Updated: 1 January 2026

666i Privacy Policy — Personal Data Protection for Malaysian Players Under PDPA 2010

At 666i, your privacy is not merely a legal requirement we fulfil at a minimum — it is a commitment we take seriously. This Privacy Policy explains transparently how we collect, use, store, and protect your personal data as a member of the 666i platform. All processes comply with Malaysia's Personal Data Protection Act 2010 (PDPA).

Version 3.1 — Effective 1 Jan 2026
Bahasa Melayu

Compliant with Malaysia's PDPA 2010  |  256-bit SSL  |  No Data Sales

6 Data Protection Commitments from 666i to Malaysian Players

Here is exactly how 666i protects the privacy and personal data of every member — not just a promise, but concrete practice.

Compliance
Full Compliance with Malaysia's PDPA 2010

All collection, storage, and use of 666i members' personal data is carried out in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This is not merely a formality — we maintain internal procedures that are regularly updated to ensure ongoing compliance with Malaysian legal requirements.

Privacy
Your Data Is Never Sold to Any Party

666i has never sold, rented, or traded members' personal data to any third party for marketing or commercial purposes, and never will. Your data is collected solely for platform operational purposes and will not be used beyond the scope stated in this Privacy Policy.

Security
256-bit SSL Encryption for All Data

All data transmitted between your web browser or mobile app and 666i's servers is protected by 256-bit SSL encryption — the same security standard used by major Malaysian banking institutions such as Maybank and CIMB. Your data cannot be intercepted or read while in transit.

Controls
You Have the Right to Access & Correct Your Data

As a data subject under Malaysia's PDPA, you have the full right to request access to personal data held by 666i, to correct any inaccurate information, and in certain circumstances, to request deletion of your data. 666i will process such requests within 21 working days.

Storage
Clear & Reasonable Data Retention Limits

666i retains your personal data only for as long as it is needed for the stated purposes or as required by Malaysian law. Data from closed accounts is retained for a maximum of 7 years for audit and legal compliance purposes, after which it is securely deleted from 666i's systems.

Transparency
Immediate Notification in the Event of a Data Breach

In the event of any security breach affecting your personal information, 666i is committed to notifying impacted members within 72 hours of detecting the incident — in line with international data protection best practices and 666i's internal compliance requirements.

666i Full Privacy Policy

This document details how 666i handles the personal data of Malaysian members. By using the 666i platform, you agree to the terms of this Privacy Policy.

Important Note: This Privacy Policy should be read together with Terms & Conditions 666i. If you have any questions about how we handle your data, please contact the 666i support team via live chat or email at support@666i.run.

1

Personal Data We Collect at 666i

666i collects various types of personal data in the course of your use of our platform. This includes data you provide directly and data collected automatically during platform use.

Data you provide directly:

  • Full name as per your Malaysian identity card (MyKad)
  • Date of birth and gender
  • Malaysian identification card number (for KYC verification)
  • Current residential address in Malaysia
  • An active Malaysian mobile number
  • Email address used during registration
  • Payment method information (Touch 'n Go eWallet, DuitNow, GrabPay, ShopeePay, FPX, Boost eWallet) — we only retain information necessary for transaction processing and do not store your e-wallet PIN or password
  • Identity verification documents uploaded for KYC purposes, such as copies of your MyKad or bank statements

Data collected automatically:

  • IP address and approximate geographic location
  • Device type, operating system, and web browser used
  • Session usage data — pages visited, time spent, and in-platform actions
  • Full betting records and transaction history
  • Cookie data and similar tracking technologies (further described in Section 5)

666i does not collect sensitive data such as medical information, religious beliefs, or political views. Biometric data is not collected by 666i unless specifically required for identity verification with your explicit consent.

2

Purpose of Data Collection & Use by 666i

666i uses the personal data it collects solely for legitimate and stated purposes. The table below outlines the primary purposes for which your data is used on the 666i platform:

Data Type Purpose of Use at 666i Legal Basis
Name, date of birth, MyKad number Identity verification (KYC), fraud prevention, legal compliance Legal obligation, PDPA 2010
Phone number, email Account communications, security notifications, and 666i customer support Contract performance
Payment information Processing deposits and withdrawals via TNG, DuitNow, GrabPay, and others Contract performance, legal obligations
Betting records & game activity Account management, identification of potential gambling issues, 666i VIP programme Legitimate interests, legal obligations
Technical data (IP, device) Account security, fraud detection, platform optimisation Legitimate interest
Platform usage data User experience improvement, 666i internal analytics Legitimate interest

666i may also use your data to send relevant marketing communications — such as updates on new promotions, platform enhancements, or VIP offers you are eligible for. You can unsubscribe from marketing communications at any time via the unsubscribe link in any email or through your 666i account settings.

3

Disclosure of Data to Third Parties

666i does not sell or trade your personal data. However, in the course of operating the platform, 666i may need to share certain data with selected third parties in the following circumstances:

  • Payment service providers: When you make a deposit or withdrawal via Touch 'n Go eWallet, DuitNow, GrabPay, ShopeePay, FPX, or Boost eWallet, the necessary transaction data is shared with the respective provider to process your payment. These providers maintain their own privacy policies, which apply accordingly.
  • Third-party game providers: Casino and sports software providers that support the 666i platform may receive technical data and game records for game management and result verification purposes. Any personal data shared is kept to a minimum and limited to what is operationally necessary.
  • Law enforcement authorities: 666i will disclose the required data to Malaysian authorities — including the police, regulatory bodies, or courts — when compelled to do so by law or a valid court order.
  • Technical support service providers: Companies that assist 666i in managing IT infrastructure, cybersecurity, and customer service may have limited access to data necessary to perform their services — subject to strict confidentiality agreements with 666i.

Note: All third parties that receive data from 666i are required to handle that data in accordance with security and confidentiality standards that are equivalent to or exceed those of 666i. 666i is not responsible for how third parties use data outside the scope of the established agreements.

4

Security & Data Retention at 666i

666i implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

Technical security measures implemented by 666i:

  • 256-bit SSL/TLS encryption for all data communications between your device and 666i servers
  • Encryption of data at rest for all sensitive information stored in 666i's databases
  • Two-factor authentication (2FA) available for all member accounts
  • Intrusion detection system (IDS) and advanced-tier firewall
  • 24/7 security monitoring by the 666i cybersecurity team
  • Regular penetration testing conducted by independent third-party security firms

Data retention period:

  • Active account data: retained for as long as your account remains active and for any period required by law following account closure
  • Financial transaction records: retained for a minimum of 7 years from the date of transaction in accordance with Malaysian legal requirements
  • Betting records: retained for 5 years for audit and dispute resolution purposes
  • Security logs and technical data: retained for 12 months
  • Customer support communication data: retained for 3 years

Once the applicable data retention period expires, your data will be securely deleted or anonymised in accordance with 666i's secure data disposal procedures.

While 666i takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against all cyber threats. You are also responsible for keeping your 666i account password and login credentials safe.

5

Cookies & Tracking Technologies on the 666i Platform

The 666i platform uses cookies and similar tracking technologies to enhance the user experience and ensure platform features function correctly. Cookies are small data files stored on your device when you visit the 666i platform.

Types of cookies used by 666i:

  • Strictly Necessary Cookies: Required for the 666i platform to function — including login session cookies, bet slip cookies, and security cookies. These cookies cannot be disabled without affecting core platform functionality.
  • Performance Cookies: Helps 666i understand how members use the platform — which pages are visited most frequently, where technical issues occur, and how long a typical session lasts. This data is used in aggregated form for platform improvements.
  • Functional Cookies: Saves your preferences such as language, display settings, and sport preferences so you do not need to reconfigure them each time you log in to 666i.
  • Analytics Cookies: Used internally by 666i to analyze platform usage patterns and make better-informed decisions about product improvements.

You can manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the 666i platform — including potential issues with login and bet processing. 666i recommends reviewing your browser's privacy settings documentation for more details on managing cookies.

6

Your Rights as a Data Subject Under Malaysia's PDPA

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding personal data held by 666i. You may exercise any of these rights by contacting 666i at privacy@666i.run or via the platform's live chat.

  • Right of Access: You may request a copy of the personal data 666i holds about you. 666i will process data access requests within 21 working days and may charge a reasonable administrative fee for requests that are repetitive or extensive.
  • Right to Rectification: If any personal data held by 666i is inaccurate or out of date, you have the right to request a correction. For basic account information, you can update this yourself via your profile settings or by contacting 666i support.
  • Right to Withdraw Consent: Where data processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.
  • Right to Object to Processing: You have the right to object to the processing of your personal data for specific purposes — particularly for direct marketing. Once an objection is received, 666i will cease that processing unless there are compelling legitimate grounds that override your interests.
  • Right to Erasure: Under certain circumstances, you may request the deletion of your personal data from 666i's systems. Such requests are subject to the legal data retention requirements set out in Section 4 — data required for legal compliance cannot be deleted upon request.

How to Exercise Your Rights: To exercise any of the rights above, submit a written request to the 666i Data Protection Officer by email at support@666i.run with the subject line "PDPA Request — [Right Type]". Please include your full name and the registered mobile number on your 666i account to help us process your request faster.

7

Privacy Policy Amendments & How to Contact 666i

666i reserves the right to amend this Privacy Policy from time to time to reflect changes in our data handling practices, new Malaysian legal requirements, or technological developments that affect how we operate. All material amendments will be communicated to members via:

  • An email notification to your registered email address at least 7 days before the amendment takes effect
  • An in-platform notification on 666i when you next log in
  • Updates to this Privacy Policy page with a clearly stated effective date

Your continued use of the 666i platform after any Privacy Policy amendment takes effect will be considered your acceptance of those changes. If you do not agree with the amendments, please discontinue use of the platform and contact 666i support to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how 666i handles your personal data, please reach out to us through the following channels:

  • Live Chat: Available 24/7 within the 666i platform
  • Email: support@666i.run
  • Response time: Within 24 business hours for written enquiries

If you are dissatisfied with how 666i has handled your privacy complaint, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) under the Ministry of Communications and Digital.

Your Privacy Rights as a 666i Member — Summary

Five key rights you hold as a 666i member under Malaysia's PDPA 2010 — and how to exercise them.

👁️
Right of Access

Request a copy of all personal data 666i holds about you. Processed within 21 business days.

PDPA S.30
✏️
Right to Rectification

Correct inaccurate or outdated data in your 666i account — via your profile or by contacting support.

PDPA S.34
🚫
Right to Object

Object to the use of your data for direct marketing or specific types of processing by 666i.

PDPA S.42
🔄
Withdraw Consent

You can withdraw your marketing consent at any time — without affecting any processing that has already taken place.

PDPA S.38
🗑️
Right to Erasure

Request erasure of your data when it is no longer needed — subject to any applicable legal retention requirements.

PDPA S.40

Contact the 666i Privacy Officer

Three ways to reach us regarding your privacy and personal data protection on the 666i platform.

24/7 Live Chat

The fastest way to get privacy-related help — the 666i support team is available around the clock via in-platform live chat.

Official Email

Send your privacy enquiry to support@666i.run with the subject line "PDPA Enquiry". 666i will respond within 24 business hours in either Bahasa Melayu or English.

Written PDPA Request

For formal requests under PDPA (data access, rectification, erasure), submit a written request to support@666i.run with the subject line "PDPA Request — [Right Type]".

FAQ — 666i Privacy Policy

The most frequently asked questions by 666i members regarding privacy and personal data protection.

No. 666i does not sell, rent, or share members' personal data with any third party for marketing purposes. Your data is only shared with parties directly involved in the operation of the 666i platform — such as payment providers (TNG, DuitNow, GrabPay, etc.) to process your transactions, and game software providers to run the casino and sports games you play. All such parties are bound by strict confidentiality agreements and may only use data within the defined scope.

After your 666i account is closed, your personal data and transaction records are retained for the periods prescribed by Malaysian legal requirements. Financial records are kept for 7 years in accordance with the Income Tax Act and related legislation. Betting records are retained for 5 years. Once these retention periods expire, your data will be securely deleted or anonymised — meaning it can no longer be linked to your identity. You may contact 666i support for more information about specific data relating to your account.

Identity verification documents (KYC) — such as copies of your MyKad or bank statements uploaded to 666i — are protected to the highest security standards. All documents are encrypted using AES-256 encryption before being stored on 666i servers that are kept separate from the platform's general database. Access to these documents is strictly restricted to trained and authorised 666i staff who handle KYC verification; every access is recorded in a monitored audit log. These KYC documents cannot be viewed or downloaded by any other 666i personnel.

Yes, you may request the deletion of your personal data — this is known as the "right to erasure" under PDPA principles. However, this right is not absolute. 666i may need to retain certain data even after a deletion request is received if it is required to: (1) comply with Malaysian legal obligations, (2) resolve active disputes, (3) enforce ongoing agreements, or (4) prevent fraud and protect security. Data not subject to any legal retention requirement will be deleted within 30 days of receiving a valid request. Please send your request to support@666i.run with the subject line "PDPA Request — Data Deletion".

If you suspect your 666i account or data has been compromised, act immediately: (1) Change your 666i account password right away via the security settings page. (2) Enable two-factor authentication (2FA) if you have not already done so. (3) Contact the 666i support team via live chat or at support@666i.run to report the incident — we will investigate and take prompt action, including temporarily freezing your account if necessary. (4) Review your account activity log for any suspicious transactions. The 666i security team will assist you in recovering your account and assessing any potential losses.

Your Data Is Safe at 666i — Play with Peace of Mind

Register a 666i account and enjoy Sports Betting, Live Casino, Jackpot, e-sports & cricket — with full confidence that your privacy is protected.

Compliant with Malaysia's PDPA  |  256-bit SSL  |  No Data Sales  |  24/7 Bahasa Malaysia Support

Bahasa Melayu