play666 Privacy Policy

1. Who We Are

play666 is an internationally licensed online gaming platform operating at play666.lat. For the purposes of this Privacy Policy, play666 is the data controller responsible for the personal data of Members and visitors to the Platform.

play666 is built for the Malaysian market, with English as the primary service language and Malaysian Ringgit (MYR) as the default transaction currency. Our platform serves players across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, Ipoh, and beyond.

For all privacy-related enquiries, our Data Protection contact is reachable at [email protected].

2. Scope of This Policy

This Privacy Policy applies to all personal data collected and processed by play666 in connection with:

• Registration and maintenance of a play666 Member account.
• Use of any gaming services on the Platform, including sportsbook, live casino, slots, lottery, and table games.
• Deposit and withdrawal transactions processed via play666's accepted payment methods.
• Communications between Members and play666 support staff via live chat, email, or any other channel.
• Visits to play666.lat, whether or not the visitor holds a registered account.

This Policy does not apply to third-party websites, services, or applications that may be referenced or linked from the Platform. play666 is not responsible for the privacy practices of third parties.

3. Data We Collect

play666 collects personal data through several channels. The categories and specific data points collected are described below.

play666 does not collect full card numbers, CVV codes, or complete bank account numbers. Payment processing involving sensitive financial data is handled by PCI-DSS compliant third-party payment processors.

4. How We Use Your Data

play666 uses the personal data collected for the following purposes:

• Account management: To create, maintain, verify, and secure your play666 account; to process login authentication; and to enable access to Platform Services.
• Service delivery: To process bets, settle winnings, execute deposits and withdrawals, and operate the gaming services you access through play666.
• Regulatory compliance: To fulfil know-your-customer (KYC) obligations, anti-money laundering (AML) screening requirements, and any other legal obligations applicable under international gaming licence conditions.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, unauthorised access, and other prohibited conduct described in the play666 Terms & Conditions.
• Customer support: To respond to support queries, resolve disputes, and improve the quality of play666's service delivery based on interaction data.
• Responsible gaming: To enforce deposit limits, session time limits, loss limits, and self-exclusion settings established by Members; and to identify at-risk gambling behaviour where appropriate.
• Communications: To send transactional notifications (account activity, deposit confirmations, withdrawal status), security alerts, and — where you have opted in — promotional offers related to play666.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, and enhance the performance and content of the play666 Platform.

5. Legal Basis for Processing

play666 processes personal data under the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to perform the contract between play666 and a registered Member — including account operation, game delivery, payment processing, and dispute resolution.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations under play666's international gaming licence conditions.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement where these interests are not overridden by Members' data protection rights.
• Consent: Processing for optional marketing communications and certain cookies, where you have provided specific, informed consent. Consent may be withdrawn at any time.

6. Data Sharing & Disclosure

play666 does not sell, rent, or trade personal data. We share personal data only in the following circumstances:

• Payment processors: Personal and financial data necessary to process deposits and withdrawals is shared with our PCI-DSS compliant payment service providers, including eWallet operators (Touch n Go, Boost, GrabPay) and FPX banking partners. These processors are bound by data processing agreements.
• Game providers: Where required by specific game software, anonymised or pseudonymised session data may be shared with licensed game providers (e.g., Pragmatic Play, PG Soft) to facilitate game operation. Personally identifiable data is not shared with game providers beyond technical session tokens.
• Regulatory and legal authorities: play666 will disclose personal data to regulatory bodies, law enforcement, or other legal authorities where required by applicable law, court order, or our licensing obligations — including AML reporting requirements.
• Fraud prevention services: play666 may share data with third-party identity verification and fraud detection services to support KYC compliance and detect prohibited conduct.
• Business succession: In the event of a merger, acquisition, or sale of substantially all of play666's assets, personal data may be transferred to the successor entity subject to equivalent privacy protections.

All third parties who process personal data on behalf of play666 are required to implement appropriate technical and organisational security measures and to process data only as instructed by play666.

7. Cookies & Tracking Technologies

play666 uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help play666 recognise returning visitors, maintain session state, and analyse Platform usage.

The types of cookies used by play666 include:

• Essential cookies: Required for core Platform functionality including login session management, security tokens, and regional preference settings. These cannot be disabled without impairing Platform use.
• Functional cookies: Store your preferences such as language settings, interface customisations, and responsible gaming tool configurations across sessions.
• Analytics cookies: Collect anonymised data about how Members use the Platform — pages visited, time spent, features used — to help play666 improve the service. This data does not identify individual users.
• Marketing cookies: Used only where you have provided consent, to deliver relevant promotional content and measure the effectiveness of play666's marketing communications.

You may manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use the play666 Platform normally.

8. Data Retention

play666 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Active accounts: Personal data is retained for the duration of the account's active status plus a post-closure period as required by applicable regulations.
• Closed accounts: Following account closure, play666 retains identity verification records, transaction history, and gaming activity logs for a minimum of five (5) years to meet AML and gaming regulatory obligations.
• Support communications: Live chat logs and email correspondence are retained for up to three (3) years for quality assurance and dispute resolution purposes.
• Marketing data: Data collected solely for marketing purposes is retained until consent is withdrawn or for a maximum of three (3) years following the last account interaction, whichever is sooner.
• Technical logs: Server access logs and session data are retained for up to twelve (12) months for security monitoring purposes.

9. Data Security

play666 implements technical and organisational security measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and play666's servers.
• Encryption of sensitive personal data at rest within play666's database infrastructure.
• Role-based access controls restricting access to personal data to authorised play666 personnel on a need-to-know basis.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Two-factor authentication options for Member accounts to reduce unauthorised access risk.
• Monitoring systems for the detection of anomalous access patterns or potential security incidents.

While play666 takes all reasonable steps to protect your data, no system is entirely immune to security risks. You are encouraged to use a strong, unique password for your play666 account and to notify us immediately if you suspect unauthorised activity.

10. Your Rights

As a play666 Member, you have the following rights with respect to your personal data, subject to applicable legal limitations:

• Right of access: You may request a copy of the personal data play666 holds about you. play666 will respond to verified access requests within 30 days.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held by play666. Basic profile data (name, email, address) can be updated directly within your account settings.
• Right to erasure: You may request deletion of your personal data where play666 no longer has a lawful basis for processing it. Note that regulatory retention obligations may prevent full deletion of certain records (e.g., AML-required transaction history).
• Right to restrict processing: You may request that play666 restrict the processing of your data in certain circumstances, such as when the accuracy of the data is contested.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes.

11. International Data Transfers

play666 operates as an internationally licensed platform. As a result, your personal data may be processed and stored on servers located outside of Malaysia. Where data is transferred internationally, play666 ensures that appropriate safeguards are in place, including contractual data processing agreements with third-party processors that reflect internationally recognised data protection standards.

By using the play666 Platform, Malaysian Members acknowledge and consent to the transfer of their personal data to play666's processing infrastructure, which may be located in multiple jurisdictions, for the purposes described in this Privacy Policy.

12. Children's Privacy

The play666 Platform is strictly intended for individuals aged 21 and above. play666 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you believe that play666 has inadvertently collected personal data from an underage individual, please contact us immediately at [email protected].

13. Changes to This Privacy Policy

play666 reserves the right to update this Privacy Policy at any time. When material changes are made, play666 will notify registered Members via the email address associated with their account and/or through a prominent notice on the Platform prior to the changes taking effect.

The "Last updated" date at the top of this Policy reflects the date of the most recent revision. We encourage Members to review this Policy periodically to stay informed about how play666 handles personal data. Continued use of the Platform following notification of changes constitutes acceptance of the revised Privacy Policy.

14. Contact & Data Requests

For all privacy-related enquiries, data subject access requests, or complaints regarding play666's handling of your personal data, please contact us using the following details:

• Email: [email protected] — please include "Privacy Request" in your subject line for faster routing.
• Live Chat: Available 24/7 within the play666 Platform. For formal data requests, email is preferred as it creates a written record.
• Response time: play666 aims to acknowledge all privacy requests within 3 business days and provide a substantive response within 30 calendar days.

For queries relating to play666's Terms of Service or responsible gaming tools, please refer to the Terms & Conditions and Responsible Gaming pages respectively.