Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 668duit ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal data relating to users ("Player", "you") of the 668duit online gaming and sports betting platform available at 668duit.cam.

668duit is committed to handling your personal data responsibly and in accordance with applicable data protection principles. This Policy is written in plain English to ensure that Malaysian players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia can clearly understand how their data is being handled.

This Policy applies to all personal data collected through your use of the 668duit website, mobile-optimised interfaces, live chat support channels, and any other interaction you have with our platform or support team.

2 Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below:

3 Personal Data We Collect

668duit collects personal data through several channels: during account registration, in the course of account use and gameplay, via KYC verification submissions, through customer support interactions, and through automated technical means such as cookies and server logs. The categories of personal data collected are set out below.

668duit does not intentionally collect sensitive personal data categories — such as racial or ethnic origin, political opinions, religious beliefs, health data, or sexual orientation — unless specifically required by law (e.g., for responsible gambling assessments). If such data is incidentally disclosed by a Player during a support interaction, it will be treated with the highest level of confidentiality and used solely for the purpose for which it was disclosed.

4 How We Use Your Personal Data

668duit uses the personal data it collects for the following specific purposes:

4.1 Account Management

Identity, contact, and account data are used to create, maintain, and manage your 668duit account. This includes processing your registration, verifying your identity, maintaining your account balance, and communicating important account-related updates such as password reset confirmations and security alerts.

4.2 Payment Processing

Financial data and identity data are shared with our certified payment processing partners to facilitate deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, and cryptocurrency channels. This processing is necessary to perform the service contract between you and 668duit.

4.3 KYC and Anti-Money Laundering Compliance

Identity data and financial data are processed to fulfil our obligations relating to Know Your Customer (KYC) verification, age verification, and anti-money laundering compliance. This processing is required by law and cannot be opted out of without affecting your ability to use platform services, particularly withdrawal functionality.

4.4 Platform Security and Fraud Prevention

Technical data, account data, and behavioural patterns are processed by our security systems to detect and prevent fraudulent activity, account compromise, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions. This processing is carried out on the basis of our legitimate interest in protecting the platform and all Players who use it.

4.5 Customer Support

Communications data and account data are used by our support team to respond to your queries, complaints, and requests. Support interactions conducted via live chat are recorded and retained for quality assurance and dispute resolution purposes.

4.6 Responsible Gambling Monitoring

Account data — including betting patterns, session durations, deposit frequency, and loss levels — may be reviewed by our responsible gambling team to identify Players who may be exhibiting indicators of problem gambling. This processing is carried out in your interests and in compliance with responsible gambling obligations. For more information, visit our Responsible Gambling page.

4.7 Marketing and Promotions

Where you have opted in to marketing communications, contact data and preferences data will be used to send you personalised promotional offers, bonus notifications, and platform news. You may opt out of marketing communications at any time through your account settings or by contacting our support team. Opting out of marketing does not affect your ability to use the platform or receive essential account communications.

4.8 Platform Improvement and Analytics

Aggregated and anonymised technical data and usage data are analysed to improve the platform's performance, user experience, game selection, and feature set. This analysis does not result in decisions that materially affect individual Players and does not involve profiling for commercial purposes beyond what is described in this Policy.

5 Legal Basis for Processing

668duit processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contract Performance: Processing is necessary to perform the service contract between you and 668duit — i.e., to provide the online gaming and sports betting services you have registered for, including account creation, payment processing, and game delivery.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations, including KYC and anti-money laundering requirements, age verification obligations, and record-keeping mandates.
• Legitimate Interests: Processing is necessary for 668duit's legitimate interests — including fraud prevention, platform security, responsible gambling monitoring, and platform improvement — where those interests are not overridden by your fundamental rights and interests.
• Consent: Where processing is based on consent — such as for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

6 Data Sharing with Third Parties

668duit does not sell, rent, or otherwise commercially transfer your personal data to third parties. Your data is shared only in the specific circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Payment Processing Partners

To facilitate financial transactions, identity and financial data are shared with certified payment processors handling DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, and cryptocurrency transactions. These partners operate under contractual data processing agreements and are prohibited from using your data for any purpose other than executing the relevant transaction.

6.2 Identity Verification Services

KYC verification data — including government-issued identity documents and proof of address — may be shared with third-party identity verification service providers engaged by 668duit for the purpose of meeting our legal obligations. These providers are bound by strict confidentiality and data processing obligations.

6.3 Game Content Providers

Certain technical data (such as pseudonymised session identifiers) may be shared with licensed third-party game studios and content providers whose games are hosted on the 668duit platform, for the purpose of delivering gameplay functionality and resolving game-related disputes. Full personal data is not shared with game providers.

6.4 Regulatory and Law Enforcement Authorities

668duit may disclose personal data to relevant regulatory authorities, law enforcement agencies, or other governmental bodies where required to do so by applicable law, court order, or legal process. In such cases, 668duit will disclose only the minimum data necessary to fulfil the legal requirement and will notify affected Players where legally permissible to do so.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of 668duit's assets, personal data held by 668duit may be transferred to the acquiring entity as part of that transaction. Affected Players will be notified of any such transfer and of any changes to how their data will be processed by the successor entity.

7 Cookies & Tracking Technologies

668duit uses cookies and similar tracking technologies on its platform to deliver core functionality, maintain user sessions, remember preferences, and gather analytical data about how the platform is used.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function. These cookies maintain your login session, security tokens, and language preferences. They cannot be disabled without significantly impairing your ability to use the platform.
• Functional Cookies: Remember your account preferences such as display settings, notification preferences, and previously selected game categories to provide a personalised experience.
• Analytical Cookies: Collect anonymised data about how Players navigate the platform — including pages visited, time spent, and features used — to help 668duit improve its service. This data is aggregated and does not identify individual users.
• Security Cookies: Used by our fraud detection and anti-abuse systems to identify suspicious session patterns and protect your account from unauthorised access.

7.2 Cookie Management

You may control non-essential cookie categories through your browser settings or, where available, through cookie preference settings on the platform. Please note that disabling certain cookies may affect platform functionality. Strictly necessary and security cookies cannot be disabled while you remain logged in to your account.

8 Data Retention

668duit retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, or contractual obligations. The following retention standards apply:

• Active Account Data: Retained throughout the duration of your account relationship with 668duit and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure or the last transaction associated with the account, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years to satisfy financial record-keeping obligations and to facilitate dispute resolution.
• Customer Support Records: Retained for three (3) years following the closure of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, at which point your data will be removed from active marketing lists promptly.
• Analytical Data: Aggregated and anonymised analytics data may be retained indefinitely as it does not constitute personal data once anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 668duit's internal data disposal procedures.

9 Data Security

668duit implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 668duit's servers;
• Encrypted storage of sensitive data including identity documents and password hashes;
• Access controls restricting personal data access to authorised personnel with a legitimate business need;
• Regular security assessments and vulnerability monitoring of platform infrastructure;
• Incident response procedures for identifying, containing, and reporting data security breaches where required by law.

While 668duit takes all reasonable precautions to protect your data, no system is completely immune to security risks. You are responsible for maintaining the security of your own account credentials and for notifying 668duit immediately if you suspect any unauthorised access to your account.

10 Your Rights Regarding Personal Data

Subject to applicable law, you have the following rights regarding the personal data that 668duit holds about you. To exercise any of these rights, please contact our support team via live chat or email. We will respond to verified requests within a reasonable timeframe and in accordance with applicable requirements.

• Right of Access: You may request a copy of the personal data 668duit holds about you, including the categories of data, the purposes of processing, and details of any third parties with whom your data has been shared.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected. Please update your account profile directly where possible, or contact support for changes that cannot be self-managed.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances, including where it is no longer necessary for the purposes for which it was collected. This right is subject to 668duit's legal obligations to retain certain data, as described in Section 8.
• Right to Restrict Processing: You may request a temporary restriction on the processing of your personal data in certain circumstances, such as while the accuracy of that data is being verified.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where processing is based on legitimate interests, including objections to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

Please note that exercising certain rights — such as requesting erasure of identity data — may affect your ability to continue using 668duit services, particularly where the data is required to fulfil legal obligations or to maintain your account.

11 International Data Transfers

668duit's primary operations and data storage are focused on serving the Malaysian market. However, some of our third-party service providers — including payment processors and KYC verification providers — may be located in or operate data infrastructure in jurisdictions outside Malaysia.

Where personal data is transferred to third parties in other jurisdictions, 668duit ensures that appropriate safeguards are in place to protect your data, including contractual data processing agreements and, where applicable, adherence to applicable data transfer frameworks. 668duit will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without first putting in place appropriate contractual safeguards.

12 Minors and Age Verification

668duit's services are strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data from persons under the age of 21. Age verification is conducted as part of the KYC process and is applied to all registered accounts prior to the processing of any withdrawal request.

If 668duit becomes aware that personal data has been collected from a person under the age of 21, that account will be suspended immediately and the data will be deleted or anonymised once any mandatory legal record-keeping obligations have been fulfilled.

13 Amendments to This Policy

668duit reserves the right to update or modify this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data collected, the purposes of processing, or the third parties with whom data is shared — 668duit will notify registered Players via their registered email address or via a prominent notice on the platform prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how we handle your personal data. Your continued use of 668duit following notification of an updated Policy constitutes your acceptance of the revised terms.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 668duit holds about you, please contact our support team using one of the channels below.