Candy916 Privacy Policy – Malaysian Player Data Protection & Security

Welcome to the Privacy Policy page candy916. We at candy916 deeply value the trust you place in us when sharing your personal information to use our online entertainment platform. This document is written in clear, straightforward language so that every Malaysian player knows exactly how their data is handled.

This Privacy Policy applies to all users who access the candy916 website at https://candy916.biz, or use any of our services including online casino, Live Casino, Sports Betting, slots, jackpot, poker, and all other related activities. It also applies to anyone who contacts the candy916 customer support team through any channel.

Candy916 operates in accordance with internationally recognised data protection principles. We do not collect more data than necessary, do not retain data longer than required, and never sell or rent your personal data to any third party for commercial purposes.

Candy916 collects several categories of personal information depending on how you interact with our platform. Below is a detailed breakdown of the types of data we collect:

Candy916 collects personal information through several different methods as you interact with our platform:

• Direct Registration – When you complete the candy916 account registration form, you voluntarily provide your basic identity and contact information.
• Platform Usage – When you play casino games, place Sports Betting wagers (football, cricket, e-sports), or interact with any platform feature, our system automatically logs these activities.
• Financial Transactions – Every time you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, or CIMB Clicks via FPX, transaction records are retained for accounting and verification purposes.
• Identity Verification (KYC) – When you submit identity documents such as your MyKad or passport for account verification purposes.
• Support Communications – When you contact the candy916 support team via live chat, email, or any other channel.
• Cookies & Tracking Technologies – Through cookies, web beacons, and similar technologies that operate while you browse the candy916 website.
• Authorised Third Parties – In limited circumstances, we may receive data from legitimate business partners such as game software providers for verification purposes.

Candy916 uses collected personal data solely for legitimate and necessary purposes. We do not use your data for anything unrelated to platform operations without your prior consent:

• Account Management – Creating, verifying, and maintaining your candy916 player account to keep it secure and accessible.
• Transaction Processing – Managing deposits, withdrawal of winnings, and all financial transactions related to your activity on the candy916 platform.
• Legal Compliance – Complying with applicable legal requirements, including Anti-Money Laundering (AML) procedures and Know Your Customer (KYC) obligations.
• Fraud Prevention – Detecting and investigating suspicious activity, collusion, or attempted fraud to protect all candy916 players.
• Platform Improvement – Analyses usage patterns to improve the player experience, enhance existing features, and introduce relevant new games.
• Service Communications – Sending important notifications regarding your account, changes to terms, transaction confirmations, and security updates.
• Customer Support – Enabling the candy916 support team to assist you more effectively by referencing your previous interaction history.
• Responsible Gaming – Monitors gameplay patterns to identify players who may need responsible gaming support.
• Marketing (with consent) – Sending information about relevant candy916 promotions, bonuses, and offers – only if you have given consent to receive marketing communications.

Candy916 does not sell, rent, or trade your personal data to any third party for their commercial purposes. However, in certain limited circumstances, we may share your data with the following categories of parties:

• Game Software Providers – Providers such as PG Soft, Pragmatic Play, and others may receive the minimum gaming data required to operate their games on the candy916 platform.
• Payment Processors – Payment gateways used to process your deposits and withdrawals (Touch 'n Go, GrabPay, DuitNow, FPX) receive only the transaction information necessary for processing purposes.
• IT Service Providers – Companies providing technical infrastructure, cloud computing, and cybersecurity services to candy916, bound by strict confidentiality agreements.
• Regulatory Authorities – When required by law, court order, or a directive from a legitimate government authority.
• Audit and Compliance – Independent auditing bodies that verify the fairness of games and candy916's operational compliance may be granted limited access to the data required.

Every third party that receives data from candy916 is bound by strict confidentiality and data protection agreements, and is only permitted to use that data for the specified purpose.

Candy916 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by law. In general:

• Active account data is retained for as long as your account remains active on the candy916 platform.
• Following account closure, transaction and KYC data is retained for 5 years for legal compliance and audit purposes.
• Customer support communication logs are retained for 2 years.
• Technical log data (IP addresses, access records) is retained for 90 days.

To safeguard your data, candy916 implements comprehensive technical and organisational security measures:

• 256-bit SSL/TLS Encryption for all data transmissions between your device and candy916's servers.
• Data encryption at rest – sensitive data stored in our databases is encrypted to industry standards.
• Tiered access controls – candy916 staff only have access to the data required to perform their specific duties.
• 24/7 Security Monitoring – An automated threat detection system monitors the candy916 platform around the clock.
• Regular penetration testing – Regular security audits are conducted by independent cybersecurity experts.
• Two-factor authentication (2FA) – available to all candy916 player accounts as an added layer of security.

Candy916 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the candy916 website. We use several categories of cookies:

• Essential Cookies – Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are essential to candy916's operation.
• Performance Cookies – Collecting information about how you use the candy916 platform, such as the most frequently visited pages and any error messages encountered. This data is used to improve the platform.
• Functional Cookies – Allowing the candy916 platform to remember your preferences such as language, display settings, and gaming preferences to deliver a more personalised experience.
• Analytics Cookies – Used to understand overall platform usage patterns in aggregate for the purpose of improving candy916's services.

You can control and manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality of the candy916 platform and your overall gaming experience.

As a candy916 player, you have several important rights regarding your personal data. candy916 is committed to respecting and facilitating the exercise of these rights:

Candy916 is a platform that intended for users aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18. All prospective players are required to verify their age upon registration.

If candy916 discovers that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Any remaining account balance will be handled in accordance with the procedures set out in the candy916 Terms and Conditions.

Candy916 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform enhancements. When material changes occur:

• We will display a prominent notice on the candy916 homepage regarding such changes.
• We will send notification emails to all players with active accounts.
• The "Last Updated" date at the top of this document will be revised accordingly.
• Continued use of the candy916 platform after a change notice is considered acceptance of the amended Privacy Policy.

We encourage you to review this Privacy Policy periodically, especially before making any significant transactions or sharing new personal information with candy916.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way candy916 handles your personal data, our team is ready to assist through the following channels:

• Privacy Email: support@candy916.biz (subject: Privacy Enquiry)
• Live Chat: Available 24/7 on the candy916 platform — chat icon at the bottom of the page.
• Response Time: Email response within 2–4 hours on business days; live chat in under 3 minutes.

For complaints that cannot be resolved through our support team, you have the right to escalate the matter to the relevant data protection authority under applicable law.