Bb66 Privacy Policy — How We Protect Your Personal Information

This Privacy Policy describes how bb66 (bb66.bz) collects, uses, discloses, and protects your personal information when you use our platform. We operate in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and are committed to maintaining the highest level of privacy for every member.

When you register an account, make a deposit, place a bet, or simply browse the bb66 website, you are entrusting us with your personal information. We do not take that trust lightly. Every data-related decision we make is grounded in a core principle: collect only what is necessary, use it only for stated purposes, and protect it to the best of our ability.

This policy applies to all bb66 platform users, including website visitors, registered members, and anyone who contacts our support team. Please read this document carefully as it contains important information about your rights.

Bb66 only collects personal data that is genuinely necessary to operate the platform safely and deliver the best experience to members. Below are the categories of data we collect and their purposes:

We do not collect sensitive information such as biometric data, medical records, or religious information unless specifically required by applicable Malaysian law.

The personal data we collect is used solely for the stated and lawful purposes. bb66 does not use your data for any purpose unrelated to the delivery of our betting platform services.

• Identity Verification (KYC): Verifies that you are a real individual eligible to use the bb66 platform in accordance with Malaysian legal requirements, including confirming that you are 18 years of age or older.
• Financial Transaction Processing: Processes deposits and withdrawals securely to your Malaysian bank account. Your financial data is used solely for this purpose and is never shared with any party other than authorised payment processors.
• Account Security: Monitors account activity to detect suspicious login attempts, identity fraud, or platform abuse. This protects you and all other members.
• Responsible Gaming: Uses your wagering activity data to identify patterns that may indicate problem gambling and to offer appropriate support where needed.
• Service Communication: Sends important account-related notifications, security updates, transaction confirmations, and promotional information that you have opted to receive.
• Platform Improvement: Analyses usage data in aggregate (without identifying individuals) to improve user experience, platform speed, and game quality.
• Legal Compliance: Fulfils reporting obligations to Malaysian authorities including the Malaysian Anti-Corruption Commission (SPRM) and Bank Negara Malaysia as required by law.

Bb66 does not sell, rent, or trade your personal data to any third party. However, in the course of operating the platform, we may share your data with the following categories of third parties under limited and controlled circumstances:

• Payment Processor: Licensed payment service providers that process your financial transactions, such as FPX, DuitNow, and digital wallet providers. They receive only the minimum information required to process each transaction.
• Identity Verification Provider: A third-party KYC service that helps verify your identity securely and quickly without requiring physical document submission.
• Game Provider: Internationally licensed gaming companies that provide slots, live casino, and other games on the bb66 platform. Only usernames and game IDs are shared, not full personal information.
• Not Shared: Your data will not be shared with advertising networks, third-party marketing companies, data brokers, or social media platforms for advertising purposes.
• Not Sold: bb66 has never sold or transferred member personal data to any party under any circumstances, without exception.

All third parties we work with are bound by strict data protection agreements and required to comply with data security standards equal to or higher than those of bb66.

Bb66 continuously invests in cybersecurity infrastructure to ensure your personal data is protected against unauthorised access, loss, destruction, or accidental disclosure. The following are the key security measures we have in place:

• 256-bit SSL Encryption: All communications between your browser or app and bb66 servers are encrypted using TLS 1.3 with AES-256 encryption. This standard is equivalent to that used by major banking institutions in Malaysia.
• Two-Factor Authentication (2FA): bb66 offers two-factor authentication for all member accounts to protect against unauthorised access, even if your password is compromised.
• 24/7 Security Monitoring: bb66's cybersecurity team continuously monitors our infrastructure to detect and respond to any threats in real time.
• Regular Security Testing: bb66 conducts regular penetration testing and security audits by independent cybersecurity firms to identify and address vulnerabilities before they can be exploited.
• Internal Access Controls: bb66 staff are only granted access to data necessary to perform their duties, based on a strict need-to-know principle. All access to member data is logged and regularly audited.

Bb66 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit the bb66 website.

• Essential Cookies: Required for core platform operations such as login, betting sessions, and security. These cookies cannot be disabled without affecting the platform's key functionality.
• Performance Cookies: Collects information about how you use the platform (pages visited, time spent) to help us improve website performance and navigation.
• Functional Cookies: Saves your preferences such as language, region, and display settings to deliver a more personalised experience each time you return.
• Analytics Cookies: Helps us understand overall usage patterns for continuous platform improvement. Analytics data is processed in aggregate and does not identify individuals.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of the bb66 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding personal data held by bb66. All requests will be processed within 14 business days.

• Right of Access: You have the right to know what personal data we hold about you and to request a copy at any time.
• Right to Rectification: If any personal data we hold about you is inaccurate or outdated, you have the right to request immediate correction.
• Right to Erasure: You may request the deletion of your personal data, subject to our legal record-keeping obligations. Data required for legal compliance purposes may need to be retained for a specified period.
• Right to Object to Processing: You may object to the processing of your personal data for direct marketing purposes at any time by emailing our privacy team.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of prior processing.

Bb66 retains your personal data only for as long as necessary for the stated purposes or as required by Malaysian law. Once the retention period expires, your data will be securely deleted or permanently anonymised.

• Active Account Data: Retained for as long as your account is active and for 7 years after account closure for Malaysia financial compliance purposes.
• Financial Transaction Records: Retained for 7 years in accordance with Malaysia accounting and financial legal requirements.
• KYC Records: Retained for 7 years after the date of last verification or account closure, whichever is later.
• Technical Logs: Security and technical log data is retained for 12 months for fraud detection and technical troubleshooting purposes.
• Communication Records: Live chat history and support emails are retained for 2 years for quality control and dispute resolution purposes.

The bb66 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors under the age of 18. If you believe a minor has provided us with personal data, please contact our support team immediately.

Bb66 employs a comprehensive age verification system during registration and the KYC process to prevent access by minors. Any account found to have been registered by a minor will be closed immediately and all related data deleted in accordance with established procedures.

Bb66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material amendments will be communicated to you via your registered email or in-platform notification at least 14 days before taking effect.

The "Last Updated" date at the top of this page will be updated whenever changes are made. We encourage you to review this page periodically. Continued use of the bb66 platform after the effective date of any amendment constitutes acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how bb66 handles your personal data, our privacy team is available to assist you 24 hours a day, 7 days a week.

• Live Chat: The fastest way to get help — click the live chat button in the bottom-right corner of the bb66 platform to connect directly with our team in Bahasa Melayu.
• Privacy Email: For more detailed written enquiries, contact us at [email protected]. We aim to respond to all email enquiries within 2 business days.
• Response Time: Personal data rights requests (access, correction, deletion) will be processed within 14 business days from the date a complete request is received.