Privacy Policy my66 – Personal Data Protection for Malaysian Users

My66 is fully committed to protecting the privacy and personal data of every member. This document clearly explains how we collect, use, store and safeguard your information.

Updated: January 2026 Bahasa Malaysia 256-bit SSL

My66's Six Data Protection Principles

Before reading the full document, here is a summary of the key principles that guide how my66 handles your personal data as a Malaysian member.

🔒

256-bit SSL Encryption

All data transmitted between your device and my66's servers is protected by 256-bit SSL encryption — the same security standard used by major Malaysian financial institutions and banks. Your personal and financial information is never transmitted unprotected.

🚫

No Data Sales

My66 has never sold, rented, or traded members' personal data to any third party for marketing or commercial purposes, and never will. Your information belongs to you, and we fully respect the trust you place in us.

🎯

Minimum Data Collection

My66 only collects personal data that is strictly necessary to manage your account, process financial transactions in MYR, and provide support services. We do not collect excessive or irrelevant information beyond the scope of our services.

✋

User Control Rights

You have the full right to access, correct, download, or request the deletion of your personal data held by my66. Data requests can be submitted to our team at any time via email at support@my66.life and will be processed within 30 days.

🍪

Cookie Usage Transparency

My66 uses cookies to enhance your browsing experience on the platform. We are transparent about the types of cookies used, their purposes, and how you can manage cookie settings in your web browser. You have the option to accept or decline non-essential cookies.

📋

Malaysian Legal Compliance

The my66 Privacy Policy has been developed in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and other applicable legislation in force in Malaysia. We continuously monitor developments in data legislation and update our practices to ensure full compliance at all times.

Important Privacy Notice

By registering for or using the my66 platform, you agree to the collection and use of your information as described in this Privacy Policy. This Policy forms part of the Terms & Conditions my66. For enquiries, contact us at support@my66.life.

1

Introduction & Scope of Privacy Policy

This Privacy Policy is published by my66, an online casino and Sports Betting platform operating under the domain my66.life. This document explains in detail how my66 collects, processes, uses, stores, and protects the personal data provided by our members and website visitors.

My66 takes the privacy of its members very seriously. As a platform serving hundreds of thousands of Malaysian users every day, we understand the weight of the trust you place in us when you register an account, make deposits in MYR using Touch 'n Go eWallet, GrabPay, DuitNow or other local payment methods, and play the variety of games available on our platform.

This Privacy Policy applies to all information collected through the my66.life website, the my66 mobile application where available, and any communications between you and the my66 team, including customer support emails and live chat. It does not apply to third-party websites or services that may be linked from the my66 platform.

Malaysia PDPA: The my66 Privacy Policy is developed in accordance with Malaysia's Personal Data Protection Act 2010, which is the primary legal framework governing the processing of personal data in the context of commercial transactions in Malaysia.

2

Types of Personal Data Collected

My66 collects various types of personal data depending on how you interact with our platform. The following are the categories of data that may be collected:

Data Category Sample Information Mandatory / Optional
Identity Data Full name, national ID number, date of birth, gender Mandatory
Contact Data Malaysian phone number, email address, residential address Mandatory
Financial Data Payment methods (TnG, GrabPay, DuitNow, FPX), transaction history in RM Mandatory
Gaming Data Betting history, games played, wins and losses Automatic
Technical Data IP address, browser type, operating system, access time, cookie data Automatic
Communication Data Support chat records, inbound and outbound emails, user feedback Situation

My66 does not collect sensitive information such as biometric data, health information, or political views. For identity verification purposes, we may request a copy of a valid government-issued ID such as your MyKad or Malaysian passport, but this information is used solely for verification and is stored with the highest level of protection.

3

How my66 Collects Personal Data

My66 collects your personal data through several key channels. Understanding how data is collected helps you make more informed decisions about the information you share with us.

  • New account registration: When you register a my66 account, you voluntarily provide basic identity information such as your name, Malaysian phone number and email address. This information is required to create and verify your account.
  • Financial transactions: When you make a deposit using Touch 'n Go eWallet, GrabPay, DuitNow, FPX via Maybank2u or CIMB Clicks, Boost, or ShopeePay, our system records the transaction details — not your payment account credentials — for record-keeping and fraud prevention purposes.
  • Gaming activity: The my66 platform automatically records gaming activity data, including the games you access, bet amounts, wins, and losses. This data is necessary to ensure account balance accuracy and to resolve any disputes.
  • Automatic browsing data: Like most websites, my66 automatically collects certain technical information when you visit our platform, including IP address, browser type, operating system, and pages visited.
  • Communications with support: When you contact the my66 support team via email at support@my66.life or through live chat, we retain records of those communications for ongoing support and quality training purposes.
  • Identity verification: In certain situations, such as large withdrawals or suspicious account activity, my66 may request that you submit additional identity verification documents directly to our team.
4

Purpose of Personal Data Use

My66 uses collected personal data solely for legitimate and necessary purposes. The following are the primary purposes for which your data is used:

  • Account management: Creating and managing your my66 account, verifying your identity, processing secure logins, and maintaining your preferences across the platform.
  • Financial transaction processing: Processing MYR deposits via local payment methods, crediting winnings to your account, and handling withdrawal requests to your preferred payment method.
  • Gaming services provision: Ensuring all games function correctly for your account, maintaining accurate betting records, and resolving any disputes related to game outcomes.
  • Customer support: Responding to enquiries, resolving technical issues, and processing complaints or appeals submitted by members through my66 support channels.
  • Security and fraud prevention: Detecting and preventing unauthorised access, fraudulent activity, multiple account usage, and any misuse of the platform that violates my66's Terms & Conditions.
  • Legal compliance: Meeting legal obligations related to anti-money laundering (AML), know your customer (KYC), and applicable reporting requirements.
  • Product improvement: Analysing usage patterns in aggregate and anonymised form to understand how members use the my66 platform and to make meaningful improvements based on real data.
  • Service communications: Sending important notifications related to your account, policy updates, relevant promotions, and security information you need to be aware of.

Marketing Communication Preferences: If you no longer wish to receive promotional emails or bonus notifications from my66, you can unsubscribe at any time by clicking the "unsubscribe" link in any of our promotional emails or by contacting support@my66.life. Opting out of promotional emails does not affect the receipt of important notifications related to your account.

5

Sharing Data with Third Parties

My66 does not sell, rent or disclose members' personal data to third parties for marketing purposes without your consent. However, there are limited situations where my66 may need to share your data with certain parties for legitimate operational purposes:

  • Payment providers: my66 works with licensed payment gateway providers, including processors for Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay. Data sharing is limited to the minimum information required to process transactions in MYR and is governed by strict confidentiality agreements.
  • Game providers: To provide third-party games on the my66 platform, the necessary account information may be shared with licensed game providers. Such sharing is strictly limited to data required for technical functionality only.
  • Legal authorities: my66 will disclose personal data to the relevant authorities when legally required to do so by court order, legislation, or directive from an applicable regulatory body. This includes cooperation with investigations related to anti-money laundering where required.
  • Technical service providers: my66 works with certain technology service providers for functions such as cloud hosting, analytics, and cybersecurity. All such third parties are bound by data processing agreements that ensure your data is protected to the same standards we apply.

In all instances of data sharing, my66 ensures that the receiving party has adequate data protections in place and uses the data solely for the specific agreed purpose. Any third party granted access to my66 member data is prohibited from using it for any other purpose.

6

Data Security Measures

My66 continuously invests in the latest security technologies and practices to protect members' personal data from unauthorised access, disclosure, alteration or loss. The key security measures we have in place are:

  • Data encryption in transit: All communications between your browser or app and the my66 servers are encrypted using TLS 1.3 protocol with a 256-bit SSL certificate. This ensures that any data you transmit cannot be read by unauthorised parties.
  • Data encryption at rest: Sensitive data stored in the my66 database is encrypted using robust encryption standards. Account passwords are never stored in plain text — they are processed through a one-way hashing function that cannot be reversed.
  • Access controls: Access to member data within my66's internal systems is restricted to staff who require it to perform their job functions. All access is logged and monitored, and access privileges are reviewed on a regular basis.
  • Continuous security monitoring: The my66 system is monitored around the clock by automated threat detection tools and an in-house cybersecurity team. Any suspicious activity or system anomaly is immediately flagged as an alert for prompt investigation.
  • Regular security testing: my66 conducts regular penetration testing and independent security audits to identify and address any system vulnerabilities before they can be exploited.

Shared Responsibility: While my66 implements comprehensive security measures, the security of your account also depends on your own actions. Use a strong, unique password for your my66 account, do not share your login credentials with anyone, and contact us immediately at support@my66.life if you suspect any unauthorised activity on your account.

7

Your Personal Data Rights

As a my66 member and data subject under Malaysia's Personal Data Protection Act 2010, you have several important rights regarding your personal data held by my66. These rights are explained below:

Right of Access

You have the right to request and receive a copy of the personal data held by my66. We will provide this information in a readable format within 30 days of receiving your request.

Right to Correction

If you find that the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Updates can be made directly through your account settings or by contacting my66 support.

Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data from my66's systems. This right is subject to our legal obligations to retain certain records for the period prescribed under Malaysian law.

Right to Object

You have the right to object to the processing of your personal data for specific purposes, such as marketing communications. Objections to direct marketing will be honoured without question upon receipt of your request.

Right to Data Portability

You have the right to receive the personal data you have provided to my66 in a structured, machine-readable format so that it can be transferred to another service provider should you choose to do so.

Right to Restrict Processing

In certain circumstances, such as when the accuracy of your data or the validity of its processing is in dispute, you have the right to request that processing of your data be temporarily restricted until the matter is resolved.

To exercise any of the above rights, please contact the my66 privacy team by email at support@my66.life, stating the type of request and the relevant account details. We will respond to all data rights requests within 30 business days of receipt. In complex cases, this period may be extended to 60 days, with prior notice given to you.

8

Cookie Policy

My66 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit a website.

The types of cookies used by my66 are as follows:

  • Essential Cookies  These cookies are essential for the core functionality of the my66 platform, including maintaining your login session, remembering items in your betting slip, and ensuring financial transactions are processed securely. The platform will not function properly without them and they cannot be disabled.
  • Analytical Cookies  These cookies help my66 understand how members use the platform by collecting information such as the most frequently visited pages, time spent in each section, and points where users exit the platform. This data is analysed in aggregate and anonymised form to help us improve the user experience.
  • Functional Cookies  These cookies remember your preferences and settings on the my66 platform, such as your preferred language, display settings, and game preferences. This enables a more personalised experience each time you use the platform.

You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality of some features on the my66 platform. For guidance on managing cookies in your browser, refer to the help documentation for your browser of choice (Chrome, Firefox, Safari, Edge).

9

Data Retention Period

My66 retains members' personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. Our general data retention policy is as follows:

  • Active account data: Retained for as long as your account is active and for a reasonable period after account closure to resolve any outstanding issues.
  • Financial transaction records: Retained for a minimum of seven (7) years following each transaction, in accordance with Malaysian anti-money laundering legislation and financial audit requirements.
  • KYC records and identity verification: Retained for the period required under applicable Malaysian law, typically five (5) years after the business relationship ends.
  • Game activity logs: Retained for two (2) years for dispute resolution purposes and to ensure game integrity.
  • Support communication records: Retained for two (2) years for quality control purposes and support history reference.
  • Technical log data: Retained for ninety (90) days for security and threat detection purposes.

Once the retention period has expired and there is no longer any legal or operational requirement to keep the data, my66 will delete or destroy it in a secure and unrecoverable manner.

10

Child Protection

The my66 platform is intended exclusively for adults aged 18 and above, and my66 does not knowingly collect personal data from individuals under the age of 18. Should my66 discover that personal data belonging to a child under 18 has been inadvertently collected, we will take immediate steps to delete that information from our systems and close the account in question.

Note for Parents & Guardians: If you believe your child under the age of 18 has registered a my66 account or is using this platform, please contact us immediately at support@my66.life. We will take prompt action to close the account and delete all associated data.

11

Privacy Policy Amendments

My66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or technological developments. When material amendments are made, my66 will notify members via their registered email or through an in-platform notification at least seven (7) days before the changes take effect.

The "Updated" date shown at the top of this document will always reflect the date of the most recent amendment. It is your responsibility as a my66 member to review this Privacy Policy periodically. Continued use of the my66 platform after any Privacy Policy amendment comes into effect constitutes your acceptance of the updated version.

12

Contact the my66 Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or how my66 handles your personal data, we encourage you to reach out to us. The my66 privacy team is dedicated to responding to all privacy-related enquiries thoroughly and as promptly as possible.

my66 Privacy Email: support@my66.life
Please include "Privacy Inquiry" in your email subject line. We operate 24 hours a day, 7 days a week and will respond to all privacy-related requests within 48 business hours. For more complex data rights requests, the response period is 30 days.

Why Data Privacy Matters for my66 Members in Malaysia

When you use the my66 platform to play slots, bet on e-sports like MPL Malaysia, sit at a live dealer blackjack table, or make any financial transaction, you naturally share personal information with us. This is simply the nature of using any online service. What sets my66 apart is how we handle that trust — not by merely meeting the minimum legal requirements, but by genuinely respecting your privacy as a core value of our business.

Many Malaysians are unaware of their rights under the Personal Data Protection Act 2010 (PDPA), which has been in force for over a decade. The PDPA gives you the right to know what data is collected about you, why it is collected, who it is shared with, and how long it is retained. my66 believes every member deserves full transparency on these matters — which is why we publish a detailed, easy-to-understand Privacy Policy in Bahasa Malaysia — not just a translated wall of legal text that leaves you more confused than when you started.

One aspect of privacy that users often overlook relates to payment methods. When you use Touch 'n Go eWallet, GrabPay, DuitNow or FPX to deposit into your my66 account, you are sharing sensitive financial transaction information. my66 does not store your account numbers or payment app login credentials — all payment processing is handled directly through secure payment gateways, and my66 only receives confirmation that the payment was successful along with the MYR amount to be credited to your account. This is standard industry practice that protects both parties.

In the context of online gaming, activity data such as betting history, games played and win records are among the most sensitive information my66 holds. We retain this data primarily to ensure account balance accuracy, resolve any disputes that may arise, and meet responsible gaming compliance requirements. We do not use your gaming activity data to build personal profiles for third-party marketing purposes or for any commercial use outside the scope of my66's operations.

Cybersecurity incidents in Malaysia have come under increasing scrutiny as data breach cases involving various companies and institutions continue to make the news. my66 takes these threats very seriously and continually invests in the latest security technologies, regular vulnerability testing, and staff training on sound data security practices. We also have clearly defined incident response procedures — in the event of a data breach affecting our members, we are committed to notifying affected members and the relevant authorities within the timeframe required by law.

Ultimately, my66's Privacy Policy is a contract of trust between us and you as a member. When you register a my66 account and use our platform for online entertainment, you are entrusting us with your valuable personal information. We are committed to honouring that trust by handling your data responsibly, transparently and securely at all times. If you have any concerns or questions about your privacy at my66, our door is always open — reach us at support@my66.life and we will respond with care. For more information on responsible gaming, visit Responsible Gaming page us.

Frequently Asked Questions about the my66 Privacy Policy

No, my66 does not sell, rent, or share members' personal data with advertising companies or any third party for marketing purposes without your consent. Your data is only shared with parties that are genuinely involved in delivering my66's services to you — such as payment providers processing MYR transactions — and all such sharing is subject to strict confidentiality agreements.

You may submit a data deletion request by emailing us at support@my66.life with "Data Deletion Request" in the subject line. Please include your full name and my66 account number. Please note that the right to erasure is subject to my66's legal obligations — certain financial records must be retained for seven years in accordance with Malaysian legal requirements. We will inform you of which data can be deleted immediately and which must be retained, along with the reasons.

No. my66 does not store credit card details, bank account numbers, or login credentials for payment applications such as Touch 'n Go eWallet, GrabPay, or DuitNow. All payment processing is handled through secure, licensed third-party payment gateways. my66 only receives confirmation that a payment was successful and the MYR amount to be credited to your account. Sensitive payment data is handled directly by licensed payment providers in accordance with PCI DSS security standards.

When you close your my66 account, my66 will cease processing your data for routine operational purposes such as marketing communications. However, certain records must be retained for periods specified under Malaysian law — in particular, financial transaction records (seven years) and identity verification records (five years). These are mandatory requirements under anti-money laundering legislation and cannot be waived. Once the mandatory retention period has elapsed, all your data will be securely deleted from my66's systems.

my66 has a comprehensive data security incident response procedure in place. In the event of a data breach involving members' personal data, my66 is committed to: (1) identifying and containing the breach as quickly as possible, (2) assessing the scope and impact of the breach, (3) notifying affected members within the timeframe required by applicable law, (4) reporting to the relevant authorities in Malaysia where required, and (5) taking remedial steps to prevent a similar incident from occurring in the future. We regard transparency in such situations as a duty to our members.

Your Data Is Safe – Register with my66 & Start Playing Today

You now know exactly how my66 protects your privacy. Join over 500,000 Malaysian members who play with confidence at my66 — a platform that puts your security and privacy first, every time.

Touch 'n Go GrabPay DuitNow FPX Boost ShopeePay

256-bit SSL • Data protected • Transactions in MYR • 18 years and above only

Bahasa Melayu