Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by tab66 ("the Company", "we", "us", "our"), the operator of the online betting and gaming platform accessible at https://tab66.cam ("the Platform"). This Policy describes how tab66 collects, uses, stores, discloses, and protects the personal information of individuals who register accounts, visit the Platform, or otherwise interact with our services ("you", "the Player", "the User").

By registering an account on tab66, making a deposit, or using any feature of the Platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data in accordance with the practices described herein.

This Policy is to be read together with tab66's Terms and Conditions, which are available at /terms-conditions. In the event of any conflict between this Policy and the Terms and Conditions with respect to data processing matters, this Policy shall prevail.

Definitions

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person — including your name, email address, national identity number, payment details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transfer, and deletion.
• "Data Controller" means tab66, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of tab66, under written instruction and a binding data processing agreement.
• "KYC" means Know Your Customer — the identity and age verification process applied to all registered player accounts.
• "Cookies" means small text files stored on your device by your web browser when you visit the Platform, used to support functionality, analytics, and session management.
• "Sensitive Data" means Personal Data revealing racial or ethnic origin, political opinions, religious beliefs, health or medical information, or financial account credentials — tab66 does not collect Sensitive Data beyond what is strictly required for KYC and fraud prevention.

Personal Data We Collect

tab66 collects the following categories of personal data, depending on how you interact with the Platform:

How We Collect Your Data

tab66 collects personal data through the following means:

4.1 Direct Collection

Data you provide directly when registering an account, completing KYC verification, submitting deposit or withdrawal requests, contacting our support team, participating in promotions, or using responsible gambling tools.

4.2 Automated Collection

Technical data collected automatically each time you access the Platform — including IP address, device identifiers, session start and end times, pages visited, and betting activity logs. This data is collected via server logs, Cookies, and similar tracking technologies described in Section 11.

4.3 Third-Party Sources

tab66 may receive supplementary data about you from the following third-party sources, strictly where permitted under applicable agreements:

• KYC and identity verification providers — for the purpose of confirming the authenticity of identity documents and age verification.
• Payment service providers — transaction confirmation and fraud screening data from Malaysian payment channels including DuitNow and FPX.
• Fraud detection and anti-money laundering screening services — to comply with our international licensing obligations.

Purposes of Data Processing

tab66 processes your personal data for the following specific, legitimate purposes:

1. Account Management: To create, maintain, and administer your player account, including processing login authentication and account security measures.
2. KYC and Age Verification: To verify that you meet the minimum age requirement of 21 years and that the identity information provided at registration is accurate and genuine.
3. Transaction Processing: To process deposits and withdrawals via your chosen Malaysian payment method (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, Hong Leong, Boost, GrabPay) and to maintain accurate financial records.
4. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct as defined in the Terms and Conditions.
5. Regulatory Compliance: To fulfil the obligations imposed by our international gaming licence, including record-keeping, suspicious activity reporting, and cooperation with licensing authority audits.
6. Customer Support: To respond to your queries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
7. Responsible Gambling: To administer self-exclusion requests, deposit limits, loss limits, session time reminders, and other responsible gambling tools activated on your account.
8. Platform Improvement: To analyse aggregated and anonymised usage data for the purpose of improving Platform features, performance, and user experience.
9. Marketing (opt-in only): To send promotional communications, bonus offers, and relevant Platform updates where you have expressly opted in to receive such communications. You may withdraw consent at any time.

Legal Basis for Processing

tab66 processes your personal data under the following legal bases:

• Contractual Necessity: Processing required to perform the contract between tab66 and the Player — including account registration, transaction processing, and KYC — where without such processing, the Platform services cannot be delivered.
• Legal Obligation: Processing required for tab66 to comply with its international licensing conditions, anti-money laundering obligations, and fraud prevention requirements.
• Legitimate Interests: Processing conducted in tab66's legitimate interests, where such interests are not overridden by your privacy rights — including fraud detection, Platform security, and improvement of services through anonymised analytics.
• Consent: Processing based on your freely given, specific, and informed consent — such as the receipt of marketing communications. Consent can be withdrawn at any time without affecting the lawfulness of prior processing.

Data Sharing with Third Parties

tab66 does not sell or disclose your personal data to third parties for their independent commercial purposes. We share personal data only in the following circumstances and only to the extent strictly necessary:

• Payment Service Providers: Your name, account reference, and transaction details are shared with the Malaysian payment processor handling your specific deposit or withdrawal (e.g., Touch 'n Go eWallet operator Finexus, DuitNow via Payments Network Malaysia, FPX gateway providers). This sharing is essential for transaction execution.
• KYC Verification Providers: Identity document data and verification data are shared with licensed third-party identity verification services for the purpose of age and identity confirmation.
• Anti-Fraud and AML Screening Services: Limited account and transaction data is shared with screening services to detect unusual patterns consistent with money laundering or fraud, as required by our international licence.
• Licensing Authority: tab66 may be required to disclose player account data to its international licensing authority in connection with audits, investigations, or regulatory enquiries.
• Legal Proceedings: tab66 may disclose personal data in response to a valid court order, subpoena, or other lawful government demand where we are legally compelled to do so.
• Group Companies: Where tab66 operates within a group corporate structure, data may be shared with affiliated entities for the purposes of group-level compliance, risk management, and consolidated financial reporting, under binding intra-group data sharing agreements.

International Data Transfers

As an internationally licensed platform, tab66's data processing infrastructure may involve the transfer of personal data to servers or service providers located outside Malaysia. Where such transfers occur, tab66 takes the following measures to ensure adequate protection of your data:

• All international data transfers are governed by binding contractual clauses between tab66 and the receiving party, requiring the recipient to maintain data protection standards consistent with this Policy.
• Transfers to payment processors and KYC providers are limited to the data strictly necessary for the specific function being performed, under agreements that restrict further use.
• tab66 does not transfer personal data to jurisdictions without adequate data protection frameworks without implementing appropriate safeguards.

Data Retention

tab66 retains your personal data for the periods set out below, unless a longer retention period is required by law or our licensing obligations:

• Active Account Data: Retained for the duration of your active account relationship with tab66, plus a minimum of five (5) years following permanent account closure — consistent with international anti-money laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years following the transaction date.
• KYC Documents: Retained for a minimum of five (5) years following account closure, or longer if required by the licensing authority.
• Support Communications: Live chat transcripts and email correspondence retained for up to two (2) years for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of the consent period and for one (1) year following withdrawal of consent, for compliance audit purposes.
• Technical and Behavioural Logs: Retained for up to twelve (12) months in anonymised or pseudonymised form for Platform analytics and security purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

Security Measures

tab66 implements a multi-layered security architecture to protect personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive personal data stored on tab66 servers — including KYC documents and financial records — is encrypted at rest.
• Access Controls: Access to personal data within tab66's systems is restricted on a strict need-to-know basis. Staff with data access undergo mandatory privacy and security training.
• Two-Factor Authentication: Player accounts support two-factor authentication (2FA) as an additional login security layer, which we strongly recommend all registered players enable.
• Penetration Testing: tab66's Platform infrastructure undergoes regular third-party security assessments and vulnerability testing.
• Incident Response: In the event of a confirmed data breach affecting player personal data, tab66 will notify affected players and the relevant licensing authority within the timeframes required under applicable obligations.

Cookies & Tracking Technologies

tab66 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including session management, login authentication, and security token validation. These cookies cannot be disabled.
• Functional Cookies: Used to remember your preferences — such as language settings, display preferences, and responsible gambling tool configurations — to provide a more personalised experience.
• Analytics Cookies: Used in anonymised or pseudonymised form to understand how players navigate the Platform — which pages are visited most frequently, where drop-offs occur, and how features are used. This data is used exclusively for Platform improvement.
• Security Cookies: Used to detect and prevent fraudulent login attempts, device-based account duplication, and other security-relevant Platform interactions.

tab66 does not use third-party advertising or behavioural tracking cookies that profile your activity across other websites. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair the functionality of the Platform.

Your Data Rights

As a player whose personal data is processed by tab66, you hold the following rights with respect to that data. To exercise any of these rights, contact the support team at the details provided in Section 15.

tab66 will respond to all data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further two months, with notice provided to you within the initial 30-day window.

Minors and Age Restriction

The tab66 Platform is strictly for individuals aged 21 years and above. tab66 does not knowingly collect personal data from persons under the age of 21, and we employ mandatory KYC age verification procedures to enforce this restriction.

If tab66 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to close the associated account, delete the collected data, and refund any deposits made (net of any withdrawals), in accordance with our Terms and Conditions.

If you believe that a minor has registered on tab66, please notify our support team immediately via live chat or email. Reports of suspected underage accounts are treated as high priority and investigated without delay.

Changes to This Privacy Policy

tab66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, licensing requirements, or applicable law. Material changes will be communicated to registered players by email to the address associated with their account at least seven (7) days before the change takes effect.

The date of the most recent revision is displayed at the top of this page. We encourage all registered players to review this Policy periodically. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

Where a proposed change materially affects your rights or the manner in which we process your data in a way that requires your consent, we will request fresh consent before the change takes effect.

Contact Us

For all privacy-related enquiries — including data access requests, correction requests, marketing opt-outs, or complaints regarding how your personal data has been handled — please contact the tab66 Data Support team through any of the following channels: