Duit666 is committed to handling your personal data responsibly and transparently. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and what rights you hold as a player based in Malaysia or elsewhere.
Last Updated: 1 January 2026256-bit SSL and encrypted storage protect all personal data
We never sell your personal data to third-party marketers
Access, correct, or request deletion of your data at any time
Manage cookie preferences through your browser settings
All processing is conducted on a valid lawful basis only
Data queries answered within 30 days by our privacy team
Duit666 (hereinafter referred to as "Duit666", "we", "us", or "the Company") operates the online gaming and sports betting platform accessible at duit666.cam. We are committed to protecting the privacy and security of all personal data entrusted to us by our players, visitors, and other individuals who interact with our Platform.
This Privacy Policy (the "Policy") sets out in detail how Duit666 collects, receives, stores, uses, discloses, and otherwise processes personal data relating to individuals who access or use the Platform, register an account, make deposits or withdrawals, participate in promotions, contact our customer support team, or otherwise interact with Duit666 in any capacity.
This Policy should be read in conjunction with our Terms and Conditions, which are available at /terms-conditions, and our Responsible Gambling Policy available at /responsible-gambling. All three documents together govern your relationship with Duit666.
By accessing the Platform, creating an account, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.
The following definitions apply throughout this Privacy Policy:
Duit666 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, we are responsible for ensuring that Personal Data is processed lawfully, fairly, and in a transparent manner, and that appropriate technical and organisational measures are in place to protect it.
Duit666 operates under an international gaming licence. Our data processing activities are conducted in accordance with applicable privacy and data protection laws, including the principles of data minimisation, purpose limitation, storage limitation, accuracy, integrity, and confidentiality.
For all privacy-related enquiries, including requests to exercise your data subject rights, you may contact our designated privacy point of contact at the email address set out in Section 15 of this Policy.
When you register an account, complete KYC verification, make a transaction, or contact us for support, you provide us with personal data directly. This includes:
When you access or use the Platform, we automatically collect certain technical and behavioural data, including:
We may receive personal data about you from third parties in limited circumstances, including: identity verification service providers used to complete KYC checks; payment processors confirming transaction completion or reporting chargebacks; fraud prevention and anti-money laundering screening services; and where you have separately consented to the sharing of your data by another party.
Duit666 processes personal data only where a valid lawful basis exists. The lawful bases we rely upon are set out in the table below:
| Processing Activity | Lawful Basis | Details |
|---|---|---|
| Account Registration | Contract | Necessary to create and manage your account in accordance with our Terms and Conditions |
| KYC Verification | Legal Obligation | Required under anti-money laundering regulations applicable to licensed gaming operators |
| Payment Processing | Contract | Necessary to process deposits, withdrawals, and financial reconciliation in MYR |
| Fraud Prevention | Legitimate Interest | Protecting the Platform and other players from fraudulent or criminal activity |
| Customer Support | Contract | Necessary to respond to and resolve your support enquiries |
| Marketing Communications | Consent | Only where you have expressly opted in to receive promotional communications from Duit666 |
| Platform Analytics | Legitimate Interest | Improving the functionality, security, and user experience of the Platform |
| Regulatory Reporting | Legal Obligation | Compliance with licensing conditions and applicable regulatory reporting requirements |
Duit666 uses the personal data we collect for the following specific purposes:
We use your registration data to create and maintain your player account, authenticate your identity when you log in, manage your account preferences, process your transactions, and provide you with account statements and transaction history in MYR.
KYC data is used to verify that you are a real person aged 21 or above, that you are who you say you are, and that your payment methods are registered in your own name. This verification is mandatory before we process your first withdrawal and may be required at any subsequent time at our discretion. Data collected for regulatory compliance purposes is retained for the periods required by applicable law.
Financial data — including your Maybank, CIMB, Public Bank, or Hong Leong account details, your Touch 'n Go eWallet, Boost, or GrabPay identifiers, and your DuitNow or FPX-linked account information — is used solely for processing deposits, withdrawals, and refunds. We do not store full payment credentials beyond what is necessary for transaction processing and reconciliation.
We use technical and behavioural data, including IP addresses, device fingerprints, and betting patterns, to detect and prevent fraudulent activity, money laundering, account takeover, bonus abuse, and other forms of prohibited conduct. Where fraud is detected, we may share relevant data with law enforcement or financial intelligence authorities as required by law.
Support communications including live chat transcripts and email correspondence are retained to enable our team to resolve your enquiries effectively and to maintain a record of interactions for quality assurance, training, and complaint resolution purposes.
Betting patterns, session duration data, and deposit and loss data are used to monitor for signs of problem gambling behaviour. Where our systems or staff identify potential indicators of harm, we may proactively contact you with responsible gambling resources or apply account-level restrictions in accordance with our Responsible Gambling Policy.
Where you have expressly opted in to receive marketing communications, we may contact you by email or SMS with information about promotions, bonuses, new game releases, and sports betting offers relevant to the Malaysian market. You may withdraw your marketing consent at any time by contacting customer support or adjusting your account notification settings. Withdrawing marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.
Duit666 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for each specified purpose:
We share the minimum necessary financial data with our payment processing partners — including providers handling Maybank2u, CIMB Clicks, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX transactions — solely for the purpose of processing your deposits and withdrawals. All payment partners are contractually obligated to process your data only for the specified payment purposes and in accordance with applicable data protection requirements.
KYC documentation is shared with accredited third-party identity verification service providers for the sole purpose of verifying your identity and age. These providers are contractually restricted from using your data for any purpose other than the verification services they provide to Duit666.
We may share data with fraud prevention networks, anti-money laundering screening services, and responsible gambling self-exclusion databases as required to comply with our regulatory obligations and to protect the integrity of the Platform.
We may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where we are legally required to do so, or where disclosure is necessary to prevent, detect, or prosecute criminal activity, to comply with a court order, or to enforce our Terms and Conditions.
In the event of a merger, acquisition, restructuring, or sale of Duit666 or its assets, personal data held by the Company may be transferred to the relevant successor entity as part of that transaction, subject to confidentiality obligations and the protections described in this Policy being maintained.
Duit666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of account plus 5 years | Legal obligation / regulatory requirement |
| KYC Documents | 5 years from account closure | Anti-money laundering compliance |
| Transaction Records | 5 years from each transaction date | Financial regulation / audit trail |
| Betting / Game History | 3 years from account closure | Dispute resolution / regulatory compliance |
| Support Correspondence | 2 years from each interaction | Quality assurance / dispute resolution |
| Marketing Consent Records | Until consent withdrawn plus 1 year | Legitimate interest / legal compliance |
| Technical / Log Data | 12 months | Security monitoring / fraud detection |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised, it may be retained indefinitely for aggregate analytics purposes.
Duit666 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, destruction, or accidental loss. These measures include:
While we take all reasonable steps to protect your data, no electronic transmission or storage system can be guaranteed to be completely secure. You access the Platform and transmit data at your own risk. You are responsible for keeping your login credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.
Duit666 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us recognise returning visitors, maintain your session, and analyse how the Platform is used.
You can control and manage cookies through your browser settings. Most browsers allow you to block, delete, or receive alerts about cookies. Note that disabling cookies may affect the functionality of the Platform — in particular, strictly necessary cookies cannot be disabled without impairing your ability to log in and use core features.
For instructions on managing cookies in your specific browser, refer to your browser's help documentation. Common browsers used by Malaysian players include Google Chrome, Safari (mobile), Firefox, and Samsung Internet.
Subject to applicable data protection law, you have the following rights in respect of the personal data Duit666 holds about you:
To exercise any of the above rights, please contact us using the details set out in Section 15. We will respond to all valid requests within 30 calendar days. We may request proof of your identity before processing certain requests to protect against unauthorised access to another person's data.
The Duit666 Platform is strictly intended for individuals who are 21 years of age or above. We do not knowingly collect, process, or retain personal data relating to any person under the age of 21.
During registration, all users are required to confirm that they meet the 21+ age requirement. Before processing any withdrawal, we require all players to complete KYC verification — which includes submission of a government-issued photo ID confirming date of birth — to enforce this requirement in practice.
If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will take immediate steps to suspend that account, delete the personal data in question, and return any funds deposited to the source payment method. If you are the parent or guardian of a minor and believe they have registered on our Platform, please contact us immediately at the address provided in Section 15.
As an internationally licensed gaming platform serving players across multiple countries including Malaysia, Duit666 may transfer your personal data to servers or service providers located outside of Malaysia. Such transfers may include data transferred to our payment processing partners, identity verification providers, fraud prevention services, and cloud infrastructure providers.
Where personal data is transferred outside of Malaysia, we ensure that appropriate safeguards are in place to protect the data. These may include contractual data transfer agreements, adequacy assessments of the recipient jurisdiction's data protection standards, or binding corporate rules where applicable.
By using the Platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the protections described herein.
Duit666 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we offer. When we make material changes to this Policy — particularly changes that affect your rights or the ways in which your data is processed — we will notify you by posting a notice on the Platform homepage and, where we hold a valid email address for your account, by sending you a direct notification at least 14 days before the changes take effect.
The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform after the effective date of any amended Policy constitutes your acceptance of the revised terms. If you disagree with the changes, you may close your account in accordance with the procedure set out in our Terms and Conditions.
We encourage all players — particularly those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other Malaysian cities — to review this Policy periodically to stay informed about how Duit666 handles their personal data.
If you have any questions, concerns, or formal complaints regarding this Privacy Policy or the way in which Duit666 processes your personal data, you may contact our privacy team through the following channels:
We aim to acknowledge all privacy-related enquiries within 5 business days and to resolve substantive data subject requests within 30 calendar days of receipt of a valid, verified request. Where the complexity or volume of a request requires additional time, we will notify you within the initial 30-day period of the expected extended response timeline.
Have a question about how Duit666 uses your personal data? Our support team is available 24/7. You can also read our FAQ for quick answers, or review our Terms and Conditions for the full picture.
Play responsibly. For players aged 21 and above only. Visit our Responsible Gambling page for support resources.