Reference

What play666 Does With Your Personal Data

This Privacy Policy sets out exactly what data we collect when you open an account, make a deposit, or contact our support team — and how we keep it secure.

Account data handled with carePayment data — Touch 'n Go eWallet, Boost, GrabPayYour access and correction rightsNo data sold to third partiesContact us to update your records
play666 What play666 Does With Your Personal Data
HOW WE PROTECT IT

Data Handling, Cookies and Account Security

We apply technical safeguards at every layer of the account — from the moment you log in to the point your withdrawal clears. Here is how we approach each key area of data protection on play666.

Account Security

Login sessions are protected with OTP verification sent to your registered mobile number. We do not store plain-text passwords, and your session token expires automatically after inactivity.

Cookies and Tracking

We use session cookies to keep you logged in and preference cookies to remember your deposit method — for example, your last-used wallet between Touch 'n Go eWallet and GrabPay. You can manage cookie settings in your browser.

Data Retention

Active account records are held for the duration your account is open. After closure, we retain only what applicable law requires. You may request a full data summary at any time via live chat or email.

Third-Party Sharing

Payment processors handling your Boost or DuitNow transactions receive only what is needed to complete the transfer. No personal data is shared with advertisers or data brokers under any circumstance.

REACH OUR PRIVACY TEAM

How to Submit a Privacy Request

If you want to access, correct, or remove data we hold on your account, the fastest path is through our live chat — available directly from your account dashboard. For formal written requests, reach us by email and we will acknowledge within two business days. Our support team handles account-related privacy matters including updating contact details tied to your Touch 'n Go eWallet or Boost payment profile.

Live Chat Open your account dashboard and tap the chat icon. Live chat handles most account and data queries without needing a separate form or email.
Email Support Send a written request to our support email for formal data access or deletion queries. We acknowledge all email requests within two business days.
Account Settings Some data — like your registered contact number and linked payment label — can be updated directly inside account settings without contacting support at all.

Common Questions About Your Data on play666

These are the questions we hear most often from account holders in Malaysia about how their personal data is used, stored, and protected. If your question is not covered here, live chat is the fastest route to a direct answer.

We collect your name, mobile number, email address and chosen payment method — such as Touch 'n Go eWallet or Boost. Device and session data are also recorded automatically when you access the platform.

No. We only record the transaction reference and amount after a deposit clears. Your wallet PIN, full account number and authentication tokens are never stored on our side.

Yes. Submit a data access request through live chat or email. We will compile and return a summary of the personal data tied to your account, typically within a few business days of verification.

Basic details like your contact number can be changed inside account settings. For changes tied to your registered email or payment method label, contact support via live chat for identity verification first.

We do not sell or share your data with advertisers. Payment processors — handling DuitNow, FPX or GrabPay flows — receive only the minimum data needed to complete your transaction, nothing more.

After account closure, we retain only what applicable Malaysian law requires for a defined period. You can request details on the specific retention period that applies to your account through email support.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.