SP666 Privacy Policy – Full Data Protection for Malaysian Players

SP666 ("we", "platform") is fully committed to protecting the privacy of every player who registers and uses our services. This Privacy Policy clearly and transparently explains how we collect, use, process, store, and protect your personal data as a player on the SP666 platform in Malaysia.

This policy applies to all personal information collected through the SP666 website, the SP666 mobile app, and all communication channels between you and SP666, including email, live chat, and WhatsApp. This Privacy Policy forms part of the SP666 Terms & Conditions and should be read together with that document.

SP666 acts as the data controller for the personal data of our Malaysian players. This means we are responsible for determining the purposes and means of processing your personal data. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and all related regulations applicable to our operations.

SP666 only collects personal data that is necessary for legitimate purposes related to the operation of our platform and the services we provide to Malaysian players. The following are the categories of data we collect:

SP666 does not collect sensitive data such as health information, biometric data, or religious details unless specifically required by applicable law and with your explicit consent.

SP666 collects personal data from Malaysian players through several different channels:

• Account registration: When you register a new account with SP666, you provide us directly with basic information such as your name, email address, phone number, and date of birth.
• Financial transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, the information related to that transaction is recorded in SP666's systems.
• Platform usage: SP666's system automatically records your gaming activity, login and logout times, game preferences, and general platform usage patterns.
• Identity verification (KYC): In certain cases, such as large withdrawals or where verification is required, SP666 may request a copy of your identity document such as your MyKad.
• Customer support: When you contact the SP666 support team via live chat, email, or WhatsApp, those communications are recorded for quality assurance and issue resolution purposes.
• Tracking technologies: SP666 uses cookies, web beacons, and similar technologies to collect technical data about how you use our platform.

SP666 uses the personal data of our Malaysian players for the following legitimate purposes:

• Account management: Creating and managing your SP666 account, processing logins, and ensuring only you can access your account.
• Transaction processing: Processing your deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen local Malaysian payment methods.
• Gaming services provision: Provides access to all SP666 games including Live Casino, slots, Sports Betting on the Malaysia Super League and EPL, e-sports, and virtual sports.
• Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, multiple account usage, and any violations of SP666's Terms & Conditions.
• Customer support: Providing assistance and resolving issues related to accounts, transactions, games, and SP666 bonuses in Bahasa Melayu.
• Legal compliance: To fulfil the legal and regulatory obligations applicable to SP666 as an online betting platform.
• Platform improvements: Analysing platform usage patterns in aggregate (without identifying individuals) to improve the gaming experience on SP666.
• Marketing communications: Sending information about SP666 promotions, new bonuses, and the latest games – only to players who have opted in to receive them.
• Responsible gambling: Monitoring gameplay patterns to identify players who may need responsible gambling support, in line with SP666's commitment to player safety.

SP666 will not use your personal data for any purpose beyond those listed above without first obtaining your consent, unless required by law.

SP666 does not sell, rent, or transfer players' personal data to third parties for their own marketing purposes. However, under the limited circumstances outlined below, SP666 may need to share your personal data with certain parties:

• Payment processors: To process your deposits and withdrawals, SP666 needs to share the required transaction data with our payment processors (such as DuitNow operators, FPX, and relevant Malaysian digital wallet providers). These processors are bound by strict confidentiality agreements with SP666.
• Game software provider: Some games on SP666 are provided by trusted third-party software providers. Game data required to operate those games may be shared with them, but only to the extent necessary.
• Legal authorities: SP666 is legally required to disclose personal data to Malaysian authorities upon receipt of a court order, a valid notice from a law enforcement agency, or other lawful official directives.
• Technology service providers: SP666 uses technology service providers to operate our platform, including cloud computing and cybersecurity services. These providers may only process your data on SP666's instructions and are subject to strict data processing agreements.

In all instances of data sharing described above, SP666 ensures that the receiving party has adequate data protection controls in place and uses the data solely for the specific purpose agreed upon with SP666.

SP666 takes data security seriously to protect the personal and financial information of all our Malaysian players. The key security measures we have implemented include:

• 256-bit SSL Encryption: All communications between your device and SP666's servers are encrypted using 256-bit SSL standards, making them unreadable to any intermediary party.
• Multi-layered access control: Only specifically authorised SP666 staff may access player data, and every access is recorded in an audit log that is securely stored.
• Threat detection system: SP666 employs a real-time security monitoring system to detect and respond to any unauthorised access attempts or cyber threats.
• Two-Factor Authentication (2FA): SP666 offers two-factor authentication as an added layer of security for your account.
• Regular audits: The SP666 platform undergoes regular independent security audits to identify and address any potential vulnerabilities.
• Fund segregation: Player funds are held in accounts separate from SP666's operational funds, ensuring the security of your money at all times.

SP666 retains players' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws in Malaysia. SP666's data retention guidelines are as follows:

• Active account data: For as long as your account remains active with SP666, we retain all data necessary to manage your account and provide our services to you.
• Financial transaction data: Records of all transactions in Malaysian Ringgit (RM) – including deposits via Touch 'n Go, GrabPay, DuitNow, and FPX – are retained for a minimum of seven (7) years in accordance with Malaysian financial law requirements.
• Data after account closure: When your SP666 account is closed, some of your personal data may be retained for an additional period as required to fulfil legal obligations, resolve any outstanding disputes, or prevent fraud.
• Customer support data: Customer support communication records are retained for three (3) years after issue resolution for reference and quality assurance purposes.

Once the relevant retention period has expired, SP666 will securely delete or anonymise your personal data so that it can no longer be associated with you personally.

SP666 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies SP666 uses:

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality and gaming experience on the SP666 platform. For more information on managing cookies, refer to your web browser's help documentation.

As a Malaysian SP666 player, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and SP666's policies:

• Right to access: You may request a copy of the personal data SP666 holds about you at any time. SP666 will provide this within 30 business days of receiving a valid request.
• Right to rectification: If the personal data SP666 holds about you is inaccurate or out of date, you may request a correction. We encourage players to keep their profile information current through the SP666 account settings.
• Right to erasure: Under certain circumstances, you may request that SP666 delete your personal data. Please note, however, that we may need to retain some of your data to fulfill our legal obligations, even after a deletion request has been received.
• Right to object to processing: You can object to the processing of your personal data for direct marketing purposes at any time by contacting SP666 or using the unsubscribe option in any marketing communication we send you.
• Right to withdraw consent: Where SP666 processes your data based on your consent, you have the right to withdraw that consent at any time. This does not affect the lawfulness of any processing carried out prior to the withdrawal.

To exercise any of the rights above, please contact the SP666 support team at support@sp666.online by stating your request clearly. SP666 may need to verify your identity before processing any personal data-related requests.

SP666 does not provide services to individuals under the age of 18. The SP666 platform is strictly for adults, and we take the protection of minors very seriously.

SP666 does not knowingly collect personal data from children or minors. Should we discover that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to delete that data and close the associated account.

Parents or guardians who suspect that their minor child or ward has registered or accessed the SP666 platform without permission are urged to contact the SP666 support team at support@sp666.online immediately so that the appropriate action can be taken.

SP666 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements to the SP666 platform.

When we make significant changes to this Privacy Policy, we will notify you via:

• A prominent notice on the SP666 platform's main page at least 7 days before the changes take effect
• Notification email to your registered SP666 email address
• In-account notification on your SP666 account upon your next login

By continuing to use the SP666 platform after the effective date of any Privacy Policy amendment, you are deemed to have agreed to the updated version of the Privacy Policy. It is your responsibility to review this Privacy Policy page periodically. The last updated date of this Privacy Policy is January 2026.

If you have any questions, concerns, or complaints regarding how SP666 handles your personal data, or if you wish to exercise any of the privacy rights set out in this Policy, please contact us via:

• Email: support@sp666.online – please include "Privacy Enquiry" in the subject line of your email
• Live Chat: Available directly within the SP666 platform, 24 hours a day, 7 days a week, including all Malaysian public holidays

The SP666 team will respond to privacy-related enquiries within 24 hours on business days, and within 48 hours on weekends and public holidays. All communications may be conducted in Bahasa Melayu. If your request relates to data access, correction, or deletion, identity verification may be required before SP666 can act on your request.