Privacy Policy tr66 – Our Commitment to Protecting Your Personal Data

1Introduction

Platform tr66 (https://tr66.link) values the privacy of every member who registers and uses our services. This Privacy Policy is written to clearly explain, in plain language, how we collect, use, store, and protect your personal data as a user of the platform tr66 in Malaysia.

This document applies to all users of the platform tr66 — from those simply browsing our website, to registered members actively using all our services including Sports Betting, Live Casino, slots, roulette, and virtual sports. All your interactions with tr66 — whether via web browser, mobile app, or any of our support channels — is subject to this policy.

We uphold the Malaysian Personal Data Protection Act 2010 (PDPA 2010) and relevant international data protection standards across all our operations. By using the tr66, you agree to the collection and use of your data as described in this document.

2Personal Data We Collect

Tr66 collects several categories of personal data to enable us to provide you with a secure, effective, and relevant service. Below is a detailed table of the types of data collected and the reasons for doing so:

In addition to data you provide directly, tr66 also automatically collects technical data when you use our platform. This includes information about the device you use, your internet connection, and your platform usage patterns. This data is used solely for security, fraud detection, and user experience improvement purposes.

For identity verification and anti-money laundering compliance purposes, tr66 may request a copy of an identity document such as a MyKad or valid passport. These documents are stored with a high level of security and accessed only by authorised personnel for verification purposes.

3How We Use Your Personal Data

Personal data collected by tr66 is used for the following purposes only, and not for any other purpose without your explicit consent:

• Account Management: Creating and managing your tr66 account, processing deposits and withdrawals, and keeping your financial records accurate and up to date.
• Security & Fraud Prevention: Identifying and blocking suspicious activity, protecting your account from unauthorized access, and maintaining the overall integrity of the tr66 platform.
• Legal Compliance: Meeting compliance obligations set out under Malaysian law and international standards, including Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements.
• Customer Support: Handling your enquiries, complaints, and requests effectively. Our records of communications with you allow our support team to provide consistent and accurate assistance.
• Platform Improvement: Analyzing usage patterns in aggregate (without identifying individuals) to understand the most valuable features and improve the overall tr66 platform experience.
• Service Communications: Sending important account-related notifications such as transaction confirmations, changes to terms, security alerts, and updates related to the services you use.
• Responsible Gambling: We monitor usage patterns to identify signs of addictive behaviour and proactively offer support to members who may need it — in line with tr66's commitment to responsible gambling.

4Data Sharing with Third Parties

tr66 does not sell, rent, or trade members' personal data to any third party for their own marketing or commercial purposes. This is a non-negotiable commitment.

However, there are limited situations where tr66 may need to share your data with selected third parties in order to operate our services. Such sharing only takes place under the following circumstances:

• Payment Service Providers: To process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, the necessary transaction information is shared with the respective providers. These providers are governed by their own privacy policies and are not permitted to use your data for any other purpose.
• Platform Technology Provider: Technology companies that provide tr66 with platform infrastructure, gaming software, and security systems may have access to certain data as part of delivering their services. All such providers are bound by strict confidentiality agreements.
• Legal Authorities: Where required by Malaysian law or a valid court order, tr66 may be obligated to disclose data to the relevant authorities. tr66 will notify you of any such disclosure where it is legally permitted to do so.
• Regulatory Authority: Information required to meet licensing and regulatory compliance obligations within the online gambling industry.
• Independent Audit: Audit firms conducting compliance reviews, security audits, or RNG verifications may have limited access to system data required for those audits.

In all of the data-sharing scenarios described above, tr66 ensures that the receiving party uses the data only for the stated purposes and is bound by equivalent data protection obligations.

5Data Security Measures at tr66

tr66 continuously invests in security infrastructure to protect the personal data of all our members. The key security measures we have implemented are as follows:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and tr66's servers is encrypted using 256-bit SSL/TLS protocols. This means that even if data were intercepted in transit, it would be unreadable without the correct encryption key.
• Stored Data Encryption: Sensitive data stored in tr66's databases — including identity information and financial details — is encrypted at rest using current encryption standards.
• Two-Factor Authentication (2FA): tr66 provides and encourages the use of two-factor authentication for all accounts. This adds an extra layer of security on top of your regular password.
• Internal Access Controls: Access to member personal data within tr66's internal systems is restricted to staff who require it to perform their duties. All access is logged and monitored.
• Continuous Security Monitoring: The tr66 system is continuously monitored for unusual activity and signs of security breaches. Our security team operates around the clock, 24 hours a day.
• Regular Security Audits: tr66 conducts periodic external security audits by accredited independent audit firms to identify and address any potential vulnerabilities.
• Fund Segregation: Member funds are held in accounts that are separate from the company's operating capital, ensuring your financial security is independent of tr66's business performance.

Although tr66 takes all reasonable steps to protect your data, no online system can guarantee 100% absolute security. We encourage you to take your own protective measures as well — such as using a strong password, not sharing your login credentials, and always logging out when you are done using the platform.

6Cookies & Tracking Technologies

Platform tr66 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your preferences such as your preferred language, display settings, and other customizations so you do not have to reconfigure them each time you log in.
• Analytics Cookies: Helps us understand how the platform is used in aggregate — which pages are visited most frequently, how long users spend on the platform, and any features causing issues. This data is used for platform improvements and does not identify individuals.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies — especially essential ones — may affect the functionality of the tr66. By continuing to use our platform after viewing our cookie notice, you consent to the use of cookies as described above.

7Children's Data Protection

Platform tr66 is strictly limited to individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

Should we discover that personal data belonging to a child under the age of 18 has been collected without proper verification, we will immediately take the following steps:

• Suspending the account immediately while an investigation is carried out.
• Permanently deleting all related personal data from our systems.
• Returning any financial balance to the payment method used for the original deposit.

Parents or guardians who have reason to believe their child has registered on the platform tr66 are requested to contact our support team immediately at support@tr66.link so that prompt action can be taken.

8International Data Transfers

In the course of its operations, tr66 may transfer or store your personal data on servers located outside Malaysia. This is a standard technical requirement for online platforms that operate globally.

In all cases of international data transfers, tr66 ensure that:

• Data is transferred only to countries or parties that provide a level of data protection equivalent to or greater than that required under Malaysian law.
• Appropriate data processing agreements are signed with all parties who receive your data, ensuring they handle it to the same standards we uphold.
• All data transfers are conducted through secure, encrypted channels without exception.

By using the platform tr66, you consent to the transfer of your personal data to servers outside Malaysia where necessary to deliver the services you have requested, subject to the protections set out in this policy.

9Data Retention Period

tr66 retains your personal data only for as long as necessary to fulfill the purposes stated in this policy or as required by law. Below is a guide to retention periods by data category:

• Active Account Data: For the duration your account remains active, and for an additional period following account closure as required by law.
• Financial & Transaction Records: A minimum of 7 years after the last transaction, in line with Malaysia's tax, account, and AML compliance requirements.
• Identity Verification Records (KYC): A minimum of 5 years after account closure, in line with Malaysia's anti-money laundering legal requirements.
• Support Communication Logs: 2 years from the date of last interaction, for dispute resolution and service improvement purposes.
• Technical Data & System Logs: 12 months, after which data is aggregated or deleted unless required for an ongoing security investigation.

Once data is no longer needed and the minimum retention period has elapsed, tr66 will delete or anonymize such data securely so that it cannot be recovered or re-identified.

10Your Rights as a Data Subject

As a member of the platform tr66 as a member in Malaysia, you have the following rights regarding your personal data, in accordance with the Personal Data Protection Act 2010 (Malaysia):

To exercise any of the rights above, please contact our data protection team at support@tr66.link by stating the right you wish to exercise along with sufficient information for us to identify your account. We will process your request within 14 business days and notify you if a longer period is required.

11Links to Third-Party Websites

Platform tr66 may include links or references to third-party websites or services in certain contexts, such as information about sports bodies or competitions we cover. This Privacy Policy does not apply to those third-party websites or services.

tr66 is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of every website you visit outside the tr66 platform. The presence of links to third-party websites on the tr66 platform does not imply our endorsement or validation of their privacy practices.

12Amendments to This Privacy Policy

tr66 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. When we make significant changes, we will:

• Updating the "Last Updated" date displayed at the top of this page.
• Displaying a clear notice within the tr66 platform the next time you log in after the changes take effect.
• Sending an email notification to the address registered on your account for any material or significant changes to your privacy rights.

Continued use of the platform tr66 after an amendment takes effect will be considered as your acceptance of the updated Privacy Policy. If you do not agree with any amendment, you have the right to close your account and request deletion of your data before the amendment's effective date.

13Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how tr66 handling your personal data, please reach out to us through the following channels:

• Privacy Email: support@tr66.link — include "Privacy Enquiry" in your email subject line to help us process your request faster.
• Live Chat: Available on the tr66 platform — 24 hours a day, 7 days a week — for initial privacy-related inquiries.
• Response Time: We are committed to responding to all privacy enquiries within 2 business days and resolving user rights requests within 14 business days.

For complaints that cannot be resolved through our support channels, you also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010.