Privacy Policy – 66zz's Commitment to Protecting Your Data

1Introduction

66zz is an online gaming platform operating for users in Malaysia. We understand that your personal information is a trust you place in us, and we do not take that responsibility lightly.

This Privacy Policy is designed to clearly and transparently explain how 66zz collects, uses, stores, and protects your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable related legislation.

We encourage you to read this document carefully. If any section is unclear, our customer support team is available to assist via the platform's live chat.

2Information We Collect

66zz collects your personal information through several channels during your use of the platform. The following are the categories of information we collect:

We only collect information that is genuinely necessary to provide a safe and responsible service. Should we need to collect additional information, you will be notified in advance.

3How We Use Your Data

The information you provide is used solely for the following purposes:

• Identity verification (KYC) — ensuring every user meets valid age and identity requirements.
• Transaction processing — handling deposits, withdrawals, and financial records accurately.
• Account Security — detecting suspicious activity, preventing fraud, and protecting your account.
• Service Communication — sending account notices, system updates, and customer support responses.
• Legal Compliance — fulfilling obligations under the PDPA, Anti-Money Laundering Act (AMLA), and related legislation.
• Platform Improvements — analysing usage patterns to enhance the overall user experience.
• Responsible gaming — monitoring wagering patterns to detect signs of problem gambling and offer appropriate assistance.

4Sharing Information With Third Parties

66zz does not share your personal information with third parties except in the following limited circumstances:

• Payment service providers — information required to process your deposits and withdrawals is shared with licensed payment gateways bound by strict confidentiality agreements.
• Licensed game providers — game session data is shared with third-party game providers operating on our platform solely for game operation purposes.
• Law enforcement authorities — we are legally required to disclose information when requested by competent authorities through official channels.
• Identity verification services — KYC information is shared with licensed identity verification providers for document verification purposes only.

All third parties that receive your data are bound by strict confidentiality and data protection agreements. They are only permitted to use that information for the purposes specified in their agreement with 66zz.

5Cookies & Tracking Technologies

The 66zz platform uses cookies and similar tracking technologies to enhance your experience. The following are the types of cookies we use:

• Essential Cookies — required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies — helping us understand how users interact with the platform so we can continuously improve the experience.
• Preference Cookies — saving your preferences such as language and display layout for a smoother return experience.

You can control or disable non-essential cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the platform.

6Data Security

66zz invests seriously in security infrastructure to ensure your data is always protected. The security measures we employ include:

• 256-bit SSL encryption for all data transmissions between your device and our servers.
• Two-factor authentication (2FA) is available for all user accounts as an added layer of security.
• Intrusion detection and prevention systems (IDS/IPS) operating around the clock.
• Regular security audits by independent third parties to identify and address any vulnerabilities.
• Strict internal access controls — only authorised personnel may access sensitive user data.
• Automatic data backups and a disaster recovery plan to ensure the continuity of your data.

While we take all reasonable precautions, no security system can be guaranteed 100% safe. Should any data breach occur that affects you, we will notify you within the timeframe required by the PDPA.

7Data Storage & Deletion

66zz retains your personal data for as long as your account is active or as long as necessary to provide our services. Specific retention periods are as follows:

• Financial transaction records — retained for a minimum of 7 years in line with anti-money laundering (AML) legal requirements.
• KYC Documents — retained for the duration of the active account plus 5 years after account closure.
• Support communication records — retained for 3 years for reference and dispute resolution purposes.
• Technical log data — retained for a maximum of 12 months, after which it is anonymised or deleted.

When data is no longer needed and there is no legal obligation to retain it, 66zz will delete or dispose of that data securely in accordance with industry standards.

8Your Rights as a User

Under Malaysia's PDPA and our privacy policy, you have the following rights regarding your personal data:

To exercise any of the above rights, contact the 66zz support team via in-platform live chat or visit our FAQ We will process your request within 30 business days.

9Third-Party Links

The 66zz platform may contain links to third-party services such as game providers or payment gateways. Please be aware that:

• This Privacy Policy applies to the 66zz platform only and does not cover third-party websites or services.
• Every third-party provider operating within the 66zz ecosystem is bound by strict data protection agreements.
• We recommend reading the privacy policies of third-party providers before engaging with their services.

66zz is not responsible for the privacy practices or content of third-party websites that you may access through our platform.

10Changes to the Privacy Policy

66zz reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments.

• Any material changes will be communicated via an in-platform notice or email to your registered address.
• The "Last Updated" date at the top of this document will be updated whenever an amendment is made.
• Continued use of the 66zz platform after any amendments take effect will be considered acceptance of the new terms.

11Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the handling of your personal data by 66zz, please contact us through the following channels:

• Live chat within the 66zz platform — available 24 hours a day, 7 days a week.
• Email: [email protected]
• Browse page FAQ for frequently asked questions about privacy and account security.

Our Data Protection Team will respond to your enquiry within 3–5 business days. For complaints requiring further investigation, the response period may take up to 30 business days.