Privacy Policy – 668duit Malaysia Betting Platform

1.Introduction & Scope

This Privacy Policy ("Policy") applies to all personal data processed by 668duit in connection with the operation of the 668duit online betting and casino platform accessible at 668duit.asia ("the Platform"). It governs data collected from Members, prospective Members, and visitors to the Platform, regardless of whether they are located in Kuala Lumpur, Penang, Johor Bahru, or elsewhere.

By registering a 668duit account or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood its terms. If you do not agree with any aspect of this Policy, you should discontinue your use of the Platform and may request account closure through the support channel.

668duit processes personal data in accordance with applicable data protection principles, including the principle of purpose limitation, data minimisation, accuracy, and storage limitation. We do not sell personal data to third parties for marketing purposes.

2.Data We Collect

668duit collects personal data in the following categories:

Category	Examples	Source
Identity Data	Full legal name, date of birth, gender, government-issued ID number	Provided by Member during registration or verification
Contact Data	Email address, mobile number, residential address	Provided by Member
Financial Data	Payment method details (e.g., Touch 'n Go eWallet account reference, Maybank account reference), transaction history, deposit and withdrawal records	Provided by Member and generated by platform activity
Account Data	Username, hashed password, account preferences, responsible gaming settings, bonus history	Generated by platform activity
Betting & Gaming Data	Wager history, game session logs, sport and market preferences, win/loss records	Generated by platform activity
Technical Data	IP address, browser type and version, operating system, device identifiers, session timestamps, pages visited	Automatically collected via platform access
Communications Data	Live chat transcripts, support email correspondence, feedback submitted	Generated through Member contact with 668duit support

668duit does not collect sensitive special categories of personal data (such as racial or ethnic origin, religious beliefs, or health data) except where required for responsible gaming safeguarding purposes, in which case the processing is carried out under applicable data protection grounds.

3.How We Use Your Data

668duit uses the personal data we collect for the following purposes:

Account Management: To create, maintain, and administer your 668duit Member account, including processing your login credentials and managing account security settings.
Service Delivery: To enable you to place bets, participate in casino games, make deposits and withdrawals, and use all features of the 668duit platform.
Identity Verification & KYC: To verify your identity and age (21+ requirement), prevent duplicate accounts, and comply with anti-money laundering obligations.
Payment Processing: To facilitate deposits from and withdrawals to your registered payment methods, including Touch 'n Go eWallet, Boost, and local bank transfers.
Customer Support: To respond to your enquiries, resolve disputes, and process responsible gaming requests such as self-exclusion or deposit limit adjustments.
Fraud Prevention & Security: To detect and prevent unauthorised account access, fraudulent transactions, and prohibited activities including multi-accounting and money laundering.
Responsible Gaming Monitoring: To identify patterns of betting behaviour that may indicate gambling harm and to apply responsible gaming interventions where appropriate.
Platform Improvement: To analyse aggregate usage data to improve the platform's functionality, speed, content, and user experience.
Communications: To send you transactional notifications (e.g., deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about 668duit offers.

4.Legal Basis for Processing

668duit processes your personal data on the following legal grounds:

Contractual Necessity: Processing required to provide the services you have requested under the 668duit Terms & Conditions — including account management, bet settlement, and payment processing.
Legitimate Interests: Processing carried out for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where such interests are not overridden by your fundamental rights.
Legal Obligation: Processing required to comply with applicable legal obligations, including identity verification and anti-money laundering requirements.
Consent: Processing for optional marketing communications, where you have provided express opt-in consent. You may withdraw this consent at any time by updating your notification preferences in your account settings.

5.Data Sharing & Disclosure

668duit does not sell, rent, or trade your personal data to third parties. We may share your data in the following limited circumstances:

Payment Processors: Financial data is shared with your chosen payment service provider (e.g., Touch 'n Go eWallet operator, Boost, Maybank, CIMB, FPX network) solely to process your deposit or withdrawal transaction.
Game Providers: Where required to enable gameplay, technical session data may be shared with third-party game studio providers (e.g., for live casino table access). Game providers do not receive your full identity data.
Identity Verification Services: Identity and document data may be shared with third-party KYC verification providers to fulfil age and identity verification obligations.
Legal & Regulatory Authorities: 668duit will disclose personal data to law enforcement, regulators, or courts where required to do so by applicable law or valid legal process.
Fraud Prevention Networks: Certain account and transaction data may be shared with industry fraud prevention databases to prevent multi-accounting and financial crime across the online gaming sector.

All third-party service providers engaged by 668duit are bound by data processing agreements that prohibit them from using your personal data for any purpose beyond the specific service they provide to 668duit.

6.Cookies & Tracking Technologies

6.1 668duit uses cookies and similar tracking technologies on the Platform to enable core functionality, maintain your login session, remember your preferences, and analyse aggregate platform usage.

6.2 The following categories of cookies are used on 668duit:

Strictly Necessary Cookies: Required for the platform to function, including session authentication and security tokens. These cannot be disabled.
Functional Cookies: Used to remember your account preferences such as language, display settings, and responsible gaming configurations.
Analytics Cookies: Used to collect aggregate, anonymised data about how Members navigate and use the platform, enabling us to identify and resolve usability issues.

6.3 668duit does not use third-party advertising cookies or cross-site tracking cookies. You may manage non-essential cookie preferences through your browser settings, though disabling certain cookies may affect platform functionality.

7.Data Retention

7.1 668duit retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations.

7.2 Account data is retained for the duration of your active 668duit membership. Following account closure, personal data is retained for a minimum period as required under anti-money laundering and financial record-keeping obligations.

7.3 Betting and gaming transaction records are retained for the period required under applicable gaming regulatory standards.

7.4 Communications data, including live chat transcripts, is retained for a reasonable period to support dispute resolution and quality assurance, after which it is securely deleted.

8.Data Security

668duit implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

256-bit SSL/TLS encryption for all data transmitted between your browser and the 668duit platform
Hashed and salted password storage — 668duit staff cannot view your plain-text password
Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis
Automated login anomaly detection and account locking on suspicious access attempts
Regular security assessments and vulnerability testing of the 668duit platform infrastructure

While 668duit employs robust security practices, no online platform can guarantee absolute security. Members are encouraged to use strong, unique passwords and to enable two-factor authentication on their 668duit account.

9.Your Rights

Subject to applicable data protection law, you have the following rights in relation to the personal data 668duit holds about you:

Right of Access: You may request a copy of the personal data 668duit holds about you.
Right to Rectification: You may request that inaccurate personal data be corrected. You may update certain details directly from your account settings.
Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to 668duit's legal retention obligations.
Right to Restriction: You may request that 668duit restrict the processing of your personal data in certain circumstances while a concern is being investigated.
Right to Object: You may object to the processing of your personal data where 668duit relies on legitimate interests as the legal basis.
Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact the 668duit support team via live chat or at [email protected]. 668duit will respond to data rights requests within thirty (30) days.

10.Children's Privacy

668duit strictly prohibits individuals under the age of 21 from registering or using the platform. We do not knowingly collect personal data from anyone under 21. If we discover that an account holder is underage, the account will be suspended immediately and all funds handled in accordance with our responsible gaming and legal obligations.

If you believe that a person under the age of 21 has provided personal data to 668duit, please contact us immediately at [email protected] so that we can take appropriate action.

11.Changes to This Policy

11.1 668duit may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform functionality. Where updates are material, we will notify active Members via their registered email address or through an in-platform notification prior to the updated Policy taking effect.

11.2 The effective date at the top of this Policy indicates when it was last updated. Continued use of the 668duit platform following a Policy update constitutes your acceptance of the revised terms.

12.Contact Us

For any questions, concerns, or data rights requests relating to this Privacy Policy or 668duit's handling of your personal data, please contact our support team:

Live Chat: Available 24/7 via the 668duit platform
Email: [email protected] (plain text — not a clickable link)

Our support team operates in Malaysian English and is available around the clock to assist with privacy-related enquiries.