Your privacy is our priority. This document clearly explains how my66 collect, use, store and protect your personal information as a player on our Malaysia platform. Please read this carefully – you have the right to know.
my66 ("we", "Platform", "my66.run") are committed to protecting the privacy of every user who registers and plays on our platform. This Privacy Policy outlines our practices regarding the collection, use, storage and protection of your personal information, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices.
By registering a my66 account, using our platform, making deposits via Touch 'n Go eWallet, DuitNow, FPX, or any other Malaysian payment method, or simply browsing our website, you are implicitly agreeing to the practices described in this document. If you do not agree with any part of this Privacy Policy, please discontinue use of the my66 platform and contact us to close your account.
We do not sell, rent or trade your personal information to third parties for their own marketing purposes. This is a commitment we have upheld since my66 first launched in 2018.
When you register for or use my66's services, you may provide us with the following information:
While you use the my66 platform, our systems automatically collect certain technical information, including:
My66 uses the personal information collected solely for the following purposes:
| Purpose of Use | Legal Basis | Specific Examples |
|---|---|---|
| Player account management | Contract performance | Registration, login, and identity verification (KYC) |
| Processing financial transactions | Contract performance | Deposits via DuitNow/FPX, withdrawal processing to bank accounts |
| Security & fraud prevention | Legitimate interests | Suspicious activity detection and AML compliance |
| Customer support | Contract performance | Resolving complaints and responding to account enquiries |
| Platform improvements | Legitimate interests | Usage analytics to improve the player experience |
| Marketing Communications | Consent | Promotional notifications and new bonus alerts (opt-out available) |
| Legal compliance | Legal obligation | AML compliance, reporting to authorities |
My66 will not use your information for any purpose beyond those stated above without first obtaining your explicit consent. You may withdraw consent for marketing communications at any time through your account settings or by contacting our customer support.
My66 does not sell, transfer or disclose your personal information to third parties without your consent, except in the circumstances outlined in this section. Every third party we work with is bound by a strict confidentiality agreement and must adhere to data protection standards equivalent to our own policy.
We will not share your information with third-party advertising companies, data brokers, or any organisation intending to use your data for commercial profiling without your explicit consent.
My66 takes data security infrastructure seriously, investing in robust measures to protect your personal information. The technical safeguards we have implemented include:
While my66 takes all reasonable steps to protect your data, no system can guarantee absolute security. In the event of a data breach that materially affects your personal information, my66 is committed to notifying you within 72 hours of confirming the breach, in line with industry best practices.
My66 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us remember your preferences and understand how you use the platform, enabling us to make continuous improvements.
You can manage your cookie preferences through your web browser settings. Disabling mandatory cookies may affect the overall functionality of the my66 platform, including your ability to log in and complete transactions.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices, you have the following rights regarding your personal information held by my66:
You have the right to request a copy of all personal information we hold about you. Requests can be submitted through my66 customer support and will be processed within 30 days.
If your personal information held in my66's systems is inaccurate or out of date, you have the right to request a correction. Certain details can be updated directly within your account settings.
You may request the deletion of your personal data upon account closure, subject to any legal data retention obligations and anti-money laundering requirements.
You may object to the processing of your data for direct marketing purposes at any time. You can unsubscribe from marketing communications through your account settings.
You are entitled to receive a copy of your data in a machine-readable format (JSON or CSV) for transfer to another platform should you choose to do so.
Under certain circumstances, you may request that my66 restrict how we process your data while a dispute or correction request is being resolved.
My66 retains your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or to comply with applicable legal obligations.
| Data Category | Retention Period | Reason |
|---|---|---|
| Active account information | For the duration of the active account | Continuous platform operations |
| Financial transaction records | 7 years after transaction | AML & tax compliance requirements |
| KYC Documents | 5 years after account closure | PDPA compliance & licensing requirements |
| Gaming activity logs | 2 years | Dispute resolution & audit |
| Customer support records | 3 years | Complaint history reference |
| Technical log data | 90 days | Technical troubleshooting |
| Marketing data (with consent) | Until consent is withdrawn | Promotional communications |
Once the applicable retention period has elapsed, data will be securely deleted or fully anonymised so that it can no longer be linked to your identity. Deletion is carried out using methods compliant with NIST SP 800-88 standards.
As a platform that partners with internationally accredited game and service providers, your data may be processed or stored on servers located outside Malaysia. my66 ensures that any such data transfers are carried out with appropriate safeguards in place:
My66 reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. Material amendments will be communicated to you via:
Continued use of the my66 platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you have the right to close your account and request data deletion in accordance with the procedure outlined in Section 7.
Previous versions of this Privacy Policy are available upon request through customer support for reference purposes.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way my66 handles your personal information, please contact our Data Privacy Officer through the following channels:
My66 is committed to responding to all data privacy requests within 30 business days. Should your request be complex or involve a large volume of data, we will provide a more precise processing timeline in our initial response.
A concise overview of the data journey from the moment you register through every play session — with protection built in at every stage.
Your data is encrypted immediately upon registration. Passwords are never stored in plain text – only bcrypt hashes are kept in our secure database.
Transactions via Touch 'n Go, DuitNow, or FPX are processed through PCI DSS-certified payment gateways. my66 receives only transaction confirmation — not your full financial details.
Game activity data is securely logged for dispute resolution and audit purposes. Game providers receive session IDs only, with no personally identifiable information.
Data is retained according to a strict retention schedule. Once the retention period expires, data is securely deleted in accordance with NIST standards or fully anonymised.
Six concrete measures that demonstrate my66's genuine commitment to protecting every player's personal data.
All communication between your device and the my66 platform is secured with 256-bit SSL. Sensitive data within the database is encrypted separately using securely managed keys in accordance with industry standards.
The "least privilege" principle is enforced across my66 – staff can only access the data necessary for their specific job responsibilities. All access to player data is logged and audited on a regular basis.
The my66 Privacy Policy is designed in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct annual compliance reviews to ensure our practices remain aligned with current legislation.
My66 has never and will never sell, rent or trade players' personal information to advertisers or third-party data brokers. Your data belongs to you – it is not a business asset of ours.
You have full control over marketing communications from my66. You can opt out in a single click from your account settings or through customer support – no questions asked and no complicated procedures.
My66's privacy practices and data security measures are regularly audited by independent third parties. Audit findings are used to drive continuous improvements to our data protection systems, keeping our players safer.