Privacy Policy my66 –
Your Data & Privacy Protection

This Privacy Policy is issued by my66 and applies to all users who access or use the my66 platform, including the website, mobile app, and any related services we provide. This document outlines our practices regarding the collection, use, disclosure, and protection of your personal information.

By registering an account or continuing to use my66's services, you agree to the terms set out in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

My66 collects your personal information through various means when you interact with our platform. The following are the categories of information we collect:

We only collect information necessary for legitimate purposes and will not request excessive information from you. All data collection is carried out with full transparency and based on your consent.

My66 uses the personal information you provide for the following purposes, all of which are necessary to ensure we can deliver the best service to you:

• Account Management — Creates and manages your account, including identity verification and account recovery.
• Transaction Processing — Processes deposits, withdrawals, and all financial transactions securely and accurately.
• Legal Compliance — Fulfills KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements mandated by law.
• Customer Support — Provides assistance, answers inquiries, and resolves issues you encounter.
• Platform Security — Detects and prevents fraud, multiple account usage, and suspicious activity.
• Service Improvement — Analyzes usage patterns to enhance the user experience and develop new features.
• Marketing Communications — Sends information related to promotions, bonuses, and exclusive offers (subject to your preferences).
• Responsible Gaming — Monitors gameplay patterns to identify members who may require responsible gaming support.

My66 does not sell or trade your personal information to third parties. However, in certain limited situations, we may share your information with the following parties solely for platform operational purposes:

• Payment Service Providers — Such as banks, e-wallet operators, and payment processors, to facilitate your deposit and withdrawal transactions.
• KYC Service Providers — Trusted third-party identity verification companies to complete the KYC process as required by law.
• Game Providers — Game developer companies that require certain data to enable you to play their games on the my66 platform.
• Regulatory Authorities — Government bodies or law enforcement agencies when required to do so under applicable Malaysian law.
• Professional Consultants — Lawyers, accountants, or security consultants bound by strict confidentiality agreements.

All third parties we work with are required to adhere to the same strict data protection standards as my66 and are not permitted to use your information for any purpose other than those specified.

My66 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us remember your preferences and ensure the platform functions smoothly.

The types of cookies we use are as follows:

• Essential Cookies — Required for core platform functions such as login, session security, and account management. These cookies cannot be disabled.
• Functional Cookies — Allows the platform to remember your preferences such as language, currency, and display settings for a more personalized experience.
• Analytics Cookies — Helps us understand how users interact with the platform so we can continuously improve our services.
• Security Cookies — Used to detect suspicious activity and protect your account from unauthorized access.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the my66 platform. For more information on managing cookies, please refer to your web browser's documentation.

Protecting your personal information is my66's highest priority. We implement a range of technical and organisational security measures to keep your data safe at all times:

• 256-bit SSL/TLS Encryption — All data communications are encrypted using the highest industry-standard encryption.
• Multi-Layer Firewall — Our server infrastructure is protected by multiple layers of firewalls and real-time threat detection systems.
• Two-Factor Authentication (2FA) — Available for all accounts to add an extra layer of security during login.
• Regular Security Audits — We conduct regular penetration testing and security audits carried out by independent security experts.
• Internal Access Controls — Only authorized personnel with a legitimate operational need may access members' personal data.
• Data Backup — Your data is regularly backed up to a secure location to ensure data continuity and recovery in the event of an emergency.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal information held by my66:

To exercise any of the rights above, please contact the my66 customer support team. We will process your request within 30 business days. No charges will be applied for reasonable data rights requests.

My66 retains your personal information only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

• Active Account Data — Retained for as long as your account is active and you continue using my66's services.
• Data After Account Closure — Transaction records and KYC data are retained for a minimum of 7 years after account closure to meet legal and financial regulatory requirements.
• Technical Log Data — Access logs and system activity records are retained for 90 days for security and investigation purposes.
• Communication Records — Customer support correspondence is retained for 3 years for reference and service improvement purposes.

Once the retention period has expired, your data will be securely deleted or fully anonymised so that it can no longer be personally associated with you.

The my66 platform may contain references to or integrations with third-party services such as payment providers and game providers. Please note that my66's Privacy Policy applies solely to the my66 platform.

When you interact with third-party services integrated within our platform, their respective privacy policies will apply to the data they collect. my66 is not responsible for the privacy practices of any third party. We encourage you to read the relevant provider's privacy policy before sharing any personal information with them.

My66 reserves the right to modify or update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. Any significant changes will be communicated to you via your registered email or a prominent notice on the platform.

The "Last Updated" date at the top of this page indicates when this Privacy Policy was last revised. We recommend checking this page periodically to ensure you are always aware of the latest version of our policy.

Your continued use of the my66 platform after any changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, please discontinue use of the platform and contact us.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal information, please contact our Data Protection Officer through the following channels:

• Live Chat — Available 24 hours a day, 7 days a week directly on the my66 platform for immediate response.
• WhatsApp — Contact us via the official number listed on the platform's main page.
• Email — [email protected] (response within 3 business days).

We are committed to addressing all privacy-related enquiries and complaints seriously and in a timely manner. Every complaint will be thoroughly investigated and you will be informed of the outcome.