Privacy Policy g66 — Malaysia Players' Personal Data Protection

When you register and use the g66 platform, we collect several categories of information to enable us to provide a secure, seamless, and personalized service. We only collect information that is strictly necessary for the stated purposes.

Information you provide directly:

• Full name as shown on your official identification document (MyKad or passport);
• Date of birth for minimum age verification of 18 years;
• Active email address and mobile phone number;
• Bank account or e-wallet information for processing deposits and withdrawals;
• KYC supporting documents such as MyKad photos and proof of current address;
• Communication preferences and account settings you choose yourself.

Information collected automatically:

• IP address and coarse geolocation data for jurisdictional verification;
• Device type, operating system, and web browser version used;
• Session activity including pages visited, time of visit, and navigation patterns;
• Complete transaction logs including deposits, withdrawals, and wagering history;
• Game performance data required for dispute resolution.

The information we collect is used solely for purposes related to the operation of the g66 platform and to deliver a better user experience. We will not use your data for unrelated purposes without your consent.

If you have given consent to receive promotional communications from g66, you may withdraw that consent at any time through your account settings or by contacting our support team.

G66 does not sell, rent, or trade your personal information to any third party for their marketing purposes. However, there are limited situations where we need to share your data with certain parties to enable the platform to operate properly and comply with the law.

Parties that may receive your information:

• Payment gateway providers: DuitNow, FPX, Touch 'n Go eWallet, and other authorized payment partners — receiving only the information required to process your transaction;
• Gaming software providers: A licensed gaming technology company that supplies the slots, Live Casino, and bingo platform — receiving only your anonymised session ID;
• Regulatory authorities and law enforcement: Whenever required by Malaysian law or a valid court order;
• Third-party identity verification service: Used solely to verify the authenticity of your KYC documents;
• Auditors and professional advisors: Bound by strict confidentiality obligations.

The security of your data is g66's top priority. We continuously invest in the latest security infrastructure to ensure your information is always protected against unauthorised access, breaches, or tampering.

Security layers we use:

• 256-bit SSL encryption: All data transmitted between your device and g66's servers is encrypted using TLS 1.3 protocol — the same industry standard used by leading banking institutions;
• Two-factor authentication (2FA): An additional security layer requiring OTP verification every time you log in from a new device;
• Real-time threat monitoring: An automated monitoring system that detects and blocks suspicious activity before it can affect your account;
• Encrypted password storage: Your password is stored in hashed form using the bcrypt algorithm — meaning we are unable to read your password;
• Data segregation: Sensitive data such as banking information is stored in separate systems with strict access controls;
• Periodic security auditing: Penetration testing is conducted regularly by certified independent security firms.

G66 uses cookies and similar tracking technologies to enhance the user experience, ensure smooth platform functionality, and help us understand how members interact with our services.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login session verification and security — cannot be disabled;
• Performance cookies: Collects anonymised data about how you use the platform to help us improve our services;
• Functional cookies: Saves your preferences such as language, display settings, and favourite game selections;
• Analytics cookies: Used to understand overall platform usage patterns on an aggregated and anonymized basis.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the g66 platform.

G66 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or for as long as required under applicable Malaysian law.

• Active account data: Retained for the duration your account remains active plus 5 years after account closure for audit and compliance purposes;
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax legislation;
• KYC Documents: Retained for 5 years from the date of verification or account closure, whichever is later;
• Support communication logs: Retained for 2 years for reference and service improvement purposes;
• Cookie data: Retention period depends on the type of cookie — session cookies are deleted when the browser is closed, while persistent cookies have a set expiry date.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

As a g66 user and under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding the personal data we hold about you:

• Right to access: You may request a copy of all personal data we hold about you;
• Right to rectification: You may request correction of inaccurate or incomplete data at any time;
• Right to erasure: You may request deletion of your data subject to applicable legal retention obligations;
• Right to restrict processing: You may request that we restrict how we process your data under certain circumstances;
• Right to withdraw consent: Where data processing is based on your consent, you may withdraw that consent at any time;
• Right to object: You may object to the processing of your data for direct marketing purposes.

To exercise any of the above rights, contact the g66 privacy team via email at [email protected]. We will respond within 14 business days. In complex cases, this period may be extended to 30 days with prior notice to you.

The g66 platform is an online entertainment service that for individuals aged 18 and above only. We do not knowingly collect any personal information from children or individuals under the age of 18.

If we become aware that personal data of someone under the age of 18 has been collected without our knowledge, we will immediately take steps to delete that data and close the account in question. If you suspect that a minor is using the g66 platform, please contact us immediately.

G66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. We will notify you of any significant changes through:

• A clear notice on the g66 platform's home page;
• Notification email to the address registered in your account;
• Updates the "Effective Date" at the top of this document.

Continued use of the g66 platform after changes take effect constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or wish to exercise your privacy rights, the g66 team is ready to assist you. We are committed to responding promptly and professionally to every privacy-related enquiry.

Reach us via 24/7 live chat in English directly on the g66 platform, or by email at [email protected]. For inquiries specifically related to PDPA rights, please include "PDPA Privacy Inquiry" in the subject line of your message so it can be routed to the correct team more promptly.