Personal Data Protection win66bet

2. Information We Collect

In operating an online betting platform, win66bet collects various categories of personal information for lawful and specific purposes. This information is divided into two main categories:

Information you provide directly:

• Full name as shown on your identity card (MyKad) or passport
• An active email address and a mobile number registered in Malaysia
• Date of birth to confirm you are 21 years of age or older before using win66bet services
• Account password in encrypted form — we do not store plain-text passwords
• Payment information including e-wallet details (Touch 'n Go, DuitNow, Boost), bank account numbers for FPX transactions, and crypto wallet addresses (USDT, BTC, ETH) for deposits and withdrawals
• Identity verification documents such as a copy of your MyKad or passport when required for the account verification process (KYC)
• Any information you share when communicating with our customer support team

Information collected automatically:

• IP address and geographic location based on the network used
• Device type and version, and the web browser you use
• Session log data including pages visited, session duration and interactions within the platform
• Financial transaction records including deposit, withdrawal and betting history
• Cookie data and similar tracking technologies to improve the user experience

3. Purpose of Using Personal Information

win66bet uses the personal information collected solely for lawful, relevant and proportionate purposes related to the operational needs of the platform. These purposes are as follows:

• Member identity verification and processing of new win66bet account registrations
• Processing deposits and withdrawals through supported payment methods
• Complying with Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements set by regulatory bodies
• Providing effective customer support in Malay and English
• Sending account-related communications such as transaction confirmations, security alerts and service updates
• Detecting and preventing fraud, money laundering and platform abuse
• Analysing usage patterns for internal product and service improvement
• Complying with legal obligations and directions from competent authorities
• Supporting the Responsible Gambling programme including deposit limits, loss limits and self-exclusion tools

win66bet will not use your personal information for any purpose other than those stated above without obtaining your separate consent beforehand.

4. Sharing and Disclosure of Information

win66bet takes a very cautious approach to sharing members' personal information. We do not sell or disclose your personal information to third parties except in the following circumstances:

• Payment Service Providers: Required transaction information is shared with approved payment processors such as Touch 'n Go eWallet, DuitNow, FPX, Boost and crypto platforms to complete your financial transactions.
• Technology and Infrastructure Providers: Companies that support the technical operations of the win66bet platform, including cloud hosting and cybersecurity services, are bound by strict confidentiality agreements.
• Regulatory Authorities: When required by law or by the direction of a competent regulatory body, win66bet will comply with those requirements in full.
• Fraud Prevention: Required information may be shared with fraud prevention agencies to protect the interests of the platform and other members from unlawful activity.

In all data-sharing situations above, win66bet ensures that receiving parties are subject to data protection obligations equal to or higher than the standards we maintain. All data-sharing agreements are reviewed and updated regularly.

5. Data Security Measures

The security of members' personal information is the highest priority in win66bet's operations. We implement multiple layers of technical and procedural protection to ensure your data remains secure at all times:

• 256-bit Secure Sockets Layer (SSL) encryption technology for all data communications between your device and win66bet servers
• Database-level data encryption for sensitive information including financial details and identity verification documents
• Two-factor authentication (2FA) system for account access requiring additional verification
• Round-the-clock security system monitoring with automated intrusion detection
• Strict role-based access controls — only personnel who require access to specific data are permitted
• Security audits and penetration testing conducted by independent third parties on a regular basis
• Clear security incident response procedures with defined notification periods for affected members

Although we take all reasonable measures, no security system can guarantee absolute protection. We encourage members to also practise personal security by using strong passwords and not sharing their win66bet account login details.

6. Data Retention Period

win66bet retains members' personal information for as long as the account remains active and for the period required afterwards to meet legal obligations, resolve disputes and enforce our agreements.

• Active account information: retained for the duration of the active account and for at least 5 years after account closure to meet regulatory requirements
• Financial transaction records: retained for a minimum of 7 years in accordance with AML-related legal requirements
• Customer support communication logs: retained for 2 years from the date of the last interaction
• Technical log data: retained for 12 months and then deleted automatically

When the specified retention period ends and there is no legal requirement for continued retention, win66bet will securely delete or anonymise the relevant personal information.

7. Cross-Border Data Transfers

As an online platform operating under international licensing, data collected by win66bet may be processed and stored on servers located outside Malaysia. Any such international data transfers are carried out with adequate protections in place, including:

• Standard data transfer agreements binding all receiving parties to equivalent data protection standards
• Selection of infrastructure partners that comply with recognised international standards
• Data protection impact assessments conducted before any new data transfer is implemented

8. Child Protection and Age Restrictions

win66bet services are strictly for individuals aged 21 and above. win66bet does not intentionally collect or process any personal information from individuals below the specified age limit. If we find that personal information of an underage individual has been collected unintentionally, we will take immediate steps to delete that information and close the relevant account.

All new account registration applications require age verification as part of the KYC process. win66bet reserves the right to request identity verification documents at any time to ensure compliance with this age limit.

9. Updates to This Privacy Policy

win66bet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When material changes are made, we will:

• Display a clear notice on the win66bet website before the changes take effect
• Send a notification to members via the email address registered to their account
• Update the "Effective Date" at the top of this Privacy Policy

Continued use of win66bet services after the update's effective date indicates your acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your account by contacting our customer support team.