Official 67win Documents

67win Privacy Policy — Personal Data Protection for Malaysian Casino Players

At 67win, your privacy is more than a legal obligation — it is a core value we uphold. This document transparently explains how we collect, use, store and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: January 2026 Bahasa Melayu (ms-MY) PDPA 2010 Compliance
Our Privacy Commitment

67win's Six Data Protection Principles

Before reading the full document, here are the core principles that define how 67win handles your personal data.

Minimum Data Collection

67win only collects data that is strictly necessary for service operations, legal compliance, and identity verification. We do not collect irrelevant or excessive data purely for commercial purposes.

Never Sold to Third Parties

Your personal data is never sold, rented or transferred to any third party for marketing purposes without your explicit consent. This is an absolute commitment from 67win — not merely a policy on paper.

256-bit SSL Encryption

All data transmitted between your browser and 67win's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysian banks and government institutions.

Malaysia PDPA 2010 Compliance

67win's Privacy Policy is built in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing personal data protection in our country.

Right of Access & Correction

You have the full right to access the personal data we hold about you, request corrections to inaccurate information and, in certain circumstances, request the deletion of your data.

Limited & Purpose-Bound Retention

Your data is retained only for as long as required by law or the purposes of the service. Once there is no longer a legitimate reason to keep it, it is securely disposed of in accordance with 67win's internal procedures.

Important Notice

This Privacy Policy explains the personal data collection and usage practices of 67win. By registering or using our platform, you agree to the terms of this Privacy Policy. This Policy should be read together with our Terms & Conditions. If you have any questions, please contact us at support@67win.my.

1. Personal Data We Collect

67win collects various types of personal data when you use our platform. Below is a detailed explanation of the data categories we collect and the purposes for which they are collected:

1.1 Data You Provide Directly

Data TypeExamplePrimary Purpose
Identity DataFull name, MyKad/passport number, date of birthIdentity verification, KYC, legal compliance
Contact InformationPhone number, email address, residential addressAccount communications, verification, customer support
Financial DataPayment method details (TNG, GrabPay, FPX, DuitNow), transaction historyProcessing deposits and withdrawals, fraud prevention
Login InformationUsername, password (stored in encrypted form)Account security and identity verification
Verification DataMyKad/passport copy (for KYC process)Legal compliance, age verification

1.2 Automatically Collected Data

While you browse or use the platform 67win, our systems automatically record certain technical information:

  • Device Data: Device type, operating system, phone model, screen resolution
  • Network Data: IP address, internet connection type, internet service provider (ISP)
  • Session Data: Login and logout times, session duration, and pages visited within the platform
  • Game Data: Game types played, bet amounts, win/loss history, gaming session duration
  • Cookie Data: As described in Section 5 of this document

1.3 Data from Third-Party Sources

In certain circumstances, 67win may receive data about you from legitimate third-party sources, including:

  • Identity verification service providers for KYC processing purposes
  • Payment service providers (e.g., FPX gateway, TNG eWallet) for transaction verification
  • Fraud prevention agencies for platform security purposes

Note: We never purchase or receive personal data lists from third-party data brokers for marketing purposes. Any third-party data we receive is strictly for the operational and security purposes stated herein.

2. How We Use Your Personal Data

67win uses the personal data collected for the following legitimate and transparent purposes:

2.1 Service Operations

  • Process account registration and verify your identity
  • Keeps you logged in and allows you to access all platform features
  • Processing deposit transactions via Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, ShopeePay and Boost
  • Processing winnings withdrawals to registered payment methods
  • Providing your transaction history and game records
  • Managing bonuses, promotions, and loyalty programs you are eligible for

2.2 Security & Fraud Prevention

  • Detecting and investigating suspicious or unusual account activity
  • Preventing bonus abuse and identity fraud
  • Identifying and blocking unauthorised access to your account
  • Compliance with Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements

2.3 Communications with You

  • Sending important account-related notifications (deposit confirmations, lottery draw results, security alerts)
  • Providing customer support when you contact us
  • Send promotional information and special offers — only if you have agreed to receive them
  • Notify you of changes to our terms, conditions, or privacy policy

2.4 Platform Improvement

  • Analysing usage patterns to improve the interface and overall user experience
  • Identifying and resolving technical issues within the platform
  • Developing new features based on user needs and feedback

Legal Basis: 67win processes your personal data on the basis of: (a) the performance of a service contract between you and 67win; (b) compliance with legal obligations; (c) our legitimate interests in operating a safe and orderly business; and (d) your consent for marketing communications.

3. Sharing Data with Third Parties

67win does not sell your personal data. We share data only in limited and legitimate circumstances, as outlined below:

3.1 Service Providers

We work with third-party service providers who help us operate the platform. These providers are only given access to the data needed for their specific tasks and are bound by strict confidentiality agreements:

  • Payment Providers: Payment gateway for processing transactions (FPX, e-wallet) — they receive only the minimum transaction data required to process payments
  • Identity Verification Provider: Third-party KYC services for verifying identity documents
  • Game Providers: Gaming software companies receive the session data required to run your games
  • Customer Support Services: The platform we use to manage support enquiries
  • Analytics Services: Tools that help us understand platform usage in an aggregated and anonymised manner

3.2 Legal Requirements

67win may disclose your personal data to the relevant authorities when required by law, including:

  • Compliance with valid court orders or warrants
  • Cooperation in investigations involving financial crime, money laundering or fraud
  • Compliance with reporting requirements to the relevant regulatory authorities
  • Protecting the rights, property, or safety of 67win, our users, or the public

3.3 Business Transfer

In the event of a merger, acquisition, or transfer of 67win's business assets, user data may be transferred as part of those assets. You will be notified before your data becomes subject to a different privacy policy.

Our Commitment: 67win has never and will never sell or rent your personal data to advertisers, data brokers or any third party for third-party marketing purposes. Any data sharing is carried out solely on the basis of operational necessity or lawful compliance.

4. Data Security

67win implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse, disclosure or alteration.

256-bit SSL Encryption All communications between you and 67win's servers are secured with the latest TLS 1.3 protocol
Encrypted Passwords Your password is never stored in plain text — we use bcrypt with a unique salt
Secure Servers Data is stored in licensed data centres with multiple layers of physical and cybersecurity protection
24/7 Monitoring Our security system monitors suspicious activity around the clock, continuously
Restricted Staff Access Only staff with legitimate operational needs have restricted access to user data
Regular Security Audits Security assessments are conducted periodically by independent parties to identify vulnerabilities

4.1 Security Incident Response

Despite all the security measures in place, no system can be guaranteed 100% secure. Should a security incident occur involving your data, 67win is committed to:

  • Investigate and contain incidents in the shortest time possible
  • Notify you within 72 hours if any data that could identify you has been exposed
  • Report to the Personal Data Protection Commissioner of Malaysia where required by law
  • Taking preventive measures to avoid similar incidents in the future

5. Cookies & Tracking Technologies

67win uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

5.1 Types of Cookies We Use

5.2 Managing Your Cookies

You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, delete, or block cookies. However, please note that disabling essential cookies may affect the core functionality of the platform 67win and you may be unable to log in or use all features properly.

For guidance on managing cookies in popular browsers:

  • Chrome: Settings → Privacy and Security → Cookies and other site data
  • Firefox: Settings → Privacy & Security → Cookies and Site Data
  • Safari (iOS/iPadOS): Settings → Safari → Privacy & Security
  • Samsung Internet: Menu → Settings → Privacy

6. Data Retention Period

67win retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by Malaysian law.

Data CategoryRetention PeriodJustification
Active Account DataThroughout the active account periodRequired for service operations
Financial Transaction Records7 years after the transactionMalaysian legal and tax requirements
KYC/Verification Documents5 years after account closureAML and PDPA Compliance
Security Logs2 yearsSecurity incident investigation
Customer Support Records3 years after resolutionReferences and service improvement
Session Data & Game Logs2 yearsDispute resolution and auditing
Closed Account Data5 years after account closureLegal compliance and disputes

Once the retention period expires and there is no legitimate reason to continue storing your data, it will be securely disposed of using methods that ensure it cannot be recovered or accessed again by any party.

7. Your Rights Under Malaysia's PDPA

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and industry best practices, you have the following rights regarding your personal data held by 67win:

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.

Right to Rectification

If your data is inaccurate or out of date, you have the right to request a correction and 67win is obligated to update it accordingly.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data, subject to our legal obligations.

Right to Withdraw Consent

You may withdraw consent for marketing communications at any time without affecting your access to core services.

Right to Object to Processing

You may object to the processing of your data for specific purposes such as direct marketing or profiling.

Data Portability Rights

You may request your data in a structured, machine-readable format for transfer to another provider.

7.1 How to Submit a Privacy Rights Request

1
Submit a Written Request

Email your request to support@67win.my with the subject line "Privacy Rights Request" along with the type of request (access, correction, deletion, etc.).

2
Identity Verification

To protect the security of your data, we will require identity verification before processing any request. This safeguards you against third parties attempting to access your data.

3
Request Processing

67win will process your request within 21 business days from the date your identity is successfully verified. You will be informed of the outcome, or notified if additional time is required.

4
Response & Resolution

We will fulfil your request or explain our reasons if it cannot be fully accommodated (for example, a legal obligation to retain certain data).

8. Child Protection

67win is an adult entertainment platform intended solely for individuals aged 18 and above. We take the protection of minors very seriously and do not knowingly collect any personal data from individuals under the age of 18.

If you believe a child under the age of 18 has registered an account on the 67win platform or has provided us with their personal data, please contact us immediately at support@67win.my. We will take immediate action to deactivate the account and delete all associated data.

Age Verification: 67win employs multiple age verification mechanisms, including identity document checks during the KYC process. Accounts found to belong to minors will be closed immediately, without exception.

9. Links to Third-Party Websites

Platform 67win may contain links to third-party game provider websites or support services. Once you leave the 67win platform to visit a third-party site, our Privacy Policy no longer applies.

We recommend reading the privacy policy of every third-party website you visit. 67win is not responsible for the privacy practices or content of third-party websites that are separate from our platform.

Please note that third-party links within the 67win platform are limited to game providers and services that have passed our security review. That said, we cannot fully guarantee the privacy practices of external parties.

10. Privacy Policy Amendments

67win reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or technological developments. Any material changes will be communicated to you via:

  • An in-platform notification the next time you log in
  • An email to your registered account address at least 14 days before changes take effect (for material changes)
  • Update the "Updated" date at the top of this document

Continued use of the platform 67win after a revised Privacy Policy takes effect constitutes acceptance of the updated terms. If you do not agree with any changes, you have the right to close your account and withdraw any eligible balance before the new policy comes into force.

We retain previous versions of the Privacy Policy for a minimum of 3 years and can make them available upon a legitimate request.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how 67win handles your personal data, please contact us through the following channels:

Privacy Email

Support@67win.my
Subject: "Privacy Enquiry"

Live Chat

Available 24/7 within the platform
Bahasa Melayu & English

Response Time

Live chat: < 5 minutes
Email: within 4 working hours

Support Language

Bahasa Melayu
English

Complaint to the PDPA Commissioner: If you are not satisfied with how 67win has handled your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia through the official channels of the Ministry of Communications and Digital Malaysia.

Plain-Language Guide

Your Privacy at 67win — A Plain-Language Guide for Malaysian Players

We have all been there — signing up for an online account and clicking "Agree" without reading the terms or privacy policy. We get it; these documents are usually long and convoluted. So here is a straightforward, honest summary of how 67win handles your data, explained in plain language.

When you register at 67win, we require basic information such as your name, phone number, email, and payment method details. This is not mere formality — it is necessary for us to process your deposits via Touch 'n Go eWallet, GrabPay, or FPX, and to ensure your winnings are credited to the correct account. Without this information, we cannot operate securely.

Regarding password security — this is a shared responsibility. 67win stores passwords in encrypted form, meaning even our staff cannot view your password in plain text. That said, password security on your end is equally important. Avoid simple passwords, do not share them with anyone, and change them regularly. The 67win will never ask for your password via email or live chat — if anyone does so, it is a fraudulent attempt.

On the topic of game data — yes, we do record your game history. This is not about monitoring you; it is an essential operational requirement. These records allow us to resolve disputes in the event of technical issues, ensure winnings are credited accurately, and identify gameplay patterns that may warrant responsible gambling intervention. We respect your privacy, but game records are the foundation of trust between players and the platform.

About cookies — platform 67win uses necessary cookies for core functions such as maintaining your login session. Without these cookies, you would be required to log in again each time you navigate to a new page. We also use analytics cookies to understand which pages are used most frequently — this helps us improve the platform. You can manage cookies through your browser settings, but disabling essential cookies may affect platform functionality.

The most important things you need to know: 67win does not sell your data. This is not just a statement — it is a policy we strictly enforce. Your data is shared only with service providers who help us operate the platform (such as payment gateways and game providers), and only to the extent necessary for those services. None of your data is passed to advertisers or data brokers for third-party marketing purposes.

Your rights matter to us. Under Malaysia's PDPA, you have the right to know what data we hold about you, request corrections if anything is inaccurate, and in certain circumstances request deletion. To submit any of these requests, email support@67win.my with the subject line "Privacy Rights Request" — our team will respond within 21 business days. We fully respect these rights and will not make the process unnecessarily difficult for you.

Frequently Asked Questions

Privacy Questions at 67win

No. 67win does not share, sell, or rent your personal data to other companies for third-party advertising or marketing purposes. Your data is only shared with service providers that help us operate the platform (such as payment gateways, game providers, and KYC services), and only to the extent necessary for those functions. All such third parties are bound by strict confidentiality agreements.

To request a copy of your personal data, email support@67win.my with the subject line "Data Access Request". Please include your full name and account number. We will ask you to verify your identity to ensure security — this is a protective measure for your benefit. Once verification is complete, we will send you a data report within 21 working days in a readable format.

When you close your 67win account, your access to the platform will be terminated immediately. However, we are required under Malaysian law (including anti-money laundering and tax requirements) to retain financial transaction records for a minimum of 7 years. Other account data will be retained for 5 years after closure. This data will not be used for marketing purposes and will not be shared except as required by law or for legitimate dispute resolution purposes.

67win does not store your full credit card number, bank account number or e-wallet password. When you make a deposit via Touch 'n Go eWallet, GrabPay, FPX or any other method, the transaction is processed directly through the relevant payment gateway and 67win receives only a transaction success confirmation. We may retain transaction reference information (such as transaction ID and account holder name) for record-keeping and customer support purposes.

Yes, you can opt out of promotional emails at any time. Click the "Unsubscribe" link at the bottom of any promotional email you receive, or update your communication preferences in your 67win account settings. Please note that you will still receive important account-related emails such as transaction confirmations, security alerts, and policy change notifications — these cannot be unsubscribed from as they are required for service operations.

If you suspect unauthorised access to your 67win account, take the following steps immediately: (1) Change your account password right away. (2) Contact 67win customer support via live chat and state "Account Security Issue". (3) Review your login history and transaction records for any unrecognised activity. Our security team will investigate and, if necessary, place a temporary hold on the account while the investigation is conducted. Do not wait — the sooner you report it, the better we can protect your account.
Privacy & Responsible Gaming Go Hand in Hand at 67win

The gaming data we collect serves more than just operational purposes — it also allows us to identify patterns that may indicate a need for support. If we notice signs of problem gambling, our team will reach out to you proactively. Your data is used to protect you, not exploit you. All games are for players aged 18 and above only. Learn More

Ready to Play Responsibly?

Join 67win — A Platform That Respects Your Privacy

More than 250,000 Malaysian players trust 67win not only for a top-tier entertainment experience, but also for serious data protection and privacy. Register for free and enjoy a welcome bonus of up to RM888.

Bahasa Melayu