Privacy Policy my66 – Malaysian Member Data Protection

1Personal Information We Collect

My66 collects several categories of information from members to support the safe and efficient operation of the platform. We only collect what is strictly necessary — nothing more.

The categories of information collected by my66 are as follows:

• Registration Information: Your full name, Malaysian mobile number, email address (if provided) and the password you set when registering your my66 account.
• Identity Information: A copy of your MyKad or valid identification document when requested during the KYC (Know Your Customer) verification process for your first withdrawal or high-value transactions.
• Payment Information: Bank account numbers, phone numbers linked to e-wallets (Touch 'n Go, GrabPay, Boost, ShopeePay), or DuitNow details required to process deposits and withdrawals. my66 does not store your e-wallet passwords or banking PINs.
• Platform Usage Data: Records of matches wagered on, games played, total deposits and withdrawals, session duration, and platform usage frequency.
• Technical Data: IP address, device type, operating system, web browser used, access time, and log data automatically generated when you use the my66 platform.
• Communications: Records of conversations with the my66 CS team via Live Chat, WhatsApp, Telegram or email, retained for reference and service improvement purposes.

2How my66 Uses Your Data

Every piece of information we collect has a clear and legitimate purpose. my66 uses your personal data for the following purposes only:

• Account Management: Creating, verifying, and managing your my66 account, processing logins, and maintaining the security of your account.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as managing fund withdrawals to your bank account or e-wallet.
• Identity Verification (KYC): Verifying members' identity and age in accordance with applicable legal compliance requirements.
• Customer Service: Responding to enquiries, resolving technical issues, and improving the quality of my66's customer service based on previous interaction records.
• Platform Security: Detecting and preventing fraud, money laundering, multiple account ownership, and any suspicious activity that could harm other members or the platform.
• Legal Compliance: To fulfil the reporting and record-keeping obligations required under applicable Malaysian law.
• Platform Improvement: Analysing usage patterns on an aggregate (not individual) basis to improve the design, functionality and user experience of the my66 platform.
• Service Communications: Sending important notifications related to your account, such as deposit confirmations, withdrawal outcomes, and security alerts. my66 does not send advertisements or promotions without your consent.

My66 does not use your data to make automated decisions that significantly affect your rights without human review. Any data-based action taken on your account (such as suspension for security reasons) involves review by the relevant team.

3Data Storage & Security

My66 takes data security seriously, applying multiple layers of protection to safeguard your personal data against unauthorised access, loss, destruction, or accidental disclosure.

• 256-bit SSL Encryption: All data transmitted between your device and my66's servers is encrypted using 256-bit SSL — the same standard used by Malaysian banking institutions such as Maybank and CIMB.
• Stored Data Encryption: Sensitive data such as payment information is stored in encrypted form within secure databases that are not directly accessible from the public internet.
• Internal Access Controls: Only my66 staff with a legitimate business need are permitted to access members' personal data. Access is strictly controlled through a multi-level authorisation system.
• 24/7 Monitoring: The my66 security system is continuously monitored to detect any intrusion attempts or unauthorised access.
• Secure Servers: my66 member data is stored in data centres with physical and digital safeguards that meet international industry standards.
• Encrypted Passwords: Your account password is stored in hashed form that cannot be decrypted — my66 staff do not have access to your actual password.

4Data Sharing & Disclosure

My66 does not sell, rent, or share members' personal data with third parties for marketing or commercial purposes. This is a fundamental principle that is non-negotiable. However, there are limited situations where data may need to be shared:

• Payment Service Providers: Relevant information is shared with payment providers such as Touch 'n Go, GrabPay, DuitNow and FPX solely for the purpose of processing your transactions. These providers maintain their own privacy policies and are bound by confidentiality agreements with my66.
• Legal Requirements: my66 may be required to disclose certain data to legitimate Malaysian authorities (such as PDRM, BNM, or the courts) where a valid court order or legally binding requirement exists.
• Fraud Prevention: In cases of suspected fraud, relevant information may be shared with financial institutions or fraud prevention agencies to protect the interests of all parties.
• Game Software Providers: Minimum necessary technical data is shared with licensed game providers such as Pragmatic Play and Evolution to ensure games function correctly — no personally identifiable data is shared for this purpose.

In all permitted data-sharing arrangements, my66 ensures that the receiving party is bound by equivalent confidentiality obligations and uses the data solely for the stated purpose. my66 does not allow third parties to use member data for marketing, profiling, or any purpose outside the defined scope.

5Cookies & Tracking Technologies

My66 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. Here is an explanation of how we use these technologies:

• Session Cookies: Required to maintain your login session during an active session. This cookie is automatically deleted when you close your web browser.
• Preference Cookies: Saving your personal settings such as language, display preferences, and game preferences so you do not need to reconfigure them each time you log in.
• Security Cookies: Helps detect suspicious activity such as login attempts from unusual locations or usage patterns that fall outside the norm.
• Analytics Cookies: Collects aggregated, anonymised usage data to help my66 understand how members use the platform for improvement purposes — no individually identifiable data is involved in this process.

You can control or block the use of cookies through your web browser settings. However, blocking essential cookies may affect core my66 platform functions such as the login process and transaction processing. Optional cookies can be disabled without any significant impact on your use of the platform.

6Financial Transaction Data

As my66 involves real financial transactions in Malaysian Ringgit (RM), the protection of financial data receives dedicated attention in this Privacy Policy. my66 applies strict procedures to safeguard all information relating to your transactions.

• Records of all deposits — whether made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks) or any other method — are securely retained for the period required under Malaysian financial law.
• Withdrawal records, including payment method, amount, and date, are retained for internal audit and legal compliance purposes.
• My66 does not store your full credit or debit card number, banking PIN or e-wallet password in our systems. Any payment process requiring such information is handled directly through the secure interface of the relevant payment provider.
• Any transactions suspected of involving fraud or money laundering will be retained as part of an investigation record and may be reported to Bank Negara Malaysia or relevant agencies if required.

7Your Privacy Rights as a my66 Member

As a my66 member, you have certain rights regarding the personal data we hold about you. my66 respects and facilitates the exercise of these rights:

• Right of Access: You have the right to request a copy of the personal data my66 holds about you. Requests can be submitted by email to support@my66.world and will be processed within 14 business days.
• Right to Rectification: If any personal information held about you in the my66 system is inaccurate or out of date, you have the right to request a correction. Contact my66 CS with the details that need to be updated.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data. However, this request may not be fulfilled in full if the data is required for legal compliance or the resolution of an ongoing dispute.
• Right to Restrict Processing: You can request that my66 restrict how your data is processed in certain circumstances — for example, when you are disputing the accuracy of your data or while an investigation is ongoing.
• Right to Object: You have the right to object to the use of your data for specific purposes such as platform analytics by contacting our privacy team.
• Right to Data Portability: You have the right to request your transaction records and account data in a machine-readable format for your own personal use.

To exercise any of the above rights, please contact my66 by email at support@my66.world with the subject line "Privacy Rights Request", stating the type of request and your account number. my66 will acknowledge your request within 3 working days and provide a full response within 14 working days.

8Data Retention Period & Deletion

My66 does not retain members' personal data longer than necessary. Retention periods vary depending on the type of data and applicable legal requirements:

• Active Account Data: Retained for the duration your account remains active and in use. If your account has been inactive for 24 consecutive months, my66 will contact you before taking any action.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial reporting requirements. This includes records of all deposits and withdrawals in Malaysian Ringgit (RM).
• KYC (Identity Verification) Records: Identity verification documents are retained for a minimum of 5 years after account closure, in accordance with AML (Anti-Money Laundering) compliance requirements.
• Security Logs: Technical records and security logs are retained for 12 months for investigation purposes in the event of a security incident.
• CS Records: Records of conversations with the customer service team are retained for 12 months for reference and service improvement purposes.
• Cookie Data: Session cookies are deleted when you close your browser. Preference cookies expire automatically after a set period based on cookie type.

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered. For data retained due to legal obligations, deletion may only proceed once those obligations have been fulfilled.

9Privacy Policy Amendments

My66 reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, technology, or platform operations. Here is how we handle any such amendments:

• The "Updated" date at the top of this page reflects the latest version of the Privacy Policy currently in effect.
• Any significant amendments — particularly changes that directly affect members' privacy rights — will be communicated via in-platform notifications or email at least 14 days before taking effect.
• Minor editorial or clarificatory amendments that do not affect your fundamental rights may be implemented without prior notice, though the update date will be revised accordingly.
• Continued use of the my66 platform after any amendment takes effect will be considered your acceptance of the updated Privacy Policy.
• If you do not agree with any amendments, you have the right to close your account and request withdrawal of your balance before the changes take effect.

My66 recommends that you review this Privacy Policy page periodically to stay informed about how we protect your data. Previous versions of the Privacy Policy are available upon request by emailing our privacy team.

10Contact the my66 Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or how my66 handles your personal data, we are here to help through the following channels:

• Privacy Email: support@my66.world — Use the subject line "Privacy Inquiry" to help us process your request faster.
• Live Chat: Available 24 hours a day, 7 days a week within the my66 platform. Suitable for general privacy-related enquiries.
• WhatsApp & Telegram: For enquiries that do not involve sensitive information, the my66 CS team can be reached via WhatsApp and Telegram during operating hours.

For formal requests relating to privacy rights (data access, rectification or deletion), email is the most appropriate channel as it requires identity verification and a written record. my66 is committed to responding to all privacy-related enquiries within a reasonable timeframe.