Cb666 Privacy Policy — How We Protect the Personal Data of Malaysian Members

Cb666 takes your privacy seriously. This document transparently explains the types of data we collect, how we use it, who can access it, and your rights as a cb666 Malaysia member with respect to your personal data.

Last updated: 1 January 2026

Cb666's Six Data Protection Principles

Before reading the full policy, here are cb666's key commitments to protecting the personal data of every Malaysian member.

256-Bit SSL Encryption

All data transmitted between your device and cb666's servers is encrypted using 256-bit SSL — the same standard used by Malaysia's major banks, including Maybank and CIMB. This ensures your personal information and financial transactions cannot be intercepted or read by third parties during transmission.

No Data Sales

Cb666 has never sold, and will never sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data belongs to you — we only use it for purposes you have explicitly consented to, or that are necessary to operate cb666's services.

Malaysian Legal Compliance

Cb666's data protection practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards. We have appointed a Data Protection Officer responsible for ensuring all data handling processes meet the legal requirements in force in Malaysia.

Restricted Internal Access

Within cb666, access to members' personal data is restricted to staff who genuinely require it to perform their duties. All cb666 employees sign strict confidentiality agreements and undergo data protection training before being granted any access to systems containing member information.

Right to Rectification & Erasure

You have the full right to access, correct, or request the deletion of your personal data held by cb666. Requests can be submitted by email to our data protection team. We will process your request within 14 business days of receiving a complete submission.

Data Breach Notification

In the event of a data security breach involving members' personal information, cb666 is committed to notifying affected members within 72 hours of the breach being detected, in accordance with applicable legal requirements. The notification will include details of the incident and the steps cb666 has taken to address it.

Welcome to the cb666 Privacy Policy. This document explains how cb666 ("we", "the Platform", or "cb666") collects, uses, discloses, and protects your personal information when you use our website and services at https://cb666.win.

By registering an account or using any cb666 service, you agree to the data collection and usage practices described in this Privacy Policy. Please read this document carefully before registering or providing any personal information to us.

This Privacy Policy should be read together with Terms & Conditions cb666 forms the complete agreement between you and our platform. In the event of any conflict between these documents, the Terms & Conditions shall prevail unless explicitly stated otherwise.

01

Introduction & Scope of the cb666 Privacy Policy

Cb666 is an online entertainment platform offering live casino games including baccarat, jackpot slots, poker, Sports Betting on football competitions such as the Malaysia Super League and EPL, cricket, badminton, e-sports, and a wide range of other games to players in Malaysia and around the world.

In providing these services, cb666 needs to collect and process certain personal data. We understand that members' trust in how their personal data is handled is our most valuable asset, and we take this responsibility seriously.

This Privacy Policy applies to:

  • All users who visit cb666.win, whether registered or not.
  • All registered members using any cb666 service.
  • All individuals who contact cb666 via customer support channels, email, or any other communication medium.
  • All financial transactions involving deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks, and other Malaysian payment methods supported by cb666.

Cb666 acts as the Data Controller for all personal information collected through our platform. This means we determine the purpose and manner in which that data is processed, and we take full responsibility for ensuring all processing is carried out in accordance with applicable law.

02

Types of Personal Data We Collect

Cb666 collects your personal data through various means — directly when you register or use our platform, automatically through tracking technologies, and occasionally from legitimate third-party sources. The categories of data we collect are as follows:

Data Category Specific Examples Collection Method
Identity Data Full name, date of birth, identification card number (for age verification) Registration form
Contact Data Malaysian phone number, email address, username Registration form
Financial Data E-wallet account name, bank account number (for withdrawals), deposit & withdrawal records in RM Transaction processing
Gaming Data Betting history, games played, wins & losses, session duration Automatic — platform activity
Technical Data IP address, device type, operating system, web browser, screen resolution Automatic — system logs
Usage Data Pages visited, time of visit, links clicked, in-platform searches Automatic — cookies & analytics
Communication Data Customer support chat records, emails, support tickets Direct interactions

Cb666 does not collect sensitive data such as medical information, religious beliefs, or political affiliations. If you voluntarily share sensitive category information with us through any communication, we will handle it with the highest level of protection and use it solely for the purpose you have specified.

03

How We Use Your Personal Data

Cb666 uses your personal data for legitimate purposes with a clear legal basis. Below are the primary purposes for which your data is used and the legal grounds underpinning each.

  • Account Management: Processing registrations, verifying your identity, managing your account, and enabling you to log in and make full use of cb666's services.
  • Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, and other Malaysian payment methods, as well as processing your winnings withdrawals in RM.
  • Legal Compliance: Fulfilling our obligations under anti-money laundering laws, customer verification (KYC) requirements, and other applicable regulatory rules.
  • Platform Security: Detecting and preventing fraud, account abuse, game manipulation, or other unlawful activity on the cb666 platform.
  • Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling and offering appropriate support to members who may need assistance.
  • Customer Support: Responding to enquiries, resolving disputes, and providing technical assistance to cb666 members.
  • Service Improvement: Analysing usage data in aggregate (without identifying individuals) to understand how members use the platform and make relevant improvements.
  • Promotional Communications: Sending information about relevant cb666 promotions, bonuses, and offers — only if you have consented to receive such communications. You may withdraw this consent at any time.

Cb666 will not use your personal data for any purpose beyond those stated above without first obtaining your renewed consent, unless required to do so by law.

04

Data Sharing with Third Parties

Cb666 does not sell, rent, or disclose members' personal data to third parties for marketing purposes. However, there are limited situations where we need to share your data with certain parties in order to deliver cb666's services effectively:

  • Payment Processor: Payment service providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banks need to receive the necessary transaction data to process your deposits and withdrawals. This sharing is limited strictly to the information required and is governed by rigorous data security agreements.
  • Game Developers: Third-party game providers that operate games within the cb666 platform may receive the minimum session data required to deliver those games. They are not permitted to use this data for any other purpose.
  • Regulatory Authority: cb666 will disclose data where required by law, court order, or a lawful request from Malaysian law enforcement agencies.
  • Technical Service Provider: Companies providing services such as server hosting, cybersecurity, and technical analytics may access data necessary to perform their functions, subject to strict confidentiality agreements.

All third parties that receive cb666 members' personal data are required to meet data protection standards equal to or higher than those of cb666 itself. cb666 conducts regular reviews of the data protection practices of all vendors and partners with access to member data.

05

Cb666 Data Security Measures

Cb666 implements a range of technical and organisational security measures to protect members' personal data from unauthorised access, disclosure, alteration, or accidental destruction:

  • Data Encryption in Transit: All communications between your browser or app and cb666's servers are encrypted using TLS 1.3 with 256-bit SSL certificates. This ensures that data from Touch 'n Go, DuitNow, or any other financial transaction cannot be intercepted.
  • Data Encryption at Rest: Sensitive data stored in cb666's databases, including financial details and identity verification information, is encrypted at rest using AES-256.
  • Layered Access Control: Role-based access controls ensure that cb666 staff can only access data necessary for their specific duties. Access logs are continuously monitored.
  • 24/7 Security Monitoring: cb666's cybersecurity team monitors all systems around the clock in real time to detect any threats or unusual activity.
  • Regular Penetration Testing: cb666 conducts regular independent security testing to identify and address vulnerabilities in our infrastructure before they can be exploited.
  • Secure Data Backup: Member data is automatically backed up to a secure, separate location on a regular basis to ensure data recovery in any technical emergency.

While cb666 takes all reasonable steps to protect your data, no security system is 100% impenetrable. You also play an important role in keeping your account secure — use a strong password, never share your login credentials, and enable two-factor authentication in your cb666 account settings.

06

Use of Cookies & Tracking Technologies

Cb666 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the cb666 website.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of the cb666 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

07

Your Personal Data Rights

As a cb666 member and an individual whose data is processed by us, you have the following rights protected under applicable data protection laws in Malaysia:

Right of Access

You have the right to request a copy of the personal data we hold about you. cb666 will provide this within 14 working days of a valid request.

Right to Rectification

If your personal data held by cb666 is inaccurate or incomplete, you have the right to request a correction. Some information can be updated directly through your account settings.

Right to Erasure

Under certain circumstances, you may request that cb666 delete your personal data. This right is subject to our legal obligations to retain certain records.

Right to Restriction of Processing

You may request that cb666 restrict the processing of your data in certain circumstances — for example, while an investigation into data accuracy or a dispute over data use is ongoing.

Right to Data Portability

You may request a copy of the data you have provided to cb666 in a machine-readable format, enabling transfer to another platform if desired.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time. We will stop sending promotional communications immediately upon receiving your objection.

To exercise any of the above rights, submit a written request to support@cb666.win with the subject line "Data Privacy Rights Request". Please include your account information and the type of right you wish to exercise. cb666 will verify your identity before processing the request and will provide a response within 14 business days.

08

Data Retention Period

Cb666 retains your personal data only for as long as necessary for the original purpose of collection, or as required by applicable law. cb666's general data retention guidelines are as follows:

  • Active account data: Retained for the duration of your active cb666 account and for a minimum of 5 years after account closure, for the purpose of anti-money laundering compliance.
  • Financial transaction records: Retained for a minimum of 7 years from the transaction date, in line with Malaysia's applicable financial and tax legislation.
  • Support communication records: Retained for 3 years from the date of last communication for dispute resolution and service improvement purposes.
  • Technical log data: Access and security logs are retained for 12 months for fraud detection and cybersecurity investigation purposes.
  • Marketing data: Retained until you withdraw your consent to receive marketing communications, after which your marketing data will be deleted within 30 days.

Once the relevant retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally.

09

Cross-Border Data Transfers

In operating cb666, some members' personal data may be transferred to, stored in, or processed in countries other than Malaysia — primarily where our servers or service providers are located. cb666 ensures that all such cross-border data transfers are carried out with adequate safeguards in place.

Cb666's safeguards for international data transfers include:

  • Use of internationally recognised Standard Contractual Clauses in agreements with third-party data recipients.
  • Ensuring that data recipients in other countries are subject to data protection laws that provide an equivalent or higher level of protection than Malaysia's PDPA.
  • Data encryption in transit for all cross-border transfers, without exception.

The majority of personal data belonging to cb666's Malaysian members is stored and processed on servers located in the Asia region — this reduces the need for intercontinental data transfers and maintains a level of data protection consistent with Malaysia's requirements.

10

Contact the cb666 Data Protection Officer

Cb666 has appointed a Data Protection Officer responsible for overseeing compliance with this Privacy Policy and handling enquiries and requests related to members' personal data. If you have any questions, concerns, or wish to exercise your privacy rights, please contact us via:

  • Email: support@cb666.win (add subject: "Privacy Policy Enquiry")
  • Live Chat: Available 24/7 within the cb666 platform — Bahasa Malaysia support prioritised
  • Response time: We aim to provide an initial response within 24 hours and full resolution within 14 working days for all privacy-related enquiries.

If you are not satisfied with how cb666 has handled your privacy concerns after contacting us, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body.

Privacy Policy Updates

Cb666 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technologies used, legal requirements, or other reasonable grounds. When we make significant changes, we will notify you via your registered email or a prominent notice on the cb666 platform before the changes take effect.

Last updated: 1 January 2026. Continued use of the cb666 platform after changes to the Privacy Policy are made constitutes your acceptance of the updated policy.

Your Trust is the Foundation of cb666's Service to Malaysian Players

When you register with cb666, you entrust us with your most personal information — your name, phone number, and financial details linked to your Malaysian bank or e-wallet account. cb666 does not take this trust lightly. Every decision we make about how your data is handled is carefully considered from a member protection standpoint.

Malaysia's personal data protection framework continues to strengthen under the Personal Data Protection Act 2010 (PDPA). cb666 welcomes these requirements and goes beyond minimum compliance — we proactively implement cybersecurity and data protection best practices, rather than taking a purely reactive approach.

One aspect of privacy that is often overlooked in the online gaming industry is the protection of gaming data. At cb666, your betting history — whether it's live baccarat, jackpot slots, Malaysia Super League football betting, or e-sports — is treated as sensitive personal information. We do not use this data for profiling that could be used to exploit your behaviour. When we do analyse gaming patterns, it is solely to identify potential problem gambling and offer timely responsible gaming support.

Your deposits at cb666 via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX leave a digital financial trail. cb666 stores these transaction records securely and uses them only for legitimate purposes — transaction processing, anti-money laundering compliance, and the resolution of any payment disputes. We do not analyse your spending patterns for marketing purposes or share this information with advertisers.

In today's digital landscape, password security is your account's first line of defense. cb666 stores your password in a hashed format using strong cryptographic algorithms — which means even cb666 staff cannot view your actual password. If you forget your password, the only way to regain access is through our reset process, which sends a secure link to your registered email address.

Cb666 understands that our members are real individuals with personal lives that deserve protection. We will never contact your family or employer, or disclose the existence of your cb666 account to any party without your consent, except where required by a court order or applicable law. Your privacy in using our platform is your right, and we are committed to respecting it.

Your Data Is Safe — Now Let's Get You the Best cb666 Experience

With robust personal data protection at cb666, you can focus entirely on your favourite games — live baccarat, jackpot slots, Malaysia Super League betting, or e-sports. Register for free, claim your RM1,500 welcome bonus, and deposit via Touch 'n Go or DuitNow in seconds.

  • 256-bit SSL encryption on all transactions
  • No sale of data to third parties
  • Malaysia PDPA Compliance
  • 24/7 Bahasa Malaysia privacy support
Documents Related to the cb666 Privacy Policy

This Privacy Policy should be read together with Terms & Conditions cb666, which sets out the full terms of use for the platform. Together, both documents form the complete agreement between you and cb666 regarding data use and platform services.

For privacy enquiries, contact: support@cb666.win · Response time: within 24 hours

Responsible Gaming — cb666 Cares About You

Play within your means and for entertainment purposes only. cb666 provides deposit limit, loss limit, play break, and self-exclusion tools through your account settings. Casino gaming is for individuals aged 18 and above only. For help with gambling-related issues, contact the Malaysia Gambling Helpline: 1-800-88-6188 (free, 24 hours).

The cb666 Team Is Ready to Answer Your Privacy Enquiries

If anything in this Privacy Policy is unclear, or if you wish to exercise your privacy rights, cb666's Malay-speaking support team is available 24 hours a day, 7 days a week.

Email: support@cb666.win

Bahasa Melayu