Privacy Policy g66 – How We Protect Malaysian Players' Personal Data

This Privacy Policy explains how g66 (the platform operator at g66.ng) collects, uses, stores, and protects your personal information. This applies to all users who access the g66 platform through our website or mobile app, whether as a visitor or registered member.

G66 operates in compliance with Malaysia's Personal Data Protection Act (PDPA) and applicable international privacy standards. By registering for or using g66's services, you acknowledge that you have read and understood this Privacy Policy and agree to how we manage your personal data as described herein.

G66 only collects data that is strictly necessary to provide a secure, functional service that meets regulatory requirements. We do not collect data beyond what is needed for the stated purposes.

Identity verification documents such as copies of MyKad or passport are collected solely as part of the KYC process mandated by anti-money laundering (AML) standards. These documents are stored with full encryption and strictly restricted access.

G66 uses your personal data solely for legitimate and transparent purposes. We will not use your data for any purpose other than those stated below without first obtaining additional consent from you.

• Account Management – Securely creating, verifying, and maintaining your g66 account.
• Payment Processing – Processing deposits and withdrawals to the payment methods you have registered.
• Regulatory Compliance – Carrying out KYC and AML procedures as required by regulatory authorities.
• Platform Security – Detecting and preventing fraud, money laundering, and unauthorised access.
• Service Improvement – Analysing usage patterns (in aggregate and anonymised form) to improve the platform.
• Customer Support – Resolving inquiries and issues you bring to our support team.
• Service Communications – Sending important notifications related to your account, security, and service changes.
• Marketing Communications – Sending promotional information only if you have opted in to receive it.

G66 does not sell your personal data to any third party. However, in the course of platform operations, we may share necessary data with the following categories of third parties, and only to the extent strictly required:

• Payment Processing Providers – To process your deposit and withdrawal transactions. These providers are bound by strict confidentiality agreements and PCI DSS standards.
• Identity Verification Providers – To conduct KYC checks for AML compliance. They receive only the data required for verification purposes.
• Technical Service Providers – Such as cloud and infrastructure service providers that operate our servers, all of whom are bound by comprehensive data protection agreements.
• Lawful Authorities – When required by Malaysian law or a valid court order. In such situations, g66 discloses only the minimum information necessary and will notify you where permitted to do so.

G66 invests significantly in security infrastructure to ensure your personal data remains protected at all times. The key security measures we implement include:

• Data Encryption in Transit: All data communications use TLS 1.3 protocol with 256-bit encryption, ensuring no third party can intercept or read the data transmitted.
• Data Encryption at Rest: All sensitive data stored in our databases is protected with AES-256 encryption, including bank account numbers, identification information, and passwords (stored as one-way irreversible hashes).
• Internal Access Controls: Access to customer data among g66 staff is subject to the principle of least privilege – each staff member may only access the data necessary to perform their specific duties.
• 24/7 Security Monitoring: Our SIEM (Security Information and Event Management) system monitors every data access and transaction in real time, with automatic alerts for any suspicious activity.
• Regular Penetration Testing: g66 conducts security penetration testing performed by independent cybersecurity firms at least twice a year.
• Incident Response Plan: g66 has a clear incident response procedure. In the event of a data breach, you will be notified within 72 hours of the incident being confirmed, in line with data breach notification requirements.

G66 retains your personal data only for as long as necessary for the stated purposes or as required by law. The following outlines our general data retention policy:

• Active Account Data: Retained for as long as your account is active and for 7 years after account closure, in line with anti-money laundering requirements.
• Financial Transaction Records: Retained for 7 years in accordance with applicable financial and tax regulatory requirements.
• KYC Documents: Retained for the period specified by regulatory requirements, typically 5–7 years after the end of the business relationship.
• Support Communication Logs: Retained for 2 years from the date of last interaction for service quality assurance purposes.
• Cookie & Session Data: Session cookies expire automatically when you close your browser; functional cookies are stored for up to 12 months.

Upon expiry of the applicable retention period, your data will be securely and systematically deleted or anonymized from our systems.

G66 uses cookies and similar tracking technologies to keep the platform running properly and to deliver a better experience for you. There are four types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session and processing transactions. These cookies cannot be disabled.
• Functional Cookies: Remembers your preferences such as language and display settings to provide a more personalized experience. Can be disabled but will affect your user experience.
• Analytics Cookies: Collects aggregated information about how users interact with the platform to help us improve our services. All data is analyzed anonymously.
• Security Cookies: Helps detect and prevent fraudulent activity and unauthorized access. Cannot be disabled as it is essential to your account security.

As a g66 player, you have the following rights regarding your personal data. g66 is committed to facilitating the exercise of these rights without unnecessary difficulty:

To exercise any of the rights above, contact the g66 privacy team at [email protected] with the email subject "Privacy Rights Request". We will respond within 14 business days from the date of receipt of the completed request.

G66 is a platform exclusively for individuals who are 18 years and above. We do not knowingly collect or process personal data from underage individuals. Our KYC process is designed to detect and prevent registration by minors.

If g66 discovers that a minor's personal data has been collected unintentionally, that data will be deleted immediately and the associated account will be closed in accordance with established procedures. Parents or guardians who believe their child has created a g66 account should contact us immediately at [email protected].

G66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or technological developments. Any material amendments will be communicated to you via:

• A notice prominently displayed on the g66 platform's home page.
• Notification email to your registered email address for significant amendments.
• A pop-up notice in your account upon your first login after an amendment takes effect.

The last updated date of this Privacy Policy is always displayed at the top of the document. Continued use of the g66 platform after an amendment takes effect constitutes your acceptance of the latest version of the Privacy Policy.

For any questions, concerns, or requests regarding your privacy and personal data protection, please reach us through the following channels:

• Privacy Email: [email protected] (for privacy rights requests and serious concerns)
• General Support: [email protected] or live chat within the platform
• Response Time: Within 14 business days for privacy rights requests; within 24 hours for security concerns.

G66 takes every privacy-related inquiry seriously and will make every effort to address your concerns transparently, professionally, and within a reasonable timeframe. Your satisfaction with how we handle your personal data is our priority.