Privacy Policy 666ff — Our Commitment to Your Personal Data

01Introduction

666ff ("we", "our platform") operates the website and mobile app accessible at 666ff.best. We understand that your trust in us depends not only on the quality of the games and services we offer, but also on how responsibly we handle your personal information.

This Privacy Policy clearly explains the types of personal data we collect, why we need it, how it is used, who it may be shared with in certain situations, and the security measures we take to protect it. This document is written in plain language so every player in Malaysia knows their rights and how we handle data responsibly.

By registering an account or continuing to use the 666ff platform, you agree to the practices described in this Privacy Policy. This Policy should be read together with Terms and Conditions which is the comprehensive agreement between you and 666ff.

02Data We Collect

We only collect data that is strictly necessary to deliver quality services and meet legal requirements. The following are the categories of data collected:

03Data Collection & Usage Purpose

Every piece of data we collect has a clear purpose. We do not collect excessive or irrelevant data beyond what is needed to operate the platform. The following are the primary purposes for which your personal data is used:

• Account Management: Creating, verifying, and maintaining your player account including personal settings and game preferences.
• Transaction Processing: Processing deposits, withdrawals, and all financial activity in your account securely and accurately.
• Legal Compliance: Meeting regulatory obligations including anti-money laundering (AML) compliance, identity verification, and reporting required by authorities.
• Platform Security: Detecting and preventing fraud, unauthorized access, account abuse, and other illicit activities.
• Service Improvement: Analyzing usage patterns to improve the player experience, platform performance, and new game offerings.
• Communications: Sending important account notices, security updates, promotions you have opted into, and customer support responses.
• Responsible Gambling: Monitoring gameplay patterns to identify players who may need support and ensure responsible gambling practices.

We process your data on a valid legal basis — whether contractual necessity, legal obligation, legitimate interest, or your explicit consent.

04Sharing Information With Third Parties

666ff does not sell your personal data. However, in certain limited situations, we may need to share your information with the following parties:

• Payment Service Providers: DuitNow, Touch 'n Go eWallet, GrabPay, ShopeePay, FPX, and other payment providers we use to process your financial transactions. They receive only the data needed to process payments.
• Identity Verification Providers: Third-party companies that assist us in conducting KYC and AML checks to meet legal requirements.
• Game Software Providers: Game providers that require minimum session data to operate the games you play, subject to strict confidentiality agreements.
• Statutory Authorities: When required by law, court order, or a legitimate request from a law enforcement agency, we will disclose only the information necessary.
• IT Service Providers: Server hosting and cybersecurity partners who help us operate the platform infrastructure securely, bound by comprehensive data protection agreements.

05Data Security Measures

The security of your personal data is the highest priority for 666ff. We implement multiple layers of technical and procedural protection to keep your data safe at all times:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is fully encrypted using the latest industry-standard encryption protocols.
• Strict Access Control: Only authorized personnel may access player personal data, and every access is recorded in a monitored audit log.
• Two-Factor Authentication (2FA): Our internal systems use multi-factor authentication to prevent unauthorized access by external parties.
• 24/7 Security Monitoring: Our cybersecurity team continuously monitors systems to detect and respond to any threats in real time.
• Regular Penetration Testing: Our platform undergoes regular security testing by independent experts to identify and address any vulnerabilities.
• Data Backup: Critical data is automatically backed up to a separate secure location to ensure service continuity.

06Data Retention Period

666ff retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law.

• Active Account Data: Retained for as long as your account remains active and for a reasonable period after account closure for dispute resolution purposes.
• Financial Transaction Records: Retained for a minimum of 7 years after a transaction occurs, in accordance with Malaysia's financial and AML legal requirements.
• KYC Documents: Retained for the period stipulated by the relevant authorities, typically between 5 and 10 years.
• Activity & Security Logs: Retained for 12 months for security incident investigation and fraud prevention purposes.
• Support Communication Records: Retained for 3 years for customer service reference and improvement purposes.

When data is no longer needed, it will be securely deleted or anonymised in accordance with established procedures. You may request further information about your specific data retention periods by contacting our support team.

07Cookie & Tracking Technology Policy

The 666ff platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The following are the types of cookies we use:

You can manage or block cookies through your web browser settings at any time. However, blocking essential cookies may affect platform functionality and your gaming experience.

08Your Rights as a Data Owner

As a 666ff player, you have the following rights regarding your personal data. We are committed to facilitating the exercise of these rights within a reasonable timeframe:

09KYC & Identity Verification Process

The Know Your Customer (KYC) process is a legal requirement that helps 666ff prevent money laundering, terrorism financing, and identity fraud. While the process requires submission of personal documents, we ensure all data is handled with the highest level of security.

• Accepted KYC documents include a valid MyKad, Malaysian passport, or driving licence.
• All submitted documents are stored in an encrypted server environment and are only accessible by staff specifically authorized for KYC verification.
• A selfie or facial verification may be required for additional verification on larger withdrawal amounts.
• KYC documents will not be shared with any third party unless required by law or court order.
• The KYC process is typically completed within 24 business hours after complete documents are received and verified.

10Amendments to the Privacy Policy

666ff reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or new technological developments.

• Any material amendments will be communicated to registered players via a prominent in-platform notice at least 7 days before the changes take effect.
• For minor changes that do not affect your fundamental rights, we will update the "Last Updated" date at the top of this document without a separate notice.
• Continued use of the 666ff platform after the effective date of any amendment means you accept the updated Privacy Policy.
• Previous versions of the Privacy Policy are available upon request from our support team for your reference.

11Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how 666ff handles your personal data, our privacy team is ready to assist. We are committed to providing accurate and comprehensive responses to all privacy-related inquiries.

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the 666ff platform.
• Email: Reach us at [email protected] for privacy inquiries that require a formal written response.
• Response Time: General inquiries are answered within 24 hours; personal data rights requests are processed within 30 business days.