1. Introduction
This Privacy Policy ("Policy") describes how api66 ("we", "the platform", or "api66") collects, uses, discloses, and protects your personal information when you use our online betting platform at api66.ws. This Policy applies to all registered members and visitors of the api66 platform in Malaysia.
Api66 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to ensuring your personal data is processed lawfully, fairly, and transparently. By registering an api66 account or continuing to use our platform, you confirm that you have read and understood this Privacy Policy.
If you have any questions about this Privacy Policy or how we handle your personal data, please contact our data protection team at support@api66.ws.
2. Personal Data We Collect
Api66 collects several categories of personal data for the purposes set out in this Privacy Policy. Below is a comprehensive overview of the types of data we collect:
2.1 Data You Provide Directly
- Full name as per Malaysian MyKad or passport
- Date of birth and gender
- Malaysian email address and mobile number
- Full residential address in Malaysia
- Malaysian bank account or eWallet details (for processing MYR deposits and withdrawals)
- Identity verification documents (copy of MyKad, bank statement) when required
- Account username and password (stored in encrypted form)
2.2 Automatically Collected Data
- IP address and device information (operating system, browser type, screen resolution)
- Access logs including dates, times, and pages visited
- Gaming data includes betting history, wins, and losses
- Financial transaction data in MYR including deposits, withdrawals, and bonuses
- General location data (state/region within Malaysia only)
- Cookie data and similar tracking technologies
| Data Category | Example | Primary Purpose |
|---|---|---|
| Identity Data | Full name, MyKad number, date of birth | Identity verification & legal compliance |
| Contact Data | Email address, phone number | Communication & customer support |
| Financial Data | Bank accounts, eWallets, MYR transaction records | Payment processing & auditing |
| Technical Data | IP address, device, browser | Security & fraud detection |
| Gaming Data | Betting history, gaming activity | Responsible gambling compliance |
3. How We Use Your Personal Data
Api66 uses the personal data collected for the following purposes, all grounded in valid legal bases under Malaysia's PDPA:
- Account Management: Registering and managing your member account, including identity verification and account setup.
- Transaction Processing: Processing all deposits and withdrawals in MYR via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks).
- Service Provision: Enabling you to access all games and betting on the api66 platform, including slots, live casino, baccarat, poker, and Sports Betting.
- Security & Fraud Prevention: To identify and prevent fraudulent activity, money laundering, and platform abuse.
- Legal Compliance: To fulfil applicable legal and regulatory obligations, including anti-money laundering (AML) requirements.
- Relevant Marketing: Sending you relevant api66 promotional information, bonuses, and offers โ you may unsubscribe at any time.
- Service Improvement: Analysing usage patterns to improve the platform, games, and overall user experience.
- Customer Support: Handling your enquiries, complaints, and support requests efficiently.
4. Sharing of Personal Data
Api66 respects your privacy and does not sell your personal data to any third party. However, there are limited circumstances in which we need to share your data with certain parties:
4.1 Trusted Service Providers
We share necessary personal data with third-party service providers who assist in operating our platform, including payment gateway providers (Touch 'n Go, GrabPay, DuitNow, FPX), cloud service providers, and identity verification companies. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes.
4.2 Legal Requirements
Api66 may disclose your personal data to Malaysian government authorities or law enforcement if required by law, court order, or valid legal process. This includes cooperation with Malaysian anti-money laundering and tax agencies where applicable.
5. Data Security
Protecting your personal data is api66's highest priority. We implement comprehensive technical and organisational security measures to safeguard your data against unauthorised access, alteration, disclosure, or destruction:
- 256-bit SSL Encryption: All communications between your device and api66's servers are encrypted using industry-standard SSL/TLS technology.
- Encrypted Password: Your account password is stored using an irreversible one-way hashing algorithm โ even api66 staff are unable to read it.
- Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an added layer of security on their accounts.
- 24/7 Monitoring: Our cybersecurity team continuously monitors our systems to detect any threats or suspicious activity.
- Regular Security Audits: api66 conducts regular security audits and penetration testing by independent security experts.
- Strict Access Controls: Only staff who require access to personal data in order to perform their duties are granted such access.
While we take every reasonable measure to protect your data, no security system can be guaranteed 100% secure. In the event of a material data security breach, api66 will notify you and the relevant authorities within the timeframe required by Malaysian law.
6. Cookies and Tracking Technologies
Api66 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:
- Essential Cookies: These cookies are required for the core functionality of the api66 platform, such as maintaining your login session. They cannot be disabled.
- Performance Cookies: Helping us understand how members use our platform so we can improve performance and user experience.
- Functional Cookies: Saving your preferences such as language and display settings so you don't have to reconfigure them each time.
- Analytics Cookies: Collecting aggregated statistical information about platform traffic for development and improvement purposes โ this data does not identify you personally.
You can manage and delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of the api66 platform.
7. Data Retention Period
Api66 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by Malaysian law. Our data retention guidelines are as follows:
- Active Account Data: Retained for the duration your account remains active and for a reasonable period thereafter.
- Financial Transaction Records (MYR): Retained for a minimum of 7 years as required by Malaysian tax and financial regulations.
- Security Logs: Retained for 12 months for security investigation purposes.
- Support Communication Data: Retained for 3 years after the last interaction.
- After Account Closure: Data no longer required for legal compliance will be deleted or anonymised within 90 days.
8. Links to Other Platforms
The api66 platform may contain links to third-party websites or services, including Malaysian payment providers such as Touch 'n Go, GrabPay, or Maybank2u portals. This Privacy Policy applies solely to the api66 platform and does not cover the privacy practices of those third-party websites or services.
Api66 is not responsible for the privacy policies or content of third-party websites. We encourage you to read the Privacy Policy of any third-party website before submitting your personal information to them.
9. Children's Privacy
The api66 platform is exclusively for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. Should we discover that we have collected personal data from a minor without proper parental consent verification, we will take immediate steps to delete that data and close the account in question.
If you believe we may have collected data from someone under the age of 18, please contact us immediately at support@api66.ws.
10. Amendments to the Privacy Policy
Api66 reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or new platform features. Any material changes to this Policy will be announced on this page with an updated "Last Updated" date.
For significant amendments, api66 will endeavour to provide advance notice to members via their registered email or in-platform notification at least 14 days before the changes take effect. Continued use of the api66 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.
It is your responsibility to review this page periodically. A version history of this Privacy Policy is available upon request โ contact our team to obtain it.
11. Contact Us About Your Privacy
If you have any questions, concerns, or wish to exercise your privacy rights, please contact api66's Data Protection Officer through the following channels:
- Email: support@api66.ws โ for personal data requests, please include "Privacy Request" in your email subject line
- Live Chat: Available 24/7 via the chat icon on the api66 platform
- Response Time: We aim to respond to all privacy-related enquiries within 30 business days
For data protection complaints that api66 is unable to resolve, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia under the Ministry of Communications.