Spade 66 Privacy Policy – Our Commitment to Protecting Malaysian Players' Personal Data

Welcome to the Privacy Policy Spade 66. This document outlines our commitment to the privacy and security of personal data for all players using our online casino platform in Malaysia. We understand that your trust in us begins with how we handle your most personal information.

Spade 66 operates as an online casino platform offering slots, live casino games (baccarat, blackjack, roulette), progressive jackpots, and Sports Betting covering the Malaysia Super League, EPL, badminton, and e-sports. In providing these services, we are required to collect and process certain personal data from you.

This policy applies to all players who:

• Registering for or holding an active account on the platform Spade 66.
• Browsing the Spade 66 website even without registering.
• Contacting our customer support team through any channel.
• Using any application or service associated with Spade 66.

Spade 66 collects various categories of personal data depending on how you interact with our platform. Below is a detailed breakdown of the types of data involved:

Personal data collected by Spade 66 is used solely for lawful purposes directly related to the provision of our platform services. The purposes of use are as follows:

• Account Management: Create, verify, and securely manage your player account.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and FPX — as well as your withdrawal payouts.
• KYC/AML Compliance: Verify your identity and fulfil legal requirements under anti-money laundering regulations.
• Service Improvement: Analysing usage patterns to enhance the gaming experience and improve the platform interface.
• Platform Security: Detecting and preventing fraud, unauthorised access, and suspicious activity.
• Customer Support: Assist you in resolving any issues with your account, transactions, or gameplay.
• Service Communications: Sending important notifications related to your account, security, and platform updates.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need assistance with gaming controls.

Spade 66 processes your personal data on lawful legal bases under Malaysia's Personal Data Protection Act (PDPA) 2010 and recognised international privacy principles. The processing bases we apply are:

• Contract Fulfilment: Processing is necessary to provide the services you signed up for — including account management, payment processing, and access to games.
• Legal Obligation: Certain data processing is necessary to comply with Malaysian law — including AML and KYC requirements and reporting obligations to the relevant authorities.
• Legitimate Interest: We process certain data on the basis of legitimate business interests, including platform security, fraud prevention, and service improvement.
• Consent: For activities such as marketing communications, we process your data only after obtaining your explicit consent.

Spade 66 does not sell or share your personal data for third-party commercial purposes. However, in the normal course of platform operations, data may be shared with the following parties, all of whom are bound by strict confidentiality agreements:

• Licensed Payment Providers: Payment gateways that process your transactions — including Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers — receive only the data necessary to complete those transactions.
• Gaming Service Providers: Companies providing slots, live casino, and Sports Betting services require access to minimum game data in order to deliver their services.
• Identity Verification Service: A third-party KYC provider that helps verify the identity of new players in accordance with compliance requirements.
• Legal Authorities: Spade 66 may be required to disclose data to Malaysian authorities when directed by a court order or relevant law enforcement body.

Spade 66 continuously invest in security infrastructure to ensure your personal data remains protected at all times. Our technical and organisational security measures include:

• Encryption in Transit: All communications between your device and our servers are encrypted using 256-bit TLS/SSL.
• Data-at-Rest Encryption: Data stored in our databases is encrypted using AES-256 standards.
• Tiered Access Control: Access to player data is restricted to authorised personnel with verified business needs only.
• Regular Security Audits: Our security systems are independently audited on a regular basis to identify and address any vulnerabilities.
• 24/7 Monitoring: A threat detection system operates around the clock to identify suspicious activity or intrusion attempts.
• Two-Factor Authentication: Players can enable 2FA for an additional layer of account security.

Spade 66 retain your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by Malaysian law. Our retention policy is as follows:

• Active Account Data: Retained for the duration your account is active, plus three years after account closure for compliance purposes.
• Financial Records: Transaction records — including deposits and withdrawals made via Touch 'n Go, GrabPay, DuitNow, and other methods — are retained for seven years in accordance with Malaysia's tax and AML legal requirements.
• KYC Data: Identity verification documents are retained for five years following account closure or for the period stipulated by the relevant authorities.
• Communication Logs: Customer support and live chat records are retained for two years for quality control and dispute resolution purposes.
• Gaming Activity Data: slots, live casino, and Sports Betting history is retained for three years.
• Technical Data (Logs): Server logs and IP data are retained for 90 days and automatically deleted thereafter.

When your data is no longer needed, it will be securely deleted using methods that ensure it cannot be recovered by any party.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by Spade 66:

To exercise any of the above rights, please reach out to our data protection team by email at privacy@spade66.biz or via in-platform live chat, available 24/7. We will process your request within 30 calendar days in accordance with Malaysia's PDPA requirements.

Spade 66 use cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login, game session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymised data on how players use the platform to help us identify technical issues and improve performance.
• Functional Cookies: Save your preferences such as language, display settings, and game choices for a more personalised experience.
• Analytics Cookies: Helps us understand aggregated usage patterns to make better-informed decisions on platform improvements.

You can manage your cookie preferences through your browser settings. Please note, however, that disabling certain cookies may affect the functionality of some platform features. Spade 66.

Spade 66 reserve the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other relevant reasons. When we make significant changes, we will:

• Sending a notice to your registered email at least 14 days before the changes take effect.
• Displaying a prominent notice on the platform's homepage and on this Privacy Policy page.
• Updating the "Last Updated" date at the top of this document.

Continued use of the platform Spade 66 after the effective date of such changes constitutes your acceptance of the updated Privacy Policy.

Any enquiries relating to privacy and data protection may be directed to our Data Protection Officer: