Rujukan Laman

How We Handle Your Personal Data

At win666, your personal data is collected only for account management, transaction processing, and service delivery — nothing more.

Data Collected TransparentlyRetention Limits AppliedYour Rights, Clearly StatedContact Us Anytime
win666 How We Handle Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Data

Team online

Email Our Data Team

Send a written request to our privacy email address to ask what data we hold about you, request corrections, or ask us to delete records we no longer need for operational or legal purposes.

Live Chat Support

Our support chat is available around the clock. Start a conversation, identify yourself as making a privacy enquiry, and our team will route your request to the right contact within one business day.

Written Postal Request

For formal data access requests, you may write to us at the registered correspondence address listed at the bottom of this policy. We respond to verified written requests within 30 days of receipt.

HOW WE PROTECT DATA

Our Practices for Data Security and Retention

We keep your data only as long as your account is active or as required by applicable law. When data is no longer needed, we delete or anonymise it.

Encrypted Storage

All account credentials and payment identifiers are stored using industry-standard encryption. Raw card or wallet numbers from Touch 'n Go, GrabPay, Boost dan FPX are never written to our servers — only tokenised references are kept.

Cookie Controls

We use session cookies to keep you logged in and analytics cookies to understand how you navigate the platform. You can review and adjust your cookie preferences at any time from the settings panel in your account.

Account Access Security

Your account is protected by password authentication and optional two-factor verification via SMS. We log each login attempt and flag unusual access patterns, sending you an alert if we detect a sign-in from an unrecognised device or location.

Data Retention Schedule

Transaction records are kept for the period required by applicable financial regulations. Account profile data is held while your account remains open. Once you close your account, we begin the deletion cycle within 90 days, subject to any outstanding legal hold.

Third-Party Data Sharing

We share data only with payment processors needed to clear your deposit or withdrawal, and with identity-verification partners required by regulation. Every third party is bound by a data processing agreement that limits them to the specified purpose.

Requesting Changes to Your Data

You can request a copy of your data, ask us to correct inaccuracies, or ask for erasure by contacting our privacy team via the channels listed in this policy. We confirm receipt within two business days and complete the action within 30 days.

Frequently Asked Questions About Our Privacy Policy

These answers cover the most common questions about how win666 handles your personal data, your rights under this policy, and how to exercise them.

We collect your full name, email address, phone number, and a copy of your identity document for verification. Once you make a deposit, we also record a tokenised reference from your chosen payment method — Touch 'n Go, GrabPay, Boost dan FPX — for transaction processing.

We share data only with the payment processors that clear your transactions and with regulated identity-verification services. We do not sell, rent, or trade your personal data with advertisers or unrelated third parties under any circumstances.

After you close your account, we begin the deletion cycle within 90 days. Transaction logs required by financial regulation may be retained for a longer period as mandated by applicable law before they are permanently deleted or anonymised.

Yes. Send a data access request to our privacy team via email or live chat. We will verify your identity and provide a structured copy of your personal data within 30 days of receiving a complete, verified request.

Contact our privacy team by email, live chat, or written postal request. Once we verify your identity, we will process the erasure within 30 days, except for records we are legally required to retain for regulatory compliance purposes.

We use session cookies to maintain your login state and analytics cookies to understand page navigation. You can review and turn off non-essential cookies in your account settings panel at any time without affecting your ability to log in or transact.

When you deposit via GrabPay, Boost, or any other supported method, we receive only a tokenised transaction reference — not your wallet credentials. Data is encrypted in transit and at rest, and payment processors operate under their own regulated data security obligations in Malaysia, where local law permits.