fun666 Privacy Policy

1. Data Controller

fun666 is the data controller responsible for your personal data in connection with your use of the fun666 platform accessible at fun666.app. As data controller, fun666 determines the purposes and means of processing your personal data as described in this Privacy Policy.

For all privacy-related enquiries, data subject requests, or complaints, please contact our Data Protection team at [email protected] with the subject line "Privacy Request". We aim to acknowledge all privacy requests within 2 business days and provide a substantive response within 30 calendar days.

2. Personal Data We Collect

fun666 collects the following categories of personal data in connection with the operation of the Platform:

fun666 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless strictly required by law or regulatory obligation.

3. How We Collect Your Data

fun666 collects personal data through the following means:

• Direct Interactions: Data you provide when registering an Account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated Technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, server logs, and session tracking technologies. See Section 9 for details on our Cookie use.
• Third-Party Sources: Identity and financial verification data received from KYC verification partners, fraud screening providers, and payment processors — strictly for the purposes of compliance and security.
• Public Sources: In limited circumstances relevant to fraud prevention or AML compliance, fun666 may cross-reference information against publicly available databases or sanctions screening lists.

4. Purposes of Processing

fun666 processes your personal data for the following purposes:

• Account Registration & Management: Creating, verifying, and maintaining your fun666 Account, including password reset and two-factor authentication.
• Age Verification & KYC: Confirming that all users are aged 21 or above and satisfying applicable know-your-customer requirements.
• Payment Processing: Facilitating deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank.
• Game Operation & Settlement: Running gaming sessions, recording outcomes, settling bets, and maintaining auditable gaming logs.
• Customer Support: Responding to enquiries, resolving disputes, and maintaining records of support interactions.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling indicators and applying self-exclusion or limit settings activated by you.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multiple account operation, and unauthorised access.
• Legal & Regulatory Compliance: Meeting obligations under applicable anti-money laundering, data protection, and gaming regulations.
• Marketing & Promotions: Where you have provided consent, sending promotional communications about fun666 offers, including Deepavali seasonal promotions, reload bonuses, and new game launches. You may opt out of marketing at any time.
• Platform Improvement: Analysing usage patterns to improve Platform performance, design, and product features.

5. Legal Basis for Processing

fun666 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the fun666 Terms and Conditions — including account management, game operation, and payment processing.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, AML obligations, and age verification.
• Legitimate Interests: Processing for fraud prevention, platform security, and product improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where you have provided clear and affirmative consent. You may withdraw consent at any time by contacting [email protected] or using the unsubscribe function in any marketing email.

6. Data Sharing & Disclosure

fun666 does not sell, rent, or trade your personal data. We share your data only in the following circumstances and only to the extent necessary:

• Payment Processors: Financial data is shared with our payment partners (including e-wallet providers such as Touch 'n Go and GrabPay, and FPX-connected banks) solely to process your transactions.
• KYC & Fraud Providers: Identity data is shared with certified identity verification and fraud screening services for compliance purposes.
• Game Software Providers: Limited technical data (e.g. session identifiers) is shared with certified game studios to enable game delivery. These providers have no access to your financial or identity data.
• Technology Partners: Hosting, cloud infrastructure, and analytics providers who process data on our behalf under data processing agreements that restrict their use of your data.
• Legal Authorities: Where required by law, court order, or regulatory direction, fun666 may disclose personal data to law enforcement or regulatory bodies.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

7. International Data Transfers

7.1 fun666 primarily stores and processes data on servers located in Asia. Where data is transferred to processors or sub-processors outside Malaysia, fun666 ensures that appropriate safeguards are in place — including contractual protections equivalent to applicable data protection standards.

7.2 By registering an Account and using the fun666 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside of Malaysia, subject to the protections described in this section.

8. Data Retention

fun666 retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, subject to the following general principles:

• Active Accounts: Personal data is retained for the duration of your Account registration and for a minimum period thereafter as required by applicable AML and gaming regulations — typically a minimum of 5 years following Account closure.
• Financial Records: Transaction records are retained for a minimum of 7 years in accordance with financial record-keeping obligations applicable to gaming operators.
• Support Records: Customer support communications are retained for 3 years from the date of interaction to support dispute resolution and quality assurance.
• Marketing Data: Where you have opted out of marketing, we retain a suppression record of your opt-out preference to ensure you are not contacted contrary to your preferences.

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you.

9. Cookies & Tracking Technologies

fun666 uses cookies and similar tracking technologies on the Platform. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for Platform operation — including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings and "Remember me" login state on your personal device.
• Analytics Cookies: Used to collect aggregated usage data to understand how players navigate the Platform and to improve performance. Data is processed in anonymised form where possible.
• Security Cookies: Used for fraud detection and bot prevention, including device fingerprinting for login anomaly detection.

fun666 does not use third-party advertising or retargeting cookies. You may manage your cookie preferences through your browser settings; however, disabling essential cookies may prevent you from logging in or using certain Platform features.

10. Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by fun666:

• Right of Access: Request a copy of the personal data fun666 holds about you.
• Right of Rectification: Request correction of inaccurate or incomplete personal data.
• Right of Erasure: Request deletion of your personal data where retention is no longer necessary — subject to fun666's legal obligations to retain certain records.
• Right to Restrict Processing: Request that fun666 limits the processing of your data in certain circumstances.
• Right to Data Portability: Request a machine-readable copy of personal data you have provided to fun666 for transmission to another service provider.
• Right to Object: Object to processing based on legitimate interests, including profiling for fraud prevention purposes — subject to fun666's overriding legitimate interests.
• Right to Withdraw Consent: Withdraw consent for marketing at any time without affecting prior processing.

To exercise any of these rights, please contact [email protected] with "Privacy Request" in the subject line. We will verify your identity before processing any data subject request. fun666 will not charge a fee for reasonable requests and will respond within 30 calendar days.

11. Security Measures

fun666 implements technical and organisational security measures appropriate to the nature of the personal data processed, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and fun666 servers.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits and penetration testing by independent information security professionals.
• Bcrypt or equivalent hashing of all account passwords — passwords are never stored in plain text.
• Anomaly detection systems monitoring for unusual login patterns, fraudulent transactions, or data access irregularities.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, fun666 will notify affected users without undue delay and take immediate remediation steps.

12. Minors

The fun666 Platform is strictly for persons aged 21 years and above. fun666 does not knowingly collect or process personal data relating to persons under 21 years of age. If fun666 discovers that personal data has been collected from a person under the minimum age, the Account will be immediately closed and all associated data will be deleted, subject to any legal obligation to retain evidence of the breach for regulatory reporting purposes.

If you believe a minor has registered on the fun666 Platform, please contact us immediately at [email protected] so that we may investigate and take appropriate action.

13. Changes to This Privacy Policy

fun666 reserves the right to update this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, or Platform features. When we make material changes, we will notify you via the email address registered to your Account or by a prominent notice on the Platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Your continued use of the fun666 Platform after the effective date of any updated Policy constitutes your acknowledgement of the changes.

14. Contact & Complaints

If you have any questions, concerns, or complaints about how fun666 handles your personal data, please contact us: