Myr66 Privacy Policy — Malaysian Member Personal Data Protection

Myr66 is an online gaming platform operated to meet the entertainment needs of members in Malaysia. We understand that your trust is the most valuable asset we must uphold. This Privacy Policy has been carefully crafted to clearly and transparently explain how your personal information is managed from the moment you register through every gaming session you have with us.

We fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data security standards. Every decision relating to your data is guided by the principles of transparency, necessity, and security — not merely to meet legal requirements, but because we genuinely value your privacy.

This Privacy Policy applies to all users and registered members of myr66, including those who access the platform via myr66.onl or through our mobile app. By continuing to use any myr66 service, you confirm your acceptance of this policy.

Myr66 only collects data that is genuinely necessary to provide you with a safe, seamless, and quality service. The following are the categories of data we collect:

Your personal data is collected through several different channels as you interact with the myr66 platform:

• Account Registration: Information you enter directly during the registration process, including your name, phone number, and bank account details.
• KYC Verification: Identity documents and proof of address submitted for identity verification purposes.
• Financial Transactions: Information generated when you make deposits or withdrawals through the platform.
• Platform Usage: Data generated automatically as you use the platform, including activity logs, game history, and session information.
• Customer Support Communications: Conversation records, enquiries, and feedback you share with our support team via live chat or other channels.
• Cookies and Tracking Technologies: Technical data collected automatically via browser cookies, pixel beacons, and similar technologies as you browse our platform.

We never purchase personal data from third parties or obtain your information without your knowledge and consent. All data collection is carried out transparently and only when there is a legitimate need.

Myr66 uses your personal data responsibly and only for the following legitimate purposes:

• Account Management: To create, verify, and manage your member account, including the login process, two-factor authentication, and password recovery.
• Transaction Processing: To process deposits, withdrawals, and any financial transactions made through your account quickly and securely.
• Fraud Prevention: To detect and prevent any suspicious activity, identity fraud, money laundering, or security breaches that may involve your account.
• Legal Compliance: To fulfil legal obligations under PDPA 2010, KYC requirements, AML (anti-money laundering) requirements, and other applicable regulations.
• Service Improvement: To analyse aggregated and anonymised usage patterns in order to improve platform features, performance, and the overall user experience.
• Service Communications: To send you important account notifications, security updates, and necessary service information.
• Related Marketing: To inform you of promotions, special offers, and relevant platform updates — only if you have consented to receive such communications.
• Responsible Gaming Management: To monitor gaming patterns in order to identify signs of problem gambling and provide relevant self-protection tools to members who need them.

Myr66 does not sell, rent, or disclose your personal data to any third party for commercial marketing purposes without your explicit consent. However, there are certain situations where we need to share your data with the following parties to ensure the platform operates smoothly and securely:

• Payment Service Providers: Transaction information that must be shared with banks, card processors, e-wallet providers, and payment gateways to process your deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Game Providers: Minimum technical data required by gaming software providers to enable your access to games on our platform. No financial or personally identifying information is shared unless required for licence verification purposes.
• Security & Anti-Fraud Services: Information required by third-party fraud detection systems to protect your account from unauthorised access.
• Relevant Authorities: myr66 will disclose required data to law enforcement agencies, regulatory bodies, or courts when mandated by Malaysian law.
• Professional Consultants: Lawyers, accountants, or other consultants subject to their own professional confidentiality obligations.

Every third party that receives your data is required to sign a binding data protection agreement and is only permitted to use that data for the specific purposes that have been agreed upon.

The security of your personal data is myr66's top priority. We implement comprehensive layers of technical and organisational protection to keep your information safe at all times:

• 256-bit SSL Encryption: All communications between your device and myr66 servers are encrypted using the latest TLS 1.3 protocol, ensuring no third party can intercept data during transmission.
• Stored Data Encryption: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using AES-256 — the same standard used by leading banking institutions.
• Two-Factor Authentication (2FA): An additional security layer is available for all member accounts, requiring a second verification via OTP before access is granted.
• Continuous Monitoring: Our automated security monitoring system operates 24 hours a day, 7 days a week to detect and respond to any unusual or suspicious activity in real time.
• Internal Access Controls: Access to member personal data is restricted exclusively to authorised personnel on a need-to-know basis. All access is logged and reviewed through regular audits.
• Regular Security Testing: We conduct regular penetration testing and independent security audits to identify and address any system vulnerabilities.

Myr66 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by law. The following are our data retention period guidelines:

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. In certain cases where complete deletion is not technically practical (such as in backup systems), the data will be anonymised until the next deletion cycle.

As a data subject under Malaysia's PDPA, you have the following rights, which we fully respect:

To exercise any of the above rights, please contact our data protection team through customer support. We will process your request within 21 working days as required by Malaysia's PDPA.

The myr66 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

We use three main categories of cookies:

• Essential Cookies (Cannot Be Disabled): These cookies are strictly necessary for the platform to function — for example, to maintain your login session, remember your language preference, and secure your transactions. Without them, the platform cannot operate properly.
• Analytics Cookies: To help us understand how members use the platform through aggregated, anonymised data — such as the most frequently visited pages and average session duration. This data is used to continuously improve the platform.
• Preference Cookies: To remember your personal preferences and settings — such as display theme, preferred game layout, and notification choices — to deliver a more personalised experience.

You can manage and control cookies through your web browser settings. Please note that disabling certain cookies may affect specific features on the myr66 platform.

The myr66 platform is exclusively for individuals aged 18 and above. We do not provide services to minors and do not knowingly collect any personal data from them.

If we determine that personal information has been collected from an individual under the age of 18 without adequate verification, we will take immediate steps to delete that information and close the account in question. Our age verification process through KYC is specifically designed to prevent access by underage individuals.

If you are a parent or guardian and believe your child has registered on our platform, please contact our customer support team immediately so we can take the appropriate action.

Myr66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technological developments, or new legal requirements. The effective date of any update will always be displayed at the top of this document.

For significant amendments that affect your rights or how we use your data, we will notify you in advance via an in-platform notice or your registered email at least 14 days before the changes take effect.

Continued use of the myr66 platform after the effective date of any amendment constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the myr66 data protection team is always ready to assist you.

You can reach us through the following channels:

• Live Chat: Available 24/7 directly within the myr66 platform — the fastest way to get an immediate response.
• Official Email: [email protected] — for written enquiries that require documentation or supporting evidence.
• Telegram & WhatsApp: Instant messaging channels for daily enquiries and technical support.

For formal requests relating to data subject rights (such as access, correction, or deletion of data), please clearly state the type of request and include sufficient identity verification information so we can process your request securely and accurately. We are committed to responding to all privacy-related enquiries within 3 to 5 working days.