668duit Privacy Policy – Personal Data Protection for Malaysian Players

This Privacy Policy ("Policy") is published by 668duit ("we", "the company") and applies to all personal information collected, processed, and stored through the 668duit online betting platform accessible at 668duit.click ("Platform").

668duit takes our responsibilities as a data controller under Malaysia's Personal Data Protection Act 2010 seriously. We collect only what is genuinely necessary, process it for clear and legitimate purposes, protect it with appropriate security measures, and respect your rights as a data subject.

This Policy applies to all users of the 668duit platform, including registered members, visitors browsing the platform without an account, and anyone who interacts with 668duit through official communication channels such as support email. This Policy does not apply to third-party websites or services you may access via links within the 668duit platform.

668duit collects your personal data through several means: directly when you register an account or interact with the platform, automatically when you use the platform, and in some cases from legitimate third-party sources for identity verification purposes.

The following are the categories of data collected by 668duit:

668duit uses your personal data only for lawful, clearly defined purposes. We will not process your data for any other purpose without notifying you. The following are the primary purposes for which data is used at 668duit:

• Account management: Registering your 668duit account, verifying your identity (KYC), processing logins, and managing your account settings including deposit limits and privacy controls.
• Financial transaction processing: Securely and accurately processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX, as well as withdrawals to your local bank account.
• Platform security: Detecting and preventing fraud, money laundering, unauthorised access, duplicate account usage, and any other suspicious activity that threatens the security of the platform and other players.
• Legal compliance: Meeting Anti-Money Laundering (AML), Counter-Financing of Terrorism (CFT), and other applicable legal reporting requirements in Malaysia.
• Responsible gambling: Identifying risky betting patterns and reaching out to players who may need support or self-control tools, in line with 668duit's commitment to responsible gaming.
• Platform improvements: Analysing 668duit platform usage patterns in aggregated, anonymised form to better understand the needs of Malaysian players and improve the user experience.
• Service communications: Sending important notifications about your account, transaction confirmations, security updates, and information on changes to 668duit's terms or policies.

With your separate consent, 668duit may also use your data to send you promotional information and special offers related to games and betting at 668duit. You may withdraw this consent at any time through your account settings or by contacting 668duit support.

668duit does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, in the course of operating the platform, 668duit may need to share data with certain categories of parties within strict and necessary limits only:

• Payment processors: Transaction data shared with Malaysian local payment processors — including Touch 'n Go, DuitNow, GrabPay, Boost, and ShopeePay — to securely process your deposits and withdrawals.
• Platform service providers: Companies providing critical technical services to 668duit such as secure server hosting, identity verification services and casino gaming platforms – only the minimum necessary data is shared, and all such parties are bound by strict data protection agreements.
• Legal authorities: 668duit will disclose personal data where required by Malaysian law, a valid court order, or a legitimate request from an enforcement agency such as Bank Negara Malaysia or the Companies Commission of Malaysia (SSM) in the context of a related investigation.
• Business transfer: In extraordinary circumstances such as a merger or acquisition, personal data may form part of the transferred assets — however, players will be notified in advance and your data protection rights will be maintained.

668duit invests significantly in data security infrastructure to protect the personal information of all our Malaysian players. Our technical and organisational measures include:

• TLS 1.3 encryption for all data in transit between your device and 668duit servers
• AES-256 encryption for sensitive data stored in the 668duit database
• Role-based access control (RBAC) ensuring staff can only access data relevant to their responsibilities
• Mandatory two-factor authentication for all internal staff access to systems containing player data
• Round-the-clock cybersecurity monitoring with an active intrusion detection system (IDS)
• Regular security testing and vulnerability scanning conducted by the internal security team and independent external audits
• Tested security incident response procedures to ensure swift action in the event of a data breach

While 668duit takes all reasonable steps to protect your data, no security system can guarantee 100% protection. In the unlikely event of a data breach affecting your privacy rights, 668duit will notify you within 72 hours of the breach being detected, in line with applicable legal requirements.

As a 668duit player and data subject under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by 668duit:

668duit uses cookies and similar tracking technologies to enhance the platform user experience, maintain login session security, and analyse usage patterns on an aggregated basis. The following types of cookies are used:

You can manage your cookie settings through the "Privacy Settings" section in your 668duit account or via your web browser settings. Please note that rejecting essential cookies will affect core platform functionality, including the ability to log in to your account.

668duit is a betting platform intended solely for adults aged 21 and above. 668duit does not knowingly collect or process any personal data from individuals under the age of 21.

Should 668duit discover that personal data of an underage individual has been collected without valid parental or guardian consent, 668duit will take immediate action to delete that data and close the relevant account. Any such case will also be reported to the relevant authorities in accordance with our legal obligations.

668duit operates primarily from Malaysia and player personal data is stored on servers located in Malaysia or the Asia-Pacific region, which maintain equivalent data protection standards. In certain operational situations, such as the use of cloud infrastructure services or technical support services, data may be processed outside Malaysia.

When data is transferred outside Malaysia, 668duit ensures:

• The recipient country or region provides adequate legal data protection
• Legally binding data transfer agreements have been put in place with data recipients
• Additional technical measures such as encryption are applied to protect data during transfer
• Transfers are limited to the minimum data required for the specific service purpose only

668duit does not transfer or disclose player data to overseas entities for marketing, commercial analytics, or any purpose unrelated to the operation of the 668duit platform.

668duit reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or improvements to the way we protect player data.

When material changes are made to this Policy, 668duit will:

• Publishing a new version with an updated date at the top of this page
• Sending email notifications to all registered 668duit members at least 14 days before the changes take effect
• Displaying special notices within the 668duit platform during the transition period

Continued use of the 668duit platform after an updated Privacy Policy takes effect will be considered your acceptance of the revised privacy terms. If you do not agree with the changes, you have the right to close your 668duit account and request deletion of your personal data, subject to legal retention requirements.

668duit has appointed an internal Data Protection Officer responsible for overseeing our compliance with Malaysia's PDPA 2010 and managing all data privacy queries and complaints from players.

For any enquiries, requests or complaints regarding this Privacy Policy or how 668duit handles your personal data, please reach us through the following channels:

• Official Email: support@668duit.click – include the subject "Privacy Policy Enquiry" for direct routing to the Data Protection Officer
• Live Chat: Available 24/7 within the 668duit platform in Bahasa Melayu
• Response Time: All data privacy inquiries will receive a response within 21 calendar days

If you are unsatisfied with 668duit's response to your data privacy complaint after going through the official channels above, you have the right to escalate the matter to the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital.