Privacy Policy g66 – Personal Data Protection for Malaysia Members

01 Introduction & Scope of Privacy Policy

Welcome to the g66 Privacy Policy page. This document is a comprehensive guide on how the g66 platform handles the personal data of all its users, including registered members, website visitors and anyone who interacts with g66 services through any device or channel.

G66 is an online entertainment platform operating exclusively for the Malaysia market. We understand that your trust is the most valuable asset we hold. Therefore, we are committed to ensuring every aspect of your personal data handling is conducted in the most transparent, responsible and secure manner.

This Privacy Policy is formulated in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices. By using the g66 platform or registering as a member, you acknowledge that you have read, understood, and agreed to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, you are advised to discontinue use of the g66 platform immediately.

This policy governs all personal data collected through the g66 website, the g66 mobile app (Android and iOS), and any written or online communications between you and the g66 team. It also covers data collected through financial transactions, gaming activity, and our customer support programme.

02 Types of Personal Data We Collect

G66 collects your personal data through various channels in the context of your relationship with our platform. The following are the main categories of data we collect along with the purpose of collection:

We only collect data that is genuinely necessary for legitimate purposes. Data collected voluntarily — such as feedback or reviews — is used solely for service improvement and will not be shared without your consent.

03 Purpose of Personal Data Use

Every piece of data we collect has a clear, lawful and limited purpose. g66 uses your personal data solely for the following purposes:

• Account Management: Creating, verifying, managing and maintaining your member account on the g66 platform, including the required KYC and identity verification processes.
• Transaction Processing: Processing deposits, withdrawals and all other financial transactions related to your g66 account securely and efficiently.
• Service Delivery: Providing access to all games, promotions, bonuses and platform features on g66 that you have subscribed to or expressed interest in.
• Security & Fraud Prevention: Detecting, preventing and investigating fraudulent activity, money laundering, collusion or any unauthorised use of the platform.
• Legal Compliance: Fulfilling the legal and regulatory obligations imposed on g66 by Malaysian authorities, including reporting requirements and record-keeping.
• Customer Support: Handling your enquiries, complaints and requests through g66's support channels, available 24 hours a day, 7 days a week.
• Marketing Communications: Sending you information about g66's latest promotions, bonuses and offers, only if you have given your consent to receive such communications.
• Platform Enhancement: Analysing usage patterns and user feedback to continuously improve the gaming experience at g66.
• Responsible Gaming: Monitoring gameplay patterns to identify and assist members who may be experiencing issues related to compulsive gaming.

G66 will not use your personal data for any purpose beyond the list above without first obtaining fresh consent from you. Any changes to the data processing purpose will be communicated through an updated notice on the g66 website.

04 Data Sharing & Disclosure

G66 applies the principle of data minimization across every aspect of our operations. Your personal data will only be shared in the following limited circumstances:

• Trusted Service Providers: Payment processing companies, technology service providers and other operational partners directly involved in delivering g66 services to you. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.
• Regulatory Authority: Malaysian government authorities, law enforcement agencies or regulatory bodies that require such information based on valid and binding legal authority.
• Fraud Prevention: Fraud prevention agencies and relevant industry bodies where there is evidence or reasonable suspicion of financial crime involving the g66 platform.
• Business Transfer: In the event of any merger, acquisition or sale of g66 business assets, your personal data may be transferred as part of that process, with appropriate notice provided to you.

05 Cookies & Tracking Technology

The g66 platform uses cookies and similar tracking technologies to enhance the user experience, secure your login session and understand how members interact with our platform.

• Essential Cookies: Required for core platform functions such as login session authentication, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Used to analyse how members use the g66 platform, enabling us to identify areas for improvement. Data collected is aggregated and does not personally identify any individual.
• Functional Cookies: Saving your personal preferences such as display settings, game preferences and language selection so you do not need to re-enter them each time you log in.
• Marketing Cookies: Activated only with your consent. Used to deliver relevant content and offers based on your interests and usage patterns on the g66 platform.

You can control and manage cookie settings through your web browser settings at any time. Please note that disabling certain cookies may affect your experience and the functionality of the g66 platform.

06 Data Security Measures

G66 continuously invests in the latest security infrastructure to ensure your personal data is always protected against cyber threats, unauthorized access and data breaches. Our security approach is layered and comprehensive:

• 256-bit SSL Encryption: All data transmitted between your device and g66 servers is encrypted using industry-grade SSL/TLS protocols, making it unreadable to any unauthorized party.
• Two-Factor Authentication (2FA): g66 provides a 2FA feature for all member accounts, adding an extra layer of security that prevents unauthorized access even if your password is compromised.
• Continuous Security Monitoring: g66's automated monitoring system operates 24/7 to detect and respond to any suspicious activity or unauthorized access attempts on our systems.
• Regular Security Audits: g66 conducts regular internal and external security audits by accredited independent parties to ensure our security standards consistently meet or exceed current industry requirements.
• Internal Access Control: Access to g66 members' personal data within internal systems is strictly limited to staff with a legitimate business need, and all access is automatically logged.
• Incident Response Plan: g66 maintains a comprehensive cybersecurity incident response procedure. In the event of any data breach affecting your information, we will notify you within the timeframe stipulated by law.

07 Data Retention & Deletion

G66 retains your personal data for the period necessary to fulfill the purpose of collection and related legal obligations. Our retention policy is as follows:

• Active Account Data: For as long as your g66 account is active and for a reasonable period of inactivity thereafter. This data is required to deliver the services you have subscribed to.
• Financial Transaction Records: A minimum of seven (7) years from the date of the transaction, in line with financial record-keeping requirements under Malaysian law.
• KYC & Identity Verification Records: A minimum of five (5) years after account closure or the date of the last transaction, in accordance with applicable AML/CFT compliance requirements.
• Support Communication Log: Three (3) years from the date of communication for service reference and dispute resolution purposes.
• Marketing Data: Until you withdraw your consent or request the cessation of marketing communications.

Once the retention period expires or upon a valid request from you, your personal data will be permanently deleted from g66 systems or anonymized so that it can no longer be linked to your identity. This deletion process is carried out using industry-recognized methods to ensure the data cannot be recovered.

08 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 and the g66 Privacy Policy, you have the following rights regarding your personal data. g66 is committed to respecting and facilitating the exercise of these rights within a reasonable timeframe:

To exercise any of the above rights, please contact the g66 privacy team via our support email or through the in-platform live chat. We will respond to your request within 30 business days of receipt. In complex cases, this period may be extended with appropriate notice to you.

09 Children's Data Protection

The g66 platform is intended exclusively for adults aged 18 and above. g66 maintains a zero-tolerance policy towards the use of the platform by minors, including the collection of their personal data.

G66 does not knowingly collect, process or store the personal data of any individual under the age of 18. Should we find that a child's data has been collected without our knowledge as a result of fraudulent registration, the account in question will be closed immediately and all related data will be deleted from our systems without delay.

10 Amendments to the Privacy Policy

G66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in business practices, legal requirements or technology in use. Every material amendment will be communicated through the following means:

• On-Site Notice: A clear notice will be displayed on the g66 homepage and this Privacy Policy page, stating the effective date of the amendment.
• Email Notification: For material amendments, a notification will be sent to the email address registered with your g66 account.
• In-App Notice: g66 mobile app users will receive in-app notices regarding any important updates to the privacy policy.

Your continued use of the g66 platform after any policy amendment takes effect will be considered your acceptance of the updated terms. If you do not agree with the changes made, you have the right to close your account and stop using the platform. The date at the top of this page indicates when this Privacy Policy was last updated.

11 Contact the g66 Privacy Team

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your personal data by g66, our privacy team is ready to assist you. We prioritize every privacy-related inquiry and strive to provide a complete and satisfactory response.

You can reach the g66 privacy team via our official email. Our team operates full-time and will respond to your enquiries within a reasonable timeframe. For urgent matters relating to account security or potential data breaches, please indicate the priority in your email subject line so we can provide prompt attention.

When contacting us regarding a data request, please include the following information to expedite the process: your registered full name, g66 account username, the type of request submitted, and a brief description of your issue or enquiry. This will help our team process your request more efficiently and accurately.

G66 takes every privacy-related feedback seriously. If you are dissatisfied with the response or action taken by g66, you have the right to file a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority within your jurisdiction.