Tab66 Privacy Policy — Member Personal Data Protection

Tab66 is fully committed to protecting the privacy and personal data security of every member who uses our platform. This Privacy Policy clearly explains how we collect, process, use, store and, in certain circumstances, disclose your personal information.

This policy applies to all users of the tab66 website, our mobile app, and any other digital services we operate under the tab66 name. By registering for or using any of our services, you are deemed to have read and fully understood this Privacy Policy.

Tab66 acts as the data controller for all personal information you provide to us. We take this responsibility seriously and always strive to ensure your data is handled in the safest, most transparent and responsible manner.

This policy is written in English for the convenience of our members in Malaysia. Should you have any questions regarding the content of this policy, our customer support team is available to assist you at any time.

Tab66 only collects data that is genuinely necessary to provide a complete and secure service. We do not collect excessive or irrelevant information beyond the scope of our services. The following are the categories of data we may collect:

All identity verification documents (KYC), such as copies of your ID card or passport submitted to us, are stored in encrypted format and are only accessible by authorised personnel for verification purposes.

Tab66 uses your personal data solely for legitimate purposes directly related to the provision of our services. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying, and managing your member account, including the KYC process required for legal compliance.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions related to your account securely and efficiently.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and any suspicious activity or violations of our terms of service.
• Customer Support: Providing technical assistance and responsive customer support whenever you contact us through any support channel.
• Service Communications: Sending important account-related notifications such as transaction confirmations, security alerts, and policy updates.
• Marketing Communications: With your consent, to send you information about tab66 promotions, bonuses, and the latest offers that may interest you.
• Service Improvement: Analyzing usage patterns in aggregate (without identifying individuals) to improve our products and user experience.
• Legal Compliance: Fulfilling our obligations under applicable laws, including reporting requirements to authorities where required by law.

Tab66 no selling, no renting, no trading member personal data to any third party for commercial or marketing purposes. However, in the course of operating our platform, we may need to share your data with certain parties under very limited and controlled circumstances:

• Payment Providers: Required transaction information is shared with authorized payment service providers (such as banks, DuitNow providers, Touch 'n Go) solely to process your deposits and withdrawals.
• Game Providers: Minimum required game data is shared with licensed game software providers to ensure smooth and fair game functionality.
• Identity Verification Services: KYC information is shared with approved identity verification service providers to authenticate your documents.
• Statutory Authority: tab66 will disclose personal data to legal authorities, regulatory bodies or enforcement agencies when required by law or a valid court order.
• Auditors and Legal Advisors: In certain circumstances, information may be shared with our independent auditors or legal advisors, who are bound by strict confidentiality obligations.

The security of your data is an absolute priority for tab66. We continuously invest in the latest security infrastructure to ensure your personal data is always protected against cyber threats, unauthorized access, and data breaches.

Key security measures we implement include:

• 256-bit SSL/TLS Encryption: All communications between your device and tab66's servers are protected by 256-bit SSL/TLS encryption — the same standard used by leading banking institutions worldwide.
• Database-Level Data Encryption: Sensitive data such as ID information, banking details, and passwords are stored in encrypted format at the database level.
• Two-Factor Authentication (2FA): Members are encouraged to enable two-factor authentication to add an extra layer of protection to their accounts.
• 24/7 Security Monitoring: Our cybersecurity team continuously monitors the platform to detect any unusual activity or intrusion attempts.
• Enterprise-Grade Firewall: Our servers are protected by a multi-layered firewall system that blocks unauthorized access from external parties.
• Regular Security Audits: tab66 conducts regular internal and external security audits to identify and address any system vulnerabilities.

While we take all reasonable precautions, no digital system is entirely perfect. You also play an important role in your account's security — always use a strong, unique password and never share your login credentials with anyone.

As a tab66 member, you have certain rights regarding your personal data. We fully respect and facilitate the exercise of these rights:

To exercise any of the above rights, please contact our customer support team via in-platform live chat or by email at [email protected]. We will process your request within 30 business days. Please note that some deletion requests may not be fully fulfilled due to legal obligations to retain certain records.

Tab66 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website. We use several types of cookies for different purposes:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting core platform functionality.
• Preference Cookies: Storing your preferences such as language, display settings, and game preferences to deliver a more personalized experience.
• Analytics Cookies: Helping us understand how members use our platform in aggregate so we can continuously improve our services. This data does not directly identify individuals.
• Security Cookies: Used to detect suspicious login attempts and protect your account from unauthorized access.

Tab66 does not use cookies to track your activity on other websites or to build marketing profiles across platforms. All analytics data collected through cookies is used solely for internal service improvement purposes.

Tab66 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are our general data retention guidelines:

• Active Account Data: For as long as your account remains active and you continue using tab66's services.
• KYC Records and Verification Documents: Minimum 5 years after account closure, as required by anti-money laundering (AML) regulations.
• Financial Transaction Records: Minimum 7 years from the transaction date for audit and tax compliance purposes.
• Customer Support Communication Logs: 2 years after last interaction for quality control and service improvement purposes.
• Analytics Data (Non-Identifying): May be retained indefinitely as it contains no information that directly identifies any individual.

Once the designated retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

Tab66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological developments that affect how we handle personal data.

When there are material amendments to this policy, we will:

• Updating the "Effective Date" at the top of this policy.
• Sending notifications to members via their registered email or in-platform notifications.
• Displaying a clear notice on the platform's home page for a reasonable period.

Continued use of the tab66 platform after the effective date of any amendment constitutes your acceptance of the updated policy. If you disagree with any amendment, you have the right to close your account and withdraw your funds before the amendment takes effect.

If you have any questions, concerns or complaints about this Privacy Policy or how we handle your personal data, do not hesitate to contact us. Our privacy and customer support team is always ready to assist you.

For formal requests relating to data rights (access, correction, deletion), please clearly state the type of request, your full name and your tab66 account number when contacting us so we can process your request promptly and accurately.