of Communications and Digital.

Privacy Policy Amendments

Roll96 may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. You will be notified of any material changes via email or a prominent notice on the Platform. The "Effective Date" at the top of this document will be updated whenever an amendment is made.

Roll96's Privacy Commitment

The four core pillars that define our approach to protecting the personal data of members in Malaysia.

Full PDPA Compliance

Every aspect of our data processing complies with Malaysia's Personal Data Protection Act 2010, without exception.

Military-Grade Encryption

SSL 256-bit encryption protects all data in transit. Personal data is stored in encrypted form on our secure servers.

No Data Selling

Your personal data will never be sold or shared with third-party advertisers for marketing purposes without your consent.

You're in Control

Access, correct, or delete your data at any time. Withdraw marketing consent easily with no questions asked.

Why Is Your Privacy Safe with Roll96?

The concrete steps we take every day to keep our members' personal data secure.

Regular Security Audits

Independent security experts conduct quarterly penetration testing and compliance audits to identify and address vulnerabilities before they can be exploited.

Secure Data Storage in Malaysia

Malaysian member data is stored in certified data centres located in the Southeast Asian region. All cross-border data transfers are carried out in accordance with strict legal safeguards.

Dedicated Data Protection Officer

Roll96 has a dedicated DPO responsible for overseeing all privacy matters, ensuring PDPA compliance, and serving as the primary point of contact for member privacy enquiries.

Real-time Threat Monitoring

Our SIEM system monitors suspicious activity around the clock. Any unauthorised attempt to access member data is detected and automatically blocked in under one second.

Staff Privacy Training

All Roll96 staff undergo mandatory annual data protection training. Access to member data is restricted to those who genuinely require it to perform their duties.

Immediate Incident Notifications

In the event of any security incident affecting your data, Roll96 is committed to notifying you and Malaysia's Personal Data Protection Department within the timeframe stipulated by law.

Your Data, Your Control

Join Roll96 & Play with Full Confidence

Your privacy isn't just a promise — it's our written commitment. Join over 500,000 Roll96 members across Malaysia and enjoy a betting experience that is safe, fair, and fully protected.

Register for Free Now Read Terms & Conditions

For users aged 18 and above only. Your data is protected under Malaysia's PDPA 2010.

Bahasa Melayu