Privacy Policy

This Privacy Policy ("Policy") is issued by TK666 ("Platform", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://tk666.casa and all associated sub-domains and digital services. This Policy governs the collection, processing, storage, transfer, and protection of personal data relating to all users ("Member", "User", "you") who access or interact with the TK666 platform.

TK666 takes data privacy seriously. We have designed our data practices to align with internationally recognised privacy standards and to reflect the expectations of our Malaysian user base. We do not sell your personal data. We do not share it for advertising purposes with unaffiliated third parties. We collect only the data we genuinely need to operate a safe, compliant, and high-quality betting platform.

By registering an account or otherwise using the TK666 platform, you confirm that you have read and understood this Policy, and that you consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which govern your use of the platform generally.

For the purposes of this Policy, the following terms shall bear the meanings assigned below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, location data, financial information, and online identifiers.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, organisation, storage, retrieval, use, disclosure, transfer, or deletion.
• "Data Controller" means TK666, the entity that determines the purposes and means by which Personal Data is processed.
• "Data Processor" means any third party that processes Personal Data on behalf of TK666, acting under our instruction and subject to contractual data processing obligations.
• "Cookies" means small text files placed on your device by the TK666 platform to facilitate session management, analytics, and personalised user experience.
• "KYC" means Know Your Customer — the identity verification process required by applicable regulatory obligations.
• "AML" means Anti-Money Laundering — the set of legal and regulatory obligations relating to financial crime prevention.
• "Platform" refers to the TK666 website, web application, and all associated digital services operated at https://tk666.casa.

TK666 collects personal data through your direct interactions with the platform, automated technical processes, and where applicable through third-party verification and payment services. The categories of data we collect are as follows:

We do not knowingly collect special categories of sensitive personal data (such as health, religious beliefs, or biometric data) unless strictly required by applicable regulatory obligations, in which case we will notify you and obtain appropriate consent.

TK666 processes your personal data for the following purposes. Each purpose is linked to a defined legal basis as outlined in Section 5 of this Policy.

• Account Creation and Management: We process your identity and contact data to create, maintain, and administer your TK666 member account, including login authentication and account recovery.
• Identity Verification (KYC): We process identity and KYC data to comply with applicable regulatory requirements relating to age verification (21+), identity confirmation, and prevention of duplicate account registration.
• Payment Processing: We process financial data to facilitate deposits (via DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go, Boost, GrabPay, and cryptocurrency), process withdrawals in MYR, and maintain accurate transaction records.
• Anti-Money Laundering (AML) Compliance: We process financial transaction data and KYC information to detect, investigate, and report suspicious financial activity in compliance with applicable AML obligations.
• Platform Security: We process technical and usage data to detect and prevent fraud, account takeovers, bot activity, and other security threats to the TK666 platform.
• Service Delivery and Improvement: We process usage data to operate our games and sports betting services, personalise your experience, improve platform features, and resolve technical issues.
• Customer Support: We process communications data to respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Marketing and Promotions: With your consent, we may process contact data to send you information about TK666 promotions, bonuses, and relevant updates. You may withdraw this consent at any time.
• Responsible Gambling: We process usage and account data to monitor gambling patterns, apply player-requested limits, and identify potential problem gambling indicators in line with our responsible gambling obligations.

TK666 relies on the following legal bases to process your personal data lawfully:

• Contractual Necessity: Processing required to perform our contract with you — specifically, to operate your member account and deliver the betting and casino services you have signed up for.
• Legal Obligation: Processing required to comply with applicable laws and regulatory obligations, including KYC identity verification, AML transaction monitoring, age verification, and regulatory reporting requirements.
• Legitimate Interests: Processing carried out in pursuit of TK666's legitimate business interests, including platform security, fraud prevention, service improvement, and protection of the platform and its users from harmful or illegal activity — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — in particular, the sending of promotional communications. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

TK666 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We may, however, share your personal data with the following categories of recipients in the circumstances described below:

• Payment Service Providers: We share financial data with licensed payment processors and banking partners — including Malaysian payment infrastructure providers such as DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go, Boost, and GrabPay — solely to process your deposits and withdrawals.
• KYC and Identity Verification Partners: We engage licensed third-party KYC service providers to verify your identity and age in compliance with regulatory requirements. These providers act as Data Processors under contractual data processing agreements.
• Technology and Infrastructure Partners: We share technical data with cloud infrastructure, cybersecurity, and platform analytics providers that support the operation and security of the TK666 platform. All such providers are bound by contractual confidentiality and data protection obligations.
• Game Studio Partners: Aggregated, non-identifiable usage statistics may be shared with licensed game content partners to facilitate game operation, fairness auditing, and technical support. Personal identifiers are not disclosed to game studios.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to competent regulatory, governmental, or law enforcement authorities where required by applicable law, a valid court order, or regulatory direction — including but not limited to AML reporting obligations.
• Professional Advisors: We may share personal data with our legal counsel, auditors, and other professional advisors on a strictly need-to-know basis and subject to professional confidentiality obligations.

TK666 uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how users interact with our services. The following categories of cookies are used on the TK666 platform:

• Essential Cookies: Strictly necessary for the platform to function. These enable core features such as session management, login authentication, and security monitoring. Essential cookies cannot be disabled without impairing platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users navigate the platform — including pages visited, time spent, and features used. This data helps us improve the platform experience. Analytics cookies are deployed on the basis of our legitimate interests.
• Functional Cookies: Used to remember your preferences such as language settings, preferred game categories, and interface customisations, to improve your experience on return visits.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and other security threats to the platform and our members' accounts.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to use the TK666 platform. We do not use advertising or third-party retargeting cookies.

TK666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active membership, plus a minimum of five (5) years following account closure, in compliance with applicable AML and financial record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in accordance with regulatory obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction to satisfy AML record-keeping requirements.
• Customer Support Communications: Retained for a period of two (2) years from the date of the last communication, unless retention is required for longer by ongoing dispute resolution processes.
• Technical and Usage Data: Retained in identifiable form for up to twelve (12) months, after which it may be aggregated and anonymised for analytical purposes with no defined retention limit.
• Marketing Consent Records: Retained for the duration of your consent and for a period of two (2) years thereafter, to evidence compliance with consent obligations.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

TK666 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and the TK666 platform is encrypted using TLS 1.3 / 256-bit AES encryption — the same standard used by major Malaysian banks and financial institutions.
• Encryption at Rest: Sensitive personal data stored on our servers, including financial and KYC data, is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: TK666 supports two-factor authentication for member accounts to protect against unauthorised login attempts.
• Continuous Security Monitoring: Our platform is subject to continuous real-time security monitoring, intrusion detection systems, and regular third-party penetration testing to identify and address vulnerabilities proactively.
• Incident Response: In the event of a data security incident that poses a risk to your rights and freedoms, TK666 will notify affected members and relevant authorities in accordance with applicable notification obligations.

Subject to applicable law and regulatory requirements, you hold the following rights in respect of your personal data held by TK666:

• Right of Access: You have the right to request a copy of the personal data that TK666 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate, incomplete, or outdated. You may update most account information directly through your account profile.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to TK666's legal obligations to retain certain data for regulatory and AML compliance purposes.
• Right to Restriction of Processing: You may request that TK666 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format, where the processing is based on your consent or a contractual obligation.
• Right to Object: You have the right to object to the processing of your personal data where it is carried out on the basis of our legitimate interests. You may also unsubscribe from marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our Data Protection team at [email protected] with the subject line "Data Privacy Request". We will respond to all verified requests within thirty (30) calendar days. We may require identity verification before processing your request to ensure the security of your data.

The TK666 platform is strictly intended for use by adults who are at least 21 years of age. We do not knowingly collect personal data from individuals under the age of 21, and we do not permit anyone under that age to register an account or access gambling services on our platform.

TK666 enforces mandatory age verification as part of the KYC process. Any account found to have been registered by a person under 21 years of age will be closed immediately, and any associated data will be handled in accordance with applicable regulatory requirements.

If you have reason to believe that a minor has accessed the TK666 platform, please notify us immediately at [email protected] so that we can investigate and take appropriate action without delay.

TK666 operates with the support of technology and service providers whose infrastructure may be located in multiple jurisdictions. As a result, your personal data may be transferred to, stored, or processed in countries outside Malaysia, including countries in which our cloud infrastructure, KYC, or payment partners maintain data centre facilities.

Where such transfers take place, TK666 ensures that appropriate safeguards are in place to protect your personal data to a standard that is at least equivalent to the protections afforded under Malaysian data protection laws. These safeguards may include:

• Contractual data processing agreements incorporating internationally recognised data protection clauses.
• Transfers to jurisdictions that maintain adequate data protection regimes.
• Technical security controls including encryption, pseudonymisation, and access restrictions applied consistently across all jurisdictions in which data is processed.

TK666 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will update the "Last updated" date displayed at the top of this page and, where reasonably practicable, notify registered Members via email or an in-platform notification.

Your continued use of the TK666 platform following the publication of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any amendment to this Policy, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

We encourage all Members to review this Privacy Policy periodically to remain informed of how TK666 collects, uses, and protects your personal information.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by TK666, please contact our Data Protection team using the details below:

For matters relating to account closure, self-exclusion, or responsible gambling, please visit our Responsible Gambling page or contact our support team directly. All data privacy requests are handled with strict confidentiality by our dedicated compliance personnel.