Privacy Policy 666menang — Malaysian Player Personal Data Protection

This Privacy Policy describes how 666menang ("we", "us", "the platform") collects, uses, stores and protects your personal information ("personal data") when you use our website, mobile application and services.

We are committed to protecting the privacy of every user and complying with Malaysia's Personal Data Protection Act (PDPA) 2010 and international data protection standards. This policy applies to all users of the 666menang platform regardless of access method — whether via web browser, Android or iOS app.

If you have any privacy-related questions or concerns, please contact our data protection officer via the details stated at the end of this policy.

To provide a secure service and comply with legal requirements including KYC (Know Your Customer) and AML (Anti-Money Laundering) processes, 666menang collects the following data categories:

Account and Identity Data

• Full name as stated in official identity documents
• Date of birth and age for age eligibility verification
• Identity card or passport number
• Current residential address
• Email address and mobile phone number
• Encrypted username and password

Financial and Transaction Data

• Bank account information, e-Wallet numbers and other payment methods
• Deposit and withdrawal history
• Game and wagering transaction records
• Account balance and fund movements
• Information related to bonus claims and promotions

Technical and Usage Data

• IP address, browser type and device operating system
• Platform activity logs (pages visited, session times, features used)
• General location data based on IP address
• Cookies and unique device identifiers
• Technical error and diagnostic logs for troubleshooting

Communication Data

• Customer support conversation logs
• Emails and messages sent to or from the 666menang platform
• Feedback, complaints and inquiries submitted

The personal data we collect is used for legitimate and transparent purposes as follows:

Account Management and Services

• Creating and managing your user account
• Processing registration, login and identity verification (KYC)
• Processing deposits, withdrawals and other financial transactions
• Providing access to games, features and platform services
• Managing bonuses, promotions and loyalty programs

Security and Compliance

• Detecting and preventing fraud, money laundering and illegal activities
• Complying with KYC and AML legal requirements
• Protecting platform and user security from cyber threats
• Investigating violations of Terms and Conditions or platform policies
• Complying with instructions from authorities or other legal requirements

Communication and Support

• Providing customer support and answering your inquiries
• Sending important notifications related to account or services
• Informing you about promotions, updates and platform news (with your permission)

Improvement and Analysis

• Analyzing usage patterns for service improvement
• Conducting market research and platform performance analysis
• Developing new features and improving user experience
• Optimizing platform interface and performance

666menang takes the security of your personal data very seriously. We implement various technical, physical and administrative measures to protect your data from unauthorised access, loss, misuse or disclosure:

Technical Security

• 256-bit SSL Encryption: All data transmitted between your device and our servers is protected with banking-standard encryption
• Database Encryption: Sensitive data is stored in encrypted format in our database
• Firewall and DDoS Protection: Our infrastructure is protected with enterprise-grade firewalls and DDoS attack protection systems
• Two-Factor Authentication (2FA): Option to enable additional security layer for account login
• Regular Security Audits: Our platform undergoes penetration testing and security audits by independent experts

Access Control

• Access to personal data is restricted to staff who require it for their legitimate duties
• All staff undergo data security training and are bound by confidentiality agreements
• Data access logs are monitored and audited regularly

666menang does not sell or rent your personal data to any third parties for marketing purposes. However, we may share your data in the following limited circumstances:

Service Providers

We work with trusted third-party service providers to support platform operations, including:

• Payment service providers to process deposits and withdrawals
• Identity verification service providers for KYC processes
• Hosting providers and cloud infrastructure for data storage
• Customer support services and CRM systems
• Email and communication service providers

All these service providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

Legal Requirements

We may disclose your personal data when required by law or to comply with legal processes, including:

• Complying with court orders, subpoenas or other legal processes
• Providing information to authorities in criminal investigations
• Protecting the rights, property or safety of 666menang, our users or the public

Business Transfer

Should 666menang undergo a merger, acquisition or asset sale, user personal data may be transferred as part of such transaction. You will be notified via email and notice on our website about any change of ownership or use of your personal data.

666menang uses cookies, web beacons and other tracking technologies to enhance user experience, analyse traffic and personalise content. Cookies are small text files stored on your device by your web browser.

Types of Cookies We Use

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking essential cookies may affect platform functionality. For more information on how to manage cookies, please refer to your web browser support documentation.

666menang retains your personal data for as long as necessary to fulfil the original collection purpose or to comply with legal obligations. Specific retention periods depend on the type of data and legal requirements:

• Active Account Data: Retained for as long as your account is active and for the required period after account closure to resolve any issues or claims
• Financial Transaction Records: Retained for a minimum of 5 years after transaction in accordance with Malaysia AML and tax legal requirements
• KYC Documents: Retained for 5 years after account closure in accordance with compliance requirements
• Communication Logs: Retained for 3 years for reference and dispute resolution purposes
• Marketing Data: Retained until you withdraw consent or the account is closed

After the retention period ends, your personal data will be securely deleted or anonymized so that it can no longer be identified.

Under the Malaysia PDPA and the data protection principles we practise, you have the following rights relating to your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide a copy in an easily readable format within 21 days of your request.

Right to Rectification

You may request that we correct inaccurate or incomplete personal data. Some data can be corrected yourself via account settings.

Right to Erasure

You may request deletion of your personal data in certain circumstances, subject to legal requirements to retain certain records.

Right to Restrict Processing

You may request that we restrict the processing of your personal data in certain situations, such as while we investigate data accuracy.

Right to Data Portability

You have the right to receive the personal data you provided to us in a structured, commonly used format, and to transfer that data to another service provider.

Right to Object

You may object to the processing of your personal data for direct marketing purposes or where we rely on legitimate interests as the legal basis for processing.

Right to Withdraw Consent

If your data processing is based on consent, you may withdraw that consent at any time without affecting the validity of processing prior to withdrawal.

666menang reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. Any material amendments will be notified to you via:

• Email to your registered email address
• Notifications displayed in the platform or mobile app
• Clear notice on our home page

The "Updated" date at the top of this policy indicates when this policy was last amended. We encourage you to review this policy periodically to stay informed of any changes. Continued use of the platform after amendments take effect means you accept the amended policy.

If you have any questions, concerns or requests regarding this Privacy Policy or our data protection practices, please contact us via:

We will endeavor to respond to all inquiries and requests within 14 working days. For requests related to your personal data rights, please clearly specify the type of request and provide sufficient proof of identity for verification.