TR66 Privacy Policy

This Privacy Policy ("Policy") describes how TR66 ("TR66", "we", "us", "our") collects, uses, stores, discloses, and protects personal data in connection with the operation of the TR66 online gaming platform, accessible at tr66.buzz ("the Platform"). TR66 operates under international licensing and provides online casino and sports betting services to players in Malaysia and other permitted jurisdictions.

By registering an account, accessing, or using the Platform, you ("the Player", "Data Subject", "you") acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform and may request account closure.

This Policy should be read together with TR66's Terms & Conditions, which govern your use of the Platform generally. This Policy forms part of those Terms by reference.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that identifies or is capable of identifying a natural person, either directly or in combination with other information, including name, identification number, contact details, location data, and online identifiers.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, transmission, combination, restriction, or deletion.
• "Data Controller" means TR66, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on TR66's behalf and under TR66's instructions, such as payment processors, KYC verification providers, and cloud hosting services.
• "KYC Data" means identity verification documents and information provided by the Player as part of TR66's Know Your Customer process, including government-issued identification and proof of address.
• "Sensitive Data" means a subset of personal data that warrants heightened protection, including financial account details and identity document numbers.

TR66 collects the following categories of personal data in connection with the operation of your account and delivery of our services:

TR66 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make deposits or withdrawal requests, contact support via live chat or email, or update your account profile.
• Automatically through platform use: Technical and device data — including IP addresses, session logs, browser data, and gameplay activity — is collected automatically as you interact with the Platform.
• From third-party payment processors: When you initiate a deposit via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, or USDT TRC20, the relevant payment processor provides TR66 with the transaction reference and confirmation data necessary to credit your account.
• From KYC verification providers: Where TR66 uses a third-party identity verification service to process and authenticate KYC documents, that provider may share the outcome of its verification checks with TR66.
• From cookies and tracking technologies: As described in Section 10, TR66 uses cookies and similar technologies to collect session and preference data. Full details are set out in the Cookies section below.

TR66 processes your personal data for the following defined purposes only:

• Account Management: To create, maintain, verify, and operate your TR66 account, including processing login sessions, managing account settings, and enabling access to the game lobby.
• KYC and Age Verification: To verify your identity, confirm that you meet the minimum age requirement of 21 years, and comply with TR66's obligations under its international gaming licence.
• Payment Processing: To process deposits and withdrawal requests, verify payment method ownership, detect fraudulent transactions, and maintain accurate financial records.
• Regulatory Compliance and Anti-Money Laundering: To fulfil compliance obligations under TR66's licensing framework, including screening against sanctions lists, monitoring for suspicious transaction patterns, and filing reports where required by law.
• Customer Support: To respond to enquiries, investigate complaints, resolve disputes, and maintain records of support interactions for quality assurance purposes.
• Platform Security and Fraud Prevention: To detect and investigate account sharing, multi-accounting, bot activity, collusion, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible Gambling: To operate TR66's responsible gambling tools, including monitoring for patterns consistent with problem gambling, enforcing deposit limits and self-exclusion requests, and age-gating the Platform.
• Platform Improvement: To analyse anonymised and aggregated usage data for the purpose of improving Platform performance, game selection, payment processing, and the overall player experience.
• Marketing Communications (where opted in): To send you information about TR66 promotions, bonus offers, and platform updates, only where you have expressly opted in to receive such communications. You may withdraw consent at any time.

TR66 relies on the following lawful bases for processing personal data, depending on the purpose and context:

• Contractual Necessity: Processing necessary to perform the contract between TR66 and you (i.e., to operate your account, process transactions, and deliver the gaming services you have subscribed to).
• Legal Obligation: Processing required to comply with TR66's obligations under its international gaming licence, including KYC, anti-money laundering checks, age verification, and regulatory reporting.
• Legitimate Interests: Processing carried out in TR66's legitimate operational interests — such as platform security, fraud prevention, and analytics for service improvement — provided those interests do not override your fundamental rights.
• Consent: For optional processing activities such as marketing communications and non-essential cookies, TR66 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

TR66 does not sell, rent, or trade your personal data. We may share your personal data only in the following limited circumstances:

• Payment Processors: We share transaction data with third-party payment processors — including providers of Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and cryptocurrency processing services — to the extent necessary to process your deposits and withdrawals.
• KYC / Identity Verification Providers: Where a third-party service is used to verify identity documents, the necessary data is shared with that provider under a data processing agreement that binds them to TR66's security and confidentiality standards.
• Game Software Providers: Some game data (anonymised player session identifiers, bet outcomes) may be shared with the third-party game studios and RNG providers whose titles appear on the TR66 platform, solely for the purpose of game integrity and dispute resolution.
• Regulatory and Law Enforcement Authorities: TR66 may be required by law, court order, or its licensing authority to disclose certain player data to competent authorities. Any such disclosure will be limited to what is strictly required and TR66 will notify the Player where legally permitted to do so.
• Professional Advisors: TR66's lawyers, accountants, auditors, and compliance consultants may access personal data on a strictly need-to-know basis, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or transfer of substantially all of TR66's assets, player data may be transferred to the acquiring entity. Players will be notified in advance and given the opportunity to delete their accounts if they do not consent to the transfer.

TR66 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following indicative retention periods apply:

• Active Account Data: Retained throughout the period during which your account remains active and for a minimum period thereafter as required by TR66's licensing obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements under TR66's licensing framework.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, for audit, dispute resolution, and regulatory compliance purposes.
• Support Correspondence: Retained for a period of three (3) years following resolution of the relevant support interaction, unless a longer period is required for an ongoing dispute or legal proceeding.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, at which point your data will be suppressed (not deleted, to prevent re-addition) unless you request deletion under your rights in Section 9.
• Technical Logs: IP logs and session records are retained for up to twelve (12) months for security and fraud detection purposes, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data — which can no longer be attributed to an identifiable individual — may be retained indefinitely for statistical and operational improvement purposes.

You hold the following rights in respect of your personal data held by TR66. These rights may be exercised by contacting our support team via live chat or at the email address provided in Section 15.

To exercise any of these rights, contact TR66 support via live chat on the Platform or at the email address listed in Section 15. TR66 will verify your identity before acting on any rights request. Requests will be acknowledged promptly and fulfilled within 30 days, or TR66 will explain in writing why an extension is required.

TR66 uses cookies and similar technologies to operate and improve the Platform. A cookie is a small text file placed on your device by a website to remember information about your session and preferences. TR66 uses the following categories of cookies:

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect your experience on the Platform, including the ability to stay logged in or access game preferences. TR66 does not use cookies to serve third-party advertising or to track your activity on other websites.

TR66 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, loss, misuse, alteration, and destruction:

• Encryption in Transit: All data transmitted between your device and TR66's servers is protected using 256-bit SSL/TLS encryption. Connections over unencrypted HTTP are not supported for any authenticated session.
• Encryption at Rest: Sensitive personal data, including KYC documents and financial records, is encrypted at rest on TR66's storage infrastructure.
• Access Controls: Access to personal data is restricted on a strictly need-to-know basis. Employees and contractors with access to personal data are subject to confidentiality obligations and access logging.
• Security Audits: TR66's platform infrastructure undergoes regular security assessments and penetration testing by qualified security professionals.
• Incident Response: TR66 maintains an incident response plan for data security events. In the event of a data breach that poses a risk to affected players, TR66 will notify impacted individuals in a timely manner via the contact details registered on their account.
• Player-Side Security: You are responsible for maintaining the confidentiality of your account password. TR66 recommends using a strong, unique password and enabling any available two-factor authentication. Contact support immediately if you suspect your account has been compromised.

TR66 is an internationally licensed platform. As a result, personal data may be transferred to and processed in countries outside of Malaysia for the purposes described in this Policy. Such countries may include those in which TR66's licensing authority, data processors, and cloud infrastructure providers are located.

Where personal data is transferred internationally, TR66 takes reasonable steps to ensure that appropriate safeguards are in place to protect the data at a standard no less protective than that applied by TR66 internally. This may include data processing agreements with receiving parties that incorporate binding data protection obligations.

By using the Platform, you acknowledge and consent to the transfer of your personal data to servers and service providers outside Malaysia where necessary for the operation of the Platform.

TR66 strictly prohibits the use of the Platform by individuals under the age of 21. The Platform is designed and intended solely for adult players, and we take the protection of minors' data extremely seriously.

TR66 does not knowingly collect personal data from individuals under the age of 21. If TR66 becomes aware that an account has been registered by a person under this age, the account will be immediately closed, all balances withheld pending investigation, and any personal data associated with the minor will be deleted in accordance with applicable law.

If you believe that a minor has registered on the Platform or that personal data of a minor has been collected by TR66, please contact us immediately via the channels described in Section 15. We will investigate and take appropriate action promptly.

TR66 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or operational structure. The date of the most recent revision is displayed at the top of this page under "Last Updated".

Where material changes are made to this Policy — particularly changes that affect your rights or the manner in which TR66 uses your personal data — TR66 will provide reasonable advance notice via an on-platform notification or email to your registered address. For changes that require renewed consent, TR66 will seek your explicit consent before the changes take effect.

We recommend that you review this page periodically. Continued use of the Platform after any amendment constitutes your acceptance of the revised Policy, to the extent permitted by applicable law.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by TR66, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the TR66 Platform. This is the fastest channel for all support and privacy-related enquiries.
• Email (plain text — not clickable): [email protected]

Please include "Privacy Request" in the subject line of any written enquiry and provide your registered account username or email address so that we may verify your identity before acting on your request.

TR66 will acknowledge privacy-related enquiries promptly and will aim to provide a substantive response within 14 business days. Complex requests — such as subject access requests involving large volumes of data — may require up to 30 days, and we will communicate any such timeline extension to you proactively.