OFFICIAL PRIVACY DOCUMENT

City66 Privacy Policy — Malaysian Player Data Protection

City66 respects the privacy of every player. This Privacy Policy clearly explains how we collect, store, use and protect your personal information in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010.

Updated: 1 January 2026
Language: ms-MY
Applicable to: Malaysian Players
PDPA 2010 Compliant
256-bit
SSL Encryption
0
Sale of Data to Third Parties
24/7
Security Monitoring
PDPA
Malaysian Legal Compliance
Latest Update Notice
This Privacy Policy was last updated on 1 January 2026. Key changes include the addition of provisions relating to the use of data for marketing purposes via ShopeePay and further clarification on transaction data retention periods. Please review this document in full.
1
Introduction & City66's Privacy Commitment

City66 ("we", "our platform") deeply values the trust you place in us when you register and use our services. This Privacy Policy is designed to clearly and transparently explain how City66 handles your personal information in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010.

As a responsible online casino and Sports Betting platform for Malaysian players, City66 is committed to upholding best-practice data management. We believe players deserve to know exactly what data we hold, how it is used, and who can access it.

This Privacy Policy applies to all users of the City66 platform, including website visitors, registered members, and anyone who interacts with our services via any device.

City66's Guarantee: We have never and will never sell, rent, or trade your personal data to any third party for their own commercial purposes. Your data is used solely for the purposes stated in this Privacy Policy.
2
Personal Information We Collect

City66 only collects information that is strictly necessary to provide safe, quality services to Malaysian players. We do not collect excessive data that is irrelevant to the operation of our platform.

Categories of information collected by City66:

Data Category Sample Information Primary Purpose
Identity Information Full name, IC number, date of birth KYC verification & age eligibility
Contact Information Email address, Malaysian phone number Account & support communications
Financial Information Bank account number, e-wallet name Deposit & withdrawal processing
Activity Data Game history, betting records Account Management & Compliance
Technical Data IP address, device type, browser Security & fraud prevention
Cookie Data Site preferences, login sessions Enhanced User Experience

During registration, you will be asked to provide your full name as shown on your ID, an active email address, a Malaysian phone number, and a password. Additional information such as a copy of your IC and bank statement is only required during the KYC process for withdrawals or when mandated by the relevant authorities.

3
How City66 Uses Your Data

Every piece of data we collect has a clear and lawful purpose. City66 uses your personal information exclusively for the following purposes:

  • Service provision: Processing account registrations, deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX and Maybank2u, and processing withdrawal of winnings in MYR (RM)
  • Identity verification: Conducting KYC checks to ensure account security and comply with Malaysian legal requirements
  • Platform security: Detecting and preventing fraud, money laundering, and suspicious activity
  • Customer support: Responding to your enquiries and resolving any issues with your account or gameplay
  • Marketing communications: Sending information about City66 promotions, bonuses, and exclusive offers — only where you have given your consent
  • Service improvement: Analysing usage patterns to improve the gaming experience on the City66 platform
  • Legal compliance: Meeting reporting and record-keeping obligations as required under Malaysian law
Marketing Communications: You can opt out of receiving City66 promotional emails or SMS at any time by clicking the "unsubscribe" link in any email or by contacting us at support@city66.net. Opting out of marketing communications will not affect the functionality of your account.
4
Data Storage & Security Measures

City66 takes the security of your data extremely seriously. We implement multiple layers of technical and organisational protection to ensure your personal information is always safeguarded against unauthorised access, alteration, disclosure, or destruction.

Security measures implemented by City66:

  • 256-bit SSL encryption: All data transmitted between your device and City66 servers is encrypted using industry-standard SSL technology
  • Firewall protection: Our servers are protected by a multi-layered firewall system that monitors and blocks unauthorised access
  • Two-factor authentication (2FA): We offer 2FA for all member accounts as an added layer of protection
  • 24/7 Monitoring: Our cybersecurity team monitors the City66 platform around the clock to detect any unusual activity
  • Regular security audits: Our systems undergo regular penetration testing and security audits by independent third parties

Data retention period:

  • Active account data: For the full duration your account remains active with City66
  • Financial transaction records: Minimum 7 years after the transaction, in accordance with Malaysian legal requirements
  • Support communication logs: 2 years from the date of last interaction
  • Closed account data: 5 years from the account closure date for legal compliance purposes
Your Responsibilities: While City66 implements best-in-class security measures, you are also responsible for keeping your account password confidential. Do not share your login credentials with anyone, and always log out after using a shared or public device.
5
Sharing Information with Third Parties

City66 does not sell, rent, or trade your personal data to third parties. However, there are limited situations where we may need to share certain information with trusted parties in order to deliver our services to you.

Parties that may receive limited access to your data:

  • Payment providers: Payment gateways and e-wallet providers such as Touch 'n Go, DuitNow, GrabPay, Boost, and ShopeePay receive the transaction information necessary to process your deposits and withdrawals in RM
  • Game software providers: Our game provider partners receive only the minimum data required to ensure games function correctly
  • Identity verification services: Third parties that assist us in conducting KYC checks and document verification
  • Legal authority: City66 will disclose information when ordered to do so by a Malaysian court or competent authority
  • Fraud prevention services: Platforms that help us identify and prevent fraudulent activity

All third parties we work with are bound by strict confidentiality agreements and are required to protect your data to the same or higher standards as City66.

6
Cookies & Tracking Technologies

City66 uses cookies and similar tracking technologies to enhance your experience on our platform, understand how players use our services, and ensure the security of your login session.

Types of cookies used by City66:

  • Essential cookies: Required for core platform functions such as login verification and session security — cannot be disabled
  • Performance cookies: Collecting anonymous statistical data on how players use the platform to help us improve our services
  • Functional cookies: Saving your preferences such as language, display settings, and favourite game selections
  • Marketing cookies: Used to display relevant City66 promotions — can be disabled in your browser settings

You can manage and delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the City66 platform.

7
Your Rights Under PDPA 2010

As a Malaysian player registered with City66, you have specific rights regarding your personal data under Malaysia's Personal Data Protection Act (PDPA) 2010. City66 respects and facilitates the exercise of all these rights.

Right of Access

You have the right to request a copy of all personal data we hold about you. Access requests will be processed within 21 working days.

Right of Rectification

If any of your information is inaccurate or out of date, you have the right to request a correction through your account or by contacting City66 support.

Right to Erasure

You may request the deletion of your personal data, subject to any record-keeping obligations we are required to fulfil under Malaysian law.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, without providing any reason.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for the purpose of transferring it to another relevant platform.

Right to Restrict Processing

In certain circumstances, you may request City66 to restrict the processing of your data while a complaint or query is being resolved.

How to Submit a Rights Request: Submit your request via email to privacy@city66.net along with your account number and the type of rights request you wish to make. We will respond within 14 working days.
8
Financial & Transaction Data Privacy

City66 takes an especially careful approach to players' financial data given its high sensitivity. All information relating to your bank account, e-wallet, and financial transactions is handled with the highest level of protection.

How City66 protects your financial data:

  • Your full bank card or bank account details are not stored on City66 servers — we retain only the minimum information required for withdrawal purposes
  • All payment processing via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u and CIMB Clicks is handled through encrypted, secure payment gateways
  • Transaction records in MYR are stored in a separate database with an additional layer of encryption
  • Access to players' financial data is restricted solely to City66 staff with a specific need and who have undergone background screening
  • We do not store your e-wallet PIN or password in any form
Important: City66 will never ask for your internet banking password or e-wallet PIN via email, SMS, live chat, or any other channel. If you receive such a request, it is a fraudulent attempt — please report it to us immediately.
9
Minor Player Protection

City66 has a zero-tolerance policy towards participation by individuals under the age of 18. Our platform is not designed for children or minors, and we do not knowingly collect personal data from underage individuals.

Should City66 discover that personal data of a child under the age of 18 has been collected without proper age verification, we will:

  • Immediate termination of the account in question
  • Deleting all personal data associated with the minor in question
  • Refunding any deposits made, subject to investigation and legal compliance
  • Reporting the matter to the relevant Malaysian authorities where necessary

Parents or guardians who suspect their child has registered on the City66 platform without permission are urged to contact us immediately at support@city66.net so that prompt action can be taken.

10
Contact City66's Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how City66 handles your personal data, please contact our Privacy Officer through the following channels:

  • Privacy Email: privacy@city66.net
  • General Support Email: support@city66.net
  • Live Chat: Available 24 hours a day, 7 days a week on the City66 platform

City66 is committed to responding to all privacy-related enquiries within 14 working days. For more complex complaints, we may require up to 30 working days to provide a thorough response.

If you are not satisfied with our response, you have the right to file a complaint with Department of Personal Data Protection Malaysia (JPDP) under the Malaysian Ministry of Communications and Digital.

Policy Amendments: City66 reserves the right to amend this Privacy Policy at any time. Members will be notified of any material changes via email at least 7 days before taking effect. The date of the latest update is always displayed at the top of this page.

Your Privacy is Our Priority

City66 invests in technology and best practices to keep every Malaysian player's data safe and protected at all times.

256-bit SSL Encryption

All data you transmit to City66 is protected with military-grade SSL encryption. Your personal information, financial details, and game history cannot be read by any unauthorised party during transmission.

Compliant with Malaysia's PDPA 2010

City66 operates in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. This means you have clear legal rights over your data, and City66 has a legal obligation to protect it.

No Data Sales

City66 has never and will never sell or trade players' personal data to advertisers or third parties for their commercial purposes. Your data is used solely to provide City66 services to you.

24/7 Security Monitoring

City66's cybersecurity team monitors our platform around the clock. Any suspicious activity is detected and addressed immediately before it can impact your data or account.

Data Control in Your Hands

Through the City66 account portal, you can access, update, and manage your own personal data at any time. You can also easily request account and data deletion through our customer support.

Malay-Language Privacy Support

City66's Bahasa Malaysia-proficient support team is available to assist you with any enquiries related to data privacy, access rights requests, or account security concerns — 24 hours a day, 7 days a week.

Your Data is Safe. Enjoy City66 with Complete Peace of Mind.

With PDPA privacy protection, 256-bit SSL encryption, and a strict no-data-sale policy, City66 ensures you can enjoy slots, Live Casino, poker, and Sports Betting with complete peace of mind. Register today with a minimum deposit of RM10.

  • 256-bit SSL Encryption
  • Compliant with Malaysia's PDPA 2010
  • No sale of data to third parties
  • 24/7 security monitoring
  • Full data control in your hands
Bahasa Melayu