Privacy Policy

This Privacy Policy ("Policy") is issued by 95pay ("95pay", "we", "us", "our"), the operator of the online gambling platform located at https://95pay.cam ("Platform"). This Policy governs how 95pay collects, processes, stores, discloses, and protects personal data relating to users of the Platform ("you", "User", "Player").

95pay is committed to protecting the privacy and personal data of all individuals who interact with our Platform. We handle personal data in accordance with applicable data protection legislation and international best-practice standards for online data governance.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated herein by reference. By registering for an account or using the 95pay Platform, you acknowledge that you have read and understood this Privacy Policy in full.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• Personal Data — Any information that identifies or could reasonably identify a living individual, either alone or in combination with other information (e.g., full name, email address, identification number, IP address).
• Processing — Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• Data Controller — 95pay, as the entity that determines the purposes and means of processing your personal data.
• Data Processor — A third party that processes personal data on behalf of 95pay pursuant to a written data processing agreement.
• Sensitive Personal Data — Personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or financial crime risk information.
• KYC Data — Identity verification documents and associated data required under Know Your Customer (KYC) procedures, including government-issued identification and proof of address.
• Cookies — Small text files placed on your device by the Platform that allow us to recognise your browser and remember preferences or session information.

95pay collects personal data that is necessary and proportionate to the delivery of our services. The categories of personal data we collect, their purpose, and their legal basis are set out in the table below:

We do not intentionally collect or retain Sensitive Personal Data beyond what is strictly required for KYC, AML compliance, or responsible gambling obligations. Where such data is collected, it is handled with the highest level of security controls.

95pay collects personal data through the following means:

• Direct Submission: When you register for an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or interact with any form on the Platform.
• Automated Collection: Through cookies, web beacons, pixel tags, and server logs that capture technical data about your device, browser, and interaction with the Platform when you visit or use the Site.
• Payment Processors: When you make deposits or withdrawals using methods such as DuitNow, FPX, Maybank, CIMB, Touch 'n Go eWallet, GrabPay, Boost, or cryptocurrency wallets, your payment provider shares transaction confirmation data with us.
• Third-Party KYC Providers: Identity verification platforms engaged by 95pay to conduct document and facial recognition checks may return verified identity data to us as part of the KYC process.
• Fraud and AML Screening Tools: Automated screening systems that cross-reference data against sanctions lists, politically exposed persons (PEP) databases, and adverse media sources.
• Public Sources: Publicly available information used for fraud prevention and compliance purposes, including official registries and court records where legally permissible.

95pay processes your personal data only for specific, legitimate purposes. We do not use your data for purposes that are incompatible with those stated below:

• Account Administration: To create, manage, verify, and maintain your 95pay account in accordance with our Terms and Conditions.
• Service Delivery: To provide access to the Platform, process bets and wagers, administer bonuses and promotions, and facilitate gameplay across our casino, sports betting, and live dealer verticals.
• Payment Processing: To process deposits and withdrawals in Malaysian Ringgit (MYR) through your chosen payment method, and to maintain accurate financial records.
• KYC and Identity Verification: To verify your identity and age (confirming you are 21 or above) before processing withdrawals or as required by our compliance programme.
• Anti-Money Laundering (AML) and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, money laundering, and other financial crimes in compliance with applicable regulations.
• Responsible Gambling: To monitor gambling patterns, enforce self-exclusion and deposit limits, and identify early indicators of problem gambling behaviour in line with our duty of care obligations.
• Customer Support: To respond to your enquiries, resolve disputes, and manage support tickets submitted through live chat or email.
• Platform Improvement: To analyse usage patterns and technical performance data for the purpose of improving the Platform's features, stability, and user experience.
• Marketing Communications: To send you promotional emails, bonus notifications, and personalised offers — but only where you have provided explicit consent or where a legitimate interest exists and you have not opted out.
• Legal Compliance: To fulfil our obligations under applicable law, respond to lawful requests from regulatory or law enforcement authorities, and defend against legal claims.

Where applicable data protection legislation requires a legal basis for processing, 95pay relies on the following grounds:

• Performance of a Contract: Processing necessary to fulfil our obligations under the Terms and Conditions — including account creation, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with anti-money laundering laws, KYC mandates, responsible gambling regulations, and responses to lawful authority requests.
• Legitimate Interests: Processing for fraud prevention, platform security, product improvement, and certain direct marketing activities, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications, certain cookies, and any other purposes where you have provided explicit, informed, and freely given consent. You may withdraw consent at any time.
• Vital Interests: In rare circumstances, processing to protect life or health — for example, in serious responsible gambling intervention scenarios.

95pay does not sell your personal data to third parties. We share your data only in the circumstances set out below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: Maybank, CIMB, Public Bank, Hong Leong Bank, FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, and cryptocurrency network processors receive transaction data necessary to execute your deposit and withdrawal instructions.
• KYC and Identity Verification Providers: Third-party identity verification platforms engaged by 95pay to perform document authentication and age verification as part of the KYC process.
• AML Screening Services: Compliance technology providers that screen transactions and account data against sanctions lists and risk databases to fulfil our anti-money laundering obligations.
• Game Studio Partners: Licensed international game studios who provide casino and sports betting content on the Platform may receive anonymised session and gameplay data for performance optimisation and RNG auditing purposes.
• IT and Infrastructure Providers: Cloud hosting, content delivery network (CDN), and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Legal and Regulatory Authorities: Competent regulatory bodies, law enforcement agencies, and courts where disclosure is required by law, court order, or to protect the rights and safety of 95pay or third parties.
• Professional Advisors: Solicitors, auditors, and compliance consultants engaged by 95pay under professional confidentiality obligations.

95pay uses cookies and similar tracking technologies to ensure the Platform operates correctly, to remember your preferences, and to understand how players interact with the Site. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management, authentication tokens, and security cookies. These cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and previously entered username (not password). These improve your experience without tracking behaviour for advertising purposes.
• Analytics Cookies: Collect anonymised data about how visitors navigate the Platform — pages visited, session duration, entry and exit points — to help us improve the user experience and identify technical issues.
• Marketing Cookies: Where you have provided consent, these cookies allow us to tailor promotional offers and communications to your demonstrated interests and on-platform behaviour.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 95pay Platform. For most modern browsers, you can block or delete cookies via the browser's settings menu. Instructions vary by browser — refer to your browser's help documentation for guidance.

95pay retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and as required or permitted by applicable law. Our general retention principles are as follows:

• Active Accounts: Personal data associated with an active 95pay account is retained for the duration of the account relationship plus a minimum post-closure period required by applicable financial and gaming regulations.
• KYC and AML Records: Identity verification documents and anti-money laundering records are retained for a minimum of five (5) years following account closure or the last transaction, in compliance with financial crime prevention obligations.
• Transaction Records: Financial transaction logs are retained for a minimum of five (5) years to satisfy accounting, tax, and regulatory reporting requirements.
• Responsible Gambling Records: Self-exclusion history, deposit limit settings, and responsible gambling intervention records are retained for a minimum of seven (7) years to protect against re-registration during an exclusion period.
• Support and Communication Data: Live chat transcripts and email correspondence are retained for a maximum of three (3) years, unless the subject matter relates to an ongoing legal claim or compliance investigation.
• Marketing Data: Where consent for marketing communications is withdrawn, your data will be removed from active marketing lists within 30 days, though a suppression record may be retained to honour your opt-out preference.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

95pay implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, and destruction. Our security programme includes, but is not limited to:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the 95pay Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Password Hashing: User passwords are stored as one-way cryptographic hashes. 95pay does not store passwords in plain text under any circumstances.
• Access Controls: Personal data is accessible only to 95pay personnel whose job functions require it. Access is role-based and subject to regular review and audit.
• Two-Factor Authentication (2FA): 2FA is available for all user accounts and is encouraged as a standard security practice.
• Regular Security Audits: The Platform undergoes periodic penetration testing and vulnerability assessments conducted by independent cybersecurity specialists.
• Data Breach Response: 95pay maintains a documented incident response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify relevant authorities and affected individuals in accordance with our regulatory obligations.

Subject to applicable law, you hold the following rights with respect to your personal data held by 95pay. To exercise any of these rights, please contact us using the details in Section 15.

Requests to exercise any of the above rights will be responded to within 30 days. We may ask you to verify your identity before we act on a request. If you are dissatisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

The 95pay Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21 under any circumstances.

Age verification is a mandatory component of our KYC process. Any account found to belong to an individual under the age of 21 will be immediately suspended, all funds will be held pending investigation, and any balance attributable to gambling activity may be forfeited.

If you are a parent or guardian and you believe that your child may have accessed or registered on the 95pay Platform, please contact us immediately using the details in Section 15. We will take prompt action to investigate and, where confirmed, remove the account and all associated personal data.

95pay operates internationally and may transfer your personal data to service providers located outside of Malaysia in order to deliver the Platform's services. Such transfers may include, but are not limited to, cloud hosting infrastructure, KYC processing, and fraud prevention services.

Where personal data is transferred to recipients in countries that do not provide an equivalent level of data protection to the country in which the data originated, 95pay implements appropriate safeguards to ensure the data remains protected, including:

• Standard contractual clauses approved by relevant data protection authorities binding the data recipient.
• Data processing agreements imposing equivalent data protection obligations on the recipient.
• Transfers to jurisdictions that have received a formal adequacy determination under applicable law.

You may request further information about the specific safeguards applied to any international transfer of your data by contacting us using the details in Section 15.

95pay reserves the right to update or amend this Privacy Policy at any time. Changes will be published on this page with a revised "Last Updated" date at the top of the document. Where changes are material — meaning they significantly affect how we use your personal data or your rights as a data subject — we will notify registered users via email or in-platform notification within a reasonable period before the changes take effect.

Your continued use of the 95pay Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the amended Policy, you should cease using the Platform and may request account closure by contacting us.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 95pay, please contact us through the following channels. All contact details are provided as plain text — these are not clickable links.

• Live Chat: Available 24/7 directly through the 95pay Platform. Average response time under 2 minutes. Preferred channel for urgent enquiries relating to data access or account security.
• Email: [email protected] — For formal data subject rights requests, privacy complaints, or detailed data processing enquiries. We respond to all emails within 4 hours during business hours.
• Response Timeframes: Data subject rights requests will receive a substantive response within 30 days of receipt. Complex requests may require an extension, in which case we will notify you within the initial 30-day period.

When submitting a data rights request, please include your registered account username and the specific right you wish to exercise. We will ask you to verify your identity before processing any request that involves access to, amendment of, or deletion of personal data.