Privacy Policy

Privacy Policy candy916 – Your Data Protection

Candy916 is committed to protecting every member's privacy. This document transparently explains how we collect, use, store, and protect your personal data as a user of our platform.

Updated: January 2026
Our Privacy Commitment

Why Your Data Welcome With Us

Six core pillars of privacy protection that candy916 upholds to ensure your information is always kept safe

PDPA Compliance

Candy916 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). All our data collection and processing practices align with applicable local legal requirements.

256-bit SSL encryption

All data transmitted between your device and candy916's servers is protected by 256-bit SSL encryption — the same security standard used by leading banks worldwide.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered access control systems and 24/7 continuous monitoring. Only authorised personnel may access your information.

No Data Sales

Candy916 has never and will never sell, rent, or share members' personal data with third parties for commercial marketing purposes. Your data belongs entirely to you.

Full User Control

You have the full right to access, correct, or request the deletion of your personal data. Our support team is ready to process any data-related requests within 14 working days.

Full Transparency

We have nothing to hide. This Privacy Policy is written in clear, plain language so every member knows exactly what happens to their data at every stage.

1. Introduction

Welcome to the candy916 Privacy Policy. This document explains how candy916 ("we", "Platform") collects, processes, stores, and protects your personal data when you use the website https://candy916.win and all related services.

We understand that privacy is a serious matter for every user. That is why we take the time to explain clearly and honestly every aspect of how your data is handled — not just to meet legal requirements, but because we genuinely value the trust you place in us.

By using the candy916 platform, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to request account deletion.

Important Note

This Privacy Policy should be read together with Terms and Conditions candy916. Together, these two documents form the complete agreement between you and the platform.

2. Personal Data We Collect

Candy916 only collects data that is strictly necessary to provide a safe, efficient, and responsible service. The following are the categories of data we collect:

Data Categories Example Information Primary Purpose
Identity Data Full name, date of birth, identification card number KYC verification and fraud prevention
Contact Data Email address, phone number Account communications and notifications
Financial Data Payment methods, transaction records Deposit and withdrawal processing
Technical Data IP address, device type, web browser Account security and fraud detection
Usage Data Game history, platform activity logs Service improvement and responsible gaming

We do not collect data unrelated to the provision of our services. Any additional data collection will only be carried out with your explicit consent beforehand.

3. How We Use Your Data

The data we collect is used solely for legitimate purposes directly related to candy916 services. Primary uses include:

  • Identity verification (KYC): Ensuring all members are real individuals who meet the platform's age and eligibility requirements.
  • Transaction processing: Securely handling deposits, withdrawals, and all financial activity within your account.
  • Account security: Detecting and preventing unauthorised access, fraud, and suspicious activity using login pattern analysis.
  • Service communications: Sending important notifications related to your account, transactions, and security updates.
  • Platform improvement: Analysing usage patterns in aggregate (not individually) to improve the user experience.
  • Legal compliance: Meeting reporting obligations under anti-money laundering (AML) laws and related regulations.
  • Responsible gaming: Monitoring gameplay patterns to identify members who may need assistance or self-exclusion limits.
Our Guarantee

Candy916 does not use your data for automated decision-making that could affect your rights without human review. Every high-impact action on your account will be reviewed by our team.

4. Data Sharing with Third Parties

Candy916 does not sell or rent your personal data to any third party. However, there are limited situations where we need to share data with trusted parties to keep the platform operational:

  • Payment gateway providers: Transaction data required to process your deposits and withdrawals is shared with licensed payment providers integrated with our platform.
  • KYC service providers: Your identity documents may be processed through approved third-party identity verification systems for compliance purposes.
  • Regulatory authorities: We will disclose data when required by Malaysian law or a valid court order.
  • Technical infrastructure providers: Data may be stored on cloud servers managed by third-party providers subject to strict confidentiality agreements.

All third parties we work with are bound by data protection agreements that restrict them to using your information only for the purposes agreed upon.

5. Data Security Measures

The security of your data is our absolute priority. candy916 implements multiple layers of technical and organisational protection to safeguard your information:

  • 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
  • Data-at-rest encryption for all sensitive information stored in our database.
  • Two-factor authentication (2FA) available for all member accounts as an additional layer of protection during login.
  • 24/7 security monitoring by our automated intrusion detection system and security team.
  • Regular security audits by an independent third-party cybersecurity firm to identify and address any vulnerabilities.
  • Role-based access control (RBAC) ensuring only staff who require access can view specific data.

While we take all reasonable measures, no digital system can guarantee 100% absolute security. In the event of a significant data breach, we will notify affected members within 72 hours in line with industry best practices.

6. Cookies & Tracking Technologies

Candy916 uses cookies and similar tracking technologies to enhance your experience on the platform. The cookies we use fall into several categories:

  • Essential cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
  • Performance cookies: Helping us understand how members use the platform so we can improve the overall experience.
  • Preference cookies: Saving your preferences such as language and display format for a more convenient experience on future visits.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect platform functionality and your login experience.

Cookie Information

Candy916 does not use third-party cookies for external advertising purposes. All cookie data collected is used solely to improve our own platform's services.

7. Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by candy916:

Right of Access

You may request a copy of all personal data we hold about you at any time.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request a correction promptly.

Right to Erasure

You may request the deletion of your personal data, subject to any legal obligations binding on us.

Right to Object

You have the right to object to the processing of your data for specific purposes, particularly direct marketing.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

Right to Restrict Processing

You may request a temporary restriction on the processing of your data in certain legally permitted situations.

To exercise any of the above rights, please contact the candy916 support team. We will process your request within 14 working days from the date of receipt.

8. Data Retention Period

Candy916 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by law. Our data retention guidelines are as follows:

  • Active account data: Retained for the duration that your account remains active on the candy916 platform.
  • Financial transaction records: Retained for a minimum of 7 years in compliance with Malaysia's financial and tax legal requirements.
  • KYC documents: Retained for 5 years after account closure in accordance with AML requirements.
  • Technical and security logs: Retained for 12 months for security investigation purposes if required.
  • Inactive account: Data will be deleted after 3 years of inactivity, subject to prior notice being given to you.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you personally.

9. Links to Third-Party Sites

The candy916 platform may contain links to third-party websites or services in certain contexts. This Privacy Policy applies to the candy916 platform only. We are not responsible for the privacy practices of any external websites you may visit through those links.

We recommend reading the privacy policy of any third-party website you visit before providing personal information there. candy916 has no control over the content or privacy practices of those sites.

10. Changes to the Privacy Policy

Candy916 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Members will be notified of any significant changes via:

  • In-platform notification upon your next login.
  • Emailed to your registered address at least 7 days before the changes take effect.
  • Clear notice displayed on the candy916 website homepage.

The "Updated" date at the top of this page always reflects the latest version of the Privacy Policy. Continued use of the platform after changes take effect constitutes your acceptance of the revised policy.

11. Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy, please contact the candy916 Privacy Officer through the following channels:

You may also refer to the FAQ for answers to frequently asked questions about privacy and data protection. For responsible gaming concerns, visit our Responsible Gaming page.

Your Data is Protected

Join candy916 with With Full Confidence

Our platform is built with security and privacy at its core. Register today and enjoy a safe, fair, and transparent entertainment experience alongside thousands of candy916 members.

PDPA Compliant
256-bit SSL encryption
No Data Sales
24/7 Support
Bahasa Melayu