g66my Privacy Policy

Scope and Commitment

This Privacy Policy ("Policy") describes how g66my ("we", "us", "our") collects, processes, stores, shares and protects personal data in connection with the operation of the g66my platform accessible at g66my.cam (the "Platform"), including any related mobile interfaces or sub-domains.

This Policy applies to all individuals who visit, register on or interact with the Platform ("Users" or "you"). By creating an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are available on the Platform. Where any conflict exists between this Policy and those documents on a data-privacy matter, this Policy shall prevail.

Key Terms Used in This Policy

• "Personal Data" — any information that identifies or can be used to identify a natural person, either directly or indirectly (e.g., name, email address, identity document number, device ID).
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, alteration or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, that entity is g66my.
• "Data Processor" — a third party that processes Personal Data on behalf of g66my, under instruction and subject to binding data processing agreements.
• "Cookies" — small data files placed on your device by a website to store information about your session, preferences or behaviour.
• "KYC" — Know Your Customer; identity and age verification procedures conducted prior to account activation or withdrawal processing.
• "Platform" — the g66my website at g66my.cam and all associated features, services and content.

Collection Methods

g66my collects Personal Data through the following means:

• Direct provision: When you register an account, complete KYC documentation, contact support, respond to a survey, or use any interactive feature of the Platform.
• Automated collection: Through cookies, server logs, session tracking technologies and similar tools that record technical and usage data when you visit or interact with the Platform.
• Payment processors: When you initiate a deposit or withdrawal through a payment method such as CIMB Clicks, Public Bank Online, GrabPay or Boost, relevant transaction data is returned to g66my by the payment provider for reconciliation purposes.
• Identity verification services: Where KYC checks require identity document validation, this data may be processed in conjunction with a third-party verification service operating under a binding data processing agreement.
• Third-party analytics: Aggregated, anonymised usage data may be informed by analytics tools. Individual-level data is not shared outward for analytics purposes.

How and Why We Use Your Data

g66my processes your Personal Data for the following purposes:

• Account creation and management: Registering your account, authenticating your identity, and enabling access to Platform features.
• Age and identity verification: Confirming that you meet the minimum age requirement of 21 years and that the identity you have provided is accurate and consistent.
• Payment processing: Facilitating deposits and withdrawals in MYR through your selected Malaysian payment method, and maintaining accurate transaction records.
• Service delivery: Providing access to sports betting markets, casino games, promotions and related features as described in our Terms & Conditions.
• Responsible gambling monitoring: Identifying patterns of play that may indicate problematic behaviour and facilitating access to self-management tools including deposit limits and self-exclusion.
• Security and fraud prevention: Detecting and preventing unauthorised access, duplicate accounts, payment fraud, money laundering and other activities that violate our Terms or applicable law.
• Legal and regulatory compliance: Maintaining records required under applicable gaming, financial crime prevention and data protection regulations.
• Communications: Sending account notifications, security alerts, support responses and — where you have not opted out — promotional communications about relevant offers.
• Platform improvement: Analysing aggregated usage data to understand how the Platform is used and to prioritise improvements.

Grounds for Processing Personal Data

g66my relies on one or more of the following legal bases when processing your Personal Data:

• Contractual necessity: Processing required to perform our contract with you — including operating your account, processing transactions and delivering services.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering requirements, age verification obligations and record-keeping rules.
• Legitimate interests: Processing carried out for our legitimate operational interests, including fraud prevention, security monitoring and Platform improvement, provided those interests are not overridden by your own rights and interests.
• Consent: Where we rely on your consent (e.g., for certain marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

When and With Whom We Share Data

g66my does not sell your Personal Data to third parties. We may share your data with the following categories of recipient only where necessary and proportionate:

• Payment processors: Malaysian payment providers such as those operating Maybank2u, CIMB Clicks, DuitNow, FPX, Touch 'n Go eWallet, Boost and GrabPay receive transaction data necessary to execute your payment instructions.
• Identity verification providers: Third-party KYC services that assist in verifying identity documents and confirming age eligibility.
• Game content providers: Licensed game studios may receive anonymised session identifiers required to deliver game content and record outcomes. These providers are prohibited from using such data for their own marketing purposes.
• Legal and regulatory authorities: We may disclose data to competent regulatory authorities, courts or law enforcement bodies where required by law or valid legal process.
• Professional advisers: Lawyers, auditors and insurers acting in the course of their professional duties, subject to confidentiality obligations.

All third-party data processors engaged by g66my are bound by written data processing agreements that restrict their use of your data to the specified processing purpose.

How g66my Uses Cookies

The Platform uses cookies and similar technologies (such as local storage and session identifiers) to support its operation. The primary categories of cookies used are:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a visit. They cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Store your preferences such as language or display settings to improve your experience across sessions.
• Analytics cookies: Collect anonymised or aggregated data about how the Platform is used — pages visited, session duration and navigation paths — to help us identify areas for improvement.
• Security cookies: Assist in identifying unusual or potentially fraudulent access patterns to protect your account and the integrity of the Platform.

You can manage or delete cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of the Platform. Detailed cookie management instructions are available in your browser's help documentation.

How Long We Keep Your Data

g66my retains Personal Data only for as long as is necessary to fulfil the purposes set out in this Policy, or as required by applicable law.

• Account data: Retained for the duration of your account and for a defined period following account closure, in accordance with our legal obligations.
• Transaction and financial records: Retained for a minimum of seven (7) years following a transaction to comply with applicable financial record-keeping requirements.
• KYC and identity documents: Retained for the period required by applicable anti-money laundering and identity verification regulations, which may extend beyond the period of account activity.
• Communications and support records: Retained for a period sufficient to resolve ongoing disputes and for quality assurance purposes.
• Technical and log data: Typically retained for a shorter period sufficient for security monitoring and incident investigation purposes.

Following the expiry of the applicable retention period, data is securely deleted or anonymised so that it can no longer be used to identify you.

How We Protect Your Data

g66my applies appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, destruction or alteration. These measures include, but are not limited to:

• Encrypted data transmission between your browser and Platform servers.
• Access controls restricting internal data access to personnel with a legitimate operational need.
• Regular security reviews of Platform infrastructure and third-party integrations.
• Secure storage of sensitive data including identity documents and financial records.

Notwithstanding the foregoing, no internet-based platform can guarantee absolute security. You are also responsible for protecting your own account credentials and for notifying us promptly if you suspect any unauthorised access to your account.

Exercising Your Rights

Requests to exercise the above rights should be submitted to the contact details provided in Clause 15. We will acknowledge your request within five (5) business days and endeavour to respond substantively within thirty (30) calendar days. Where a request is complex or numerous, we may extend this period by a further thirty (30) days with notice to you.

Please note that certain rights are subject to exceptions. For example, we may be unable to erase data that we are required to retain for legal or regulatory compliance purposes, such as transaction records or KYC documentation.

No Services for Persons Under 21

The Platform is intended exclusively for adults aged 21 years and above. g66my does not knowingly collect Personal Data from individuals below this age. If we become aware that Personal Data has been submitted by or on behalf of a person under 21, we will take steps to delete that data promptly and close the associated account.

If you have reason to believe that a minor has registered on the Platform or provided Personal Data without authorisation, please contact us immediately using the details in Clause 15.

External Websites and Services

The Platform does not currently include links to external third-party websites for general browsing purposes. Where technical integrations exist — such as with payment processors — those services operate under their own privacy policies and terms of service, which we encourage you to review independently before using those services.

g66my is not responsible for the privacy practices or content of any third-party service providers beyond the scope of our data processing agreements with them.

How We Handle Updates to This Policy

g66my reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last updated" date displayed at the top of this page. Where a change is significant, we may also notify registered users via their registered email address.

We encourage you to review this Policy periodically to remain informed about how your data is handled. Continued use of the Platform following the publication of an amended Policy constitutes your acknowledgement of the updated terms.

Data-Related Enquiries and Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a complaint about how your Personal Data has been handled, please contact the g66my team using the following details:

Website email: [email protected] (plain text — not a clickable link)

We aim to acknowledge data rights requests and privacy complaints within five (5) business days and to provide a full response within thirty (30) calendar days, except in cases of particular complexity where an extension may apply.