Privacy Policy 666ii –
User Data Protection

01 Introduction and Scope of This Policy

This Privacy Policy describes how 666ii ("we", "Platform") collects, uses, stores and protects your personal information when you use our website and services at 666ii.vu. This document applies to all registered users, website visitors and anyone who interacts with our platform.

By using the 666ii platform, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact our team for assistance with safely closing your account.

02 Types of Personal Data We Collect

666ii collects your personal data through various interaction points on our platform. Here is a comprehensive overview of the types of data we collect and their sources:

We never collect sensitive data such as your health information, sexual orientation, religious beliefs, or political views. Every piece of data collected has a specific purpose and is limited to what is necessary for platform operations.

03 How We Use Your Data

Every piece of information we collect is used for a clear and legitimate purpose. We never use your data for purposes unrelated to platform operations or for which you have not given explicit consent.

• Identity verification and KYC: Verifying that you meet the minimum age requirement of 18 years and confirming your identity prior to processing withdrawals.
• Transaction processing: Processing deposits, withdrawals, and account balance management securely and accurately.
• Platform security: Detecting and preventing fraud, money laundering, and unauthorised access to your account.
• Customer support: Providing relevant and accurate assistance when you contact our team.
• Personalizing your experience: Personalising game recommendations and promotional offers based on your gaming habits.
• Legal compliance: Meeting the reporting and compliance obligations required by the relevant authorities.
• Service communications: Sending important information related to your account, security, and changes to our terms.

04 Legal Basis for Data Processing

All personal data processing activities carried out by 666ii are based on one or more valid legal grounds. We operate in accordance with internationally recognized data protection principles and responsible online gaming industry standards.

• Contractual agreement: Processing required to fulfill the terms of service you agreed to upon registration, including account management and transaction processing.
• Legal obligation: Processing required to comply with Anti-Money Laundering (AML), Counter-Terrorism Financing (CFT), and KYC regulatory requirements.
• Legitimate interest: Processing for platform security, fraud prevention, and service improvement that does not affect your fundamental rights.
• Consent: For optional marketing communications, personalized recommendations, and loyalty programs, we only process your data with your explicit consent, which can be withdrawn at any time.

05 Data Sharing and Disclosure

666ii does not sell, rent or trade your personal data to any third party for commercial purposes. However, there are certain situations where your data needs to be shared to ensure the platform operates smoothly and securely:

• Payment providers: Transaction data is shared with certified payment providers to process your deposits and withdrawals. They are required to comply with PCI-DSS data security standards.
• Game software providers: Required gaming data is shared with licensed software providers to ensure game integrity and dispute resolution.
• Cloud services and infrastructure: Hosting and infrastructure providers used to store and process platform data, subject to strict data processing agreements.
• Legal authority: When required by court order, regulatory directive or valid legal obligation, we will disclose only the minimum data necessary.
• Affiliated companies: In the context of a business restructuring or transfer, user data may be transferred to a successor entity subject to notice being given to users.

Every third party that receives 666ii user data is required to sign a data processing agreement that prohibits them from using your data for any purpose other than what is specified.

06 Cookies and Tracking Technologies

666ii uses cookies and similar tracking technologies to enhance the user experience, maintain session security and understand platform usage patterns. Below are the categories of cookies we use:

• Essential cookies: Required for core platform functions such as login authentication, session security and language preferences. Cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting information on how you use the platform to help us improve overall performance and user experience.
• Functionality cookies: Saving your preferences such as text size, display settings, and favourite games to deliver a more personalised experience.
• Analytics cookies: Helping us understand which pages are visited most and how users navigate the platform, enabling us to make meaningful improvements.

07 Data Security and Protective Measures

Your data security is our top priority at 666ii. We continually invest in the latest security infrastructure to keep your information protected against increasingly sophisticated cyber threats.

• Data encryption in transit: All communications between your device and our servers are protected with TLS 1.3 and 256-bit SSL encryption.
• Data encryption at rest: Sensitive data stored in our databases, including KYC information and payment details, is encrypted using AES-256.
• Tiered access control: Only staff with a legitimate business need are permitted to access user data, and every access is logged for audit purposes.
• 24/7 monitoring: An active security monitoring system operates around the clock to detect threats and unusual activity in real time.
• Regular penetration testing: We conduct regular security audits by independent third parties to identify and address vulnerabilities before they can be exploited.
• Secure data backup: Critical data is regularly backed up to a secure, separate location to ensure continuity of service.

08 Your Rights as a User

As a 666ii user, you have the following rights regarding your personal data. We are committed to making it easy to exercise these rights through a clear and transparent process:

• Right of access: You may request a copy of all personal data we hold about you in a readable format.
• Right to rectification: If your data is inaccurate or incomplete, you may request an immediate correction.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data, subject to applicable legal retention obligations.
• Right to restriction of processing: You may request that we restrict the processing of your data under certain circumstances, such as while you are disputing the accuracy of the data.
• Right to data portability: You may request your data in a structured format that can be transferred to another service provider.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, contact our support team via 24/7 Live Chat. Requests will be processed within 30 business days. No fees are charged for reasonable requests.

09 Data Retention and Deletion

666ii adheres to the principle of data minimisation — we only retain your data for as long as it is needed for the original purpose of collection or as required by applicable laws and regulations.

• Active account data: Retained for the duration your account is active plus 7 years after account closure in accordance with AML requirements.
• Transaction records: Retained for a minimum of 7 years for financial and tax compliance purposes.
• KYC Data: Retained for 5 years after account closure in accordance with anti-money laundering legal requirements.
• Support communication logs: Retained for 2 years for service quality and dispute resolution purposes.
• Analytics cookie data: Deleted or anonymised after 13 months.

Once the retention period expires, data is permanently deleted using methods that ensure it cannot be recovered. For physical storage media containing personal data, secure disposal procedures are carried out in accordance with industry standards.

10 Cross-Border Data Transfers

In the course of its operations, 666ii may transfer your personal data to service providers operating outside Malaysia. Every cross-border data transfer is carried out with adequate safeguards to ensure your data remains secure regardless of where it is processed.

• All cross-border data transfers are governed by data processing agreements that include standard data protection clauses.
• Overseas service providers are required to comply with data protection standards equivalent to or higher than those we practise.
• We do not transfer data to countries without an adequate level of data protection unless appropriate additional safeguards are in place.

11 Changes to This Privacy Policy

666ii reserves the right to modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or improvements in how we handle your data. We are committed to notifying you of any significant changes before they take effect.

• Significant changes will be communicated via in-platform notifications and/or email to your registered address at least 14 days before taking effect.
• Minor changes such as grammar corrections or clarifications that do not affect your rights may take effect immediately.
• Continued use of the platform after any changes take effect will be considered your acceptance of the updated Privacy Policy.

The latest version of this Privacy Policy is always available on this page. We encourage you to review it from time to time to stay informed about how we protect your information.