66zz Privacy Policy – Malaysian Member Personal Data Protection

This Privacy Policy ("Policy") is published by 66zz ("we", "platform", "company") and applies to all individuals ("you", "member", "user") who access or use the website, mobile application, or any services offered through the official domain https://66zz.world.

This policy describes the privacy practices of 66zz regarding the collection, use, disclosure, transfer, storage, and protection of your personal data. "Personal data" in this context means any information that can identify you directly or indirectly as a specific individual, as defined under Malaysia's Personal Data Protection Act 2010 (PDPA).

By using the platform 66zz, you acknowledge that you have read and understood this Privacy Policy and agree to be bound by its terms. If you do not agree with any part of this policy, please stop using the platform and contact us to close your account if applicable.

66zz collects various types of personal data depending on how you interact with our platform. The following is a detailed table of the data categories collected:

66zz does not collect sensitive information such as biometric data, medical records, religious beliefs, or political views. We also do not request credit card numbers directly, as all transactions are processed through registered third-party payment providers.

Your personal data is collected by 66zz through several key channels. It is important that you understand these collection points so you can make informed decisions about the information you share with us:

• Account registration – When you fill in the registration form 66zz, we collect your name, phone number, and other basic information needed to create your account.
• KYC verification process – When you are required to verify your identity (particularly for withdrawals exceeding RM 5,000), we collect documents such as a copy of your MyKad and bank statement.
• Financial transactions – Each time you make a deposit using Touch 'n Go, DuitNow, GrabPay, ShopeePay, Boost, or FPX Maybank2u / CIMB Clicks, that transaction record is stored in our system.
• Platform usage – Our system automatically records how you interact with the platform, including games played, session duration, and buttons clicked.
• Cookies and tracking technologies – The 66zz uses cookies to enhance your browsing experience. More information is available in the Cookie Policy section.
• Support communications – When you contact our customer support team 66zz, the contents of that conversation are retained for service quality and dispute resolution purposes.

66zz uses the collected personal data for legitimate and necessary purposes in order to operate the platform and provide the best service to our members. The primary purposes for data use are as follows:

If 66zz wishes to use your data for any purpose not stated above, we will obtain your explicit consent beforehand.

66zz reaffirms that we do not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. However, there are limited circumstances where we need to share data with certain third parties in order to operate the platform:

• Payment provider – Required transaction information is shared with payment gateway providers that handle DuitNow, Touch 'n Go, GrabPay, ShopeePay, Boost, and FPX to process your deposits and withdrawals.
• Game providers – Non-personally identifiable account identifiers are shared with third-party game providers to allow you to access their games through the 66zz.
• Technology provider – The cloud infrastructure and IT service providers we use may access data in a limited capacity solely to perform technical functions.
• Legal authorities – We comply with all court orders and lawful requests from Malaysian law enforcement agencies where required by law.
• Identity verification – PDPA-compliant, registered third-party KYC service providers are used to verify member identities during high-value withdrawal processes.

Members' personal data 66zz is stored on secure servers with multi-layered protection. We apply a combination of technical and organisational measures to keep your data safe at all times:

• Encryption in transit – All communications between your device and the 66zz encrypted using TLS 1.3 protocol with 256-bit keys.
• Data-at-rest encryption – Sensitive data stored in our databases is encrypted using AES-256 standards.
• Internal access controls – Only authorised personnel who require access to carry out their duties are permitted to view member personal data, and such access is fully controlled and logged.
• Regular security audits – 66zz conducts regular penetration testing and security audits performed by independent third parties.
• Retention period – Active account data is retained for as long as your account remains active. Following account closure, basic data is kept for 7 years as required by anti-money laundering laws, after which it will be deleted or anonymised.

Although 66zz takes all reasonable steps to protect your data, no security system is entirely foolproof. In the event of a data breach affecting your information, we are committed to notifying you within the timeframe required under Malaysia's PDPA.

As a data subject under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have several rights that you may exercise at any time by contacting 66zz:

To exercise any of the above rights, please submit a written request to 66zz via email at support@66zz.world, stating the right you wish to exercise and your account information. We will process your request within 21 calendar days.

Website 66zz uses cookies – small text files stored on your device when you visit our website. Cookies help us remember your preferences, understand how you use the platform, and improve your overall browsing experience.

Optional cookies can be managed through your browser settings. Please note that disabling certain cookies may affect platform functionality 66zz. Mandatory cookies cannot be disabled without affecting core login and security functionality.

Platform 66zz may contain links to third-party services such as game providers and payment gateways. While we only work with third parties we trust, 66zz is not responsible for the privacy practices of those parties.

Different privacy policies may apply to third-party websites or services. You are encouraged to read their respective privacy policies before providing any personal information to them. Your interactions with third-party providers are a direct relationship between you and them, outside the scope of this Privacy Policy.

66zz reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. The "Updated" date at the top of this page will always show the latest version currently in effect.

For significant amendments that affect how we use your data, 66zz will provide at least 14 days' notice before any amendments take effect, via in-platform notifications or email to your registered address. Continued use of the platform after such notice constitutes your acceptance of the revised policy.

If you have any questions, concerns, or wish to exercise any of your privacy rights regarding the use of your personal data by 66zz, please reach out to us through the following channels. Our privacy team is available to assist you in Bahasa Melayu: