Privacy Policy

fun36 ("we", "us", "the Platform", "the Operator") respects the privacy of every individual who visits, registers with, or interacts with our online casino and sports betting platform at fun36.cam. This Privacy Policy ("Policy") describes in detail our practices regarding the collection, use, disclosure, storage, and protection of your personal information.

This Policy applies to all users of the fun36 Platform, including registered Account holders, visitors who browse the Platform without registering, and persons who contact our customer support team. It applies across all interfaces through which you access fun36, including the desktop website and mobile browser experience.

By registering an Account, making a deposit, placing a wager, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal information as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to close your Account.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated into our overall user agreement by reference.

In this Privacy Policy, the following terms have the meanings assigned to them below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or in combination with other information held by us.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, transfer, restriction, erasure, or destruction.
• "Data Controller" means fun36 Operations, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of fun36 in accordance with our documented instructions.
• "Account" means the registered player account you hold on the fun36 Platform.
• "KYC Documents" means identity verification documents including national identification cards (Malaysian MyKad / NRIC), passports, proof of address, and selfie photographs submitted in connection with the know-your-customer verification process.
• "Cookies" means small text files placed on your device by the Platform to store information about your session, preferences, and usage patterns.
• "You" / "User" means the individual accessing the fun36 Platform, whether as a registered Account holder or an unregistered visitor.

fun36 collects the following categories of Personal Data from users of the Platform:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (for age verification — all players must be 21 or above).
• Residential address, including city or state within Malaysia (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam).
• Email address and contact phone number.
• Username and encrypted password hash.
• Preferred language and currency (MYR / RM for Malaysian accounts).

• Scanned copies or photographs of government-issued photo ID (Malaysian MyKad, passport, or equivalent).
• Selfie photographs taken at the time of KYC submission.
• Proof of payment method ownership — for example, a screenshot of your Touch 'n Go eWallet, Maybank2u, CIMB Clicks, or FPX bank account showing your name and account number.
• Source-of-funds or source-of-wealth documentation where required for enhanced due diligence.

• Deposit and withdrawal amounts, timestamps, and payment method references.
• Payment method type (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Connect, credit/debit card, or cryptocurrency).
• Partial payment instrument identifiers (e.g., last four digits of a card, registered e-wallet phone number) — we do not store full card numbers or full account credentials.
• Cryptocurrency wallet addresses used for deposits or withdrawals (BTC, ETH, USDT, LTC).
• Bonus and promotion redemption records.

• Wager history, game session logs, and betting market selections.
• Win/loss records and balance movements.
• Game preferences, session duration, and frequency of play.
• Responsible gambling tool settings (deposit limits, self-exclusion records, session reminders).

• IP address, device type, operating system, and browser type.
• Device identifiers and session tokens.
• Geolocation data derived from IP address (country/region level — we do not use GPS-level location tracking).
• Platform access logs, including login timestamps and session durations.

• Records of live chat conversations, email correspondence, and support ticket content with our customer support team.
• Feedback, complaints, and dispute records.

fun36 collects Personal Data through the following means:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal request, accept a promotional offer, contact our support team, or update your account profile.
• Automatically during Platform use: Through cookies, web beacons, server logs, and session tracking technologies as you navigate the Platform. See Section 11 (Cookies & Tracking) for full details.
• From payment processors: When you initiate a transaction via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or other supported Malaysian payment methods, our payment processing partners transmit transaction reference data to us to confirm payment status. We receive only the minimum data necessary to confirm and record the transaction.
• From identity verification providers: Third-party KYC and fraud-detection services may provide risk scores, identity verification results, or politically exposed person (PEP) screening outcomes as part of our compliance procedures.
• From publicly available sources: In limited circumstances related to fraud prevention or enhanced due diligence, we may cross-reference information against publicly accessible registers or databases.

We process your Personal Data only for the following defined and documented purposes:

fun36 processes your Personal Data on the following legal bases, which vary by processing activity:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you accepted upon registration — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with our international gaming licence, anti-money laundering regulations, KYC obligations, and applicable data protection frameworks.
• Legitimate interests: Processing for fraud prevention, security monitoring, Platform improvement, and responsible gambling oversight — where our legitimate interests are not overridden by your privacy rights.
• Consent: Where you have expressly opted in to receive promotional communications from fun36. You may withdraw this consent at any time by contacting our support team or updating your Account notification preferences.

fun36 does not sell, rent, or commercially transfer your Personal Data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

We engage carefully selected third-party service providers to support Platform operations. These providers act as Data Processors under our documented instructions and are contractually prohibited from using your data for their own purposes. Categories of processors include:

• Payment gateway operators and financial institutions facilitating transactions (e.g., providers underpinning Touch 'n Go, Boost, DuitNow, FPX, and cryptocurrency processing services).
• KYC and identity verification service providers.
• Fraud detection and AML screening providers.
• Cloud infrastructure and data hosting providers.
• Customer support platform operators.
• Email and communications delivery services.

We may disclose your Personal Data to regulatory bodies, law enforcement authorities, or other competent governmental authorities where we are legally required to do so under our international licensing obligations or applicable law. Such disclosures are made only to the extent mandated by the specific legal requirement.

In the event of a merger, acquisition, restructuring, or sale of the Platform or substantially all of its assets, your Personal Data may be transferred as part of the transaction. You will be notified of any such transfer and of any change in the Privacy Policy that results from it, with reasonable advance notice where practicable.

fun36 operates under international licensing and engages service providers located in various jurisdictions. As a result, your Personal Data may be transferred to and processed in countries outside of Malaysia. Such countries may have data protection laws that differ from those applicable in Malaysia.

Where we transfer Personal Data internationally, we implement appropriate safeguards to protect your information, which may include contractual data protection clauses with receiving processors, data transfer impact assessments, and technical measures such as end-to-end encryption.

By using the fun36 Platform and accepting this Privacy Policy, you acknowledge and consent to such international data transfers in connection with the operation of your Account and the provision of the Platform services.

fun36 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by our international licensing obligations and applicable legal frameworks.

On expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised. Anonymised aggregate data derived from your usage may be retained indefinitely for statistical and product improvement purposes, as it can no longer be used to identify you.

fun36 implements a layered set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme includes the following:

• Encryption in transit: All data exchanged between your browser and the Platform is encrypted using TLS (Transport Layer Security) — the same protocol used by major banks and financial institutions.
• Encryption at rest: Sensitive Personal Data, including KYC documents and financial records, is encrypted in our storage infrastructure.
• Password security: Account passwords are stored as salted cryptographic hashes — plain-text passwords are never stored or accessible to staff.
• Access controls: Access to Personal Data systems is restricted to authorised personnel with a documented operational need. Access is logged and regularly audited.
• Fraud monitoring: Automated systems monitor account activity for indicators of compromise, unusual access patterns, or fraudulent behaviour in real time.
• Penetration testing & vulnerability management: The Platform undergoes regular security assessments to identify and remediate vulnerabilities.

While we take every reasonable precaution, no security system is entirely impenetrable. If you believe your Account has been compromised, please contact our support team immediately at [email protected]. You are also responsible for maintaining the security of your own login credentials.

fun36 uses cookies and similar tracking technologies to operate the Platform, maintain your login session, remember your preferences, and analyse usage patterns to improve our service. We do not use cookies to serve advertising to third-party platforms or to build advertising profiles for resale.

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication tokens, security cookies, and language preference storage. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Used to remember your preferences such as selected currency (MYR), display settings, and responsible gambling tool configurations.
• Analytical Cookies: Used to collect anonymised data about how users navigate the Platform, helping us identify usability issues and improve the overall experience. Data is aggregated and does not identify individual users.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and multi-account behaviour.

You may manage cookie preferences through your browser settings, which allow you to block or delete cookies. Note that blocking strictly necessary cookies will impair Platform functionality, including your ability to log in. Analytical cookies can be declined without affecting your use of the Platform.

Subject to applicable law and our regulatory obligations, you have the following rights with respect to your Personal Data held by fun36:

• Right of Access: You may request a copy of the Personal Data we hold about you. We will respond to access requests within 30 days of receipt.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For name or date-of-birth corrections, additional KYC documentation may be required.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that transaction and KYC records subject to regulatory retention requirements cannot be deleted ahead of schedule.
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while you contest the accuracy of data we hold.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests at any time. You may also withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing.
• Right to Withdraw Consent: Where processing is based solely on your consent (e.g., promotional email communications), you may withdraw that consent at any time by contacting our support team. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our support team at [email protected], clearly stating your request and including your registered Account email address or username for identification purposes. We will acknowledge your request within 5 business days and provide a substantive response within 30 days.

The fun36 Platform is strictly restricted to persons aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. Age verification is conducted as part of the KYC process for all Account holders.

If we become aware that we have inadvertently collected Personal Data from a person under the age of 21, we will immediately suspend the relevant Account, refund any verified deposits in accordance with our Terms & Conditions, delete all associated Personal Data to the extent permitted by law, and report the incident as required by our licensing obligations.

If you have reason to believe that a minor has registered an Account on the fun36 Platform, please notify us immediately at [email protected] so that we may investigate and take appropriate action without delay.

fun36 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect how we collect or use your Personal Data, or that reduce your rights under this Policy — will be communicated to registered Account holders via the email address on file no less than 14 days before the change takes effect.

The updated Policy will always be accessible at fun36.cam/privacy-policy, with the "Last Updated" date at the top of the page reflecting the most recent revision. For non-material changes (such as formatting corrections or clarifications that do not alter the substance of our practices), we may update the Policy without advance notice.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept an amendment, you should close your Account and cease using the Platform prior to the effective date of the change.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the fun36 Data & Privacy team using the following channels:

• Support Email: [email protected] — please use the subject line "Privacy Request" and include your registered Account email address.
• Live Chat: Available 24 hours a day, 7 days a week, including Malaysian public holidays — accessible directly on the Platform. Live chat is suitable for general privacy queries; formal rights requests should be submitted in writing via email.

We will acknowledge your privacy enquiry within 5 business days and provide a substantive written response within 30 calendar days. Complex requests, particularly those requiring extended data searches, may take up to 60 days; in such cases we will notify you of the extended timeline and reason within the initial 30-day period.