Your Personal Data Protection at tab66

Collection of Personal Information

tab66 collects your personal information to ensure that platform services can be provided correctly, securely and in compliance with the international licensing requirements under which we operate. The information we collect includes:

• Identity information: full name, identity card number (MyKad), date of birth and gender upon account registration.
• Contact information: email address, mobile phone number and, where necessary, mailing address.
• Financial information: details of payment methods used such as Touch 'n Go eWallet, DuitNow, FPX, Boost or crypto accounts, including records of deposit and withdrawal transactions.
• Technical information: IP address, web browser type, device operating system, session timestamps and website navigation data.
• Communication records: the history of your interactions with our customer support team via live chat or email.

Collecting this information is necessary to verify user identity, process financial transactions, prevent fraud and fulfil our licensing obligations.

Purpose of Use of Information

Personal information you provide to tab66 is used for the following purposes only:

• Identity and age verification (21 years and above) during new account registration in line with licensing requirements.
• Processing deposits and withdrawals via supported payment methods.
• User account management, including security settings, passwords and notification preferences.
• Delivery of relevant service communications such as transaction confirmations, security alerts and terms updates.
• Prevention of fraud, money laundering and activities that violate the terms of service.
• Continuous platform improvement, including analysis of usage patterns in aggregate and anonymous form.
• Compliance with mandatory reporting requirements under our international licensing.

Sharing Information with Third Parties

tab66 does not sell or transfer your personal information to third parties for commercial purposes. However, we may share your information in the following limited situations:

• Payment service providers used to process deposits and withdrawals — they are bound by strict confidentiality agreements.
• Technology service providers that help us run platform operations, including data hosting and cybersecurity.
• Regulatory authorities or law enforcement, only when legally required or based on a valid court order.
• In cases of fraud investigations or serious breaches of the terms of service, where sharing information is necessary to protect the interests of other users or the integrity of the platform.

In all cases of sharing, we ensure that the receiving party is bound by equivalent data protection obligations.

Data Storage and Retention Period

Your personal information is stored on servers protected with encryption and multiple layers of security controls. Server locations comply with the data protection standards set under our international licensing.

Data retention periods depend on the type of information:

• Active account information is retained for the duration your account is active, plus any additional period required by licensing regulations after account closure.
• Financial transaction records are retained for the minimum period set by licensing requirements and online gambling industry standards.
• Technical logs and navigation data are retained for a shorter period and used primarily for security and technical diagnostic purposes.
• Customer support communication records are retained to ensure service continuity and internal quality audits.

When information is no longer needed and the mandatory retention period has expired, it will be securely deleted or anonymised.

Security of Personal Information

tab66 implements comprehensive technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and our platform.
• Encryption of data at rest for sensitive stored information.
• Two-factor authentication (2FA) available to protect user accounts.
• Continuous security monitoring and automated intrusion detection systems.
• Role-based access controls ensuring only authorised staff can access user data.
• Security audits and penetration testing conducted periodically by independent parties.

While we take all reasonable steps, no system can guarantee absolute security. We encourage users to use strong passwords and not share account details with anyone.

Your Rights Under This Privacy Policy

As a tab66 user, you have the following rights regarding your personal information. To exercise any of these rights, contact our support team via live chat or email.

• Right of access: you have the right to request a copy of the personal information we hold about you.
• Right to rectification: if any of your information is inaccurate or incomplete, you may request that we correct it.
• Right to erasure: in certain circumstances, you may request that we delete your personal information, subject to our legal retention obligations.
• Right to restrict processing: you may request that we limit how we process your information in certain circumstances.
• Right to object: you may object to the processing of your information for specific purposes such as direct marketing.
• Right to data portability: you may request that your information be delivered in a machine-readable format.

Children and Protection of Underage Users

The tab66 platform is for users aged 21 and above only. We do not knowingly collect or process personal information from individuals under the age of 21. Our account registration process includes age verification steps designed to identify and prevent registration by those who are underage.

If we find that personal information of an underage individual has been collected unintentionally, we will take immediate action to delete that information and close the relevant account. Parents or guardians who discover that their child has registered a tab66 account are encouraged to contact us immediately.

Amendments to the Privacy Policy

tab66 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. When amendments are made:

• The "Updated" date at the top of this document will be updated.
• Users will be notified via a clear notice on the platform or via email for significant amendments.
• Continued use of the platform after the amendment effective date is considered acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed.