best66 Privacy Policy

1. Introduction

best66 ("the Company", "we", "us", "our") is committed to protecting the privacy and personal data of all members and visitors who access the best66 Platform at https://best66.app (the "Platform"). This Privacy Policy ("Policy") describes our practices with respect to the collection, use, storage, disclosure, and protection of personal information in connection with the Platform and related services.

This Policy is intended to comply with applicable data protection principles and to be transparent about how your information is handled. We encourage you to review this Policy periodically, as it may be updated from time to time. Where changes are material, we will notify registered Members via the email address on file.

2. Who We Are (Data Controller)

For the purposes of this Policy, best66 acts as the data controller in respect of personal data collected through the Platform. As data controller, best66 determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to this Policy or the processing of your personal data, please contact us using the details set out in Section 14 of this Policy.

3. Personal Data We Collect

3.1 Registration & Identity Data

When you register a best66 account, we collect the following information:

• Full legal name;
• Date of birth (for age verification — all best66 members must be 21 years of age or older);
• Residential address (including city — Kuala Lumpur, Penang, Johor Bahru, or wherever you are based);
• Email address;
• Mobile phone number;
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

To comply with Know Your Customer obligations and to process withdrawals, best66 collects copies of government-issued identity documents (MyKad, passport, or driving licence) and proof of address documents. This data is collected only when required for account verification and is stored securely with access restricted to authorised compliance personnel.

3.3 Financial & Transaction Data

best66 records all financial transactions associated with your account, including deposit amounts, payment method details (wallet identifiers, partial card numbers), withdrawal requests, bonus credits, and wagering history. We do not store full card numbers; payment processing is handled by certified payment gateway partners.

3.4 Usage & Technical Data

When you use the Platform, we automatically collect certain technical information, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Pages visited, games played, and session duration;
• Login timestamps and session activity logs.

3.5 Communications Data

If you contact best66 via live chat, email, or any other channel, we retain records of that communication, including the content of messages and any attachments, for customer service and compliance purposes.

4. How We Use Your Personal Data

best66 uses the personal data we collect for the following purposes:

• Account Administration: To create, maintain, and manage your best66 account, including login authentication and password recovery;
• Payment Processing: To process deposits, withdrawals, and bonus credits in Malaysian Ringgit via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, Visa, and Mastercard;
• Identity & Age Verification: To verify that you are at least 21 years of age and that your identity matches your registration information, as required prior to withdrawal processing;
• Compliance & Legal Obligations: To meet anti-money laundering (AML), know-your-customer (KYC), and other applicable regulatory obligations;
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through live chat and email;
• Platform Improvement: To analyse usage patterns, improve the Platform's design and functionality, and personalise your experience;
• Responsible Gaming: To monitor gambling patterns that may indicate problem gambling behaviour and to enforce any self-exclusion or account limit requests you have made;
• Security & Fraud Prevention: To detect and prevent unauthorised access, fraud, collusion, and other prohibited conduct;
• Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates — only where you have provided valid consent.

5. Legal Basis for Processing

best66 processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and best66 (i.e., operating your account, processing payments, providing gaming services);
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including AML and KYC obligations;
• Legitimate Interests: Processing carried out in pursuit of best66's legitimate business interests (e.g., fraud prevention, platform security, customer service improvement), where those interests are not overridden by your fundamental rights;
• Consent: Processing based on your freely given, informed consent — specifically applicable to direct marketing communications. You may withdraw consent at any time.

6. Data Sharing & Disclosure

best66 does not sell, rent, or trade your personal data to third-party marketers under any circumstances. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Service Providers: eWallet operators (Touch n Go, Boost), banking partners (Maybank, CIMB, Public Bank), and card payment gateways, solely for the purpose of processing financial transactions;
• Identity Verification Partners: Third-party KYC service providers engaged to verify identity documents and perform AML screening;
• Game Content Providers: Licensed game studios and live casino operators who supply game content to the best66 Platform. These providers may receive session data necessary for game operation;
• Technology Service Providers: Cloud infrastructure, data storage, and cybersecurity vendors who process data on our behalf under strict contractual data processing agreements;
• Legal & Regulatory Authorities: Where required by applicable law, court order, or regulatory directive. best66 will disclose personal data to law enforcement or regulators only to the extent strictly required by law.

All third parties who process personal data on behalf of best66 are contractually bound to process such data only in accordance with best66's instructions and to implement appropriate security measures.

7. Cookies & Tracking Technologies

best66 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function correctly, including maintaining your logged-in session and remembering your game preferences. These cannot be disabled without affecting Platform functionality;
• Analytics Cookies: Used to understand how Members interact with the Platform — which pages are visited most frequently, how long sessions last, and where users encounter difficulties. This data is aggregated and anonymised;
• Security Cookies: Used to detect and prevent fraudulent access, bot activity, and other security threats.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to access your best66 account or place wagers, but may affect certain personalisation features.

8. Data Security

best66 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encrypted storage of passwords using industry-standard hashing algorithms;
• Restricted access controls ensuring that personal data is accessible only to authorised best66 personnel on a strict need-to-know basis;
• Regular security audits and penetration testing by qualified cybersecurity professionals;
• Two-factor authentication (2FA) available to all Members and mandatory for account changes involving financial information.

While best66 takes all reasonable precautions, no method of internet transmission or electronic storage is 100% secure. In the event of a data breach that is likely to result in risk to your rights and freedoms, best66 will notify affected Members in accordance with applicable law.

9. Data Retention

best66 retains personal data for as long as your account is active and for a period thereafter as required by applicable law and legitimate business necessity. Specifically:

• Account Data: Retained for the duration of your account membership and for a minimum of five (5) years following account closure, as required by AML regulations;
• Transaction Records: Retained for a minimum of seven (7) years in compliance with financial record-keeping requirements;
• KYC Documents: Retained in accordance with applicable regulatory requirements, typically five (5) years post-relationship termination;
• Customer Support Communications: Retained for three (3) years from the date of the communication;
• Marketing Consent Records: Retained until you withdraw consent and for a reasonable period thereafter to demonstrate compliance.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with best66's data disposal procedures.

10. Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by best66:

• Right of Access: You may request a copy of the personal data best66 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to Restrict Processing: You may request that best66 restricts the processing of your personal data in certain circumstances;
• Right to Data Portability: Where processing is based on consent or contract, you may request a copy of your data in a structured, machine-readable format;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal;
• Right to Object: You may object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, please contact best66 support via live chat or at [email protected]. We will respond to verified requests within 30 calendar days. We may require identity verification before actioning a data rights request.

11. Children & Minors

The best66 Platform is strictly intended for adults aged 21 and above. best66 does not knowingly collect personal data from any individual under the age of 21. If best66 becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account closed. If you believe a minor has registered an account on the Platform, please contact best66 support immediately.

12. Third-Party Links

The best66 Platform may contain links to third-party websites or services (for example, payment provider interfaces). This Privacy Policy applies solely to data collected and processed by best66. best66 is not responsible for the privacy practices of third-party websites and encourages you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

best66 reserves the right to update or modify this Privacy Policy at any time. Where changes are material, best66 will notify registered Members by email with a minimum of fourteen (14) days' notice before the revised Policy takes effect. The "Last updated" date at the top of this page will be amended accordingly. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the best66 data team through the following channels:

• Live Chat: Available 24/7 directly on the best66 Platform (fastest response).
• Email: [email protected] — include "Privacy Request" in your subject line for faster routing. Response within 4 hours during normal operating hours.

For responsible gaming concerns, please visit our Responsible Gaming page.