tab66 Privacy Policy – How We Protect Your Personal Data

1. Introduction

tab66 ("we", "us", "our") operates the online betting and casino platform available at tab66.asia (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with the tab66 Platform, including registered players, visitors, and prospective users.

This Privacy Policy ("Policy") describes how tab66 collects, processes, stores, shares, and protects your personal data in connection with your use of the Platform. It applies to data collected through the tab66 website, mobile application, customer support channels, and any other tab66-operated service.

2. Personal Data We Collect

2.1 Registration Data

When you create a tab66 account, we collect the information you provide during the registration process, including:

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Email address and mobile phone number;
• Residential address;
• Preferred username and encrypted account password.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, tab66 collects identity verification documents including government-issued photo identification (such as a Malaysian identity card or passport), proof of address documentation, and in certain circumstances, source of funds documentation. This information is used exclusively for identity verification and regulatory compliance purposes.

2.3 Financial Transaction Data

tab66 records details of all financial transactions conducted through your account, including deposit amounts and timestamps, withdrawal requests and processing records, payment method identifiers (such as bank account digits or eWallet account references), and bonus allocation and wagering history.

2.4 Usage and Technical Data

When you access the tab66 Platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Pages visited, features used, and session duration;
• Game play history, bet placement records, and session logs;
• Clickstream data and referral source information.

2.5 Communications Data

When you contact tab66 customer support via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the support agent's responses. This data is used to resolve disputes, improve service quality, and maintain compliance records.

3. How We Use Your Personal Data

tab66 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your tab66 player account and provide access to Platform services;
• Identity Verification: To verify your identity and age (21+) in compliance with our regulatory obligations and to prevent fraud;
• Transaction Processing: To process deposits, withdrawals, and bonus allocations in Malaysian Ringgit (MYR) via your chosen payment method;
• Regulatory Compliance: To comply with applicable anti-money laundering (AML) obligations, responsible gaming requirements, and regulatory reporting duties;
• Responsible Gaming: To monitor gambling patterns, enforce deposit and loss limits, and administer self-exclusion requests;
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our support services;
• Platform Security: To detect, investigate, and prevent fraudulent activity, multiple account creation, and abuse of promotional offers;
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and platform updates via email or in-app notification.

4. Legal Basis for Processing

tab66 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the services described in the tab66 Terms & Conditions, including account creation, transaction processing, and game delivery;
• Legal Obligation: Processing required to comply with applicable AML legislation, age verification requirements, and regulatory reporting obligations;
• Legitimate Interests: Processing necessary to protect the security and integrity of the Platform, prevent fraud, and enforce our Terms;
• Consent: Processing of your data for marketing communications, which is subject to your explicit opt-in and may be withdrawn at any time.

5. Sharing and Disclosure of Personal Data

tab66 does not sell, rent, or trade your personal data to third-party marketing organisations. tab66 may share your personal data with the following categories of recipients in the circumstances described:

5.1 Service Providers

tab66 engages third-party service providers who process personal data on our behalf under strict data processing agreements. These include payment processors (for MYR deposit and withdrawal handling via Touch n Go, Boost, Maybank, CIMB, and Public Bank), KYC and identity verification service providers, fraud detection and security analytics providers, and cloud infrastructure and data hosting providers.

5.2 Regulatory and Law Enforcement Authorities

tab66 may disclose personal data to regulatory bodies, law enforcement agencies, or other government authorities where required by law, court order, or applicable regulatory obligation. tab66 will not disclose more data than is strictly required to satisfy the relevant legal obligation.

5.3 Corporate Transactions

In the event of a merger, acquisition, or sale of tab66's business or assets, personal data held by tab66 may be transferred to the acquiring entity, subject to equivalent data protection obligations.

6. Cookies and Tracking Technologies

tab66 uses cookies and similar tracking technologies on the Platform to deliver and improve our services. Cookies used by tab66 include:

• Essential Cookies: Required for the Platform to function, including session management and security tokens. These cannot be disabled.
• Analytics Cookies: Used to understand how players interact with the Platform, identify popular features, and diagnose technical issues. Data collected is aggregated and anonymised where possible.
• Preference Cookies: Used to remember your Platform settings and preferences across sessions.

You may manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the tab66 Platform.

7. Data Security

tab66 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the tab66 Platform;
• Encryption of sensitive data fields (including passwords and payment method identifiers) at rest;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments;
• Two-factor authentication availability for player accounts.

Notwithstanding these measures, no data transmission over the internet can be guaranteed as completely secure. Players are responsible for maintaining the confidentiality of their tab66 account credentials.

8. Data Retention

tab66 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following retention principles:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• KYC documentation is retained for the period required by applicable regulatory obligations, typically five (5) years from the date of last account activity;
• Customer support communications are retained for two (2) years from the date of the interaction;
• Marketing consent records are retained for as long as the relevant consent remains valid and for a reasonable period thereafter for compliance evidence purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with tab66's data disposal procedures.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by tab66:

• Right of Access: You may request a copy of the personal data tab66 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data, subject to tab66's legal and regulatory retention obligations;
• Right to Restrict Processing: You may request that tab66 restrict the processing of your data in certain circumstances;
• Right to Object: You may object to processing of your data for direct marketing purposes at any time;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact tab66 via the 24/7 live chat support channel or by emailing [email protected]. tab66 will respond to verified data rights requests within 30 days.

10. Children's Privacy

Parents or guardians who believe that a minor may have registered on the tab66 Platform should contact our support team immediately via live chat or at [email protected].

11. International Data Transfers

tab66's primary infrastructure is designed to process Malaysian player data in compliance with applicable data protection standards. Where data processing requires transfer to service providers located in other jurisdictions, tab66 ensures that appropriate safeguards are in place — including contractual data protection clauses equivalent to applicable standards — to protect the data during and after transfer.

12. Updates to This Privacy Policy

tab66 reserves the right to update this Privacy Policy at any time. When material changes are made, tab66 will provide reasonable advance notice to registered players via the email address on record and/or through a prominent notice on the Platform. Your continued use of the tab66 Platform after the effective date of any revised Policy constitutes your acceptance of the changes. The date of the most recent revision is displayed at the top of this page.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or tab66's data practices, please contact us through the following channels:

• Live Chat: Available 24/7 via the tab66 Platform (preferred for urgent enquiries);
• Email: [email protected] — please include "Privacy Request" in the subject line;
• Support Hours: 08:00 – 00:00 MYT (UTC+8), English language.

tab66 is committed to addressing all privacy-related enquiries in good faith and within the timeframes required by applicable law.