Privacy Policy best66 – Your Data Rights

1Information We Collect

Best66 collects your personal information both directly and indirectly when you interact with our platform. The categories of information we collect are as follows:

Information you provide directly:

• Full name as per valid identification document.
• Date of birth for age verification purposes.
• Active email address used for account communications.
• Registered Malaysian mobile number.
• Bank account or e-wallet details for deposit and withdrawal purposes.
• A copy of your identification document (MyKad) and proof of address during the KYC process.

Information collected automatically:

• IP address and device information (device type, operating system, browser version).
• Log data including access times, pages visited, and actions taken within the platform.
• General location information based on IP address (not precise GPS location).
• Game session data including bets, wins, and transaction records.
• Cookie and tracking technology information as described in Section 5.

All information collected is used solely for the purposes clearly stated in this policy and does not exceed the scope required for the operation of the best66 platform.

2How We Use Your Data

The personal information we collect is used exclusively for the following purposes. Each use has a clear and lawful legal basis:

We do not use your data to make automated decisions that negatively affect you without human oversight. Any account action involving significant decisions will be reviewed by our team first.

3Personal Information Sharing

Best66 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. This is our absolute commitment and is non-negotiable.

Information sharing only occurs in the following limited and controlled circumstances:

• Approved service providers — Payment providers, KYC providers, and hosting companies that help us operate the platform. All such parties are bound by strict data protection agreements.
• Legal requirement — When required by a court, regulatory authority, or lawful law enforcement agency under the relevant jurisdiction.
• Fraud prevention — In cases involving suspected criminal activity, we may share necessary information with the relevant authorities.
• Business transfer — In the event of a company merger or acquisition, user data may be transferred as part of the business assets, subject to notice being given to users.

4Data Security & Technical Protection

We invest seriously in security infrastructure to ensure your personal data is always protected from unauthorized access, disclosure, alteration, or destruction.

The technical security measures we implement include:

• 256-bit SSL/TLS encryption — All data transmitted between your device and our servers is protected with the highest level of industry-recognised encryption.
• Encryption of data at rest — Passwords are stored using the bcrypt hashing algorithm, which cannot be decrypted. Other sensitive information is encrypted using AES-256.
• Two-factor authentication (2FA) — Users can enable 2FA for an additional layer of protection during login.
• 24/7 security monitoring — Our intrusion detection system (IDS) monitors traffic in real time to identify and block suspicious activity.
• Regular security audits — Vulnerability assessments and penetration testing are conducted regularly by independent security teams.
• Internal access controls — Access to user data is granted only to staff who require it for their specific duties, based on the principle of least privilege.

5Cookies & Tracking Technology

Best66 uses cookies and similar tracking technologies to enhance your experience on our platform, understand how users interact with our content, and ensure the security of your login session.

Types of cookies we use:

• Essential cookies — Required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Performance cookies — Helps us understand which pages are visited most frequently and how users navigate the platform, for continuous improvement purposes.
• Functional cookies — Stores your preferences such as language selection and display settings for a more personalised experience.
• Analytics cookies — Used to analyse usage patterns in aggregate and anonymised form to help us make better decisions about the platform.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the platform. For the best experience, we recommend allowing essential and functional cookies.

We do not use third-party tracking technologies for targeted advertising or sell your behavioral data to external advertising networks.

6User Rights Over Personal Data

As a best66 user, you have clear and enforceable rights regarding your personal data. We fully respect and facilitate the exercise of these rights:

• Right of Access — You have the right to request a copy of all personal data we hold about you. We will provide a complete report in a readable format within 14 business days.
• Right to Correction — If any information we hold is inaccurate or out of date, you have the right to request a correction and we will update it promptly.
• Right to Deletion — You may request the deletion of your personal data under certain circumstances, subject to our legal obligations to retain specific financial records.
• Right to Object — You may object to the processing of your data for direct marketing purposes at any time without needing to provide a reason.
• Data Portability Right — You have the right to receive your data in a structured, machine-readable format for transfer to another service provider.
• Right to Withdraw Consent — Where processing is based on your consent, you may withdraw that consent at any time without affecting the validity of prior processing.

To exercise any of the above rights, contact our data protection team via Live Chat, available 24/7 on the platform. We will acknowledge your request within 3 business days and resolve it within 30 days.

7Data Retention & Deletion

Best66 does not retain your personal data longer than is necessary for the original purpose of collection or as required by applicable law.

Our data retention guidelines are as follows:

• Active account data — Retained for the duration your account remains active and in good standing.
• Financial transaction records — Retained for a minimum of 7 years in accordance with applicable financial and tax legal requirements.
• KYC Documents — Retained for 5 years after the account closure date or the end of the business relationship.
• Support communication logs — Retained for 2 years for reference and dispute resolution purposes.
• Anonymous analytics data — May be retained indefinitely as it has been fully anonymised.

After the designated retention period ends, data will be securely deleted using methods that ensure it cannot be recovered. For accounts closed at the user's request, the deletion process will be initiated within 30 days after all legal obligations have been fulfilled.

8Children's Privacy & Underage Users

The best66 platform is strictly for users aged 18 and above. We do not knowingly collect, process, or store any personal information from individuals under the age of 18.

The steps we take to prevent underage access include:

• Mandatory age verification during the account registration process.
• A KYC process requiring verification of valid identification documents.
• Continuous monitoring to identify suspicious usage patterns.
• Immediate account closure upon confirmed identification of an underage user.

If you become aware that a minor has registered or is using the best66 platform, please contact our support team immediately via Live Chat so that prompt action can be taken. We will review the case, close the account, and delete all related data without delay.

9Changes to This Privacy Policy

Best66 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or directives from relevant authorities.

When material changes are made to this policy, we will:

• Publishing the latest version on this page with an updated "Effective Date".
• Sending a notice to your registered email address at least 7 days before changes take effect, for material changes.
• Displaying prominent notices on the platform to ensure you do not miss important information.

Your continued use of the best66 platform after the effective date of any policy changes constitutes your acceptance of the updated policy. If you disagree with the changes made, you have the right to close your account before they take effect.

We recommend reviewing this page regularly, at least once every three months, to stay informed about how we handle your personal data.

10Contact Us About Privacy

We take all privacy-related inquiries, concerns, and complaints seriously. Our Data Protection team is ready to assist you with any questions regarding how we handle your personal information.

You can reach us through the following channels:

• Live Chat — The fastest way to get an immediate response. Available 24 hours a day, 7 days a week directly on the best66 platform.
• Email — Send a written inquiry to our team at [email protected] for inquiries that require a detailed explanation.

For formal data rights requests (access, correction, deletion), please clearly state the type of request, your full name, and account number so we can process it efficiently. All requests will be acknowledged within 3 business days and resolved within 30 days.

We are committed to handling every complaint transparently and fairly. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority under applicable laws in Malaysia.