Privacy Policy 66bb – Your Data Protection

1. Introduction and Scope of Policy

This Privacy Policy is issued by 66bb ("Platform", "we") and applies to all users and members who access or use the 66bb website, mobile app, and all related services. This policy describes how we handle your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant data protection legislation.

We understand that trust is the foundation of the relationship between a platform and its members. That is why 66bb takes an exceptionally careful and transparent approach to every aspect of data handling – from initial collection through to final deletion. Every decision involving your personal data is made based on clear and legitimate necessity, not merely business interest alone.

By using the 66bb platform, you agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team to close your account.

2. Information We Collect

66bb collects several categories of information depending on how you interact with our platform. The following is information we may collect:

Information you provide directly:

• Registration information: Full name, date of birth, mobile number, email address and password when registering a new account.
• Identity verification (KYC) information: Copies of identification documents such as the Malaysian identity card (MyKad) or passport, a facial verification selfie, and proof of residential address when required to meet compliance obligations.
• Financial information: Bank account number, bank name, e-wallet account number (Touch 'n Go eWallet, Boost, GrabPay) linked to your 66bb account for deposit and withdrawal purposes.
• Communications: The content of messages, complaints or requests you submit to our customer support team.

Automatically collected information:

• Device data: Device type, operating system, unique device identifier, screen resolution and browser information.
• Log data: IP address, access time, pages visited, session duration, and actions taken within the platform.
• Game data: Gaming activity records, betting history, deposit and withdrawal transactions, and bonus usage.
• Approximate location data: Location information based on IP address for geographic verification and account security purposes.

3. How We Use Your Data

Information collected by 66bb is used in a limited and purposeful manner. We use your data for the following purposes only:

• Account operations: Create and manage your account, process deposits and withdrawals, verify identity and complete financial transactions accurately and securely.
• Legal compliance: Meet KYC (Know Your Customer), AML (Anti-Money Laundering) and other statutory reporting obligations binding on our platform.
• Platform security: Detect and prevent fraud, illegal activity, multi-account usage and any security threats that may affect you or the platform.
• Customer support: Resolve enquiries, complaints and disputes more quickly and effectively using your account context information.
• Platform improvement: Analyse usage patterns in aggregate (not individually identifiable) to improve the interface, performance and overall user experience.
• Service communications: Send important notices regarding your account, transactions, security updates and policy changes that affect you.
• Promotions: With your consent, sending you information about bonuses, promotions, and special offers that may interest you. You may unsubscribe from promotional communications at any time.

4. Sharing Information with Third Parties

66bb does not sell, rent, or trade your personal information to any third party for marketing purposes. However, there are limited situations where we share your data with trusted parties:

• Service providers: Game software providers, payment processors, identity verification providers, and IT infrastructure service providers that assist us in operating the platform. All such parties are bound by strict data confidentiality agreements.
• Legal authorities: Law enforcement agencies, regulatory bodies, or courts requiring disclosure of information under binding legal obligations. We only disclose the minimum information necessary in such situations.
• Fraud prevention: Fraud detection service providers and industry security information exchange platforms to protect all members from criminal activity.
• Business transfer: In the event of a merger, acquisition, or asset sale, member data may be transferred as part of that transaction, subject to notice to members and continued privacy protections.

5. Data Security

Protecting your personal data is the top priority of 66bb. We implement multiple layers of technical and organisational security controls to ensure your information is always protected against unauthorised access, modification or disclosure.

• 256-bit SSL encryption: All data transmitted between your device and 66bb servers is protected by industry-grade SSL/TLS encryption, ensuring no third party can intercept your communications.
• Data-at-rest encryption: Sensitive information such as financial details and identity documents is stored in encrypted form (encrypted at rest) on our secure servers.
• Two-factor authentication (2FA): The 2FA feature is available and strongly recommended for all accounts to add an extra layer of security.
• Internal access segregation: Only 66bb staff who require access to specific data to perform their duties are granted permission, based on the principle of least privilege.
• Continuous monitoring: Our security monitoring system operates 24 hours a day to detect any suspicious activity or intrusion attempts in real time.
• Regular security audits: 66bb undergoes periodic independent security audits to identify and address any vulnerabilities before they can be exploited.

While we take all reasonable precautions, no security system can be guaranteed 100% safe. In the event of any data breach affecting your information, we will notify you within the timeframe required by applicable law.

6. Cookies and Tracking Technologies

66bb uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login sessions, security management, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collect information on how pages are used to help us improve the overall speed, stability and usability of the platform.
• Functionality cookies: Store your personal preferences such as display settings, game preferences and language settings to deliver a more personalised experience.
• Analytics cookies: Collect usage data in aggregate and anonymised form to help us understand usage patterns and improve our services.

You can control and manage cookie settings through your browser settings. However, disabling certain cookies may affect the functionality and your experience on the 66bb platform.

7. Your Rights as a Data Subject

As a 66bb member in Malaysia, you have certain rights regarding your personal data under the PDPA 2010 and our privacy policy. These rights are as follows:

We will process requests related to your data rights within 14 working days from the date of receipt. In complex cases, this period may be extended with notice to you.

8. Data Retention Period

66bb retains your personal data for as long as your account is active and for the required period after account closure, in accordance with legal obligations and legitimate business purposes:

• Active account data: Retained for the duration of your active membership on the 66bb platform.
• Financial transaction data: Retained for a minimum of 7 years after the transaction date in accordance with Malaysian financial and tax law requirements.
• KYC records: Retained for a minimum of 5 years after account closure or the last transaction date in accordance with AML requirements.
• Support communication logs: Retained for 3 years for dispute resolution and service improvement purposes.
• System log data: Retained for 12 months for security and fraud detection purposes.

Once the retention period expires, your data will be securely deleted or permanently anonymised using approved data disposal procedures.

9. Children's Privacy

The 66bb platform is restricted to individuals aged 18 years and above only. We do not intentionally collect, store, or process any personal information from minors.

If we determine that we have inadvertently collected information from a minor, we will take immediate action to delete that information and close the associated account. If you believe a child has registered on our platform, please contact our support team immediately.

10. Amendments to the Privacy Policy

66bb reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any amendments will:

• Published on the official 66bb website with a clear update date
• Effective immediately upon publication, unless otherwise stated
• Members will be notified via in-platform notice or email for significant amendments

It is your responsibility to review this Privacy Policy periodically. Continued use of the 66bb platform following any amendments constitutes your acceptance of the updated policy.

11. Contact Our Privacy Team

If you have any questions, concerns, or wish to exercise your data rights, the 66bb Data Protection Officer (DPO) team is ready to assist you:

• Privacy email: [email protected] – for all personal data enquiries and data rights requests
• General support: [email protected] – for general enquiries regarding accounts and services
• Live chat: Available 24/7 via the chat icon on the platform for immediate assistance

We are committed to responding to all privacy-related enquiries within 5 working days. For more complex requests, we will inform you of a more realistic processing timeframe.