PG66 Privacy Policy – Personal Data Protection for Malaysian Members

Pg66 is an online betting and casino platform operating exclusively for the Malaysian market. We understand that your trust in us depends greatly on how we handle your personal information. This Privacy Policy is designed to give you full clarity on pg66's data collection and management practices.

This policy applies to all information collected by pg66 when you register an account, make a deposit via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX, place bets on sports events such as the Malaysia Super League or BWF badminton, play slots or live casino games, or interact with our customer support team.

Pg66 operates in accordance with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA). We collect only the data strictly necessary for the platform to function, use it solely for the stated purposes, and never sell or disclose it to third parties without your explicit consent.

Pg66 collects several categories of personal data depending on how you interact with our platform. Below is a full breakdown of the types of data we may collect:

Data you provide directly:

• Registration information: Username, active Malaysian phone number, password (stored as an encrypted hash), and full name during the KYC process.
• Identity verification (KYC) information: NRIC number, copies of identification documents, and proof of address where required for verification purposes prior to withdrawal or upon compliance request.
• Financial Information: E-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow details, and bank information required to process deposits and withdrawals in MYR.
• Support communications: Records of conversations with the pg66 customer support team, whether via live chat or email.

Automatically collected data:

• Technical data: IP address, device type, operating system, web browser name and version, screen resolution, and language settings.
• Usage data: Pages visited within the pg66 platform, time spent browsing, game or sport preferences, betting history (in aggregate), session duration, and navigation patterns.
• Cookie data: Information stored via cookies and similar tracking technologies to enhance user experience and session security.
• Location data: General location information (at country/city level) derived from your IP address for security and geographic compliance purposes.

Pg66 uses the personal data collected solely for legitimate purposes directly related to the operation of our platform. Below is a detailed breakdown of how your data is used:

• Account management: To create, verify, and maintain your pg66 account. This includes identity verification, password recovery, and processing requests to update account information.
• Transaction processing: To securely process incoming deposits and outgoing withdrawals. Data related to your payment method is used to ensure funds are received and sent accurately to the correct account.
• Security & fraud prevention: To detect and prevent unauthorised access, fraud, money laundering, and any other suspicious activity. This includes monitoring login patterns, betting activity, and financial transactions.
• Legal compliance: To fulfil legal obligations under Malaysia's PDPA, KYC/AML (Anti-Money Laundering) requirements, and any directives issued by the relevant authorities.
• Platform improvements: To analyse aggregated and anonymised usage patterns in order to improve the user experience, refine the interface, and develop new features that are more relevant to Malaysian players.
• Service communications: To send important account-related notifications, security alerts, changes to terms, or transaction information via SMS or the email address you registered with.
• Customer support: To provide more effective assistance when you contact the pg66 support team regarding any issue or enquiry.

Pg66 does not sell, rent, or disclose members' personal data to third parties for their own commercial purposes. However, there are limited situations where data sharing is necessary and legally permissible:

• Technical service providers: pg66 works with trusted third-party service providers for specific technical operations such as payment processing (FPX gateway, e-wallets), server hosting, and analytics. These providers are permitted to access only the minimum data necessary to perform their services and are bound by strict confidentiality agreements.
• Legal requirements: pg66 may be required to disclose data if mandated by Malaysian law, a court order, or directives from legitimate authorities such as Bank Negara Malaysia or other enforcement agencies.
• Fraud prevention: In cases where there is solid evidence of fraudulent activity or money laundering, pg66 reserves the right to share relevant information with the appropriate authorities.
• Business transfers: If pg66 is involved in any merger, acquisition, or asset transfer, members' personal data may be transferred as part of the business assets, subject to notification to members and equivalent protections being in place.

In all of the above situations, pg66 ensures that data sharing is carried out on a strictly need-to-know basis and with appropriate safeguards in place.

The security of your personal data is pg66's top priority. We invest seriously in our infrastructure and security practices to ensure your information is always protected:

• 256-bit SSL Encryption: All communications between your browser or app and pg66's servers are protected with industry-standard Transport Layer Security (TLS) encryption — the same standard used by leading banking institutions in Malaysia.
• Secure password storage: Your password is never stored in plain text. We use a strong hashing algorithm with a unique salt for each account, meaning that even pg66's internal staff cannot view your password.
• Internal access controls: Access to members' personal data within pg66's internal systems is restricted solely to staff who require it to perform their specific duties. All access is logged and monitored.
• Real-time threat monitoring: pg66's security systems continuously monitor for suspicious activity, including unusual login attempts, abnormal transaction patterns, and early signs of potential data breaches.
• Regular security testing: pg66 conducts regular security assessments and penetration testing to identify and address any vulnerabilities before they can be exploited.
• Two-factor authentication (2FA): An additional security layer is available for pg66 accounts to ensure only you can access your account, even if your password is compromised.

Pg66 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand platform usage patterns on an aggregate basis. The following explains the types of cookies we use:

You can manage and delete cookies through your web browser settings. However, disabling or blocking essential cookies may affect the functionality of the pg66 platform and you may be required to log in again on each visit. Analytics and preference cookies can be turned off without affecting your account's core functions.

As a pg66 member and an individual whose personal data is processed by us, you have the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA) and industry best practices:

To exercise any of the above rights, please contact the pg66 support team. We will process your request within 14 business days. In cases where a request is complex, this period may be extended to up to 30 days, with prior notice given to you.

The pg66 platform is intended solely for adults aged 18 and above. pg66 does not knowingly collect any personal data from individuals under the age of 18. Registration by minors is strictly prohibited and constitutes a violation of pg66's Terms & Conditions.

If pg66 discovers or is made aware that personal data belonging to a minor has been collected without parental or guardian consent, we will take immediate steps to delete that data and close the account in question. If you suspect that a minor is using the pg66 platform, please report it to us at support@pg66-bangla.net.

The pg66 platform may contain references to or integrations with third-party services such as casino game providers, e-wallet payment gateways, and analytics providers. It is important that you understand the following:

• This Privacy Policy applies only to data collected and processed directly by pg66.
• Every third-party service connected to the pg66 platform has its own separate privacy policy.
• Pg66 is not responsible for the privacy practices of third parties, even where they are our partners or service providers.
• Payment providers such as the FPX gateway, Touch 'n Go, GrabPay, Boost, ShopeePay, and DuitNow have their own privacy policies governing how they handle your transaction information.

Pg66 carefully selects third-party partners and holds them to high security and privacy standards; however, we cannot fully guarantee or control their practices. We recommend reading the privacy policy of each service you use.

Pg66 retains your personal data for as long as your account is active and for an additional period following account closure, in line with legal and operational requirements:

• Active account data: Retained for as long as your account remains active on the pg66 platform. This includes registration information, transaction history, and betting records.
• After account closure: In accordance with Malaysian legal requirements relating to anti-money laundering (AML) and financial record-keeping, pg66 retains relevant records for 5 years after account closure.
• KYC records: Identity verification (KYC) documents are retained for 5 years after the member relationship ends, in accordance with compliance requirements.
• Customer support data: Customer support communication records are retained for 3 years for reference and dispute resolution purposes.

Once the required retention period has elapsed, pg66 will securely delete or anonymise your personal data. You may request early deletion of data not subject to legal retention requirements by contacting us via email.

Pg66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When material changes are made:

• We will update the "Last updated" date at the top of this page.
• For significant changes, we will notify members via email or an in-platform notification on pg66 before the changes take effect.
• Your continued use of the pg66 platform after the effective date of any amended policy constitutes your acceptance of those changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or how pg66 handles your personal data, please do not hesitate to get in touch with us:

We are committed to responding to all privacy-related enquiries seriously and within a reasonable timeframe. For formal data rights requests, please clearly state the type of request (access, correction, deletion, etc.) in your email to help expedite the process.