This Privacy Policy explains how 666duit collects, uses, stores, and protects the personal data of its players and website visitors. We are committed to handling your information with care, transparency, and in accordance with applicable data protection law.
SUMMARY: 666duit collects only the personal data necessary to operate a lawful, secure, and compliant online gaming platform for Malaysian players. We do not sell your data. We do not share it with third parties except where required for service delivery, legal compliance, or fraud prevention. You have clear rights to access, correct, and where applicable request deletion of your personal data.
This Privacy Policy applies to all personal data collected and processed by 666duit in connection with the operation of its online gaming and sports betting platform accessible at 666duit.net ("the Platform"), including all associated mobile interfaces, customer support channels, and marketing communications.
This Policy applies to all individuals who: register or have registered an account on the 666duit platform; visit 666duit.net without registering; contact 666duit customer support; or receive marketing communications from 666duit with their prior consent.
This Privacy Policy should be read together with the 666duit Terms & Conditions and Responsible Gaming Policy, both of which are available on this website. By using the 666duit platform, you acknowledge that you have read and understood this Privacy Policy.
For the purposes of applicable data protection legislation, the data controller responsible for personal data collected through the 666duit platform is the operating entity behind 666duit.net. All data subject requests, privacy inquiries, and complaints should be directed to our Data Protection contact as set out in Section 15 of this Policy.
666duit takes its obligations as a data controller seriously. We have implemented technical and organisational measures appropriate to the nature and volume of personal data we process, commensurate with the risks to data subjects' rights and freedoms.
666duit collects the following categories of personal data:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, gender, nationality, government-issued ID number (MyKad / passport) | Registration & KYC verification |
| Contact Data | Email address, mobile phone number, city/state of residence (e.g. Kuala Lumpur, Penang, Johor Bahru) | Registration |
| Financial Data | Payment method identifiers (GrabPay account, Touch 'n Go number, bank account details, card last four digits), transaction history | Deposit / withdrawal processing |
| KYC Documents | Scanned copies of Malaysian MyKad (front & back), passport bio-page, proof of address documents | Identity verification |
| Gaming Activity Data | Bet history, game session logs, wagering amounts, win/loss records, bonus usage, deposit and withdrawal history | Continuous during platform use |
| Technical Data | IP address, device type, operating system, browser type, session timestamps, login history | Automated on platform access |
| Communications Data | Live chat transcripts, support ticket records, email correspondence with 666duit | When you contact support |
| Marketing Preferences | Communication opt-in/opt-out status, promotional preferences | Registration & account settings |
666duit does not collect special categories of sensitive personal data (such as racial or ethnic origin, health data, or biometric data) except to the limited extent that identity documents submitted for KYC incidentally contain such information, in which case it is processed solely for verification purposes and not used for any other purpose.
666duit collects personal data through the following means:
666duit processes your personal data for the following purposes and on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Account registration, authentication, and management | Performance of contract (your account agreement with 666duit) |
| KYC identity verification | Legal obligation (regulatory compliance); legitimate interests (fraud prevention) |
| Processing deposits and withdrawals | Performance of contract |
| Providing gaming and betting services | Performance of contract |
| Customer support and dispute resolution | Performance of contract; legitimate interests |
| Fraud detection, prevention, and security monitoring | Legitimate interests; legal obligation |
| Responsible gaming monitoring and intervention | Legal obligation; legitimate interests (player welfare) |
| Anti-money laundering (AML) and sanctions screening | Legal obligation |
| Marketing communications (where consented) | Consent (can be withdrawn at any time in account settings) |
| Platform analytics and product improvement | Legitimate interests (improving the player experience) |
666duit does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances:
666duit engages trusted third-party service providers who process personal data on our behalf under written data processing agreements. These include: payment processing partners (GrabPay, Touch 'n Go, FPX network providers, bank partners); KYC and identity verification providers; fraud detection and security monitoring services; live casino software providers (game outcome data only, no financial data); cloud infrastructure and hosting providers; and customer support platform providers. All service providers are contractually bound to process personal data only for the specified service delivery purpose and in accordance with 666duit's instructions.
666duit will disclose personal data to competent authorities, regulators, or law enforcement agencies where required to do so by applicable law, court order, regulatory directive, or where 666duit has a good-faith belief that such disclosure is necessary to: comply with a legal obligation; protect and defend the rights or property of 666duit; prevent or investigate possible wrongdoing in connection with the platform; or protect the personal safety of platform users or the public.
In the event of a merger, acquisition, or sale of all or a portion of 666duit's assets, personal data held by 666duit may be transferred to the acquiring entity, subject to equivalent data protection commitments. Registered players will be notified of any such transfer that materially affects the processing of their personal data.
666duit never sells player data for advertising purposes. Your gaming activity, financial data, and identity documents are not disclosed to advertisers or data brokers under any circumstances.
Some of 666duit's third-party service providers — including cloud infrastructure providers and live casino software studios — may process personal data in jurisdictions outside Malaysia. Where such transfers occur, 666duit ensures that appropriate safeguards are in place to protect personal data to a standard equivalent to or exceeding that required under applicable Malaysian data protection law. These safeguards include contractual data protection clauses, data processing agreements, and where applicable, adequacy assessments of the recipient jurisdiction's data protection framework.
666duit retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention obligations:
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible (for example, due to backup storage cycles), data is isolated and protected from further processing until deletion is completed.
The 666duit platform uses cookies and similar tracking technologies to deliver and improve its services. The following categories of cookies are used:
Non-essential cookies are used only with your consent, which can be managed through your browser settings or the 666duit cookie preferences interface. Note that disabling performance or functional cookies may affect certain platform features.
666duit implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
While 666duit takes all reasonable steps to protect your personal data, no internet-based system is completely immune from security risks. You have a responsibility to maintain the security of your own account credentials. Never share your 666duit password with anyone.
Subject to applicable data protection law and certain limitations related to our legal obligations as a licensed gaming operator, you have the following rights in relation to the personal data 666duit holds about you:
To exercise any of the above rights, please contact 666duit's Data Protection contact as set out in Section 15. We will require identity verification before processing any data subject request to prevent unauthorised access to personal data.
The 666duit platform is strictly for adults aged 21 years and above. 666duit does not knowingly collect personal data from individuals under 21 years of age. Age is verified during the KYC process. If 666duit becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed. If you believe that a minor has registered on the 666duit platform, please contact us immediately at the details in Section 15.
21+ Strictly Enforced: The 666duit platform is an adult gambling service. Providing false age information to circumvent this restriction is a breach of our Terms & Conditions and may constitute a criminal offence under applicable law.
The 666duit platform does not include outbound links to third-party websites. This Privacy Policy applies exclusively to personal data processed by 666duit in connection with the 666duit.net platform. 666duit accepts no responsibility or liability for the privacy practices of any third-party services accessed independently by players outside the 666duit platform.
666duit reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email to their registered address and/or through a prominent notice on the 666duit platform, with reasonable advance notice before the effective date where practicable.
The version of this Privacy Policy currently in force is identified by the Effective Date stated at the top of this document. We encourage you to review this Policy periodically. Your continued use of the 666duit platform after the effective date of any revised Policy constitutes acceptance of the updated terms.
For any questions about this Privacy Policy, to exercise your data subject rights, or to raise a privacy concern or complaint, please contact 666duit through the following channels:
Data Protection Inquiries:
Email: [email protected] (plain text — not a clickable link)
Subject line: "Privacy Policy / Data Request"
Live Chat: Available 24/7 via the 666duit platform
Response target: Within 5 business days for data subject requests.
If you are not satisfied with 666duit's response to your privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
All data exchanged between your device and 666duit servers is protected by TLS 1.3 / SSL 256-bit encryption. Your credentials, payment details, and personal information are never transmitted in plain text.
Identity verification at 666duit is not just a regulatory requirement — it ensures only you, the verified account holder, can access and withdraw from your account. Your KYC documents are stored encrypted and accessed only by authorised compliance staff.
666duit does not sell, rent, or trade personal data to advertisers, data brokers, or any third party for commercial purposes. Your information is used solely to deliver 666duit's services and comply with legal obligations.
Access, correct, export, or request deletion of your personal data at any time. Withdraw marketing consent in seconds through your account settings. 666duit processes data subject requests within 30 days.
666duit holds your data for defined periods aligned with regulatory obligations — not indefinitely. When retention periods expire, data is securely deleted or irreversibly anonymised according to documented procedures.
Privacy questions and data subject requests can be raised through 666duit's live chat at any hour. The support team will route data-related inquiries to the appropriate privacy contact with a response target of 5 business days.
Your data is protected. Your account is secure. Now experience Malaysia's most complete online betting platform — casino, sportsbook, slots, and more. 21+ only.
21+ Gambling involves risk. Please play responsibly.