Data & Privacy

Win66Bet Privacy Policy

Your privacy matters to us. This Privacy Policy explains what personal data Win66Bet collects, why we collect it, how it is processed and stored, who we share it with, and what rights you hold as a player based in Malaysia.

Last updated: 1 January 2026

How Win66Bet Protects Your Privacy

Six pillars underpin every data decision we make. These cards summarise our commitments — the full legal detail appears in the policy below.

Minimal Data Collection

Win66Bet collects only the personal data that is strictly necessary for account operation, identity verification, payment processing, and regulatory compliance. We do not collect data for its own sake.

No Data Sales

Your personal data is never sold, rented, or transferred to third-party marketers. Any third parties who access your data do so only under strict contractual obligations and for specified, limited purposes.

SSL Encryption

All data transmitted between your device and the Win66Bet platform is protected by industry-standard SSL/TLS encryption. Sensitive data such as payment credentials is stored in encrypted form and is never accessible in plain text.

Your Rights Respected

You have the right to access, correct, export, and request deletion of your personal data at any time. We provide clear processes for exercising these rights and respond to valid requests within 30 days.

Defined Retention Periods

We do not retain personal data indefinitely. Retention periods are defined by regulatory requirements (typically 5–7 years for financial records) and by the purpose for which the data was collected. Data is securely deleted when retention periods expire.

Breach Notification

In the event of a personal data breach that poses a risk to your rights, Win66Bet will notify affected players without undue delay and in accordance with our obligations under applicable data protection regulations.

1Introduction

This Privacy Policy ("Policy") describes how Win66Bet ("the Company", "we", "us", "our"), operator of the website located at https://win66bet.cam ("the Platform"), collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("you", "your") who access or use the Platform, including registered players, prospective players, and visitors.

Win66Bet is committed to handling personal data responsibly, in compliance with applicable data protection laws and in accordance with the principles of transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

By accessing the Platform, creating an account, or providing personal information to us in any form, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform.

This Policy is written in English and governs all data processing activities related to the Win66Bet platform. Where translated versions are provided, the English version shall prevail in the event of any inconsistency.

This Policy should be read in conjunction with Win66Bet's Terms & Conditions and Responsible Gambling Policy, both of which are incorporated herein by reference.

2Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

  • "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"), including but not limited to name, identification number, contact details, location data, and online identifiers.
  • "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
  • "Data Controller" means the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, Win66Bet is the Data Controller in respect of personal data collected via the Platform.
  • "Data Processor" means any third party that processes personal data on behalf of the Data Controller in accordance with documented instructions.
  • "Consent" means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they signify agreement to the processing of their personal data.
  • "KYC" means Know Your Customer — the identity verification process the Company is obligated to conduct under its international gambling licence.
  • "Player" means any natural person who has registered an account on the Platform and meets the eligibility criteria set out in the Terms & Conditions.
  • "Sensitive Personal Data" means personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, as defined under applicable law. Win66Bet does not intentionally collect sensitive personal data unless required by specific regulatory obligations.

3Personal Data We Collect

Win66Bet collects personal data in the categories set out in the table below. In each case, the collection is limited to what is necessary for the stated purpose:

Data Category Specific Data Points Primary Purpose
Identity Data Full legal name, date of birth, nationality, MyKad / passport number Account registration, KYC age & identity verification, fraud prevention
Contact Data Malaysian mobile number, email address, residential address Account communication, OTP verification, KYC address verification, support
Financial Data Bank account details, e-wallet account references (Touch 'n Go, Boost, GrabPay), cryptocurrency wallet addresses, transaction history Payment processing, withdrawal verification, AML compliance
Identity Documents Scanned copies or photographs of MyKad, passport, driver's licence, utility bills (for address verification) KYC compliance, regulatory obligation
Technical Data IP address, device type, browser type and version, operating system, session timestamps Platform security, fraud detection, geo-restriction enforcement
Usage Data Pages visited, games played, bets placed, session duration, click paths Platform improvement, responsible gambling monitoring, personalisation
Communications Data Live chat transcripts, email correspondence, WhatsApp messages with support team Customer support, dispute resolution, compliance record-keeping
Marketing Preferences Communication opt-in / opt-out status, preferred language (BM / 中文 / English) Sending relevant promotions only to consenting players

4How We Collect Personal Data

4.1 Directly from You

The majority of personal data we hold is provided directly by you when you: (a) complete the account registration form; (b) submit KYC documents; (c) make a deposit or withdrawal request; (d) contact our customer support team via live chat, WhatsApp, or email; or (e) update your account profile or communication preferences.

4.2 Automatically via the Platform

When you access and use the Platform, we automatically collect certain technical and usage data through cookies, web beacons, server logs, and similar technologies. This includes your IP address, device identifiers, browser type, operating system, referring URLs, pages viewed, and betting/gameplay activity. See Section 8 (Cookies & Tracking) for full details.

4.3 From Third Parties

We may receive personal data about you from the following categories of third parties:

  • Payment processors and e-wallet providers (such as Touch 'n Go eWallet, Boost, DuitNow, FPX operators, Maybank, CIMB, Public Bank) — transaction confirmation and payment status data necessary to process your deposits and withdrawals.
  • Identity verification service providers — to supplement KYC data and validate document authenticity.
  • Fraud prevention and AML screening providers — to cross-reference account activity against watchlists and risk indicators.
  • Analytics providers — aggregated, anonymised usage data to help us understand Platform performance and user behaviour patterns.

5Purposes of Data Processing

Win66Bet processes your personal data for the following specific, documented purposes:

  1. Account Management: Creating, maintaining, and administering your Win66Bet account, including processing registration, authentication, and account closure requests.
  2. KYC & Age Verification: Verifying your identity and confirming you meet the minimum age requirement of 21 years, as required under our international gambling licence.
  3. Payment Processing: Processing deposits and withdrawals in MYR via approved local payment methods including e-wallets (Touch 'n Go, Boost, GrabPay), bank transfers (DuitNow / FPX / Maybank / CIMB / Public Bank / Hong Leong Bank), and cryptocurrencies (BTC, ETH, USDT TRC20).
  4. Regulatory Compliance & AML: Meeting our obligations under our gambling licence, including Anti-Money Laundering (AML) screening, transaction monitoring, and record-keeping for regulatory audit purposes.
  5. Fraud Prevention & Platform Security: Detecting and preventing fraudulent activity, cheating, multi-account abuse, and other prohibited conduct described in our Terms & Conditions.
  6. Responsible Gambling: Monitoring betting patterns to identify potential problem gambling behaviour, administering self-exclusion requests, and enforcing deposit and loss limits set by the player.
  7. Customer Support: Responding to enquiries, resolving disputes, and maintaining communication records for quality assurance and complaint handling.
  8. Platform Improvement: Analysing anonymised usage data to understand how players interact with the Platform, identify usability issues, and improve the overall product experience.
  9. Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may withdraw your consent at any time via your account settings.

6Legal Basis for Processing

Win66Bet relies on the following legal bases for processing your personal data:

  • Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions agreement with you — including account management, payment processing, and customer support.
  • Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML obligations, and the record-keeping requirements of our international gambling licence.
  • Legitimate Interests: Processing necessary for our legitimate interests in operating a secure, fair, and commercially viable gambling platform — including fraud detection, security monitoring, and Platform improvement — where such interests are not overridden by your rights and interests.
  • Consent: Where we rely on your consent as the legal basis — primarily for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where consent is the applicable legal basis, you will be presented with a clear, affirmative opt-in mechanism. We will not infer consent from silence, inactivity, or pre-ticked boxes.

7Sharing Your Personal Data

Win66Bet does not sell your personal data. We share data with third parties only in the limited circumstances described below, and in each case only to the extent necessary for the specified purpose:

7.1 Payment Service Providers

To process your deposits and withdrawals, we share necessary financial and identity data with Malaysian payment processors including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX network operators, and licensed Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong Bank). Cryptocurrency transactions involve transmission of wallet address data to the relevant blockchain network.

7.2 KYC and Compliance Service Providers

We engage third-party identity verification and AML screening providers to fulfil our regulatory obligations. These providers process personal data solely on our documented instructions and are contractually prohibited from using it for any other purpose.

7.3 Technology and Infrastructure Providers

We use cloud hosting, cybersecurity, customer support software, and analytics tools provided by reputable third-party vendors. These vendors act as Data Processors and are bound by data processing agreements requiring them to maintain appropriate security standards.

7.4 Regulatory and Law Enforcement Authorities

We may disclose personal data to our licensing authority, regulatory bodies, or law enforcement agencies where required by applicable law, court order, or regulatory direction. We will notify you of such disclosures where we are legally permitted to do so.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's assets, personal data held by Win66Bet may be transferred to the successor entity. Affected players will be notified prior to their personal data becoming subject to a materially different privacy policy.

8Cookies & Tracking Technologies

Win66Bet uses cookies and similar tracking technologies to enable Platform functionality, analyse usage patterns, and maintain session state. The categories of cookies we use are as follows:

  • Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state and security cookies that protect against cross-site request forgery. These cannot be disabled without impairing core functionality.
  • Functional Cookies: Remember your preferences such as language selection, preferred currency display, and notification settings to provide a personalised experience across sessions.
  • Analytics Cookies: Collect anonymised data about how players navigate the Platform — pages visited, time spent, error messages encountered — to help us identify and resolve usability issues. This data does not identify you personally.
  • Performance Cookies: Monitor Platform load times, game performance, and technical metrics to ensure stable, high-quality service.

You may manage or withdraw consent for non-essential cookies via your browser settings. Note that disabling certain cookies may affect Platform functionality. Win66Bet does not use third-party advertising cookies or share cookie data with advertising networks.

9Data Retention

Win66Bet retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The key retention periods applicable to different categories of data are as follows:

  • Account Data and KYC Records: Retained for a minimum of five (5) years from the date of account closure, as required under our gambling licence and applicable AML regulations.
  • Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in compliance with financial record-keeping obligations.
  • Customer Support Communications: Retained for a period of three (3) years from the date of the communication, for dispute resolution and quality assurance purposes.
  • Usage and Technical Data: Retained in identifiable form for a maximum of thirteen (13) months, after which it is aggregated and anonymised.
  • Marketing Preferences: Retained until you withdraw consent, at which point marketing communications will cease and preference records will be updated accordingly.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our internal data disposal procedures. Anonymised data derived from personal data may be retained indefinitely for statistical and analytical purposes.

10Data Security

Win66Bet implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

  • SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using current-generation TLS protocols.
  • Data Encryption at Rest: Sensitive personal data, including identity documents and financial credentials, is encrypted using strong symmetric encryption algorithms when stored.
  • Access Controls: Personal data is accessible only to authorised personnel on a need-to-know basis. Access is controlled via role-based permissions and multi-factor authentication for internal systems.
  • Regular Security Audits: Our Platform and infrastructure undergo periodic security assessments and penetration testing conducted by qualified independent security professionals.
  • Incident Response: We maintain a documented data breach response plan. In the event of a breach that poses a material risk to your rights, we will notify affected players and relevant authorities without undue delay.

Whilst we take all reasonable and appropriate technical and organisational measures to protect your data, no method of electronic transmission or storage is entirely infallible. You also have a responsibility to protect your own account security — please refer to Section 4.4 of our Terms & Conditions for your obligations regarding credential management.

11Your Rights as a Data Subject

Subject to applicable data protection legislation, you have the following rights in relation to your personal data held by Win66Bet. To exercise any of these rights, please contact us using the details in Section 14.

Right of Access Request a copy of all personal data we hold about you and information about how it is processed.
Right to Rectification Request correction of inaccurate or incomplete personal data without undue delay.
Right to Erasure Request deletion of your personal data where it is no longer necessary for the purpose collected, subject to our legal retention obligations.
Right to Restriction Request that we restrict processing of your data in certain circumstances — e.g., while a dispute is being resolved.
Right to Portability Receive your personal data in a structured, commonly used, machine-readable format for transfer to another controller.
Right to Object Object to processing based on legitimate interests, including profiling, and to direct marketing at any time.

We will respond to valid data rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days with prior notification. We reserve the right to request identity verification before processing sensitive data rights requests.

Some rights are subject to limitations — for example, the right to erasure does not apply where we are required to retain data by law (such as KYC and AML records). We will explain any applicable limitations when responding to your request.

12Children & Minors

The Win66Bet Platform is strictly intended for adults aged21 years and above. We do not knowingly collect, store, or process personal data of any individual under the age of 21.

Age verification is a mandatory component of our KYC process. If Win66Bet becomes aware that personal data of an underage individual has been collected — whether through registration fraud or any other means — we will take the following steps immediately:

  • Suspend and close the relevant Account without delay
  • Void any transactions, wagers, or bonuses associated with the Account
  • Securely delete the personal data of the underage individual, except to the extent that retention is required to document the incident for compliance and audit purposes
  • Where appropriate, report the matter to relevant safeguarding or regulatory authorities

Parents or guardians who believe that their child may have accessed the Platform or provided personal data are encouraged to contact our support team immediately at [email protected] so that we can investigate and take remedial action promptly.

13Amendments to This Policy

Win66Bet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. The following process applies to amendments:

  • Material changes — changes that meaningfully affect your rights or how your data is used — will be notified to registered players via email or in-Platform notification at least seven (7) days before the effective date.
  • Non-material changes — such as grammatical corrections or clarifications that do not affect player rights — will take effect upon publication without separate notification.
  • The "Last Updated" date at the top of this Policy reflects the date of the most recent amendment. The current version of this Policy is always accessible at https://win66bet.cam/privacy-policy.
  • Your continued use of the Platform following the effective date of a material amendment constitutes your acceptance of the revised Policy. If you do not accept a material change, you should cease using the Platform and may request account closure and withdrawal of your Real Money Balance.

14Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact Win66Bet's support team using the following channels. When submitting a data rights request, please include your registered username, the nature of your request, and relevant identifying information to allow us to process it efficiently.

Email — Privacy Enquiries
[email protected]

Subject line: "Privacy Policy — [Your Request Type]"

Response within 30 calendar days

Live Chat
Available 24/7 on site

For general privacy questions

Average response: 3–5 minutes

Win66Bet takes all privacy enquiries seriously. If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction applicable to your complaint.

Questions About Your Data?

Our team is available24/7 in English, Bahasa Melayu, and Mandarin to help with any data or privacy enquiries. You can also visit our FAQ for quick answers on account and privacy topics.

Win66Bet is strictly for players aged 21 and above. Play responsibly.