Candy916 Privacy Policy – Malaysian Member Data Protection

Candy916 is committed to protecting the personal information of every member. This Privacy Policy transparently explains how we collect, use, store, and protect your data as a user of our Malaysian betting platform.

Last updated: 1 January 2026

candy916's Privacy Commitment: We understand how important your privacy is. Every section of this Privacy Policy is written in clear, straightforward language so you know exactly what happens to your personal data when you use the candy916 platform.

1. Introduction

This Privacy Policy describes how candy916 ("Platform", "we", "us") collects and manages personal data. It applies to all users who register, visit, or use any services offered through the candy916 website.

We take your privacy seriously. Your personal data is collected and processed based on the consent you provide at registration, as well as applicable legal and regulatory requirements in Malaysia. By using the candy916 platform, you agree to the terms set out in this Privacy Policy.

The candy916 Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Guide us to fully understand your rights and responsibilities as a member.

2. Personal Data We Collect

Candy916 collects your personal information through several channels — directly when you register or use our services, and automatically through tracking technologies as you browse our platform.

2.1 Information You Provide Directly

  • Registration Information: Full name (as per MyKad), date of birth, phone number, email address, and your chosen password.
  • Identity Verification (KYC) Information: MyKad copy, proof of address, bank statement, or e-wallet screenshot for account verification purposes.
  • Financial Information: Payment account details used — whether Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks). We do not store credit or debit card numbers directly.
  • Communications: Records of conversations with our customer support team via Live Chat, WhatsApp, or email.
  • Feedback: Any feedback, complaints, or suggestions you submit to us.

2.2 Automatically Collected Information

  • Log Data: IP address, browser type, operating system, pages visited, and access timestamps.
  • Device Data: Device type (Android or iOS), phone model, operating system version, and unique device identifier.
  • Usage Data: Betting history, casino game activity, and deposit and withdrawal records in MYR.
  • Location Data: General location information derived from your IP address, used for service area compliance purposes.
  • Cookies & Tracking Technologies: As described in Section 6 of this Privacy Policy.
Data Type Primary Purpose Retention Period
Registration Information Account management & identity verification Duration of active account + 5 years
KYC Data AML/KYC Legal Compliance Minimum 5 years after account closure
Transaction Records Financial audits & dispute resolution 7 years (legal requirement)
Log & Device Data Security & platform improvements Rolling 12 months
Support Records Complaint resolution & training 2 years

3. How We Use Your Data

Candy916 uses collected personal data solely for legitimate purposes directly related to providing our betting platform services to Malaysian members. The primary purposes for which your data is used are as follows:

  • Account Management: Creating, verifying, and maintaining your candy916 member account.
  • Transaction Processing: Processing MYR deposits and withdrawals securely and accurately through your registered Malaysian payment methods.
  • Identity Verification: Conducting KYC (Know Your Customer) and AML (Anti-Money Laundering) checks as required by law.
  • Platform Security: Detecting and preventing fraudulent activity, hacking attempts, or misuse of candy916 accounts.
  • Customer Support: Providing accurate and effective assistance whenever you reach out to our support team.
  • Service Communications: Sending important notifications related to your account, transactions, policy changes, or security issues.
  • Marketing (with consent): Sending promotional information, new bonuses, and exclusive candy916 offers — only if you have consented to receive them.
  • Service Improvement: Analyzing usage patterns to improve candy916's platform functionality, user experience, and product offerings.
  • Legal Compliance: Meeting the reporting and compliance requirements set by the relevant authorities.

candy916's Guarantee: We will not use your personal data for any purpose other than those stated above without first obtaining your additional consent.

4. Data Sharing & Disclosure

Candy916 does not sell, rent, or trade members' personal data to third parties for their own marketing purposes. However, there are specific circumstances under which we may need to share your information:

4.1 Trusted Service Providers

We work with third-party service providers that help us operate the candy916 platform, including payment processors (Touch 'n Go eWallet, GrabPay, DuitNow, and others), cloud service providers, and security technology vendors. All these providers are bound by strict confidentiality agreements and may only use your data for purposes specified by candy916.

4.2 Legal Requirements

Candy916 may be required to disclose your personal data to the relevant authorities if mandated by law, court order, or to assist in investigations into fraud or other illegal activities. This includes anti-money laundering agencies and Malaysian law enforcement bodies.

4.3 Business Transfers

In the event of any merger, acquisition, or sale of candy916 assets, your personal data may be transferred as part of the business assets. We will notify you in advance should such a situation arise.

5. Data Security & Protective Measures

Protecting the personal data of candy916 members is a responsibility we take very seriously. We implement multiple layers of technical and operational security to safeguard your information:

  • 256-bit SSL Encryption: All data transmitted between your browser and candy916's servers is encrypted using the latest SSL/TLS protocols.
  • Data-at-Rest Encryption: Sensitive data stored on our servers is also encrypted to prevent unauthorised access.
  • Two-Factor Authentication (2FA): Members can enable two-factor authentication for an added layer of security on their candy916 account.
  • 24/7 Monitoring: Our automated monitoring system detects suspicious account activity in real time.
  • Internal Access Controls: Only authorised candy916 staff may access members' personal data, and every instance of access is carefully logged.
  • Regular Security Audits: We conduct regular penetration testing and security audits to identify and address any system vulnerabilities.

Important Reminder: While candy916 takes all reasonable security measures, no system can be guaranteed 100% safe from cyber threats. You are also responsible for keeping your account password confidential. Never share your candy916 login credentials with anyone.

6. Use of Cookies

Candy916 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

  • Essential Cookies: Required for core candy916 platform functions such as login, user sessions, and security. These cookies cannot be disabled.
  • Performance Cookies: Helping us understand how members use the platform for continuous improvement. This data is collected anonymously.
  • Functional Cookies: Saving your preferences such as language, display settings, and login details for a smoother user experience.
  • Analytics Cookies: Used to analyse platform usage patterns and help us make data-driven decisions to improve candy916's services.

You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect the functionality of the candy916 platform.

7. Data Retention & Deletion

Candy916 retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law. In general:

  • Active account data is retained for the duration your account remains active on candy916.
  • Following account closure, certain data (primarily financial records and KYC documentation) is retained for a minimum of 5 to 7 years to meet legal compliance and audit requirements.
  • Log and analytics data is retained on a rolling 12-month basis before being automatically deleted.
  • Customer support communication records are retained for 2 years.

When data is no longer needed and there is no legal requirement to retain it, candy916 will securely delete or anonymise it.

8. Your Rights as a User

As a candy916 member residing in Malaysia, you have the following rights regarding your personal data. To exercise any of these rights, please contact us at support@candy916.ws:

9. Children's Data

The candy916 platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under 18. Should we discover that a minor's data has been collected without valid consent, we will take immediate steps to delete the data and close the account in question.

If you believe that someone under the age of 18 has registered an account with candy916, please contact us immediately at support@candy916.ws so that immediate action can be taken.

10. Third-Party Links

The candy916 platform may contain links to third-party websites or services from time to time. This Privacy Policy applies solely to the candy916 platform. candy916 is not responsible for the privacy practices or content of any third-party websites you may access through links on our platform. We encourage you to read the privacy policy of every website you visit.

11. Amendments to the Privacy Policy

Candy916 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or service improvements. The latest version will always be displayed on this page, with the revision date clearly shown at the top.

For material changes, we will notify members via their registered email or in-platform notifications on candy916 at least 7 days before the changes take effect. Continued use of the platform after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

For any questions, requests, or concerns regarding candy916's Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

  • Email: support@candy916.ws
  • Email Subject: "Privacy Policy Enquiry – [Your Username]"
  • Live Chat: Available directly on the candy916 platform, 24 hours a day
  • Target Response Time: Within 2 business days

Your Rights Regarding Personal Data

Candy916 respects and upholds the data protection rights of every member in accordance with Malaysian law.

Right of Access

You have the right to request a copy of all personal data we hold about you. candy916 will provide this information within 14 business days of receiving your request.

Right of Rectification

If any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Please contact candy916 support with the relevant supporting documentation.

Right to Erasure

You may request the deletion of your personal data under certain circumstances. Please note that some data may need to be retained to fulfil candy916's legal and regulatory obligations.

Right to Object

You may opt out of having your data processed for direct marketing purposes at any time. Simply email support@candy916.ws and we will stop all marketing communications promptly.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for the purpose of transferring it to another service provider, subject to applicable technical requirements.

Right to Restriction of Processing

In certain circumstances — such as while we are reviewing your correction request or objection — you may ask us to temporarily restrict the processing of your data.

Why Your Privacy Is Safe with candy916

We invest in best-in-class technology and processes to ensure every Malaysian member's data is always protected.

256-bit SSL Encryption

All data transmitted between you and candy916's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysian banking institutions.

KYC & AML Compliance

Candy916 fully complies with the KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements set by the authorities. This protects both you and the platform from illegal activity.

Secure Malaysian Payments

We only work with trusted Malaysian payment providers — Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and others — each of which maintains its own high security standards.

Strict Access Controls

Candy916 member data is accessible only to authorised personnel, with every access logged and monitored. Our staff are bound by legally enforceable confidentiality agreements.

Real-Time Monitoring

Candy916's automated monitoring system operates 24 hours a day to detect and block any suspicious activity on our members' accounts before any harm occurs.

Regular Security Audits

Candy916 engages independent security experts to perform regular security audits and penetration testing, ensuring our platform consistently meets the latest international security standards.

Privacy Policy FAQ

Answers to the questions most frequently asked by candy916 members regarding privacy and data protection.

No. candy916 does not sell, rent, or trade members' personal data to third parties for their own marketing purposes. Your data is only shared with service providers that help us operate the platform (such as payment processors) and with legal authorities where required under Malaysian law.

You may submit a data access request by emailing support@candy916.ws with the subject line "Data Access Request – [Username]". Please include your registered phone number for identity verification purposes. candy916 will process your request and provide the relevant information within 14 business days.

Yes, you may opt out of marketing communications at any time by clicking the "Unsubscribe" link at the bottom of any candy916 marketing email, or by contacting our support team. Please note that service-related emails (such as transaction confirmations and account security notifications) cannot be opted out of, as they are essential for the security of your account.

When you close your candy916 account, certain data — particularly financial records and KYC documents — must be retained for 5 to 7 years to comply with Malaysian legal requirements relating to anti-money laundering and financial audits. Data not subject to any legal retention requirement will be deleted within 30 days of your account closure being confirmed.

Yes. candy916 works with Malaysian payment providers that hold recognised security certifications. We do not directly store your full e-wallet or banking account details on our servers. Every transaction is processed through a certified, secure payment gateway, ensuring your financial information remains protected at all times.

Your Privacy Guaranteed, Your Experience Elevated

Register today and enjoy a safe, transparent, and responsible Malaysian betting platform. Your data is protected, your gaming is secure.

Register Now – Free Log In
256-bit SSL Secured No Data Selling Trusted KYC 24/7 Support
Bahasa Melayu