66bb Club Privacy Policy – Personal Data Protection for Malaysian Members

66bb Club takes member privacy seriously. As an online entertainment platform operating in Malaysia and serving Malaysian players, we are bound by the requirements of the Personal Data Protection Act 2010 (PDPA) in all aspects of personal data processing.

This Privacy Policy applies to all information you provide to 66bb Club when registering, using the platform, contacting customer support, or conducting any financial transaction through 66bbclub.net and all associated sub-domains and mobile applications.

This policy explains in detail how your data is collected, used, protected, and under what circumstances it may be shared — as well as your rights as the data owner under Malaysian law.

66bb Club collects members' personal data through several channels — directly when you register or use the platform, automatically via tracking technologies as you browse our site, and occasionally from trusted third-party sources for identity verification purposes.

66bb Club does not collect sensitive data such as medical information, religious beliefs, or political views. We also do not require credit card details directly — all deposits are processed through local Malaysian payment methods such as Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost, and ShopeePay, each of which maintains its own security layers.

All personal data collected by 66bb Club is used for specific and lawful purposes. We do not process your data for any other purpose without first obtaining your additional consent.

The primary purposes for which 66bb Club uses members' personal data are:

• Account management: To create, verify, and manage your account at 66bb Club, including password recovery and identity verification.
• Transaction processing: To securely process deposits and withdrawals via your preferred local Malaysian payment methods.
• Identity verification (KYC): To comply with legal requirements relating to anti-money laundering and to ensure all members meet the minimum age requirement of 18 years.
• Platform Security: To detect and prevent fraudulent activity, account abuse, and any form of system manipulation that could harm other members.
• Customer Support: To respond to enquiries, resolve disputes, and provide technical assistance to members.
• VIP programme and promotions: To calculate eligibility and distribute VIP rewards, cashback, and promotional offers relevant to your usage patterns.
• Service communications: To send important notifications regarding your account, security, and policy updates — not for marketing without your consent.
• Legal Compliance: To comply with all applicable Malaysian legal and regulatory requirements.

66bb Club does not sell, rent, or distribute members' personal data to third parties for their own commercial purposes. However, in the course of operating the platform, we may need to share certain data with the following limited categories of third parties:

• Payment service providers: Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost, and ShopeePay receive the transaction information required to process your deposits and withdrawals. These providers maintain their own privacy policies and data protection standards in compliance with payment industry requirements.
• Game providers: Companies such as Pragmatic Play, PG Soft, and Habanero receive anonymised account identifiers solely for game processing purposes. They do not receive your full name, phone number, or payment details.
• Cloud service provider: 66bb Club's servers and data infrastructure are managed by trusted cloud service providers bound by strict data confidentiality agreements.
• Regulatory bodies and law enforcement: 66bb Club will disclose data when required by a court order, Malaysian legal obligations, or directives from a competent authority. Such disclosures are made solely to fulfil legal compliance requirements.
• Identity verification services: Third-party KYC (Know Your Customer) providers assist in verifying member identities based on submitted identification documents. This data is not used for any other purpose.

All third parties that receive 66bb Club member data are required to handle it in accordance with data protection standards equivalent to or higher than Malaysia's PDPA requirements, and to use it solely for agreed purposes.

66bb Club invests seriously in data security infrastructure to ensure the personal information of our Malaysian members remains protected at all times. The following are the security layers we have in place:

• Data transmission encryption (SSL 256-bit): All data passing between your browser and 66bb Club's servers is encrypted using Transport Layer Security (TLS) with a 256-bit key length — making interception by any third party virtually impossible.
• Stored data encryption: Sensitive data such as passwords and payment details stored in the 66bb Club database are encrypted using irreversible hashing algorithms.
• Layered access controls: Only 66bb Club staff who require access to specific data to carry out their assigned duties are granted that access. All internal access is logged and monitored.
• Two-Factor Authentication (2FA): For high-risk operations such as large withdrawals and account information changes, 66bb Club uses an OTP sent to your registered phone number as an additional verification layer.
• Regular security audits: 66bb Club's systems undergo regular independent security audits conducted by third-party cybersecurity firms to identify and address any potential vulnerabilities.
• 24/7 Monitoring: A threat detection system and suspicious activity monitoring operate around the clock to identify any intrusion attempts or data misuse.

66bb Club retains members' personal data only for as long as necessary to fulfil the original processing purpose or to comply with Malaysian legal requirements. Once the data is no longer needed, it will be securely deleted or anonymised.

66bb Club's data retention guidelines are as follows:

• Active account data: Retained for as long as your 66bb Club account remains active and for 12 months after account closure to allow for the resolution of any outstanding claims or disputes.
• Financial transaction records: Retained for 7 years after the transaction date, in accordance with the Malaysian Companies Act and applicable financial audit requirements.
• Identity verification records (KYC): Retained for the duration of the active account and 5 years after account closure, in accordance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Security and system access logs: Retained for 90 days for the purposes of security incident investigation and technical dispute resolution.
• Customer support records: Conversations and support tickets are retained for 2 years for quality control and dispute resolution purposes.
• Cookie and analytics data: Anonymised usage data collected through cookies is retained for a maximum period of 13 months.

Under Malaysia's Personal Data Protection Act (PDPA), you as a 66bb Club member have the following rights regarding your personal data. We are committed to handling all such requests fairly and within a reasonable timeframe.

To exercise any of the rights above, please submit a written request to support@66bbclub.net by stating the type of right you wish to exercise, your 66bb Club account number, and a brief description of your request. We may require identity verification before processing certain requests in order to protect your account from unauthorised submissions.

66bb Club uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our site.

You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect your ability to log in and maintain a secure session on the 66bb Club platform. Performance, functionality, and analytics cookies can be disabled without affecting basic access to the platform.

66bb Club's technical infrastructure may involve the processing or storage of data on servers located outside Malaysia. In such cases, 66bb Club ensures that all international data transfers are carried out with adequate safeguards in place.

The measures we take to protect data during international transfers include:

• Selecting cloud service and infrastructure providers that comply with internationally recognised data protection standards.
• Binding all third-party providers with data processing agreements that mandate protection standards equivalent to Malaysia's PDPA.
• Ensuring that all transferred data is encrypted both in transit and at rest at overseas storage locations.
• Storing copies of the most sensitive data — in particular financial and identity records — on servers located within the Asia region to facilitate compliance with local regulations.

The 66bb Club platform is exclusively for individuals aged 18 years and above. We do not knowingly collect or process personal data from individuals under the age of 18.

All 66bb Club registration processes require age verification, and full identity verification via official documents is completed before the first withdrawal is processed. This is not only to comply with Malaysian gambling laws, but also as a data protection measure to ensure our platform is not accessed by minors.

Should 66bb Club discover that personal data from a minor has been collected without our knowledge, that data will be deleted immediately and the relevant account will be terminated. If you are aware that a minor has registered with 66bb Club, please notify us at support@66bbclub.net.

66bb Club reserves the right to update or amend this Privacy Policy from time to time to reflect changes in Malaysian law, industry practices, or platform operations. The most recent update date will always be displayed at the top of this document.

For amendments that constitute material changes to how we handle your personal data, 66bb Club will notify you via:

• A prominent notice on the 66bb Club platform homepage at least 14 days before any amendment takes effect.
• An email notification to your registered email address, where the changes directly affect your rights.
• An in-platform notification will be shown when you next log in, prior to the effective date.

Your continued use of the 66bb Club platform after any amended Privacy Policy comes into effect constitutes your acceptance of the revised policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or how 66bb Club handles your personal data, please don't hesitate to reach out. Our data privacy team is available in Bahasa Malaysia and ready to assist.

Ways to contact 66bb Club regarding data privacy matters:

• Email: support@66bbclub.net — please mark the email subject as "Data Privacy Enquiry" to expedite processing. We will respond within 3 business days.
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the 66bb Club platform. For more complex privacy enquiries, the live chat team will direct you to the relevant privacy officer.
• Post: For official PDPA-related requests that require submission of supporting documents, please contact us by email first to obtain the correct submission address.

We are committed to addressing all privacy concerns seriously and with full respect for your rights as a 66bb Club member. Your trust is the asset we value most.