Privacy Policy – 668duit

1. Who We Are

This Privacy Policy is issued by the operator of 668duit, accessible at 668duit.win (hereinafter referred to as "668duit", "we", "us", or "our"). 668duit operates as an online gaming platform providing sportsbook, live casino, slot games, esports betting, and lucky bingo services to registered players, with a primary focus on the Malaysian market, serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and beyond.

668duit is the data controller for all personal data collected through the Platform. We are committed to handling your personal data responsibly and in accordance with applicable data protection principles and international gaming authority standards under which we operate.

2. Information We Collect

2.1 Registration Data

When you create a 668duit Account, we collect the following information:

• Full legal name
• Date of birth (to verify age eligibility of 21+)
• Residential address, including city and postcode
• Email address
• Phone number
• Username and encrypted password

2.2 KYC Verification Documents

To comply with international gaming authority requirements and AML standards, 668duit may request the following documents as part of the KYC process:

• Government-issued photo identification (Malaysian IC, passport, or driving licence)
• Proof of address (utility bill, bank statement, or official correspondence dated within 90 days)
• Payment method verification documents (e.g., screenshot of e-wallet account, bank statement)

2.3 Financial & Transaction Data

668duit collects and processes transaction data associated with deposits and withdrawals made through FPX, Maybank2u, CIMB Clicks, Public Bank, Touch n Go eWallet, and Boost, including transaction reference numbers, amounts, timestamps, and payment method identifiers. Full payment account credentials (e.g., bank account numbers) are not stored by 668duit — these are processed securely by our third-party payment processors.

2.4 Gaming Activity Data

668duit records your gaming activity, including bets placed, games played, win and loss history, bonus usage, and session duration. This data is used for account management, fraud prevention, responsible gaming monitoring, and regulatory compliance.

2.5 Technical & Device Data

When you access the 668duit Platform, we automatically collect certain technical data, including your IP address, device type and model, browser type and version, operating system, and general geolocation data derived from IP address. This data is used for platform security, fraud detection, and service optimisation.

2.6 Communications Data

If you contact 668duit via live chat or email, we retain a record of that correspondence including the date, time, content of the communication, and support agent responses. This data is retained for quality assurance, dispute resolution, and regulatory audit purposes.

3. How We Use Your Information

668duit uses the personal data it collects for the following purposes:

Purpose	Categories of Data Used
Account registration and management	Registration data, KYC documents
Identity and age verification (21+)	KYC documents, date of birth
Processing deposits and withdrawals	Financial & transaction data
Fraud prevention and AML monitoring	All data categories
Responsible gaming monitoring and intervention	Gaming activity data, registration data
Customer support and dispute resolution	Communications data, account data
Platform security and technical operations	Technical & device data
Regulatory compliance and reporting	All data categories as required
Service improvement and analytics	Gaming activity data, technical data (aggregated)
Marketing communications (where consented)	Email address, preferences

4. Legal Basis for Processing

668duit processes your personal data on the following legal bases:

• Performance of Contract: Processing necessary to provide the gaming services you have registered for, including account management, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulatory obligations, including KYC verification, AML monitoring, and reporting to relevant authorities.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Where we send you direct marketing communications, we will do so only with your explicit prior consent. You may withdraw this consent at any time by contacting 668duit support.

5. Cookies & Tracking Technologies

668duit uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function, including maintaining your login session and securing your Account. These cookies cannot be disabled without affecting Platform functionality.
• Preference Cookies: Used to remember your settings and display preferences, such as language and odds format selections.
• Analytics Cookies: Used to collect aggregated information about how players use the 668duit Platform, enabling us to improve performance, navigation, and content.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats.

You can manage cookie settings through your browser. Disabling essential cookies will impair your ability to use the 668duit Platform, including logging in to your Account. 668duit does not use cookies for third-party advertising purposes.

6. Sharing Your Information

668duit does not sell, rent, or trade your personal information. We may share your data with the following categories of recipients only where necessary and lawful:

• Payment Processors: Financial transaction data is shared with licensed payment service providers (including FPX, Touch n Go eWallet operator, and banking partners) strictly for the purpose of processing your deposits and withdrawals.
• Game Providers: Gameplay identifiers are shared with certified third-party game providers (such as live casino studio operators) to enable game functionality. Full personal data is not shared.
• KYC & Identity Verification Services: KYC documents may be processed by third-party identity verification service providers engaged by 668duit under strict data processing agreements.
• Regulatory Authorities: 668duit may be required to disclose player data to relevant regulatory authorities, financial intelligence units, or law enforcement agencies in accordance with applicable law and our operating licence obligations.
• Fraud Prevention Services: Technical and transaction data may be shared with industry fraud prevention networks under data processing agreements for the purpose of protecting 668duit and its players.

All third parties who process personal data on behalf of 668duit are required to do so under data processing agreements that bind them to equivalent data protection standards.

7. Data Retention

668duit retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC data: Retained for a minimum of five (5) years following Account closure, as required under international gaming authority and AML standards.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction for regulatory and audit purposes.
• Gaming activity logs: Retained for a minimum of three (3) years for responsible gaming monitoring, dispute resolution, and regulatory compliance.
• Support communications: Retained for a minimum of two (2) years for quality assurance and dispute resolution.
• Technical and device data: Retained for up to twelve (12) months for security and fraud monitoring purposes.

Following the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

8. Data Security

668duit implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. These measures include 256-bit SSL encryption for all data in transit, encrypted storage for passwords and sensitive KYC documents, access controls limiting data access to authorised 668duit personnel on a need-to-know basis, regular security assessments and monitoring of the Platform, and 24/7 fraud detection systems.

While 668duit takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 668duit Account credentials. If you suspect a security breach affecting your Account, please contact 668duit support immediately.

9. Your Rights

Subject to applicable law and the terms of our operating licence obligations, you have the following rights in respect of your personal data held by 668duit:

• Right of Access: You have the right to request a copy of the personal data 668duit holds about you.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data in certain circumstances. Note that this right is subject to 668duit's legal and regulatory data retention obligations; data required for AML compliance, for example, cannot be erased prior to the mandated retention period.
• Right to Restriction: You may request that 668duit restricts the processing of your data in certain circumstances, such as where you contest its accuracy.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format in certain circumstances.
• Right to Object: You may object to processing of your personal data where we rely on legitimate interests as our legal basis, subject to 668duit demonstrating overriding legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact 668duit via the 24/7 live chat support on the Platform or by email at [email protected]. We will respond to all data rights requests within thirty (30) calendar days. We may request identity verification before processing data rights requests to protect your Account security.

10. Children & Age Restriction

668duit's Platform is strictly intended for persons aged 21 years or older. We do not knowingly collect personal data from persons under 21. If 668duit becomes aware that an Account has been created by a person under 21, we will immediately close that Account, delete associated personal data to the extent not required for regulatory purposes, and return any deposits to the originating payment method after investigation.

If you believe a person under 21 has registered a 668duit Account, please contact our support team immediately via live chat. 668duit takes underage registration extremely seriously and will act on all credible reports promptly.

11. Changes to This Policy

668duit reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The revised Policy will be posted on this page with an updated effective date. We encourage you to review this Privacy Policy periodically. Where material changes are made to how we process your personal data, we will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

12. Contact Us

For all privacy-related queries, data rights requests, or concerns regarding how 668duit handles your personal data, please contact us via:

• Live Chat: 24/7 live chat support available on the 668duit Platform
• Email: [email protected] (plain text — not a clickable link)

668duit's support team handles all privacy queries in English and responds to email enquiries within 24 hours on business days. For urgent matters concerning suspected unauthorised access to your Account or data breach concerns, please use the live chat function for the fastest response.