PDPA 2010 Compliant · 256-bit SSL Encryption

66zz Privacy Policy – Personal Data Protection for Malaysian Players

At 66zz, your privacy is more than a legal formality — it is a genuine commitment. This Privacy Policy transparently explains how we collect, use, store, and protect your personal data in accordance with Personal Data Protection Act (PDPA) 2010 Malaysia.

Updated: 1 January 2026 Version 3.1 Bahasa Melayu
 66zz Privacy Commitment
Fully compliant with Malaysia's PDPA 2010
256-bit SSL encryption for all data
Data is never sold to third parties
Your right to access and delete your data is guaranteed
Secure servers with regular security audits
Immediate notification in the event of a data breach
How Your Data Flows at 66zz
66zz Personal Data Lifecycle
📥
1. Collection
Data is collected during your registration, deposits, gameplay, and customer support interactions with 66zz.
🔒
2. Protection
Data is encrypted using 256-bit SSL and stored on secure servers with strict access controls.
⚙️
3. Usage
Used for account operations, payment processing, KYC compliance, and service improvements.
🗑️
4. Retention & Deletion
Data is retained for the period required by law and securely deleted upon account closure.
🛡️ Six Pillars of 66zz Privacy Protection
This is the foundation of the privacy policy we uphold in every aspect of handling our Malaysian users' data.
📋
Purpose-Specific Data Collection
66zz only collects data that is strictly necessary for clearly defined purposes — account registration, deposit and withdrawal processing, KYC compliance, and enhancing the user experience. We do not collect excessive or irrelevant data.
🔐
Encryption & Technical Security
All data transmitted between your device and 66zz's servers is protected by 256-bit SSL encryption — the same standard used by banking institutions. Stored data is also encrypted, and our servers undergo regular security penetration testing.
🚫
No Sale of Data to Third Parties
66zz has never and will never sell, rent, or share your personal data with third parties for marketing purposes. Your data belongs to you – we are simply responsible custodians entrusted with keeping it safe for as long as you use our platform.
Guaranteed User Rights
Under PDPA 2010, you have the right to access, correct, and request the deletion of your personal data held by us. 66zz provides a straightforward process for exercising these rights through the account portal or by contacting our team.
📱
Full Cookie Control in Your Hands
We use cookies only for essential platform functions and analytics that help us improve your experience. You can manage your cookie preferences at any time through your browser settings or the 66zz cookie management panel.
Rapid Response to Security Incidents
In the event of any security incident involving your data, 66zz is committed to notifying you within 72 hours of the incident being identified. Our cybersecurity team operates 24/7 to monitor and respond to any threats.
🏢
Section 1
Who We Are & Scope of This Policy

This Privacy Policy is issued by 66zz Entertainment Sdn. Bhd. ("66zz", "we", "data controller"), operator of an online Sports Betting and casino platform in https://66zz.link. This policy describes how we handle the personal data of users on our platform who are based in Malaysia.

This policy applies to all individuals who:

  • Visiting the 66zz website or app, even without registering an account.
  • Registering a new account on the 66zz platform.
  • Using any service offered by 66zz, including Sports Betting, slots, table games, and Live Casino.
  • Contacting the 66zz customer support team through any channel.

📌 Legal Basis: 66zz processes your personal data in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia. We adhere to the seven data protection principles set out in the Act: General Principle, Notice and Choice Principle, Disclosure Principle, Security Principle, Retention Principle, Data Integrity Principle, Access Principle, and Data Transfer Principle.

📊
Section 2
Types of Personal Data We Collect

66zz collects various categories of personal data depending on how you interact with our platform. Below is a full list of the types of data we may collect:

Data CategoryExampleRequirements
Identity DataFull name, MyKad/passport number, date of birthMandatory (KYC)
Contact DataEmail, phone number, mailing addressMandatory
Financial DataPayment methods (TNG, GrabPay, FPX), transaction historyMandatory
Technical DataIP address, browser type, device information, cookiesAutomatic
Usage DataGame history, betting patterns, slots playedAutomatic
Communication DataSupport chat logs, emails, complaintsVoluntary

Note: 66zz never collect credit card numbers or bank account details directly. All financial transactions are processed through third-party payment gateways that comply with PCI DSS standards.

📡
Section 3
How Your Personal Data Is Collected

3.1 Data You Provide Directly

This data is collected when you actively interact with the 66zz platform:

  • Account registration – name, email address, phone number, password.
  • KYC Verification – copies of MyKad, bank statements, or other requested documents to verify your identity.
  • Financial transactions – records of deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks).
  • Support communications – messages you send to the 66zz support team via live chat, email, or WhatsApp.

3.2 Automatically Collected Data

Technical and usage data are collected automatically when you use the 66zz platform:

  • IP address and geographic location identifiable from that IP.
  • Your browser information (type, version, language) and device operating system.
  • The time and duration of your login sessions.
  • Pages visited, games played, and actions taken within the platform.
  • Session cookies and performance tracking cookies (further details in Section 9).
🎯
Section 4
How We Use Your Personal Data

66zz uses the personal data collected only for the purposes set out below. We will not use your data for any other purpose without first notifying you and obtaining your consent where required:

  • Account management – creating, maintaining, and processing your player account on 66zz.
  • Transaction processing – processing deposits and withdrawals via your preferred Malaysian payment method.
  • Legal compliance (KYC/AML) – verifying your identity and fulfilling anti-money laundering obligations.
  • Platform security – detecting and preventing fraud, multi-accounting, and suspicious activity.
  • Customer support – helping you resolve issues, answering enquiries, and handling complaints.
  • Responsible gambling – monitoring gameplay patterns to identify players who may need self-exclusion support.
  • Service communications – sending important notifications regarding your account, transactions, and policy changes.
  • Platform improvements – analysing aggregated usage patterns to enhance the 66zz user experience.
  • Marketing (with consent) – sending relevant promotional offers and bonuses, only where you have given explicit consent.

📧 You may withdraw your consent to receive marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting the 66zz support team.

🤝
Section 5
Sharing Data with Third Parties

66zz never sells, rents, or discloses your personal data to third parties for their own commercial purposes. However, there are limited situations in which we may share your data with certain parties:

5.1 Trusted Service Providers

  • Payment gateways – Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX providers that process your financial transactions. They receive only the data necessary to complete the payment.
  • Game software providers – Pragmatic Play, Habanero, Spadegaming, and other providers that host the games you play on 66zz.
  • IT service providers – companies that provide the server infrastructure, cybersecurity, and analytics used to operate the 66zz platform.

5.2 Legal Requirements

66zz may disclose your data to the relevant authorities where required by Malaysian law, court order, or regulatory directive. This includes law enforcement agencies, financial regulatory bodies, and tribunals in the event of a legitimate dispute.

Contractual Guarantee: All third-party service providers working with 66zz are required to sign data processing agreements that bind them to protect your data in accordance with the standards we have set — no less stringent than PDPA 2010.

🔒
Section 6
Data Security Measures at 66zz

66zz invests seriously in security infrastructure to protect your personal data. Below are the key technical and organisational measures we have implemented:

256-bit SSL/TLS encryption for all communications
Active
Data-at-rest encryption for sensitive databases
Active
Two-factor authentication (2FA) is available for all accounts
Available
Regular third-party security penetration testing
Quarterly
24/7 real-time cyber threat monitoring
Active
Internal role-based access control (RBAC)
Active

While we take all reasonable steps to protect your data, no system is 100% immune to cyber threats. You also play an important role by keeping your 66zz account password and login credentials secure.

🗓️
Section 7
Data Retention Period

66zz does not retain your personal data longer than necessary for the purpose it was collected, or as required by Malaysian law. The following outlines our data retention guidelines:

Data TypeRetention PeriodPurpose
Active account dataFor the duration of the active account + 7 yearsLegal & audit requirements
Financial transaction records7 years after the transactionAML & PDPA Compliance
KYC Documents5 years after account closureLegal Requirements
Game logs2 yearsDispute Resolution
Support communication logs3 yearsService quality audit
Analytical cookie data13 monthsPerformance analytics

Once the relevant retention period has expired, your data will be securely deleted using an irreversible deletion method, or anonymised for aggregated analytical purposes where no individual can be identified.

⚖️
Section 8
Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by 66zz:

👁️
Access Rights
Request a copy of the personal data we hold about you. We will respond within 21 days.
✏️
Right to Correction
Request correction of any inaccurate or incomplete data held about you.
🚫
Right to Object
Object to the processing of your data for direct marketing purposes at any time.
🗑️
Right to Erasure
Request the deletion of your personal data, subject to applicable legal obligations.

To exercise any of the rights above, you may: (1) log in to your 66zz account portal and navigate to the "Privacy & Data" section, or (2) submit a request to privacy@66zz.link with the subject line "PDPA Rights Request" along with your account number. We will respond within 21 days of receiving a complete request.

📞 If you are dissatisfied with how we have handled your PDPA request, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia through the official Malaysian government portal.

🍪
Section 9
Cookie & Tracking Technology Policy

66zz uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following outlines the types of cookies we use:

  • Essential Cookies (Required) – required for login, session security, and core platform functionality. Cannot be disabled.
  • Preference Cookies – storing your preferences such as language and display settings.
  • Analytical Cookies – collects aggregated data on how users interact with the platform to help us make improvements.
  • Functional Cookies – enabling certain features such as live support chat to function correctly.

You can manage and delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the 66zz platform.

🔗
Section 10
Third-Party Links & Services

The 66zz platform features a wide range of games developed and hosted by third-party software providers such as Pragmatic Play, Habanero, Spadegaming, and others. When you play these games, the respective providers may process certain technical data (such as game IDs and session logs) for game delivery purposes.

Each of these providers has its own privacy policy, and 66zz encourages you to read them if you would like to understand how they handle your data. That said, 66zz ensures that all contracts with third-party providers require data protection standards equivalent to or higher than those set out in this policy.

Important: 66zz is not responsible for the privacy practices of external websites or services that are not directly under our control. Please exercise caution and review the privacy policy of any third-party service you use.

📝
Section 11
Changes to This Privacy Policy

66zz reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, current legal requirements, or service improvements. Each new version will be published on this page with the latest update date.

For changes that material – meaning changes that materially affect how we use your data or your rights – we will provide notification via:

  • An email to the registered address on your 66zz account, at least 14 days before the changes take effect.
  • A prominent notice on the 66zz website homepage.
  • An in-account notification the next time you log in.

Continued use of the 66zz platform after the notified effective date of any Privacy Policy changes constitutes your acceptance of the updated version. If you do not agree with the changes, you have the right to close your account and withdraw your remaining balance.

📞
Section 12
Contact the 66zz Data Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how 66zz handles your personal data, please contact our Data Protection Officer:

Data Privacy Email
privacy@66zz.link
Live Chat 24/7
Available on the 66zz platform
Target Response Time
Email: < 4 hours  |  PDPA Request: < 21 days

🌐 The 66zz support and privacy team speaks Bahasa Melayu and is ready to help you understand your data privacy rights or address any concerns you may have.

Your Data Is Safe with 66zz

Play with Peace of Mind – Your Privacy is Protected

Register your 66zz account with confidence. Our platform is fully compliant with PDPA 2010, uses 256-bit SSL encryption, and never sells your data to third parties. Your security and privacy are our top priority.

PDPA 2010 Compliant SSL 256-bit Encryption No Data Sales Dedicated Privacy Officer
Bahasa Melayu