Introduction
Tab66 ("we", "Platform") respects the privacy of every individual who uses our services. This Privacy Policy explains our practices for collecting, using, disclosing, and protecting your personal information when you use the tab66 online betting platform at tab66.vu and our mobile app.
This document is intended to ensure you fully understand how your data is managed. We believe that transparency is the foundation of trust, and trust is the foundation of the long-term relationship we aim to build with every user in Malaysia.
This Privacy Policy applies to all users who register, browse, or use any tab66 services, including via Android and iOS mobile apps. By using our platform, you consent to the practices described in this document.
If you have any concerns about how we handle your personal information, we encourage you to contact our support team, which operates 24/7. We are committed to addressing every privacy inquiry seriously and within a reasonable timeframe.
Information We Collect
Tab66 collects information from various sources to ensure the platform operates safely and efficiently. The following are the categories of information we collect:
Information You Provide Directly
- Full name, date of birth, ID card/passport number for identity verification (KYC)
- Email address, phone number, and residential address
- Bank account or digital wallet details for processing deposits and withdrawals
- Username, password (stored in hashed, unreadable form), and security questions
- Supporting documents uploaded during the KYC process, such as a copy of your MyKad or passport
Automatically Collected Information
- IP address, web browser type, operating system, and screen resolution
- Session log data including the date, time, and duration of platform usage
- History of game activity and wagering on the platform
- Cookie data and similar tracking technologies (see Section 7)
- Approximate location data based on IP address (state/city only, not precise location)
| Data Category | Primary Purpose | Legal Basis |
|---|---|---|
| Identity Data (KYC) | Age Verification & Fraud Prevention | Legal Obligation |
| Contact Data | Support Communications & Notifications | Contract Performance |
| Financial Data | Deposit/Withdrawal Transaction Processing | Contract Performance |
| Technical Data | Security & platform improvement | Legitimate interest |
| Usage Data | Personalize Experience & Analytics | Consent |
How We Use Your Information
Tab66 uses collected information solely for legitimate purposes directly related to providing our services. We will not use your data for unrelated purposes without first obtaining your consent.
- Creating and managing your user account and ensuring login security
- Processing deposits, withdrawals, and all financial transactions on the platform
- Verifying user identity through the KYC process to comply with legal requirements
- Detecting and preventing fraud, money laundering, and activities that violate the Terms of Service
- Sending important notifications related to your account, such as transaction confirmations and security alerts
- Providing relevant customer support and resolving any complaints
- Improving the performance, security, and features of our platform based on usage patterns
- Sending promotional information and exclusive offers – only if you have given your consent for this
You may withdraw consent to receive marketing communications at any time via the notification settings in your account or by contacting our support team. This withdrawal will not affect the core services we provide.
Sharing Information with Third Parties
Tab66 does not sell, rent, or trade your personal information to any third party for commercial purposes. However, there are limited circumstances in which we may need to share your data:
Trusted Service Providers
We work with carefully selected third-party service providers to help us operate the platform, including:
- Certified payment processing providers to handle financial transactions securely
- Cloud service provider for secure data storage and processing
- Identity verification service provider for the KYC process
- Analytics platform to understand usage patterns for platform improvement
All service providers are bound by strict data protection agreements and are only permitted to use your data for the specified purposes.
Legal Requirements
Tab66 may need to disclose user information when required by law, court order, or direction from a competent authority. This includes cooperation investigations related to fraud, money laundering, or other financial crimes.
Data Security
Tab66 invests seriously in security infrastructure to protect your personal information from unauthorised access, alteration, disclosure, or destruction. The technical and organisational measures we implement include:
- 256-bit SSL Encryption for all communications between your browser/app and tab66's servers
- Data Encryption at Rest – all sensitive data is stored in encrypted format on our servers
- Role-based access control – staff can only access data required for their specific role
- 24/7 Monitoring – intrusion detection systems operating around the clock
- Regular security audits – vulnerability assessments and penetration testing by independent parties
- Two-Factor Authentication (2FA) – available for all user accounts as an added layer of protection
While tab66 takes all reasonable steps to protect your data, no security system can guarantee 100% protection under all circumstances. We encourage you to take your own precautions as well, such as using a strong password and enabling 2FA.
Data Retention Period
Tab66 retains your personal information only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law. The following are our general data retention guidelines:
| Data Type | Retention Period | Reason |
|---|---|---|
| KYC & Identity Data | 5 years after account closure | AML Legal Obligation |
| Transaction Records | 7 years | Tax Compliance & Financial Audit |
| Game Activity Log | 3 years | Dispute Resolution & Audit |
| Technical & Log Data | 12 months | Security & troubleshooting |
| Support Communication Records | 2 years | Reference & Quality Improvement |
Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be personally linked to you. This deletion process is carried out in accordance with strict security procedures.
Cookies & Tracking Technologies
Tab66 uses cookies and similar technologies to enhance the user experience, maintain login session security, and understand how our platform is used. The types of cookies we use include:
- Essential Cookies – Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
- Performance Cookies – Collects data on how users interact with the platform to help us identify and resolve technical issues.
- Functional Cookies – Saves your preferences such as display language and interface settings to provide a more personalised experience.
- Analytics Cookies – Helps us understand aggregate traffic and usage patterns to improve the platform. This data cannot identify you personally.
You may manage cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the tab66 platform and your login experience.
Your Rights Over Personal Data
As a tab66 user, you have certain rights regarding your personal information. We respect and facilitate the exercise of these rights:
Right of Access
You may request a copy of all personal information we hold about you at any time.
Right to Rectification
You may request the correction of any inaccurate or incomplete information in our records.
Right to Erasure
In certain circumstances, you may request the deletion of your personal data, subject to legal obligations.
Right to Restriction
You may request that we restrict the processing of your data in certain circumstances while a dispute is being resolved.
Right to Data Portability
You may request your data in a machine-readable format for transfer to another service provider.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time, without conditions.
To exercise any of the rights above, contact our data protection team by email at [email protected] or via live chat on the platform. We will process your request within 30 business days.
Children's Privacy
Tab66 is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal information from individuals under the age of 18.
If we become aware or suspect that personal data has been collected from someone under the age of 18, the relevant account will be terminated immediately and all collected data will be promptly deleted. Parents or guardians who discover their child has registered on our platform are requested to contact us without delay.
Amendments to the Privacy Policy
Tab66 reserves the right to amend this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. We are committed to notifying you of any material changes:
- Notification via registered email at a minimum 14 days before the changes take effect
- Clear in-platform notification when you log in after a change has been made
- The "Updated" date at the top of this document will always reflect the latest version
- Previous versions of the Privacy Policy are kept in an archive and available upon request
Continued use of the tab66 platform after the amendment date takes effect is considered your acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to close your account before the amendments take effect.
Contact Us About Privacy
We take every privacy inquiry and concern seriously. If you have any questions about this Privacy Policy, how we handle your data, or wish to exercise your rights, please contact us through the following channels:
- Live Chat – Available 24/7 within the tab66 platform and app for immediate assistance
- Privacy Email – [email protected] with the subject line "Privacy Enquiry" for faster processing
- Service Language – Full support in both Bahasa Melayu and English
For enquiries regarding your personal data rights, we aim to respond within 5 business days and provide a full resolution within 30 business days from the date the request is received.
Tab66 also encourages users to read Terms and Conditions and the page Responsible Gaming as a complement to your understanding of how this platform is operated as a whole.