66duit Privacy Policy

1 Introduction

1.1 This Privacy Policy applies to all personal data processed by 66duit ("we", "us", "our") in connection with the operation of the 66duit online casino and sportsbook platform accessible at 66duit.com ("the Platform"). It applies to all registered Members, prospective Members who interact with the Platform without completing registration, and visitors to the Platform.

1.2 By registering on or using the 66duit Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should discontinue use of the Platform and may request account closure in accordance with the Terms & Conditions.

1.3 66duit is the data controller in respect of personal data collected through the Platform. We are committed to handling personal data responsibly, transparently, and in compliance with applicable international data protection standards and the requirements of our international gaming authority licence.

2 Data We Collect

2.1 66duit collects personal data in the following categories:

2.2 66duit does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where disclosure of a medical or welfare condition is made voluntarily by a Member in the context of a responsible gaming request or support interaction. Such information is handled with enhanced confidentiality.

3 How We Use Your Data

3.1 66duit uses personal data collected from Members for the following purposes:

• Account Management: To create, verify, maintain, and close Member accounts, including identity verification (KYC) as required under our gaming authority licence;
• Transaction Processing: To process deposits and withdrawals via Touch n Go eWallet, Boost, GrabPay, FPX, USDT, and other supported payment methods, and to maintain accurate financial records;
• Platform Operation: To deliver game services, sportsbook functionality, rewards programme features, and all other Platform services to the Member;
• Regulatory Compliance: To fulfil our obligations under international gaming authority licence conditions, including anti-money laundering (AML) checks, responsible gaming monitoring, and age verification;
• Security: To detect and prevent fraud, account compromise, money laundering, and other prohibited conduct as defined in the Terms & Conditions;
• Support: To respond to Member queries, complaints, and formal dispute submissions;
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to Members who have consented to receive such communications. Members may opt out at any time;
• Platform Improvement: To analyse aggregated, anonymised usage data to improve Platform performance, game selection, and user experience.

4 Legal Basis for Processing

4.1 66duit processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between 66duit and the Member (account operation, transaction processing, game delivery);
• Legal Obligation: Processing required to comply with applicable laws and gaming authority licence conditions (KYC, AML, responsible gaming monitoring, record-keeping);
• Legitimate Interests: Processing for fraud prevention, platform security, and internal analytics, where these interests are not overridden by the Member's privacy rights;
• Consent: Processing for direct marketing communications, where the Member has provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5 Data Sharing

5.1 66duit may share personal data with third parties strictly in the following circumstances:

• Payment Processors: Identity and financial data is shared with payment service providers (including Touch n Go eWallet, Boost, GrabPay, FPX partner banks, and USDT network operators) solely to the extent necessary to process transactions;
• Game Providers: Username and gameplay session data may be shared with licensed game studio providers (such as Evolution Gaming, Pragmatic Play, PG Soft) to facilitate game delivery and fair play verification;
• Regulatory Authorities: 66duit will disclose Member data to gaming regulators, law enforcement agencies, or financial intelligence units where required by law, court order, or regulatory instruction;
• Service Providers: Technical infrastructure, analytics, customer support platform, and fraud detection service providers may process Member data on behalf of 66duit under data processing agreements that restrict use to the specified purpose;
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of 66duit operations, Member data may be transferred to the successor entity, subject to equivalent privacy protections.

5.2 All third parties with whom 66duit shares personal data are required to maintain appropriate technical and organisational security measures and to process data only for the purpose for which it was shared.

6 Cookies & Tracking Technologies

6.1 66duit uses cookies and similar tracking technologies on the Platform to support session management, security verification, and Platform performance analytics. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for Platform operation, including login session maintenance and security token validation. These cannot be disabled without impairing Platform functionality;
• Functional Cookies: Used to remember Member preferences such as language settings and display options;
• Analytics Cookies: Used to collect aggregated, anonymised data on Platform usage patterns to support performance optimisation. Individual Members are not identifiable through analytics data;
• Security Cookies: Used for fraud detection and bot prevention purposes.

6.2 66duit does not use third-party advertising cookies or cross-site tracking technologies. Members may manage cookie preferences through their browser settings, noting that disabling strictly necessary cookies may affect Platform functionality.

7 Data Retention

7.1 66duit retains personal data for as long as is necessary for the purpose for which it was collected, subject to the following minimum retention standards required under applicable gaming authority licence conditions:

• Account and Identity Data: Retained for a minimum of 5 years following account closure;
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, for AML and financial record-keeping compliance;
• Gameplay Records: Retained for a minimum of 3 years from the date of each session;
• Communications Data: Retained for a minimum of 2 years from the date of the interaction;
• Marketing Consent Records: Retained for the duration of the consent plus 1 year after withdrawal.

7.2 Following expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

8 Data Security

8.1 66duit implements the following technical and organisational security measures to protect Member personal data:

• 256-bit SSL/TLS encryption for all data in transit between the Member's device and Platform servers;
• Encryption at rest for stored personal and financial data;
• Salted password hashing — Member passwords cannot be recovered by 66duit staff or in the event of a data breach;
• Access controls restricting personal data access to authorised staff with a documented business need;
• Regular security audits and penetration testing;
• Two-factor authentication options for Member accounts;
• Login anomaly detection and suspicious activity alerting.

8.2 In the event of a data breach that is likely to result in a risk to Members' rights and freedoms, 66duit will notify affected Members and relevant regulatory authorities within the timeframe required by applicable law and gaming authority licence conditions.

9 Your Rights

9.1 Members have the following rights in respect of their personal data held by 66duit:

• Right of Access: You may request a copy of the personal data 66duit holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data, subject to 66duit's legal retention obligations under gaming authority licence conditions;
• Right to Restriction: You may request that 66duit restrict processing of your personal data in certain circumstances;
• Right to Data Portability: Where processing is based on consent or contract, you may request your personal data in a structured, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of the above rights, Members should submit a written request to the 66duit data protection contact at [email protected]. 66duit will respond within 30 days of receipt of a valid request. Identity verification may be required before any data subject request is actioned.

10 Minors

10.1 The 66duit Platform is strictly not intended for persons under the age of 21. 66duit does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process.

10.2 If 66duit becomes aware that personal data has been collected from a person under the age of 21, such data will be deleted immediately and the associated account will be permanently closed. Any funds held in such an account will be handled in accordance with applicable gaming authority guidelines.

11 Third-Party Links

11.1 The 66duit Platform may contain links to third-party websites or services, including game studio portals and payment provider platforms. This Privacy Policy applies solely to data processed by 66duit through the 66duit Platform. 66duit is not responsible for the privacy practices of third-party websites, and Members should review the privacy policies of any third-party platform they access.

12 Changes to This Policy

12.1 66duit reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, gaming authority requirements, or Platform operations. The updated policy will be published on this page with a revised effective date. For material changes, 66duit will notify registered Members via email.

12.2 Continued use of the Platform following the effective date of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with any change, you may request account closure in accordance with Section 11.1 of the Terms & Conditions.

13 Contact Us

13.1 For any questions, concerns, or data subject requests relating to this Privacy Policy or 66duit's data processing practices, please contact us through the following channels:

13.2 66duit will acknowledge receipt of all formal privacy enquiries within 2 business days and will endeavour to provide a substantive response within 30 calendar days.