Official Policy

866 Privacy Policy – Personal Data Protection for Malaysia Members

866 takes our responsibility to protect your personal information seriously. This Privacy Policy clearly explains what data we collect, how it is used, and your rights as a user in Malaysia.

Updated: January 2026 PDPA Compliance 256-bit SSL
256-bit
SSL encryption
0
Sale of Data to Third Parties
24/7
Security Monitoring
PDPA
Malaysia Personal Data Protection Act

This Privacy Policy outlines 866's commitment to protecting the personal information of every member who uses our platform. We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices. Your privacy is not merely a legal obligation for us — it is a core value that shapes how we design every feature on the 866 platform.

1. Introduction

866 is an online entertainment platform providing Live Casino, Slots, Sports Betting, and exclusive VIP programmes to users in Malaysia. When you register, log in, or use any feature on our platform, you entrust us with your personal information. We do not take that responsibility lightly.

This Privacy Policy applies to all users of the 866 platform, including registered members, casual visitors, and any party that interacts with our website at 866.vin. By using our platform, you agree to the terms set out in this policy. If you do not agree with any part of this policy, you should stop using our services.

This policy is written in plain, easy-to-understand language rather than complex legal jargon — because we believe every member deserves to know exactly how their data is managed.

2. Data We Collect

866 only collects data that is strictly necessary to deliver a safe, fair, and compliant service. The following are the types of data we collect:

Data Category Example Information Purpose
Identity Information Full name, date of birth, IC/passport number KYC verification, fraud prevention
Contact Information Email address, phone number, residential address Account communications, security notifications
Financial Data Bank account number, deposit and withdrawal history Payment processing, AML compliance
Technical Data IP address, browser type, operating system, device ID Security, fraud detection, UX
Usage Data Game history, betting habits, session duration Personalised recommendations, responsible gaming
Communication Data Support chat logs, emails, complaint tickets Issue resolution, service enhancement
Important Note: 866 never collects credit card information directly. All payment transactions are processed through certified payment providers that comply with PCI-DSS standards.

3. How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for purposes unrelated to the services you use.

  • Identity verification and KYC — to verify that you are who you claim to be and that you meet the minimum age requirement of 18 years
  • Transaction processing — deposits and withdrawals are securely processed using the financial information you provide
  • Account security — detects suspicious access, unauthorized login attempts, and fraudulent activity in real time
  • Legal compliance — fulfills the requirements of the Anti-Money Laundering and Anti-Terrorism Financing Act (AMLA) and related regulations
  • Customer Support — resolves inquiries, complaints, and technical issues more efficiently
  • Responsible gaming — monitors playing habits to identify signs of problem gambling and offer appropriate assistance
  • Marketing communications — sends promotional information and exclusive offers, only if you have given your consent
  • Platform improvements — analyzes how users interact with the platform to improve the gaming experience
You may withdraw consent to receive marketing communications at any time via your account settings or by contacting our support team.

4. Sharing Information with Third Parties

866 does not sell, rent, or trade your personal information to any third party for commercial purposes. Data sharing only occurs in limited and legitimate situations as follows:

  • Registered payment providers — transaction information is shared with PCI-DSS compliant payment processors to facilitate deposits and withdrawals
  • Game software providers — required game session data is shared with providers such as JILI, PG Soft, and Evolution to ensure smooth gameplay
  • Identity verification services — KYC information is shared with approved identity verification providers for document review purposes
  • Legal authorities — we are legally required to disclose certain information upon receiving a valid court order or official request from law enforcement agencies
  • Analytics and security providers — anonymized technical data is shared with services that help us detect security threats and improve platform performance
All third parties working with 866 are required to sign data protection agreements ensuring user information is handled to the same high standards we uphold.

5. Data Security

We continuously invest in the latest security infrastructure to ensure your personal data is always protected. This is not just a promise — it is a daily practice implemented at every layer of our system.

  • 256-bit SSL encryption — all data transmitted between your browser and our servers is encrypted using the latest TLS 1.3 protocol
  • Hashed password storage — your password is never stored in plain text; we use the bcrypt algorithm with a random salt
  • Two-factor authentication (2FA) — an additional security layer is available and strongly encouraged for all accounts
  • 24/7 Monitoring — our threat detection system operates around the clock to identify and respond to suspicious activity
  • Regular penetration testing — we conduct periodic independent security audits to identify and address vulnerabilities before they can be exploited
  • Internal access controls — only authorized personnel with a legitimate job requirement may access user data, and all access is logged
Security Tip: While we take all reasonable steps to protect your account, you also play an important role. Use a strong and unique password, enable 2FA, and never share your login details with anyone.

6. Cookies & Tracking Technologies

866 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit our website.

  • Essential cookies — required for core platform functions such as login session verification and security settings; cannot be disabled
  • Performance cookies — collects anonymized data on how users interact with the platform to help us improve the user experience
  • Functional cookies — remembers your preferences such as language selection, display settings, and saved login information
  • Analytics cookies — used alongside analytics tools to understand usage trends and improve platform design

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect platform functionality. Third-party cookies from game software providers may also be used during play sessions.

If you disable all cookies, some platform features may not function properly, including the auto-login function and your personal settings.

7. Data Retention & Deletion

866 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law.

  • Active account data — retained for the duration your account is active and for an additional period following account closure as required by financial regulations
  • Financial transaction records — retained for a minimum of 7 years in accordance with Anti-Money Laundering Act compliance requirements
  • Support communication logs — retained for 3 years for reference purposes and dispute resolution
  • Technical data and access logs — retained for 12 months for security analysis and troubleshooting
  • Marketing data — retained until you withdraw consent or close your account

Once the retention period ends, your data will be securely deleted or anonymized so it can no longer be personally linked to you.

8. Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by 866. We are committed to respecting and facilitating the exercise of these rights.

Right of Access

You may request a copy of the personal data we hold about you at any time.

Right to Rectification

You have the right to correct any inaccurate or incomplete information in your account.

Right to Withdraw Consent

You may withdraw consent for certain data processing activities, such as marketing communications.

Right to Object

You may object to the processing of your data for specific purposes, including direct marketing.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data from our systems.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

To exercise any of the above rights, please contact our Privacy team at [email protected] with the subject line "Data Privacy Request". We will process your request within 14 business days.

9. Protection of Children's Data

The 866 platform is exclusively for users aged 18 and above. We do not intentionally collect or process personal data from minors.

  • All new account registrations require age verification through a strict KYC process.
  • If we discover that personal data of a minor has been collected without valid parental or guardian consent, we will delete that data immediately.
  • Accounts found to belong to minors will be closed immediately, and related transactions will be reviewed in accordance with established procedures.
  • Parents or guardians who suspect their child has registered an account at 866 should contact us immediately at [email protected]

10. Amendments to the Privacy Policy

866 reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, technology, or our operating practices. All amendments take effect immediately upon publication on this page.

  • The "Updated" date at the top of this page reflects the date of the last amendment made.
  • For material amendments, we will provide clear notice via your registered email or in-platform notification at least 14 days before the changes take effect.
  • Continued use of the platform after the effective date of any amendment constitutes acceptance of the updated terms
  • We encourage you to review this page regularly to stay informed about how we protect your information

11. Contact Us About Privacy

If you have any questions, concerns, or complaints about how we handle your personal data, our Privacy team is ready to assist you.

  • Privacy Email: [email protected] — please use the subject line "Privacy Policy" to speed up our response
  • Live Chat: Available 24/7 within the 866 platform for immediate inquiries.
  • Response Time: Privacy-related enquiries will be responded to within 2–5 business days
Our team operates entirely within Bahasa Melayu and English. You are welcome to communicate in any language you are comfortable with, and we will respond in kind.

Six Data Protection Principles Governing How 866 Manages Your Privacy

Privacy is more than a legal document — it is a commitment we uphold in every technical decision and daily operation.

Bank-Grade Encryption at Every Layer

Every byte of data moving in and out of the 866 platform is protected by 256-bit SSL encryption — the same standard used by leading financial institutions worldwide. Your personal data never moves without protection.

Zero-Tolerance Policy on Data Selling

866 has never and will never sell, rent, or lend member personal information to advertisers, data brokers, or any third party for commercial purposes. Your data belongs to you — it is not our trading asset.

Strict and Transparent Data Access Controls

Only staff who require data access to perform their duties are authorized, and all access is logged. No one within the 866 organization may view user data without a valid and accountable reason.

Full Malaysia PDPA Compliance

866 is built from the ground up to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We appoint a dedicated compliance officer to ensure every data processing activity meets all applicable legal requirements.

Full Privacy Control in Your Hands

Through your account settings, you can manage communication preferences, review the data we hold, request corrections to your information, and withdraw marketing consent — all self-serve, with no need to wait for support.

Regular Independent Security Audits

866 conducts penetration testing and security audits carried out by independent third-party firms every quarter. Any identified vulnerabilities are remediated with the highest priority, and summary reports are available upon request.

Play Safe at 866

Your Data Protected, Your Game Secured

Join millions of Malaysian members who play with peace of mind at 866 — a platform that prioritizes data security, fair play, and the best experience every day.

256-bit SSL encryption PDPA Compliance Data Not Sold 24/7 Support
Bahasa Melayu