Privacy Policy 666duit — Our Commitment to Protecting Your Data

01Information We Collect

666duit only collects information that is strictly necessary to manage your account and provide the services you request. We do not collect excessive or irrelevant data.

Information you provide directly:

• Full name, identity card number (IC) and date of birth — for identity verification and KYC requirements.
• Email address and mobile number — for account communications, verification, and security notifications.
• Bank account or e-wallet details — used to process your deposits and withdrawals.
• A copy of your identity document (IC/passport) — collected during the KYC process prior to your first withdrawal.

Information collected automatically:

• IP address and device information (model, operating system, browser version).
• Platform usage data — pages visited, games played, and session duration.
• Transaction log — complete records of deposits, withdrawals and wagering activity.
• Approximate location data based on IP address (not precise GPS location).

02How We Use Your Data

Every piece of information we collect has a specific purpose and is used responsibly. Here is how 666duit uses your data:

03Information Sharing with Third Parties

666duit takes a very strict approach to data sharing. In general, we do not share your personal information with any external parties, except in limited circumstances as follows:

• Payment service providers — only the minimum necessary information is shared with payment processors to complete your transaction. All 666duit payment partners are bound by strict confidentiality agreements.
• Game providers — your username and account ID may be shared with third-party game providers (such as Pragmatic Play, Evolution Gaming) for technical purposes only. Financial information is not shared.
• Legal requirements — if ordered by a court or authority with valid jurisdiction, we may be required to disclose certain information. We will notify you of any such request unless prohibited by law.
• Fraud prevention — in cases of suspected fraudulent activity, certain information may be shared with fraud prevention agencies to protect other members and the integrity of the platform.

04Data Security and Protection Measures

666duit continuously invests in security infrastructure to ensure your data is always protected. The measures we have implemented include:

• Data encryption at rest and in transit — all sensitive data is stored in encrypted format using AES-256 standards, and all communications are protected by SSL/TLS.
• Two-factor authentication (2FA) — available to all members and strongly recommended as an extra layer of security for your account.
• 24/7 Monitoring — an automated monitoring system detects and alerts our security team to any unusual activity in real time.
• Regular penetration testing — the 666duit platform undergoes security testing by independent third parties to identify and close any vulnerabilities before they can be exploited.
• Internal access limits — staff only have access to the data necessary for their duties, and all access is recorded in immutable audit logs.

While we take all reasonable measures, no system can guarantee 100% absolute security. We encourage you to use a strong password, enable 2FA and never share your login credentials with anyone.

05Cookies and Tracking Technologies

666duit uses cookies and similar technologies to enhance your experience on the platform. The types of cookies we use are as follows:

• Necessary session cookies — required for core platform functions such as login, account balance, and navigation. Cannot be disabled without affecting platform functionality.
• Performance cookies — collects anonymised data on how users interact with the platform to help us identify areas for improvement.
• Preference cookies — stores your personal settings such as language, theme, and display preferences so you do not need to reconfigure them each time you log in.

You can manage your cookie settings through your web browser at any time. Disabling certain cookies may affect the functionality of some areas of the 666duit platform.

06Your Rights as a 666duit Member

As a 666duit member, you have the following rights regarding your personal data:

• Right of access — you may request a copy of all personal information we hold about you at any time.
• Right to rectification — you may request correction of any inaccurate or outdated information held in our records.
• Right to erasure — you may request deletion of your account and personal data, subject to our legal obligations to retain certain records for a specified period.
• Right to restrict processing — you may request that we restrict the use of your data in certain circumstances, such as during a dispute.
• Right to object — you may object to the processing of your data for specific purposes such as promotional communications.
• Right to data portability — you may request your data in a structured, machine-readable format for transfer to another platform.

To exercise any of the above rights, contact the 666duit support team via Live Chat. We will process your request within 7 business days.

07Data Retention Period

666duit does not retain your personal data longer than necessary. The following are our data retention period guidelines:

• Active account data — retained for as long as your account is active and for a period of 5 years after account closure, for legal compliance purposes.
• Financial transaction records — retained for 7 years in accordance with Malaysia's financial legal requirements.
• KYC Documents — retained for 5 years from the date of verification or account closure, whichever is later.
• Support communication log — retained for 2 years for reference and dispute resolution.
• Server log data — retained for 90 days for security and technical investigation purposes.

08Changes to This Privacy Policy

666duit reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons.

When we make significant changes to this Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending email notifications to all registered members at least 14 days before the changes take effect.
• Displaying a clear notice on the platform's home page for 7 days after the changes take effect.

Continued use of the 666duit platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy.

09Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, you can reach the 666duit Privacy team through the following channels:

• Live Chat — available 24 hours a day, 7 days a week. The fastest way to get an immediate response.
• Support email — [email protected] (displayed as text only; not clickable).
• Telegram — through the official 666duit support channels listed in the app.

Our team is ready to assist you in Bahasa Malaysia and will endeavour to respond to all privacy-related enquiries within 3 business days.