666cuci Privacy Policy

1. Overview

This Privacy Policy ("Policy") describes the practices of 666cuci ("the Company", "we", "us", "our") with respect to the collection, use, storage, disclosure, and protection of personal data obtained from individuals ("you", "the Member", "the User") who access or use the website at https://666cuci.win and all associated services (collectively, "the Platform").

666cuci recognises the importance of privacy to our Members across Malaysia — from Kuala Lumpur and Penang to Johor Bahru and Petaling Jaya — and we are committed to treating your personal data with the same level of care and discretion that you would expect from any financial services or fintech platform operating in the region.

This Policy should be read together with our Terms & Conditions, which govern your use of the 666cuci platform more broadly.

2. Personal Data We Collect

Depending on how you interact with the 666cuci platform, we may collect the following categories of personal data:

2.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth and age verification documentation (e.g., MyKad, passport);
• Nationality and country of residence;
• Username chosen at registration.

2.2 Contact Data

• Email address;
• Mobile phone number;
• Correspondence address (where required for KYC verification).

2.3 Financial & Transaction Data

• Payment method details sufficient for processing deposits and withdrawals — including Touch n Go eWallet account references, Boost eWallet references, bank account numbers (Maybank, CIMB, Public Bank), and USDT wallet addresses;
• Transaction history, including deposit amounts, withdrawal requests, and wager records;
• Promotional credit and bonus history.

2.4 Technical & Usage Data

• IP address and approximate geolocation data derived therefrom;
• Device type, operating system, and browser version;
• Session timestamps and duration;
• Pages visited, games played, and features accessed on the Platform;
• Clickstream data and interaction logs.

2.5 Communications Data

• Records of live chat conversations with the 666cuci support team;
• Email correspondence submitted to [email protected];
• Any other communications you initiate with 666cuci through on-platform channels.

2.6 Responsible Gaming Data

• Deposit limit, loss limit, and session limit configurations set by the Member;
• Self-exclusion status and duration where applicable;
• Responsible gaming tool usage history.

3. How Personal Data Is Collected

666cuci collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a survey or promotion;
• Automated collection: Technical and usage data collected automatically when you access and navigate the Platform, through cookies, log files, and similar tracking technologies as described in Section 10;
• Third-party sources: Identity and verification data obtained from KYC service providers and fraud prevention databases where required to comply with applicable legal obligations;
• Payment processors: Transaction confirmation and payment reference data received from third-party payment processors facilitating deposits and withdrawals on the Platform.

4. How We Use Your Personal Data

666cuci uses personal data collected from Members for the following purposes:

• To create, verify, manage, and maintain your 666cuci account;
• To process deposits, withdrawals, and other financial transactions on the Platform;
• To verify your identity and age in compliance with our KYC obligations;
• To detect, investigate, and prevent fraud, money laundering, and other financial crimes;
• To personalise your Platform experience and provide relevant game recommendations;
• To administer bonuses, promotions, and loyalty programmes in accordance with their applicable terms;
• To provide customer support and respond to your enquiries through live chat and email;
• To send transactional communications (account notifications, deposit confirmations, withdrawal updates);
• To monitor and enforce compliance with our Terms & Conditions and this Policy;
• To maintain responsible gaming controls, including processing self-exclusion requests and limit configurations;
• To comply with applicable legal and regulatory obligations;
• To analyse Platform usage patterns for the purpose of improving the Platform's performance, security, and user experience.

666cuci does not use your personal data for unsolicited third-party marketing, nor do we sell, rent, or trade your personal data to any unaffiliated third party for commercial purposes.

5. Legal Basis for Processing

To the extent that data protection laws require 666cuci to identify a legal basis for processing your personal data, we rely on the following bases depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Member agreement (e.g., account management, payment processing, support services);
• Legal obligation: Processing required to comply with applicable law, including KYC, anti-money laundering, and responsible gaming obligations;
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and product improvement, where such interests are not overridden by your privacy rights;
• Consent: Where we rely on consent for a specific processing activity (such as optional marketing communications), we will obtain your explicit consent prior to that processing and provide a straightforward mechanism for withdrawing consent.

6. Sharing of Personal Data

666cuci does not sell, rent, or disclose your personal data to third parties for their own independent marketing or commercial purposes. We may share personal data with third parties only in the following limited circumstances:

6.1 Service Providers

We engage third-party service providers who assist us in operating the Platform — including payment processors, KYC verification services, fraud prevention providers, cloud infrastructure providers, and customer support platform operators. These providers access only the personal data necessary to perform their contracted services and are contractually prohibited from using it for any other purpose.

6.2 Legal and Regulatory Disclosure

We may disclose personal data where required to do so by applicable law, court order, or the request of a competent governmental or regulatory authority. In such cases, we will disclose only the minimum personal data required to satisfy the legal obligation.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of 666cuci's assets, Member personal data may be transferred as part of that transaction. Where such a transfer occurs, the receiving entity will be required to honour the commitments made in this Policy.

6.4 Fraud Prevention Networks

Where we have reasonable grounds to suspect fraudulent activity, money laundering, or other financial crime, we may share relevant data with industry fraud prevention networks and, where legally required, with law enforcement authorities.

7. International Data Transfers

The 666cuci Platform is operated with infrastructure that may involve the storage or processing of personal data outside Malaysia. Where personal data is transferred to jurisdictions that may not provide the same level of data protection as Malaysia, 666cuci takes appropriate contractual and technical safeguards to ensure your data remains protected to a standard consistent with this Policy.

If you have concerns about international data transfers as they relate to your personal data, please contact us via the details in Section 14.

8. Data Retention

666cuci retains personal data for as long as is necessary to fulfil the purposes described in this Policy, and in any event for the minimum period required by applicable law. The following general retention principles apply:

• Account and identity data is retained for the duration of your membership and for a further period of not less than five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations;
• Transaction records are retained for a minimum of seven (7) years following the date of the relevant transaction;
• Support communications are retained for a period of three (3) years from the date of the communication;
• Technical and usage data is typically retained for no longer than twenty-four (24) months from collection, subject to anonymisation or deletion at the earlier of that period or when the data is no longer required for its collection purpose.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

9. Data Security

666cuci implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption across all Platform connections, including the 666cuci login page and all account management pages;
• Encryption of sensitive data fields at rest within our databases;
• Access controls limiting internal data access to personnel with a legitimate operational need;
• Monitoring systems that detect and alert on anomalous access patterns;
• Regular security assessments and penetration testing of Platform infrastructure;
• Segregation of Member funds in designated accounts separate from operational accounts.

While 666cuci takes data security seriously and implements industry-standard protections, no system is entirely immune to breach. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected Members in accordance with applicable legal requirements.

10. Cookies & Tracking Technologies

The 666cuci Platform uses cookies and similar tracking technologies to support Platform functionality, enhance the user experience, and collect usage analytics. The following categories of cookies may be used:

• Strictly necessary cookies: Essential for the Platform to function — including session authentication cookies that maintain your logged-in state during a 666cuci login session. These cannot be disabled without breaking core Platform functionality;
• Functional cookies: Store your preferences such as language settings, responsible gaming tool configurations, and game lobby filters to personalise your Platform experience;
• Analytics cookies: Collect aggregated, anonymised data on how visitors navigate and use the Platform — helping us identify pages that work well and areas that need improvement. No personally identifying information is included in analytics data;
• Security cookies: Assist in detecting and preventing fraudulent login attempts, account takeover attacks, and other security threats.

You may manage cookie preferences through your browser settings. Note that disabling cookies other than strictly necessary cookies may affect your experience on the Platform. 666cuci does not use third-party advertising cookies or sell cookie data to advertisers.

11. Your Rights

Subject to applicable data protection laws, you have the following rights with respect to personal data that 666cuci holds about you:

• Right of access: You may request a copy of the personal data 666cuci holds about you;
• Right to rectification: You may request correction of any inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to our legal and regulatory record-keeping obligations;
• Right to restrict processing: You may request that we restrict the processing of your data in certain circumstances;
• Right to data portability: Where technically feasible and legally applicable, you may request a copy of your personal data in a structured, machine-readable format;
• Right to object: You may object to processing based on our legitimate interests where you have grounds to do so based on your particular situation;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact the 666cuci support team via live chat or at the email address provided in Section 14. We will respond to verified requests within a reasonable timeframe in accordance with applicable law. We may need to verify your identity before processing your request.

12. Minors

The 666cuci platform is strictly restricted to individuals aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under 21 — whether through incorrect age declaration at registration or any other means — we will take immediate steps to close the relevant account and securely delete all associated personal data.

If you have reason to believe that a minor has submitted personal data to 666cuci, please contact us immediately via live chat or at the contact details provided in Section 14.

13. Changes to This Privacy Policy

666cuci reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the services we offer. Where updates are material, we will notify registered Members via the email address on file with their account, or through an in-platform notification, prior to the changes taking effect.

The "last updated" date at the top of this Policy will be revised each time an update is published. We encourage you to review this Policy periodically to remain informed about how 666cuci handles your personal data.

Your continued use of the 666cuci platform following the effective date of any update constitutes your acknowledgement of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 666cuci holds about you, please contact us through the following channels:

We aim to acknowledge all privacy-related requests within 3 business days and to resolve them within 30 days, or within such shorter period as may be required by applicable law.