Privacy Policy

This Privacy Policy ("Policy") is issued by 66duit (referred to herein as "the Platform", "we","us", or "our") and applies to all personal data collected from individuals ("you", "the Player", or "the User") who access or register on the website located at https://66duit.cam (the "Website").

66duit is committed to protecting the privacy and personal data of all users. This Policy describes the categories of personal data we collect, the purposes for which we process it, the legal bases for such processing, how long we retain it, and your rights in relation to it.

By creating an account on66duit or otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, please do not use the Website.

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, and online identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission, or deletion.
• "Data Controller" — 66duit, which determines the purposes and means of processing your personal data.
• "Data Processor" — any third-party entity that processes personal data on behalf of 66duit pursuant to a written agreement.
• "Consent" — any freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data.
• "Cookies" — small text files placed on your device by the Website to facilitate functionality, analytics, and personalisation.
• "KYC" — Know Your Customer verification processes required for identity confirmation and regulatory compliance.

66duit collects personal data in the following categories, depending on your level of interaction with the platform:

We do not intentionally collect special category data (such as health information, racial or ethnic origin, or political opinions) unless specifically required by our responsible gambling programme and explicitly consented to by you.

We collect personal data through the following means:

• Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact support, or interact with any feature of the Platform that requires you to submit information.
• Automated technical collection: When you access and browse the Website, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies.
• Third-party payment processors: When you transact via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or cryptocurrency wallets, relevant transaction data is passed to us by the payment processor to fulfil the transaction.
• Identity verification services: Where we engage third-party KYC service providers to assist in verifying your identity documents, limited verification results may be received from those providers.
• Fraud detection and AML screening: We may receive data from third-party compliance databases as part of anti-money-laundering and fraud prevention checks.

We process personal data only where a valid lawful basis exists. The primary legal bases on which 66duit relies are as follows:

• Contractual necessity: Processing is necessary to perform our contract with you — the provision of gaming services through your Account — including account management, payment processing, and withdrawal fulfilment.
• Legal obligation: Processing is necessary to comply with our legal and regulatory obligations, including KYC/AML requirements imposed by our gaming licence and applicable financial regulations.
• Legitimate interests: Processing is necessary for the legitimate interests of 66duit, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain optional processing activities — such as sending promotional communications or placing non-essential cookies — we rely on your explicit consent, which you may withdraw at any time.

Your personal data is used for the following specific purposes:

• Account creation and management: Creating, maintaining, and securing your registered account on the 66duit platform.
• Identity and age verification: Confirming that you are aged 21 or above and that your identity matches the details registered on your Account.
• Payment processing: Facilitating deposits and withdrawals through your chosen payment method, whether via Malaysian e-wallets, FPX, DuitNow, or cryptocurrency channels.
• Fraud prevention and security: Monitoring platform activity to detect and prevent fraudulent behaviour, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gambling compliance: Monitoring betting patterns to identify indicators of problem gambling behaviour and intervene appropriately with our responsible gambling tools.
• Customer support: Handling enquiries, complaints, and disputes submitted through live chat or email correspondence.
• Legal and regulatory compliance: Meeting our obligations under our international gaming licence, AML regulations, and any applicable data protection laws.
• Service improvement: Analysing aggregated and anonymised usage data to improve platform performance, game offerings, and user experience.
• Marketing communications (with consent only): Sending promotional offers, bonus notifications, and platform news where you have provided explicit consent to receive such communications. You may opt out at any time by contacting support.

66duit does not sell, rent, or disclose your personal data to unrelated third parties for their own commercial purposes. We share data only in the following limited and controlled circumstances:

• Payment processors: Data necessary to process your deposit or withdrawal is shared with the relevant payment processor (e.g., DuitNow/PayNet, FPX, Touch 'n Go, Boost, GrabPay, or cryptocurrency network operators).
• KYC and compliance service providers: Identity and document verification data may be shared with licensed third-party KYC providers under strict data processing agreements.
• AML screening providers: Transaction and identity data may be checked against AML/sanctions screening databases to comply with our licensing obligations.
• Game software providers: Platform usage data (non-identifying) may be shared with game providers for technical integration and game performance monitoring purposes.
• Legal authorities: We may disclose your personal data where required by a valid court order, regulatory investigation, or other lawful legal process. We will notify you of such disclosure to the extent permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of the platform's assets, your personal data may be transferred to the acquiring entity, subject to the same level of protection set out in this Policy.

All third parties with whom we share personal data are required to maintain the confidentiality and security of that data and to use it only for the specific purpose for which it was shared.

As an internationally operated platform, 66duit may store or process your personal data on servers or through third-party processors located outside Malaysia. Where such international transfers occur, we take steps to ensure that adequate safeguards are in place — including data processing agreements that impose equivalent data protection standards on the receiving party.

By using the 66duit platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia for the purposes described in this Policy.

We retain personal data for no longer than is necessary for the purpose for which it was collected, or as required by law or our licensing obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of the active Account relationship plus a minimum of five (5) years following account closure, as required by AML and gaming licence compliance obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC documents: Retained for the period required by the applicable licensing jurisdiction — typically five (5) years from the date of verification or account closure, whichever is later.
• Support communications: Retained for two (2) years following resolution of the relevant enquiry or dispute.
• Technical and usage data: Typically retained for up to thirteen (13) months in identifiable form, then anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents reconstruction.

66duit implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, destruction, or alteration. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• Encryption of sensitive data at rest, including KYC documents and financial identifiers
• Role-based access controls — only authorised personnel with legitimate need may access personal data
• Two-factor authentication requirements for internal system access by staff
• Regular security audits and penetration testing
• Incident response procedures for handling any suspected data breach

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 66duit will notify you without undue delay by email or Account notification, and will take immediate remedial action.

The 66duit Website uses cookies and similar technologies to facilitate platform functionality, improve your experience, and support security monitoring. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the Website to function correctly — including session management, authentication, and security features. These cannot be disabled.
• Functional cookies: Remember your preferences (such as language and currency settings) to personalise your experience.
• Analytics cookies: Collect aggregated information about how users interact with the Website to help us improve platform performance and usability. Data collected is anonymised where possible.
• Security cookies: Used to detect suspicious activity, prevent fraud, and protect the integrity of the platform.

You may manage your cookie preferences through your browser settings. Please note that disabling non-essential cookies may affect certain features of the Website. Disabling strictly necessary cookies will prevent the platform from functioning correctly.

Subject to applicable law and our legitimate processing grounds, you have the following rights in relation to your personal data held by 66duit:

The 66duit platform is strictly for individuals aged21 years and above. We do not knowingly collect or process personal data of persons under the age of 21.

If we become aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant Account, flag the matter for investigation, and securely delete the minor's personal data once the investigation is concluded and no legal obligations require its retention.

If you are a parent or guardian and believe your child has registered on 66duit without your consent, please contact our support team immediately via live chat or email.

66duit reserves the right to update or amend this Privacy Policy at any time. Where changes are material — such as changes to the categories of data collected, the purposes of processing, or the introduction of new third-party data sharing arrangements — we will notify registered users by email or through a prominent notice on the Website before the changes take effect.

The effective date at the top of this page will be updated to reflect the date on which the most recent version became operative. We encourage you to review this Policy periodically to stay informed of how we protect your data.

Continued use of the 66duit platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please reach out to our team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly through the 66duit platform. Average response time: under 2 minutes.
• Email (plain text — not a link): [email protected] — responses within 12 hours for standard enquiries; within 5 business days for formal data rights requests.

When submitting a data-related request, please include your registered Account username and a concise description of your request to enable prompt handling. All data rights requests will be handled in strict confidence.