Official Documents

Privacy Policy eplay66 – Our Commitment to Protecting Your Data

This document explains how eplay66 collects, uses, stores, and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Your trust is our top priority.

Updated: 1 January 2026
Version 3.1 – PDPA 2010 Compliant
256-bit SSL
All data encrypted to banking-grade standards
PDPA 2010 Compliant
Malaysia Personal Data Protection Act
No Data Sales
Your data is never sold to third parties
Full Access Right
You may view, update, or delete your data

Eplay66's Six Data Protection Principles

This is the foundation of eplay66's commitment to protecting the privacy and personal data of every Malaysian member.

Minimum Data Collection

Eplay66 only collects data that is strictly necessary to manage your account and process your transactions. We do not gather excessive or irrelevant information. This "data minimisation" principle ensures your digital footprint with us is kept as small as possible.

Bank-Grade Encryption

All data transmitted between your device and eplay66's servers is protected by 256-bit SSL encryption — the same technology used by Malaysian banking institutions such as Maybank and CIMB. Sensitive details such as your DuitNow and Touch 'n Go eWallet information are never stored in plain text.

No Third-Party Data Sales

Eplay66 does not sell, rent, or trade members' personal data to any third party for marketing purposes. Your data belongs to you. We only share information when required by law or with technical partners who are bound by strict confidentiality agreements.

Full Data Control for Members

Every eplay66 member has the full right to access, update, or request deletion of their personal data at any time. You may contact the eplay66 support team to submit a data-related request, and we are committed to responding within 14 working days.

Malaysia PDPA Compliance

The eplay66 Privacy Policy is drafted and updated in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure that all data handling processes comply with applicable Malaysian law and will update this policy whenever legislative amendments are made.

Data Breach Notification

In the unlikely event of a data breach that may affect your information, eplay66 is committed to notifying affected members within 72 hours of the breach being detected, along with the steps taken to address the situation.


Important Notice

This Privacy Policy explains how eplay66 collects and handles your personal data. By registering for or using the eplay66 platform, you agree to the collection and use of data as described in this document. Please read it carefully before providing us with any personal information.

Eplay66 takes the privacy of its members very seriously. We understand that your trust in us goes beyond fair gameplay and fast payouts — it's also about the confidence that your personal information is in responsible hands. This Privacy Policy is our commitment to you on how we uphold that responsibility.

As a platform operating for the Malaysian market, eplay66 fully complies with the Personal Data Protection Act 2010 (PDPA) and all regulations issued under it. We also follow industry best practices in data management to ensure the best possible protection for all our members.

1

Types of Personal Data We Collect

Eplay66 collects member personal data through several means — directly when you register or interact with the platform, and automatically as you use our services. The following are the categories of data we collect:

Data Category Sample Information Primary Purpose
Identity Data Full name, MyKad number, date of birth Identity verification, KYC compliance
Contact Data Malaysian mobile number, email address Communications, account verification
Financial Data Bank account number, DuitNow number, e-wallet account holder name Processing deposits and withdrawals
Transaction Data Deposit history, withdrawal history, betting records Auditing, fraud detection, customer support
Technical Data IP address, device type, web browser, operating system Security, platform improvements
Usage Data Games played, session duration, game preferences Personalise your experience, game recommendations

Note: eplay66 does not directly collect or store credit or debit card numbers. All card transactions are processed through certified payment gateways that comply with PCI DSS standards. Sensitive financial data such as your FPX password or e-wallet PIN is never shared with eplay66.

2

How We Use Your Data

Eplay66 uses collected personal data solely for legitimate, stated purposes. We will not use your data for any other purpose without your prior consent. The primary uses of your data are as follows:

  • Account Management: Creates and maintains your member account, including identity verification and eligibility checks
  • Transaction Processing: Processes deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and other methods; as well as withdrawals of winnings to your account
  • Fraud Detection: Monitors and detects fraudulent activity, hacking attempts, or platform abuse to protect you and all other members
  • Legal Compliance: Meeting legal obligations including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements
  • Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance to members
  • Personalise Your Experience: Personalising game recommendations and promotions based on your preferences and play history
  • Service Communications: Sends important notifications regarding your account, transactions, changes to terms, or security issues
  • Platform Improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve eplay66's features and overall experience
About Marketing Communications

Eplay66 may send members information about promotions, the latest bonuses, and new games via email or app notifications. You may withdraw consent to receive marketing communications at any time through your account settings or by contacting our support team. Withdrawing consent does not affect the receipt of important account-related communications.

3

Data Sharing with Third Parties

Eplay66 does not sell or trade member personal data. However, in the course of operating the platform, we may need to share certain information with selected third parties under limited and controlled circumstances:

  • Payment Service Providers: Payment gateways that process your DuitNow, FPX, and e-wallet transactions. They receive only the information necessary to complete each transaction and are bound by strict confidentiality agreements
  • Game Providers: Companies such as Evolution Gaming, Pragmatic Play, and SA Gaming may receive anonymous account identifiers for technical purposes. They do not receive your real name, phone number, or financial information
  • Cloud Services & Infrastructure: Server and data storage providers bound by data processing agreements and security standards set by eplay66
  • Legal Authorities: Malaysian government agencies or law enforcement bodies making legitimate requests in accordance with proper legal procedures
  • Fraud Prevention Services: Third-party technical tools that assist in detecting and preventing fraud, money laundering, and other unlawful activities

In all instances of data sharing, eplay66 ensures that the receiving party is bound by data protection obligations equivalent to or stricter than our own. We never share your data with advertisers or data brokers.

4

Data Security & Protection Measures

Eplay66 continually invests in security infrastructure to ensure member personal data and financial information are protected at all times. Key security measures we employ include:

  • Data Encryption in Transit: All communications between your browser or app and eplay66's servers are encrypted using TLS 1.3 with AES-256 encryption
  • Data Encryption at Rest: Sensitive information stored in eplay66's databases is encrypted using advanced encryption, including passwords hashed with the bcrypt algorithm
  • Layered Access Controls: Only eplay66 staff with specific authorisation may access member personal data, and every instance of access is recorded in an audit log
  • Two-Factor Authentication (2FA): eplay66's internal systems require 2FA for all staff access to systems that store member personal data
  • 24/7 Monitoring: An automated threat detection system monitors platform traffic and activity around the clock to identify intrusion attempts.
  • Regular Security Audits: eplay66 conducts regular penetration testing and security audits carried out by independent third parties

Shared Responsibility: While eplay66 takes all reasonable steps to protect your data, account security also depends on your own actions. Make sure your eplay66 password is strong, unique, and never shared with anyone.

5

Data Retention Period

Eplay66 retains members' personal data only for as long as necessary for the stated purposes or as required by law. Our data retention policy is as follows:

  • Active Account Data: Retained for the duration your account is active and for a minimum of 5 years after account closure to meet AML and KYC legal requirements
  • Financial Transaction Records: Retained for 7 years in compliance with Malaysian financial regulatory requirements, including records of DuitNow, FPX, and e-wallet deposits
  • Customer Support Communication Logs: Retained for 3 years for dispute resolution and service improvement purposes
  • Technical Data & System Logs: Retained for 12 months for security and audit purposes
  • Marketing Data (with consent): Retained until you withdraw consent or close your account

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered. In cases where immediate deletion is not possible due to technical requirements, the data will be isolated and no longer used until it is deleted.

6

Cookies & Tracking Technologies

The eplay66 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The types of cookies we use are:

  • Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality
  • Cookie Function: Stores your preferences such as language, display settings, and game preferences to deliver a more personalised experience
  • Analytics Cookies: Collects anonymous information on how members use the platform to help us improve our services. This data is aggregated and does not identify any individual
  • Security Cookies: Helping detect and prevent suspicious activity, and protecting your account from unauthorised access

You can manage cookie settings through your web browser. However, disabling essential cookies may affect your ability to use certain features of the eplay66 platform. eplay66 does not use third-party cookies for advertising purposes.

7

Your Personal Data Rights

Under Malaysia's PDPA 2010 and data protection best practices, you have the following rights regarding the personal data eplay66 holds about you:

Right of Access

You have the right to request a copy of the personal data eplay66 holds about you at any time.

Right to Rectification

You have the right to request corrections to any inaccurate or incomplete data in your eplay66 account.

Right to Erasure

You may request the deletion of your personal data, subject to any retention obligations that remain legally in force.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, without providing any reason.

Data Portability Right

You may request your data in a machine-readable format for transfer to another service if needed.

Right to Restrict Processing

Under certain circumstances, you may request that eplay66 restrict the processing of your data while a dispute is being resolved.

To exercise any of the above rights, contact the eplay66 support team via live chat or email at support@eplay66.com, stating the nature of your request. eplay66 is committed to responding to all data-related requests within 14 business days. In complex cases, we may require up to 30 business days and will notify you of any such delay.

8

Children's Privacy

The eplay66 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. The eplay66 registration process requires age verification, and we reserve the right to verify a member's age at any time via valid identification documents.

If eplay66 discovers that personal data belonging to a minor has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has an eplay66 account are urged to contact us immediately at support@eplay66.com.

9

Cross-Border Data Transfers

In the course of its operations, eplay66 may need to transfer members' personal data to servers or partners located outside Malaysia. This may occur in the context of cloud service usage, international game providers, or global technical infrastructure.

In all cases of cross-border data transfers, eplay66 ensures that:

  • Countries or regions receiving data maintain data protection standards equivalent to those in Malaysia
  • Appropriate contractual agreements are in place to protect your data
  • Data transfers are limited strictly to what is necessary for legitimate purposes
  • All recipient parties are bound by strict confidentiality and security obligations

You have the right to request further information regarding cross-border data transfers involving your personal data by contacting eplay66 through our support channels.

10

Contact Us About Privacy

If you have any questions, concerns, or requests relating to eplay66's Privacy Policy or the handling of your personal data, please reach out to us through the following channels:

  • Live Chat: Available 24 hours a day, 7 days a week via the eplay66 platform
  • Email: support@eplay66.com – please include "Privacy Request" in your email subject line

Eplay66 will endeavour to respond to all privacy-related enquiries within 5 business days. For formal data rights requests, we will acknowledge receipt within 48 hours and provide a full response within 14 business days.

Privacy Policy Amendments

Eplay66 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technologies used. Any significant changes will be communicated to members via platform notifications or email. The date of the most recent update is displayed at the top of this document. Continued use of the eplay66 platform after any amendments take effect will be considered acceptance of the updated Privacy Policy.

Frequently Asked Questions About the eplay66 Privacy Policy

No. eplay66 does not sell, rent, or trade members' personal data to any third party for marketing or other commercial purposes. Your data is only shared with third parties directly involved in operating eplay66's services — such as payment providers who process your DuitNow or Touch 'n Go eWallet transactions — and all of them are bound by strict confidentiality agreements.

Yes, you have the right to request the deletion of your personal data. However, this right is subject to legal obligations that require eplay66 to retain certain records — in particular, financial transaction records for a minimum of 7 years under Malaysian AML law. Data not subject to any legal retention requirement will be deleted within 30 days of receiving a valid request. To submit a deletion request, contact the eplay66 support team via live chat or email.

eplay66 protects your financial information through multiple layers of security. All communications are encrypted with 256-bit SSL. Sensitive details such as bank account numbers and e-wallet information are encrypted within our database. eplay66 does not store your FPX password, Touch 'n Go eWallet PIN, or any e-wallet authentication credentials — these are managed directly by certified payment providers. Furthermore, our team will never request such sensitive information via live chat or email.

When you close your eplay66 account, the majority of your personal data will be deleted or anonymised. However, financial transaction records will be retained for 7 years in accordance with Malaysian AML and KYC legal requirements. Basic identity data is also retained for 5 years following account closure to fulfil legal obligations. Once the retention period has elapsed, all remaining data will be securely deleted. You may request further details about data still held by contacting support@eplay66.com.

🔒

Your Data is Secure. Your Game is Protected.

Eplay66 safeguards your privacy with 256-bit SSL encryption, PDPA 2010 compliance, and a full commitment to data security. Register for free and start playing with complete peace of mind today.

eplay66 promotes responsible gaming. For players aged 18 and above only.

Bahasa Melayu