666 Casino Privacy Policy – Your Data Protection is Our Priority

1. Introduction

666 Casino ("we", "our platform") takes every player's privacy extremely seriously. As a trusted online casino platform operating under a valid licence, we have a clear responsibility to protect the personal information you entrust to us.

This Privacy Policy is designed to give you a clear and transparent understanding of how we manage your data — from collection through to storage and deletion. We believe that transparency is the foundation of trust, and your trust is our most valued asset.

This document explains the types of data we collect, why we need it, how we use it, and the rights you hold as a player. If you have any questions after reading this policy, our support team is available to assist you at any time.

2. Data We Collect

We only collect data that is strictly necessary to provide you with the best service. The following are the categories of data we collect:

A. Data You Provide Directly

• 2.1 Registration Information: Full name, date of birth, email address, phone number, and the password you create when registering an account.
• 2.2 KYC Documents: MyKad copy (front and back), passport, or other official identification document, along with a bank statement or utility bill for address verification.
• 2.3 Financial Information: Bank account details, e-wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost), or payment-related information required for deposits and withdrawals.
• 2.4 Communications: Messages you send to our support team via live chat, email, or any other communication channel.

B. Automatically Collected Data

• 2.5 Technical Data: IP address, web browser type, operating system, screen resolution, and device information used to access the platform.
• 2.6 Usage Data: Pages you visit, session duration, games you play, bets placed, and general activity patterns on the platform.
• 2.7 Location Data: General location information based on your IP address for compliance and fraud detection purposes.
• 2.8 Cookie Data: Information collected through cookies and similar tracking technologies — further details are set out in Section 8.

3. How We Use Your Data

The data we collect is used solely for legitimate purposes directly related to the services we offer. Below is a comprehensive list of how that data is used:

• 3.1 Account Management: Creating and managing your player account, including identity verification, password recovery, and profile updates.
• 3.2 Transaction Processing: Processing deposits, withdrawals, and all other financial transactions accurately and securely.
• 3.3 Service Delivery: Ensuring the platform operates smoothly, including game delivery, bonus management, and technical support.
• 3.4 Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multiple account usage, and any activity that violates the platform's terms.
• 3.5 Regulatory Compliance: Fulfilling applicable legal and regulatory obligations, including KYC and AML (Anti-Money Laundering) requirements.
• 3.6 Service Communications: Sending transaction notifications, security alerts, policy updates, and important service information.
• 3.7 Marketing (With Consent): Sending promotional offers, exclusive bonuses, and campaign information — only to players who have given their marketing consent.
• 3.8 Platform Improvements: Analysing usage patterns to improve the user interface, platform performance, and overall player experience.
• 3.9 Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support to players who need it.

4. Legal Basis for Data Processing

In line with good data protection principles, we ensure every instance of data processing has a lawful basis. The following are the bases we rely on:

5. Data Sharing with Third Parties

666 Casino does not sell your personal data. However, under the following limited circumstances, we may share data with certain parties:

• 5.1 Payment Service Providers: Required transaction information is shared with integrated payment providers (FPX, DuitNow, e-wallet operators) solely to process your financial transactions.
• 5.2 Game Providers: Third-party game software providers may receive the minimum data necessary to deliver a smooth and fair gaming experience.
• 5.3 Regulatory Authority: We are legally required to share certain information with relevant authorities when lawfully requested.
• 5.4 Identity Verification Services: KYC data is shared with identity verification service providers that are registered and comply with strict security standards.
• 5.5 Fraud Information Sharing: In confirmed cases of fraud, relevant information may be shared with other platforms within the industry's fraud prevention network.

All third parties that receive your data are required to meet data security standards equal to or exceeding our own. Legally binding data processing agreements are signed with all partners.

6. Data Security

We implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, or disclosure:

• 6.1 Data Encryption in Transit: All communication between your browser and our servers is secured by TLS 1.3 protocol with AES-256 encryption.
• 6.2 Data Encryption at Rest: Sensitive data stored in our databases — including passwords and financial information — is encrypted using irreversible hashing algorithms.
• 6.3 Access Control: Only staff who require access for their work duties are permitted to access player data, and all access is logged and monitored.
• 6.4 Two-Factor Authentication: Our internal systems require two-factor authentication for all access to sensitive databases.
• 6.5 24/7 Monitoring: Our security systems operate around the clock to detect and respond to any security threats promptly.
• 6.6 Data Backup: Data is regularly backed up to a separate secure location to ensure service continuity and data recovery in the event of an incident.

7. Data Retention Period

We retain your personal data only for as long as necessary to fulfil the purpose of collection or as required by law.

• 7.1 Active Account Data: Retained for the duration your account is active and for any additional period required by law following account closure.
• 7.2 Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• 7.3 KYC Documents: Retained for 5 years after the business relationship ends, in accordance with AML legal requirements.
• 7.4 Communication Logs: Customer support communication records are retained for 2 years for quality control and dispute resolution purposes.
• 7.5 Marketing Data: Retained until you withdraw consent or request deletion, which will be processed within 30 days.

After the applicable retention period ends, your data will be securely deleted or anonymized in accordance with our established data deletion procedures.

8. Cookies & Tracking Technologies

666 Casino uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• 8.1 Essential Cookies: These cookies are required for the platform's core functions, such as login session authentication and security. They cannot be disabled without affecting platform functionality.
• 8.2 Performance Cookies: Collecting anonymous information about how players use our platform to help us improve performance and user experience.
• 8.3 Functional Cookies: Saving your preferences such as preferred language, region, and display settings so you do not need to reconfigure them on every visit.
• 8.4 Marketing Cookies: Used to present relevant ads to you based on your gaming interests — only with your consent.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect platform functionality.

9. Your Rights

As a 666 casino player, you have the following rights regarding your personal data, in accordance with Malaysia's PDPA provisions:

• 9.1 Right to Access: You have the right to obtain a copy of the personal data we hold about you at any time.
• 9.2 Right to Rectification: You may request that we correct any inaccurate or incomplete data in our records.
• 9.3 Right to Erasure: Under certain circumstances, you may request that we delete your personal data — subject to our legal retention obligations.
• 9.4 Right to Restriction of Processing: You may request that we restrict the processing of your data in certain situations, such as while you are contesting the accuracy of the data.
• 9.5 Right to Data Portability: You may request a copy of your data in a machine-readable format for transfer to another service provider.
• 9.6 Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• 9.7 Withdrawing Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of any prior processing.

To exercise any of the above rights, please contact our privacy team by email at [email protected]. We will process your request within 30 days.

10. Children's Data

666 Casino is a platform that strictly for individuals aged 18 and above only. We take the protection of children's privacy seriously and do not knowingly collect data from anyone under the age of 18.

• 10.1 Our registration process requires age verification and KYC to ensure only adults can fully access our services.
• 10.2 If we find that collected data belongs to an individual under 18 years of age, that data will be deleted immediately and the associated account will be closed.
• 10.3 If you believe we have inadvertently collected data from a child, please contact us immediately.

11. International Data Transfers

In some circumstances, your personal data may be transferred to or stored on servers located outside Malaysia. We ensure adequate protections are in place before any such transfer takes place.

• 11.1 All international data transfers are conducted ensuring that the recipient country provides a level of data protection comparable to Malaysia's standards.
• 11.2 We use standard data processing agreements and internationally recognised protection mechanisms for all cross-border data transfers.
• 11.3 Further details on data processing locations may be requested from our privacy team.

12. Changes to the Privacy Policy

666 Casino reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements.

• 12.1 Any material changes will be communicated to you via your registered email or a prominent platform notification at least 14 days before the changes take effect.
• 12.2 The "Updated" date at the top of this page will always reflect the most recent update.
• 12.3 Continued use of the platform after changes take effect is considered your acceptance of the updated policy.
• 12.4 We encourage you to review this page periodically to ensure you are always informed of how we manage your data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our privacy team through the following channels:

We are committed to responding to all privacy-related enquiries within a reasonable timeframe and ensuring your concerns are addressed with full attention.