67win Privacy Policy – How We Protect the Personal Data of Malaysian Players

1Information We Collect

67win collects several categories of information from players to ensure the platform operates smoothly, transactions are processed securely, and the user experience can be improved over time. We only collect information that is genuinely necessary for the purposes stated.

a) Information you provide directly:

• Full name as stated on your MyKad
• Active mobile phone number
• Email address
• Date of birth (for age verification — you must be 18 years or older)
• Bank account or e-wallet details used for deposits and withdrawals (for example, the account number for FPX, or the phone number linked to your Touch 'n Go eWallet or GrabPay)
• A copy of an identification document such as your MyKad when KYC verification is required

b) Automatically collected information:

• Your device's IP address
• Device type, operating system, and web browser used
• Login session data including time, date, and session duration
• Records of betting activity, games played, and transaction history
• Cookie data and similar tracking technologies (see Section 5)

2How We Use Your Data

67win uses the information collected for legitimate, clearly stated purposes. We do not use your data for any purpose outside the scope described below without first obtaining your consent.

How 67win uses your data:

• Account operations: Creating and managing your player account, processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and Maybank2u or CIMB Clicks, and processing winnings withdrawals.
• Identity verification: To ensure all players meet the minimum age requirement (18 years) and to carry out KYC checks as required by law.
• Security & fraud prevention: Identifying and preventing fraudulent activity, money laundering, or any use of the platform that violates Malaysian law.
• Platform improvements: Aggregated usage data is analysed to improve the performance, interface, and overall experience of the 67win platform.
• Service communications: Sending important notices relating to your account, transactions, changes to terms, or security updates.
• Marketing (with consent): If you have opted in to receive marketing communications, we may send you promotional information, new bonuses, or special offers related to 67win. You may withdraw this consent at any time.
• Legal compliance: To comply with obligations under Malaysian law, including PDPA 2010, anti-money laundering (AML) requirements, and directives issued by the relevant authorities.

3Sharing Information With Third Parties

67win takes a highly cautious approach to sharing player data. We do not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, there are limited situations where data sharing is necessary for the platform's operations.

Situations in which data may be shared:

• Payment processors: Transaction details required for processing are shared with authorised e-wallet and FPX service providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks) to handle your deposits and withdrawals. These processors are bound by strict financial security standards.
• Game service providers: Our game software providers may receive session data necessary to run games correctly. This data is limited strictly to what is required and does not include any personal financial information.
• Relevant authorities: Where required by Malaysian law or a valid court order, 67win will disclose the necessary information to the relevant authorities. This includes investigations relating to fraud or money laundering.
• Analytics & technical services: Our technical service providers (such as cloud and analytics services) may access data in their capacity as data processors on behalf of 67win. They are bound by strict data processing agreements and are not permitted to use the data for their own purposes.

4Data Security at 67win

67win continually invests in security infrastructure to protect the personal and financial data of all our players. Security is not an optional add-on — it is the foundation of every system we build.

Technical security measures we have implemented:

• 256-bit SSL Encryption: All communications between your device and 67win's servers are protected with industry-grade encryption. This means data transmitted — including login credentials and transaction details — cannot be read by any third party attempting to intercept it.
• Two-Factor Authentication (2FA): Players can enable 2FA for an additional layer of security on their account. We encourage all players to make use of this feature.
• Real-time activity monitoring: Our system continuously monitors login activity and transactions to identify any suspicious patterns. Accounts showing unusual activity will be subject to an immediate security review.
• Secure servers & backups: Data is stored in certified data centres with strict physical and digital access controls. Regular backups ensure that no data is lost due to technical failures.
• Fund account segregation: Player funds are held in an account separate from 67win's operational funds to protect your financial interests.

Your responsibility in keeping your account secure:

While 67win implements robust security measures, the safety of your account also depends on your own actions. Please ensure you use a strong and unique password, never share your login credentials with anyone, and always log out after using the platform on a shared device.

5Cookies & Tracking Technologies

67win uses cookies and similar tracking technologies to enhance platform functionality, understand how players use our website, and deliver a more personalised experience.

Types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as staying logged in, maintaining session balances, and processing transactions securely. Without them, the 67win platform will not function properly. This type of cookie cannot be disabled.
• Performance Cookies: Used to collect information on how players use the platform — which pages are visited most frequently, where errors occur, and how long sessions last. This data is collected in anonymised form to help us improve the platform.
• Functional Cookies: Allows the platform to remember your preferences such as language, preferred odds format, and display settings. These cookies make your experience more seamless without having to reconfigure your settings each time you log in.
• Analytics cookies: Used to understand aggregate user behaviour for platform improvement purposes. Analytics data does not contain information that directly identifies any individual.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of the 67win platform. For guidance on managing cookies in popular browsers, refer to your browser's help documentation.

6Your Rights as a 67win User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and 67win's commitment to user privacy, you have the following rights regarding your personal data:

7Data Retention & Deletion

67win does not retain your personal data for longer than is necessary for the purposes set out in this Privacy Policy, or as required under Malaysian law.

Data retention guidelines at 67win:

• Active account data: Retained for the lifetime of your active 67win account. This data is required for the platform to operate continuously.
• Financial transaction records: Retained for a minimum of 7 years after a transaction occurs, in accordance with Malaysia's accounting and anti-money laundering legal requirements. This includes deposit records made via e-wallet and FPX.
• KYC records & identity verification: Retained for 5 years after account closure or after the business relationship ends, whichever is applicable under the relevant legal requirements.
• Log and security data: System logs used for security and fraud prevention purposes are retained for a maximum of 2 years.
• Marketing data: If you have consented to receive marketing communications, this data is retained until you withdraw that consent or close your account.

Once the retention period has lapsed and there is no legal obligation to continue storing your data, your personal data will be securely deleted from 67win's systems using methods that ensure it cannot be recovered.

Once your 67win account has been closed at your own request, the process of deleting data that is no longer required will be initiated within 30 working days, subject to the legal retention requirements stated above.

8Changes to This Privacy Policy

67win reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or platform improvements. The latest revision date is always displayed at the top of this document.

When there are significant changes to this Privacy Policy — particularly changes that affect how we collect or use your data — 67win will notify you through one of the following methods:

• A clear in-platform notification on 67win the next time you log in
• Email notifications sent to the email address registered to your account
• Pop-up notice during an active session within the platform

Your continued use of the 67win platform after any policy changes take effect will be taken as your acceptance of the updated terms. If you do not agree with the changes, please stop using the platform and contact us to close your account.

9Contact 67win's Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how 67win handles your personal data, our team is ready to assist you.

We take every privacy enquiry seriously and will ensure a timely response within the specified timeframe. Most privacy concerns can be resolved in just one or two live chat sessions.

• Email: support@67win.run
• Live Chat: Available 24 hours a day, 7 days a week within the 67win platform after logging in
• Email response time: Within 2 business days
• Official data request response time: Within 21 business days in accordance with the PDPA

For requests relating to your data rights under the PDPA — such as data access, correction, or deletion requests — please clearly state the type of request and provide sufficient account information for identity verification. This helps us process your request more efficiently and securely.

If you are dissatisfied with the response provided by 67win, you have the right to escalate your complaint to the Personal Data Protection Commissioner of Malaysia through the official channels established by the Ministry of Communications and Digital.