Privacy Policy CB666

CB666 is an online entertainment platform operating since 2018, serving over 500,000 active members across Malaysia. We understand that trust is the foundation of our relationship with every member, and protecting personal data is a vital part of that trust.

This Privacy Policy is drawn up in accordance with international data protection principles and industry best practices. We are committed to managing your personal data in a responsible, transparent, and secure manner at all times.

This document applies to all information you provide to CB666, whether through the registration process, use of the platform, contact with our support team, or any other interaction with our services.

CB666 collects several categories of personal data from members to ensure the platform operates smoothly, securely, and in compliance with regulatory requirements. Below is a summary of the data we collect and its purpose:

We only collect data that is strictly necessary for the stated purposes. CB666 does not collect sensitive data categories such as health information, political affiliations, or religious beliefs unless required by law.

Personal data collected by CB666 is used solely for legitimate, pre-defined purposes. We do not use your data for any other purpose without prior notice and, where required, your consent.

The primary purposes for which cb666 uses members' personal data are as follows:

• Account management — processing registration, identity verification (KYC), and member account maintenance
• Transaction processing — handling deposits, withdrawals, and all financial activities on the platform
• Security and fraud prevention — detecting suspicious activity and protecting accounts from unauthorised access
• Regulatory compliance — fulfilling legal obligations including anti-money laundering (AML) requirements
• Service improvements — analysing usage patterns to enhance the user experience
• Responsible gaming — monitoring wagering behaviour to identify members who may need assistance
• Communication — sending important account-related information, promotions (if you have consented), and platform updates

CB666 does not sell, does not rent, and does not disclose members' personal data to third parties for commercial marketing purposes. However, there are specific circumstances where we may need to share data with the following parties for legitimate operational purposes:

• Payment service providers — to securely process deposits and withdrawals
• Licensed game providers — providers of Slot Games, Fish Shooting Games, and other games operating within the cb666 platform
• Technology service providers — companies that assist us in operating our IT infrastructure, cybersecurity, and technical support
• Relevant authorities — when required by law, court order, or a valid official investigation
• Auditors and professional advisors — accountants, lawyers, or auditors bound by professional confidentiality obligations

All third parties that receive data from CB666 are required to comply with data protection standards equal to or stricter than those we apply ourselves. We sign data processing agreements with every service provider to ensure your data remains protected at all times.

Protecting members' personal data is an absolute priority for CB666. We continuously invest in the latest security infrastructure to ensure your data is always safeguarded against unauthorised access, theft, or loss.

Key security measures we have implemented include:

• 256-bit SSL/TLS encryption for all data transmissions between users and our servers
• Encryption of stored sensitive data using industry-grade encryption algorithms
• Intrusion detection and prevention systems (IDS/IPS) operating 24/7
• Two-factor authentication (2FA) is available for members who wish to add an extra layer of security to their account
• Strict access controls — only authorised staff may access members' personal data, and every access is logged
• Periodic penetration testing conducted by independent third parties
• A comprehensive incident response plan to address any data breach promptly

CB666 uses cookies and similar tracking technologies to enhance the user experience, understand how the platform is used, and ensure the security of your account. The following are the types of cookies we use:

• Essential Cookies — Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Performance Cookies — Collects information on how visitors use the platform to help us improve the user experience.
• Functional Cookies — Allows the platform to remember your preferences such as language and display settings.
• Analytics Cookies — Helps us understand aggregate usage patterns for platform improvement purposes.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect certain features on the CB666 platform. Note: CB666 does not use third-party cookies for advertising purposes.

CB666 retains members' personal data only for as long as necessary for the stated purposes or as required by law. Our data retention guidelines are as follows:

• Active account data — Retained for as long as your account remains active and in use
• Data following account closure — Retained for up to 7 years for legal and financial regulatory compliance purposes
• Transaction records — Retained for a minimum of 5 years in accordance with Malaysia's financial regulatory requirements
• Security logs — Retained for 2 years for investigation purposes if required
• Support communication data — Retained for 3 years for service quality purposes

Once the retention period expires, data will be permanently deleted or anonymised so that it can no longer be linked to any individual.

CB666 respects and recognises your rights as the owner of your personal data. You have the right to:

To exercise any of the above rights, please contact the cb666 support team via email at [email protected], including your account details for verification purposes. We will process your request within 30 business days.

CB666 strictly prohibits individuals under the age of 18 from using our platform. We do not knowingly collect personal data from minors. If we discover that a child's data has been collected without parental or guardian consent, that data will be deleted immediately and the account will be closed.

Parents and guardians who become aware that a minor under their care has registered with CB666 are urged to contact us immediately at [email protected] so that appropriate action can be taken without delay.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how CB666 handles your personal data, please do not hesitate to contact us. Our Data Privacy Team is ready to assist you.

• Email: [email protected]
• Response time: Within 1–3 business days for general enquiries; 30 days for formal data subject rights requests
• Supported languages: Bahasa Melayu and English

You may also visit the Frequently Asked Questions (FAQ) us for answers to common privacy and data security inquiries. This Privacy Policy was last updated on 1 January 2026 and will be reviewed periodically.