Privacy Policy 666com – Our User Data Protection

01. Introduction & Commitment

666com is a digital entertainment platform operating under the official domain 666com.my. In providing our services, we inevitably process certain personal data of our users. This Privacy Policy thoroughly explains those practices and applies to all users who access the platform through the website, mobile app, or other official channels provided by 666com.

User privacy is a priority we cannot compromise on. We do not sell personal data to any party for commercial purposes. We do not share sensitive information with third parties except under conditions explicitly stated in this policy. And we continuously invest in security technology to ensure the data you entrust to us is protected to the highest standards.

02. Data We Collect

666com collects data in two main categories: data you provide directly and data collected automatically when you use the platform.

Data you provide directly:

• Full name as stated on official identity documents
• Date of birth for age verification (minimum 18 years old)
• Active email address used during registration
• Phone number registered to the account
• Bank account or digital wallet information for transaction purposes
• Identity documents (National ID, Driver's License, or Passport) during the KYC verification process
• Additional information you provide when contacting customer support

Automatically collected data:

• IP address and approximate location based on IP
• Device type, operating system, and browser being used
• In-platform activity history (logins, games played, transactions)
• Session data including visit duration and pages visited
• Technical information for security and fraud prevention purposes

03. Data Usage Purposes

Every piece of data collected by 666com has a clear and measurable purpose. We do not collect data beyond what is genuinely necessary to operate the service effectively and securely.

• Account creation and management — processes registration, identity verification, and ensures only one account per individual.
• Financial transaction processing — handles deposits, withdrawals, and accurate recording of transaction history.
• Security and fraud prevention — detects suspicious activity, prevents multi-account usage, and protects the platform from exploitation.
• Legal compliance (KYC/AML) — fulfills regulatory obligations related to identity verification and anti-money laundering.
• Service improvement — analyzes usage patterns to optimize platform performance and deliver a better experience.
• Account-related communications — sends transaction notifications, security updates, and other important information.
• Customer support — resolves inquiries and issues you report to our team.

04. Data Sharing with Third Parties

666com does not sell, rent, or trade users' personal data to any third party. However, in the normal operation of the platform, there are certain situations where data may be shared in a limited and controlled manner:

• Payment processing partners — payment gateway providers and banks that process transactions require relevant financial data. All such partners comply with PCI-DSS security standards.
• Technology service providers — cloud infrastructure vendors, security systems, and analytics providers that support platform operations. They only access data necessary for their specific functions.
• Regulatory authority — if required by law or a valid court order, 666com will provide the necessary information to the relevant authorities.
• Security emergency — if necessary to protect user safety, prevent large-scale fraud, or stop proven illegal activity.

05. Data Security

Protecting the data you entrust to 666com is a responsibility we take extremely seriously. Our multi-layered security system is designed to prevent unauthorized access, data breaches, and misuse of information from every angle simultaneously.

Technical security measures implemented by 666com include:

• 256-bit SSL/TLS Encryption — all data transmitted between your device and 666com servers is encrypted using the same standards as international banking.
• Data encryption at rest — sensitive data stored in our database is encrypted and unreadable even in the event of unauthorized physical access to the servers.
• Two-factor authentication (2FA) — an additional security layer available to all user accounts as extra protection beyond a password.
• Real-time threat monitoring — an active intrusion detection system monitors every transaction and login activity to detect anomalous patterns.
• Regular security testing — internal security teams and external auditors regularly test system vulnerabilities.
• Limited data access — 666com employees may only access user data relevant to their specific duties, and all access is recorded in an audit log.

That said, no security system is 100% perfect. We encourage you to help keep your account secure by using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

06. Cookies & Tracking

666com uses cookies and similar technologies to enhance the user experience, maintain session security, and understand how the platform is used. The following are the types of cookies we use:

• Essential cookies — required for core platform functions such as login sessions, security, and language preferences. Cannot be disabled as the platform will not function without them.
• Functional cookies — saves your preferences such as display settings, preferred currency, and notification settings so you don't need to reconfigure them each time.
• Analytics cookies — collects anonymous data on how users interact with the platform. This data helps us identify areas for improvement.
• Security cookies — helps detect and prevent suspicious activity and security attacks such as CSRF and session hijacking.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies will affect the normal functionality of the 666com platform.

07. User Rights over Personal Data

As a 666com user, you have a number of rights you can exercise at any time regarding the personal data we hold. These rights can be submitted to our privacy team via live chat or support email.

To exercise any of the above rights, contact our privacy team via live chat on the platform or email us at [email protected]. We will respond to your request within a maximum of 30 business days.

08. Data Retention

666com retains personal data only for as long as necessary for the purposes described in this policy, or as required by applicable regulations. The following are general guidelines for our data retention periods:

• Active account data — retained while your account is active and for a period after account closure in accordance with legal obligations.
• Financial transaction history — retained for a minimum of 5 years in accordance with financial regulation and anti-money laundering (AML) standards.
• KYC Documents — retained in accordance with applicable jurisdictional regulatory requirements, generally between 5–7 years.
• Security logs — retained for 12 months for security investigation purposes when required.
• Support communication data — retained for 2 years for reference and service quality improvement.

Once the retention period ends, data is permanently deleted or anonymized so it can no longer be linked to your identity.

09. Minor Protection

666com services are strictly intended for individuals aged 18 and above. We enforce rigorous age verification procedures during the registration and KYC process.

If 666com determines that an account is owned or operated by a person under 18 years of age, the account will be immediately suspended, all existing balances will be frozen during the investigation, and any related data will be handled in accordance with applicable child data protection regulations.

10. Privacy Policy Updates

666com may update this Privacy Policy from time to time in response to changes in regulations, technology, or our business practices. Any significant changes will be communicated to users through:

• Email notification to the address registered on the account
• Announcement on the platform homepage after login
• Update date at the top of this page

We encourage you to review this page periodically. Continued use of the 666com platform after changes are published will be considered acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or wish to exercise your personal data rights, the 666com privacy team is ready to assist through the following channels:

For information on platform usage rules, visit the Terms and Conditions us. For responsible gaming guidelines, visit Responsible Gaming.