Official Documents

My66 Privacy Policy – Member Personal Data Protection

Your privacy is our priority. This document clearly explains how my66 collects, uses, stores, and protects your personal information as a member of our platform in Malaysia.

Updated: January 2026 SSL 256-bit Encrypted Data No Data Sales

my66 Privacy Commitment: We do not sell, rent, or disclose your personal data to third parties without your consent, except as stated in this policy or as required by law. This Privacy Policy should be read together with Terms and Conditions my66.

Types of Information We Collect

To provide a safe and high-quality online entertainment platform, my66 collects certain categories of information from members and users. We only collect information that is strictly necessary for the stated purposes.

Information you provide directly:

  • Registration information — Full name, date of birth, identification card number, email address, phone number, and residential address.
  • Financial information — Bank account details, bank name, account number, and e-wallet information used for deposits and withdrawals.
  • Identity verification documents — Copies of identification cards, bank statements, or other supporting documents requested as part of the KYC process.
  • Communications — Records of conversations with our customer support team via live chat or other communication channels.

Information collected automatically:

  • Device data — Device type, operating system, phone model, screen resolution, and unique device identifier.
  • Network data — IP address, browser type, internet service provider, and general geographic region.
  • Gaming activity data — Records of gaming sessions, betting history, win statistics, and platform usage patterns.
  • Transaction data — Complete records of all deposits, withdrawals, and balance movements in your account.

my66 does not collect sensitive information such as biometric data, political views, or religious beliefs. All information we collect is solely for platform operations and legal compliance.

How We Use Your Information

The data we collect is used responsibly for the following purposes only:

Purpose of Use Types of Data Used Requirements
Member account management Registration information, email Mandatory
Deposit & withdrawal processing Financial information, identity Mandatory
Identity verification (KYC) Identity documents, address Mandatory (legal compliance)
Security & fraud prevention IP, device, activity patterns Mandatory
Customer support Communication records, account Mandatory
Promotions & personalised offers Game history, preferences Optional (withdrawable)
Platform improvements Anonymous usage data Legitimate interests

My66 does not use your data to make automated decisions that materially affect your rights without human oversight. Any significant decisions involving your account will be reviewed by our team.

Personal Data Processing Basis

My66 processes your personal data on the following lawful bases:

  • Contract performance — Processing necessary to provide platform services to you as a registered member, including account management, deposits, and withdrawals.
  • Legal Obligations — Processing required by applicable law, including anti-money laundering (AML) requirements and identity verification (KYC).
  • Legitimate interests — Processing for platform security, fraud prevention, and service improvement purposes, where our interests do not override your privacy rights.
  • Consent — For optional purposes such as marketing communications and personalised offers, we rely on your consent, which can be withdrawn at any time.

You have the right to withdraw consent for consent-based processing at any time without affecting the validity of processing carried out prior to that withdrawal.

Information Sharing & Disclosure

My66 does not sell or rent your personal data to any third party for their own marketing purposes. We only share your information in the following circumstances:

  • Payment service providers — Payment gateways and e-wallet providers required to process your financial transactions. They are bound by strict confidentiality agreements and may only use your data for the specified purposes.
  • Game providers — Game software companies that provide slots, live casino, and other games on the my66 platform. Data sharing is limited to what is necessary for game functionality only.
  • Regulatory authorities — When required by law, court order, or direction from a competent authority, we will disclose the relevant information.
  • Technical service providers — Cloud infrastructure providers, analytics services, and cybersecurity tools that help us operate the platform safely and efficiently.
  • Business transfers — In the event of a merger, acquisition, or asset sale, your data may be transferred as part of that transaction with reasonable notice to you.

All third parties who receive your personal data from my66 are bound by data processing agreements that require them to protect your information in accordance with the security standards we set.

Data Security Measures

Protecting your data is more than a legal obligation for us — it is a responsibility we take seriously. my66 implements multiple layers of security to keep your information safe:

  • 256-bit SSL Encryption — All communications between your device and my66 servers are encrypted using the latest TLS protocol, ensuring data cannot be intercepted in transit.
  • Data encryption at rest — Personal and financial data stored in our databases is encrypted using industry-standard encryption algorithms.
  • Tiered access controls — Only staff with specific authorisation may access members' personal data, and all access is logged for audit purposes.
  • 24/7 security monitoring — Intrusion detection systems and anomaly monitoring operate around the clock to detect and respond to security threats.
  • Periodic penetration testing — We conduct regular security assessments with independent cybersecurity experts to identify and address vulnerabilities before they can be exploited.
  • Two-factor authentication (2FA) — Members are encouraged to enable 2FA for an additional layer of account protection.

While we implement robust security measures, no system can guarantee 100% absolute security. You also play an important role by keeping your password confidential and not sharing your login credentials.

Cookies & Tracking Technology

My66 uses cookies and similar technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential cookies — Required for core platform functions such as login, gaming sessions, and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance cookies — Collects anonymised information about how users interact with the platform, helping us identify areas for improvement.
  • Functional cookies — Remembers your preferences such as language, display settings, and last location within the platform for a smoother experience.
  • Analytics cookies — Helps us understand aggregated platform usage patterns to make better improvement decisions.

You can manage your cookie settings through your browser at any time. Please note that disabling certain cookies may affect the functionality of the my66 platform. Third-party cookies from our game providers may also be placed during gaming sessions, and their use is subject to the respective provider's privacy policy.

Data Retention & Deletion Period

My66 retains your personal data only for as long as necessary for the stated purposes or as required by law:

  • Active account data — Retained for the duration your account is active and for an additional period after account closure for compliance purposes.
  • Financial transaction records — Retained for a minimum of 7 years after the transaction date in accordance with anti-money laundering legal requirements.
  • KYC Documents — Retained for a minimum of 5 years after the business relationship ends or as required by the relevant regulatory authority.
  • Support communication logs — Retained for 3 years for dispute resolution and service quality improvement purposes.
  • Cookie and analytics data — Aggregated anonymised data may be retained indefinitely for platform improvement purposes.

Once the retention period has lapsed and there is no legal obligation to retain the data, my66 will securely delete or anonymise it using methods that prevent recovery.

Your Privacy Rights as a Member

As a my66 member, you have the following rights regarding your personal data. We are committed to making it easy for you to exercise these rights:

Right of Access

You have the right to obtain a copy of the personal data we hold about you within 30 days of your request.

Right to Rectification

If any of your data is inaccurate or incomplete, you have the right to request prompt correction.

Right to Erasure

You may request the deletion of your data, subject to applicable legal retention obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes or based on our legitimate interests.

Right to Restriction

In certain circumstances, you may request that we restrict the processing of your data while an issue is being resolved.

Right to Portability

You may request your data in a machine-readable format for transfer to another platform where applicable.

To exercise any of the above rights, contact our privacy team via customer support. We will process your request within 30 working days and may require identity verification beforehand.

KYC Process & Legal Compliance

As a responsibly operated platform, my66 complies with legal requirements relating to anti-money laundering (AML) and counter-terrorism financing (CTF). Our KYC process is designed to protect all members and the platform from unlawful activity:

  • Identity verification is required before your first withdrawal is processed or when your cumulative transaction value reaches a specified threshold.
  • Submitted KYC documents are stored securely with full encryption and are only accessible by authorised compliance personnel.
  • My66 does not use your KYC documents for any purpose other than identity verification and legal compliance.
  • In situations where we are legally required to report suspicious transactions to the authorities, we will do so without prior notice to you, in accordance with legal requirements.

All KYC data is stored on segregated servers with strict access controls. Original documents are never stored in unencrypted form and access is automatically audited.

Amendments to the Privacy Policy

My66 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or new platform features. Our notification procedure is as follows:

  • Members will be notified of material changes via in-platform notifications or email at least 14 days before taking effect.
  • The "Updated" date at the top of this document will always reflect the latest version currently in effect.
  • Previous versions of the Privacy Policy are retained and can be requested via customer support for reference.
  • Continued use of the platform after the amendment effective date is considered acceptance of the updated policy.

We encourage you to review this page periodically. If you have any questions about the changes made, our team is ready to assist.

Contact Our Privacy Team

If you have any questions, concerns, or complaints regarding your privacy and personal data protection at my66, we are here to help:

  • Live customer support — Use the in-platform live chat function for the fastest response, available 24 hours a day, 7 days a week.
  • Privacy email — Contact us at [email protected] for specific data privacy inquiries.
  • Response time — We are committed to responding to all privacy-related inquiries within 5 working days and data rights requests within 30 days.

For personal data issues that cannot be resolved directly with us, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.

Why Your Privacy Is Safe with my66

We do more than comply with the law — we build trust through concrete actions in protecting every piece of information you entrust to us.

Bank-Grade Encryption

The same 256-bit SSL technology used by the world's leading banking institutions protects every data exchange between you and my66's servers. No sensitive data travels in unencrypted form.

No Live Data Sales

My66 has never and will never sell your personal data to advertisers, data brokers, or any third party for profit. Your data is used solely to operate the platform.

Full Control in Your Hands

You may access, correct, or request deletion of your data at any time. Marketing communication preferences are also entirely in your hands — enable or disable them as you wish.

Minimum Data Collection

We only collect information that is genuinely necessary for platform functionality and legal compliance. No excess data is collected simply because we can — that is our firm data minimisation principle.

24/7 Security Monitoring

Our security team and automated systems monitor the platform around the clock to detect any suspicious activity or unauthorised attempts to access member data.

Regular Security Audits

Our infrastructure and security practices are regularly assessed by independent cybersecurity experts. Audit findings are used for the continuous improvement of our data protection systems.

Trusted by Malaysian Members

Join my66 — A Platform That Respects Your Privacy

Join my66 today and enjoy a safe, fair online entertainment experience that fully respects your privacy. Your data is protected — all you need to focus on is the fun.

256-bit SSL Encrypted Data
No Data Sales
Secure KYC
24/7 Privacy Support
Bahasa Melayu