01 — Introduction
This Privacy Policy explains in detail how vip66 ("we", "our platform") collects, processes, stores, and protects your personal information when you use our services on vip66.sx and its associated mobile applications.
As an online betting platform operating in Malaysia, we take your privacy seriously. We fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. By using the vip66 platform, you agree to the collection and use of your information as described in this document.
We encourage you to read this policy carefully in its entirety. If there are sections you do not understand or if you have any questions, please contact our support team — available 24 hours a day, 7 days a week.
02 — Data We Collect
Vip66 only collects data that is genuinely necessary to provide you with a safe, seamless and responsible service. We do not collect excessive information or anything irrelevant to the purpose of our services.
Directly Provided Data
- Full name as stated on a valid identification document
- Active email address used during registration
- A Malaysia phone number verifiable via SMS
- Date of birth for age verification purposes
- Bank account or e-wallet details for deposit and withdrawal transactions
- Copies of KYC documents such as MyKad or passport when required
Automatically Collected Data
- IP address and approximate location information based on IP
- Device type, operating system, and web browser version used
- Session data including pages visited, time spent, and actions taken
- Cookie data and device identifiers to facilitate the login experience
- Records of wagering activity, including bets placed, game outcomes and financial transactions
- Communication logs with our customer support team
03 — How Your Data Is Used
Every piece of information we collect has a clear and legitimate purpose. We do not use your data for purposes unrelated to delivering vip66 services without your prior consent.
| Purpose of Use | Data Type | Legal Basis |
|---|---|---|
| Identity verification & KYC | Name, IC/Passport, date of birth | Legal obligations |
| Deposit & withdrawal processing | Bank details, e-wallet | Contract performance |
| Sending notifications & promotions | Email, phone number | User consent |
| Fraud detection & security | IP, session data, activity logs | Vip66 Legitimate Interests |
| Product & platform improvement | Usage data, session logs | Vip66 Legitimate Interests |
| Responsible gaming | Betting records and behavioral patterns | Legal obligations |
We also use aggregated, de-identified data to understand general platform usage trends, plan more relevant promotional campaigns, and improve service quality. This type of data cannot be traced back to any specific individual.
04 — Sharing Data with Third Parties
Vip66 does not sell, rent or disclose your personal data to third parties for their own marketing purposes. We only share data in very limited situations and strictly for legitimate purposes.
Permitted Data Sharing Situations
- Payment Service Providers — transaction information is shared with FPX, Touch 'n Go, GrabPay and other providers solely to process your payments
- Game Providers — usernames and account IDs are shared with providers such as Pragmatic Play and Evolution Gaming to enable you to play
- Identity Verification Services — KYC documents are shared with approved verification service providers for compliance purposes
- Competent Authorities — we will disclose data when required by court order, police investigation or other legal obligations
- Business Transfer — in the event of a company merger or acquisition, user data may be transferred to the new entity with the same or better protections
05 — Data Security
Protecting your personal data from unauthorised access, loss, or misuse is one of our greatest responsibilities at vip66. We continuously invest in sophisticated security infrastructure to ensure your data remains safe at all times.
Security Measures We Implement
- Data encryption in transit using TLS 1.3 protocol — the highest standard currently available
- At-rest data encryption using AES-256 for all sensitive information stored in our database
- Next-generation firewall with active intrusion detection and prevention system (IDS/IPS)
- 24/7 security monitoring by an in-house cybersecurity expert team
- Independent security audits conducted every six months by a certified security firm
- Network segregation with a demilitarized zone (DMZ) for public-facing systems
- Role-based access control (RBAC) — only authorised staff can access your data
- Two-factor authentication (2FA) is mandatory for all staff access to internal systems
06 — Cookies and Tracking Technologies
Vip66 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
Types of Cookies We Use
- Essential Cookies — required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
- Performance Cookies — collecting information on how you use the platform to help us identify issues and improve the overall user experience.
- Functional Cookies — remembering your preferences and settings such as language, currency and your preferred display layout.
- Analytics Cookies — used by our internal analytics tools to understand platform usage patterns in aggregate and anonymous form.
You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of the vip66 platform. We recommend keeping at least essential cookies enabled for the best experience.
07 — Your Rights as a User
Under Malaysia's PDPA and the data protection principles we uphold, you have several important rights regarding your personal data. vip66 fully respects and facilitates the exercise of these rights.
Right of Access
You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 working days.
Right to Rectification
If any of your data is inaccurate or outdated, you have the right to request immediate correction through your account settings or customer support.
Right to Erasure
You may request the deletion of your personal data when it is no longer required, subject to certain legal retention obligations.
Right to Object
You have the right to object to the processing of your data for direct marketing purposes at any time, without providing any justification.
Right to Data Portability
You may request your data in a machine-readable format for transfer to another relevant service.
Right to Withdraw Consent
For processing based on consent, you may withdraw your consent at any time through your account settings.
To exercise any of the above rights, contact our data protection team by email at [email protected]. Please state the specific right you wish to exercise and we will respond within the timeframe required by law.
08 — Data Retention Period
Vip66 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or for as long as required by applicable laws and regulations. We maintain a clear records management policy to ensure data is not kept beyond the appropriate period.
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account information | Throughout the active account period | Service provision |
| Financial transaction records | 7 years after transaction | Tax & legal obligations |
| KYC Documents | 5 years after account closure | AML/CTF compliance |
| Support communication logs | 2 years | Quality assurance |
| Cookie & session data | 30 days to 12 months | Functionality & analytics |
| Marketing data (if consented) | Until consent is withdrawn | User consent |
Once the retention period ends, your data will be securely deleted using industry-approved methods, or fully anonymized if it is needed for statistical or analytical purposes.
09 — Child Protection
The vip66 platform is exclusively for users aged 18 and above. We do not knowingly collect personal data from any individual under the age of 18 under any circumstances.
If we discover that personal data belonging to a minor has been collected without the knowledge or consent of a legal guardian, we will take immediate steps to delete that data and close the relevant account. If you believe your underage child has accessed our platform, please contact us right away so we can act without delay.
10 — Amendments to the Privacy Policy
Vip66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements or service improvements. Every amendment will be accompanied by a clear update date at the top of this document.
- Material amendments will be communicated to users via registered email or in-platform notification at least 7 days before taking effect
- Minor amendments or technical corrections may be updated without separate notice
- Continued use of the platform after the effective date of any amendment is considered acceptance of the latest version
- Previous versions of the Privacy Policy are available upon request from our support team for your reference
We encourage you to check this page periodically to stay informed about how we manage your personal data. Your trust is our most valued asset, and we will never take that responsibility lightly.
11 — Contact Us Regarding Privacy
If you have any questions, concerns, or wish to exercise your rights regarding personal data, our Data Protection Officer (DPO) team is ready to assist you. We take every privacy-related concern seriously and are committed to providing a clear response within the stipulated timeframe.
- Data Protection Email: [email protected] (subject: "Privacy Inquiry")
- Live Chat: available on the platform after login, response within 5 minutes
- Email response time: within 3 business days for privacy inquiries
- User rights request response time: within 14 business days
Here is how vip66 concretely ensures your data remains safe, protected, and used appropriately at all times.
Full PDPA Compliance
Vip66 operates in full compliance with Malaysia's Personal Data Protection Act 2010. Every data collection and processing practice we carry out has been reviewed by legal experts to ensure absolute compliance without compromise.
Bank-Grade Encryption
Your sensitive data is protected by TLS 1.3 encryption in transit and AES-256 encryption at rest — the same standards used by leading banking institutions and government agencies worldwide. No shortcuts when it comes to security.
No Data Sales
We strictly do not sell, rent, or disclose your data to third-party advertisers or data brokers. Your data is used solely to support your gaming experience on vip66, not for any other commercial purpose.
Dedicated Data Protection Officer
Vip66 appoints an internal Data Protection Officer (DPO) responsible for ensuring all our privacy practices remain current, legally compliant and responsive to any user complaints promptly and transparently.
Regular Security Audits
Our platform undergoes independent security audits every six months by an accredited external firm. Audit findings are used to continuously strengthen our data protection systems — not merely to fulfil a formality.
Full Control in Your Hands
Through your vip66 account settings, you can manage your privacy preferences, withdraw marketing consent, request a copy of your data, or apply for account deletion at any time — simple, fast, and hassle-free.