Privacy Policy 66cuci – Protection of Your Personal Data

This Privacy Policy ("Policy") is published by 66cuci ("We", "Platform") and applies to all users, registered members, visitors, and anyone who interacts with the 66cuci platform via our website, mobile app, or any digital channel we operate.

This policy is designed in accordance with the provisions of the Personal Data Protection Act 2010 (Malaysia PDPA) and international best practices in data protection. Our goal is to ensure you have a clear and complete understanding of what data we collect, why we need it, how we use it, and what rights you have in relation to that data.

By registering an account or using the services of 66cuci, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please stop using our platform and contact us to delete your personal data.

66cuci collects your personal data through several means – directly from you during registration and platform use, automatically through tracking technologies, and in certain cases, from legitimate third-party sources. The categories of data we collect are as follows:

We do not collect sensitive personal data such as medical records, biometric information, or political affiliations unless explicitly required for specific legal compliance purposes.

66cuci uses collected personal data solely for lawful and disclosed purposes. The primary uses of your data are as follows:

• Account Management: Creating, verifying, and managing your 66cuci account, including the login process, identity verification, and password recovery.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as managing withdrawal requests to your Malaysian bank account.
• Service Provision: Enabling access to all Live Casino games, slots, baccarat, roulette, and Sports Betting on EPL football and the Malaysia Super League on the 66cuci platform.
• Legal Compliance: Fulfilling compliance obligations including anti-money laundering (AML), identity verification (KYC) and reporting to authorities as required under Malaysian law.
• Platform Security: Detecting and preventing fraud, unauthorised access, bonus abuse, and other suspicious activity that could compromise the security of the 66cuci platform and its members.
• Customer Support: Providing effective technical support and customer service, including resolving member complaints and enquiries.
• Platform Improvements: Analysing aggregated and anonymised usage patterns to improve the user experience, platform performance, and the 66cuci game library.
• Marketing Communications: Sending information about promotions, new bonuses, and relevant 66cuci platform updates – only with your consent and subject to your right to unsubscribe at any time.

In accordance with the Malaysia PDPA and recognised data protection standards, 66cuci processes your personal data on one or more of the following lawful legal bases:

• Performance of Contract: Processing that is necessary to deliver the services you have requested – including account management, deposit and withdrawal processing, and access to 66cuci games.
• Consent: For marketing communications and the use of non-essential cookies, we require your explicit consent. You may withdraw this consent at any time.
• Legitimate Interests: For platform security, fraud prevention, and service improvement purposes – where 66cuci's legitimate interests do not override your privacy rights.
• Legal Obligations: To fulfil compliance obligations prescribed under Malaysian law, including KYC and AML requirements.

66cuci does not sell or trade our members' personal data to any party for marketing or commercial purposes. However, we may share your data in the following limited circumstances:

• Service Provider: Third parties that assist us in delivering our services – including payment processors (for managing transactions via Touch 'n Go, GrabPay, DuitNow, and others), game providers such as Evolution Gaming and Pragmatic Play, and technology infrastructure providers. All such providers are bound by strict confidentiality agreements and may only use your data for specified purposes.
• Authorities: When required by Malaysian law, a court order or the direction of a competent authority. In such cases, we will notify you unless confidentiality is legally required.
• Fraud Prevention: With fraud prevention agencies or legitimate industry bodies for the purpose of detecting and preventing financial crime, fraud or money laundering.
• Business Transfers: In the event of a merger, acquisition or sale of 66cuci assets, user data may be transferred to the receiving entity — subject to notice being given to users and equivalent or greater privacy protections being maintained.

66cuci takes a layered approach to data security to ensure comprehensive protection of your personal data:

• Encryption in Transit: All communications between your device and the 66cuci platform are secured with TLS 1.3 and 256-bit SSL certificates. This ensures that sensitive data such as login credentials and transaction details cannot be intercepted in transit.
• Encryption in Storage: Sensitive personal data stored in 66cuci's databases is encrypted using high-grade encryption algorithms. Passwords are never stored in plain text – only irreversible hashes are retained.
• Access Controls: Access to user data is restricted to 66cuci personnel who require it to perform their duties. A role-based access control (RBAC) system ensures the principle of least privilege is consistently applied.
• 24/7 Monitoring: Security monitoring systems operate around the clock to detect suspicious activity, intrusion attempts and anomalies in data access patterns.
• Regular Security Audits: 66cuci conducts regular security audits and penetration testing by independent third parties to identify and address potential vulnerabilities.
• Breach Response Procedure: In the event of a data breach, 66cuci has a comprehensive incident response procedure in place to minimise impact, notify affected members, and report to the relevant authorities within the timeframe prescribed by law.

Under Malaysia's PDPA and data protection best practices, you have the following rights regarding your personal data held by 66cuci:

66cuci uses cookies and similar tracking technologies to enhance the user experience, ensure platform security, and understand how our platform is used. Below are the types of cookies we use:

As an online operating platform, some processing of members' personal data 66cuci may involve servers or service providers operating outside Malaysia. This includes internationally accredited live casino game providers and cloud infrastructure used to support our platform.

In all cases of international data transfers, 66cuci ensure that:

• The recipient country offers an adequate level of data protection, or
• Appropriate data transfer agreements have been signed with the recipient, or
• Other recognised protection mechanisms are applied to ensure your data is safeguarded in accordance with Malaysia's PDPA standards.

You may request further information about the protection mechanisms used for international data transfers by contacting our Data Protection Officer.

66cuci retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law.

The general data retention guidelines at 66cuci are as follows:

• Active Account Data: Retained for as long as your account remains active, and for a reasonable period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legislation.
• KYC Records (Identity Verification): Retained for a minimum of 6 years from the date of the last transaction or account closure.
• Security Logs: Retained for 12 months for security investigation and fraud detection purposes.
• Customer Support Communications: Retained for 2 years to assist in resolving any disputes that may arise at a later date.

Once the applicable retention period has ended, your personal data will be securely deleted or anonymised so that it can no longer be linked to you.

Platform 66cuci is an exclusive service for adults aged 18 and above. We do not knowingly collect or store personal data of individuals under the age of 18.

If we find that a child's personal data has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question. If you believe that your child or a minor has registered on the 66cuci platform, please contact us immediately at privacy@66cuci.best.

If you have any questions, concerns, or complaints regarding how 66cuci handles your personal data, or if you wish to exercise any of your privacy rights, please contact our Data Protection Officer at:

• Privacy Email: privacy@66cuci.best
• General Support Email: support@66cuci.best
• Live Chat: Available 24/7 within the 66cuci platform
• Response Time: Within 21 working days for formal privacy rights requests

All privacy-related complaints will be investigated thoroughly, and we are committed to resolving them in a fair and transparent manner. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner or the relevant authority.