Best66 Privacy Policy – Personal Data Protection for Malaysia Members

1Introduction & Scope of Privacy Policy

This Privacy Policy is issued by best66 ("we", "Platform") and applies to all individuals who use or register an account on the best66.bet platform ("Member", "you"). This Policy outlines our privacy practices regarding the collection, use, storage, disclosure, and protection of your personal data.

Best66 is committed to protecting the privacy of our members in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We recognise that your trust is our most valuable asset, and we take this responsibility seriously across every aspect of our platform's operations.

This Privacy Policy applies to all services offered by best66, including the main best66.bet website, the best66 mobile app, and all online betting products offered under the best66 brand — covering football betting, Live Casino, online slots, roulette, jackpot games, and e-sports.

2Personal Data We Collect

Best66 collects various types of personal data when you use our platform. Below are the data categories we collect and the purposes for which they are collected:

2.1 Data You Provide Directly

• Personal Identification Information: Full name, date of birth, gender, and identification card number (for KYC verification).
• Contact Information: Email address, mobile phone number, and residential address.
• Financial Information: Bank account numbers, e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay), and DuitNow information for deposit and withdrawal purposes.
• Verification Documents: Copy of national ID, driving licence or passport submitted during the KYC process.
• Account Information: Username, password (stored in hashed form), account preferences and personal settings.

2.2 Automatically Collected Data

• Technical Data: IP address, device type, operating system, browser type and application version used.
• Activity Data: Pages visited, access times, betting history, games played and financial transactions.
• Location Data: Approximate location data derived from IP address for geographical compliance purposes.
• Cookie Data: Information collected through cookies and similar tracking technologies to improve your experience on our platform.

2.3 Data Category & Purpose Table

3How We Use Your Personal Data

Best66 uses the personal data collected for the following purposes, all within the limits permitted under Malaysia's PDPA:

• Service Provision: Processing your account registration, deposits, withdrawals, and all betting transactions on the best66 platform.
• Identity Verification (KYC): Verifying member identity to meet Anti-Money Laundering (AML) and fraud prevention legal requirements.
• Service Communications: Sending important notifications related to your account, including transaction confirmations, security alerts and service updates.
• Marketing & Promotions: Sending best66 bonus offers, promotions, and new product updates — only where you have consented to receive marketing communications.
• Platform Enhancement: Analysing usage patterns to improve the design, functionality, and user experience of the best66 platform.
• Legal Compliance: Meeting the reporting and compliance obligations required under applicable Malaysian law.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, or any unlawful use of the platform.

Best66 will not use your personal data for any purpose not stated above without first obtaining your additional consent.

4Data Sharing With Third Parties

Best66 does not sell or trade members' personal data to third parties. However, in the course of operating our platform, we may share your personal data with the following limited categories of third parties, strictly to the extent necessary:

• Payment Service Providers: E-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow providers, and FPX banks (Maybank, CIMB, RHB) that process your financial transactions. Data sharing is strictly limited to information required to process transactions only.
• KYC Service Providers: Third-party companies engaged to verify member identity for legal compliance purposes.
• Technology Service Providers: Companies providing best66 with technical infrastructure, server hosting, and cybersecurity services, all bound by strict confidentiality agreements.
• Relevant Authorities: Malaysian government agencies or law enforcement authorities where we are required to do so by law or court order.

5Personal Data Security

Best66 implements comprehensive technical and organisational security measures to protect member personal data from unauthorised access, loss, destruction, or disclosure:

• 256-bit SSL/TLS Encryption: All communications between your device and best66's servers are protected with industry-standard encryption.
• Secure Data Storage: Personal data is stored on servers protected by multi-layered firewalls and strict access controls.
• Hashed Passwords: Your account password is never stored in plain text — we use a strong hashing algorithm (bcrypt) to protect your login credentials.
• Internal Access Controls: Access to members' personal data within best66 is restricted to staff with a legitimate business need only, based on the principle of least privilege.
• Continuous Monitoring: Our systems are monitored 24/7 to detect any suspicious activity or unauthorised access attempts.
• Regular Security Audits: best66 conducts regular security audits to identify and address any vulnerabilities within our systems.

While we do our best to protect your data, no security system can guarantee 100% protection against all cyber threats. We encourage you to take precautions as well — use a strong password and never share your best66 account login details with anyone.

6Cookies & Tracking Technologies

Best66 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helps us understand how members use the best66 platform so we can improve performance and the overall user experience.
• Functional Cookies: Saving your personal preferences such as display settings, favourite game selections, and notification preferences.
• Analytics Cookies: Used to collect aggregated data on platform usage patterns for best66's internal analytics purposes.

You can manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality and security of your best66 account. Please note that best66 does not use third-party cookies for advertising purposes that track your activity outside our platform.

7Your Privacy Rights as a Member

As a best66 member and data subject under Malaysia's PDPA, you have the following rights in relation to your personal data:

To exercise any of the rights above, please contact us by email at support@best66.bet with the subject line "Privacy Rights Request". We will process your request within 14 working days.

8Data Retention & Deletion

Best66 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required under Malaysian law. The following are our data retention guidelines:

• Active Account Data: Retained for as long as your account remains active on the best66 platform.
• KYC Data & Identification Documents: Retained for a minimum of 7 years following account closure, in accordance with Malaysia's AML legal requirements.
• Financial Transaction Records: Retained for 7 years for audit, tax compliance, and applicable legal requirements.
• Communication & Support Logs: Retained for 3 years for reference and dispute resolution purposes.
• Marketing Data: Retained until you withdraw your consent or close your account.

Upon expiry of the defined retention period, your personal data will be securely deleted or anonymised from our systems such that it can no longer be linked to your identity.

9Changes to This Privacy Policy

Best66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements to our services. When a material change occurs:

• We will update the "Last Updated" date at the top of this page.
• You will be notified via an in-platform notification on best66 or through the email address registered to your account.
• For significant changes, we may seek your renewed consent before those changes take effect.

We encourage you to review this Privacy Policy page periodically to stay informed about how we manage your personal data. Continued use of the best66 platform following any updates to this Privacy Policy will be considered acceptance of the revised terms.

10Contact Us Regarding Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or how best66 handles your personal data, please reach out to us through the following channels:

• Privacy Email: support@best66.bet (subject: "Privacy Enquiry")
• Live Chat: Available 24/7 on the best66.bet platform

Best66's Malay-speaking privacy team is on hand to address any enquiries regarding the protection of your personal data. We will endeavour to respond to all enquiries within 3 working days.

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia Personal Data Protection Department under the Ministry of Digital Malaysia.