Personal Data Protection

Privacy Policy Bull66 – Malaysia's Personal Data Protection

Bull66 takes the privacy of every member seriously. This policy clearly outlines what data we collect, how it is used, who can access it, and your rights as the data owner — in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026 Register a Free Account
Our Privacy Commitment
256-bit SSL encryption for all data
Full compliance with the Malaysia PDPA 2010
Data is never sold to third parties
Restricted access to licensed personnel
Access, correct & delete your data

Six Key Points of the Bull66 Privacy Policy

Lengthy privacy policies can be confusing — so here is a plain-language summary of the six most important things you need to know about how Bull66 handles your data.

Minimal Data Collection

Bull66 only collects data that is strictly necessary to deliver our services — your name, phone number, email, identity verification details and transaction records. No excess data is collected without a clear and legitimate purpose.

Protected with 256-bit SSL

All communication between your device and Bull66's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's leading banks such as Maybank and CIMB to safeguard their online transactions.

No Sale of Data to Third Parties

Bull66 does not sell, rent, or disclose your personal data to any third party for marketing purposes. Your data belongs to you — it is not a commodity we trade in. This is not just a promise; it is an enforced policy.

Full Control Over Your Data

As a Bull66 member, you have the full right to access the data we hold about you, correct any inaccurate information, and request deletion of your data at any time — in accordance with Malaysia's Personal Data Protection Act 2010.

Reasonable Data Retention Periods

Your personal data is retained only for as long as necessary for the stated purposes or as required by Malaysian law. Once the retention period expires or you request deletion, your data will be securely erased from our systems.

Full PDPA 2010 Compliance

Every aspect of data handling at Bull66 is designed and enforced to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary privacy legislation protecting the rights of all Malaysian citizens and residents.

Notice: By registering and using the Bull66 platform, you agree to this Privacy Policy. This Policy forms part of your overall agreement with Bull66, together with Terms & Conditions us. Please read it carefully before registering an account.

1

Introduction & Purpose of This Policy

This Privacy Policy ("Policy") is published by Bull66 ("we", "platform" or "Bull66") to explain to you ("member", "user" or "you") how we collect, use, store, disclose and protect your personal data when you use the Bull66 platform, accessible at bull66.best.

We understand that sharing personal information with any online platform requires a significant degree of trust. That trust is not something we take lightly. Every policy in this document is designed to ensure your data is handled with integrity, transparency and in full compliance with applicable Malaysian law — in particular Malaysia Personal Data Protection Act 2010 (PDPA).

This Policy applies to all information you provide to Bull66, whether during account registration, while using the platform, when contacting customer support, or through any other interaction with Bull66. This Policy may be updated periodically, and any changes will be communicated via in-platform notifications or email to registered members.

2

Personal Data We Collect

Bull66 collects your personal data through various channels as you interact with our platform. Below are the categories of data we collect and the purposes for which they are collected:

Data Type
How We Collect It
Primary Purpose
Full name, IC number / passport number
Registration & KYC
Identity verification
Phone number & email address
Registration form
Communication & security
Payment account information
Deposit/withdrawal process
Transaction processing
Betting & transaction records
Platform system
Legal compliance
IP address & device data
Automatic upon login
Security & fraud prevention
Usage data & preferences
Cookies & platform analytics
User experience improvement

Bull66 does not collect sensitive data such as medical information, biometric data, or credit card details directly — all payments are processed through licensed third-party payment providers in Malaysia, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX.

3

How We Use Your Data

Every use of your personal data by Bull66 is grounded in a valid legal basis under Malaysia's PDPA 2010 — whether that is your consent, contractual necessity, a legal obligation, or our legitimate interest in operating a responsible business.

Your personal data is used by Bull66 for the following purposes:

  • Account management: Creating, verifying, and maintaining your Bull66 account, including the login process, two-factor authentication, and password recovery.
  • Financial transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, and processing withdrawal of your winnings to the account you have registered.
  • Identity verification (KYC): To verify your identity in fulfillment of Anti-Money Laundering (AML) requirements and to ensure the platform is only accessed by individuals aged 18 and above.
  • Customer support: Responding to enquiries, resolving disputes, and providing technical assistance via live chat or email.
  • Platform security: Detecting and preventing fraud, duplicate accounts, money laundering, and other illicit activities that could harm the platform or other members.
  • Legal compliance: Retaining records required under Malaysian law, including financial and identity records, for periods stipulated by the relevant authorities.
  • Platform improvements: Analysing usage patterns in aggregate and anonymised form to improve the user experience, develop new features, and optimise platform performance.
  • Important communications: Sending account-related notifications, policy changes, security updates, and promotional information you agreed to receive at the time of registration.

Bull66 does not use your personal data to make automated decisions that significantly affect you without appropriate human oversight. Any account suspension triggered by suspicious activity detection is subject to manual review by our security team.

4

Data Sharing & Third-Party Disclosure

Bull66 does not sell, rent, or disclose your personal data to third parties for marketing or any other commercial purpose without your explicit consent. However, there are limited situations in which we may need to share your data with carefully selected third parties:

  • Licensed payment providers: Transaction data is shared with providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX solely for the purpose of processing your deposits and withdrawals. These providers maintain their own privacy policies and are bound by Malaysia's PDPA.
  • Technology service providers: Companies that help us operate our platform — such as server hosting providers and analytics services — may process your data on our behalf. They are contractually bound not to use your data for any other purpose.
  • Malaysian legal authorities: When required by a court order, regulatory authority directive, or other legal obligations enforceable in Malaysia, Bull66 will disclose the necessary data to the relevant authorities.
  • Fraud prevention: In cases of suspected serious fraud or money laundering, Bull66 may share the necessary information with relevant financial crime prevention authorities in accordance with Malaysian law.

In all instances of data sharing described above, Bull66 ensures that the receiving parties have adequate data protection measures in place and process data solely for the stated purpose. We do not transfer your personal data overseas without first ensuring that protections equivalent to Malaysia's PDPA exist at the recipient's location.

5

Data Security & Technical Protection Measures

Bull66 takes security infrastructure seriously to ensure your personal data is always protected. The technical and organisational measures we have in place include:

  • 256-bit SSL encryption: All communications between your device and Bull66's servers are encrypted using 256-bit TLS/SSL — the same standard used by Maybank2u and CIMB Clicks to secure online banking.
  • Encryption of data at rest: Sensitive data stored in our databases is encrypted at rest using industry-recognised encryption standards.
  • Strict access controls: Only Bull66 staff with a legitimate business need and who have completed data privacy training are permitted to access member personal data. All access is recorded and regularly audited.
  • Two-factor authentication (2FA): Bull66's internal systems containing member data are protected with two-factor authentication to prevent unauthorised access even in the event that an employee's password is compromised.
  • Continuous threat monitoring: Our security monitoring systems operate around the clock to detect and respond to any unauthorised access attempts or suspicious activity.
  • Secure data backups: Data is regularly backed up to a secure, separate location to ensure recovery is possible in the event of an unexpected system failure.

Security Reminder: While Bull66 takes all reasonable steps to protect your data, no online system can be guaranteed 100% secure. You are also responsible for keeping your Bull66 account password safe and not sharing your login credentials with anyone. Please contact our support team immediately if you suspect your account has been compromised.

6

Cookies & Tracking Technologies

Bull66 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

  • Strictly necessary cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance & analytics cookies: Helping us understand how members use the platform — which pages are most popular, where users encounter difficulties, and how we can improve the overall experience. This data is collected in aggregate and is not linked to any individual's identity.
  • Functional cookies: Storing your preferences such as selected language, time zone, and display settings so you don't have to reconfigure them each time you log in.

You can manage and delete cookies through your browser settings. However, disabling essential cookies may affect Bull66's platform functionality and your overall experience. Our platform does not use third-party cookies for advertising or cross-site tracking purposes.

7

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data held by Bull66:

Right of Access
Request a copy of the personal data we hold about you at any time.
Right to Rectification
Request correction of any inaccurate or incomplete data held in our records.
Right to Erasure
Request deletion of your personal data when it is no longer required for its original purpose.
Right to Restriction of Processing
Request a restriction on the processing of your data under certain circumstances permitted by law.
Right to Object
Object to the processing of your data for specific purposes, such as marketing communications.
Right to Data Portability
Receive a copy of your data in a structured, machine-readable format for portability purposes.

To exercise any of the rights above, please reach out to the Bull66 support team via 24/7 live chat on the platform or email us at support@bull66.best. We will process your request within 21 business days as required under Malaysia's PDPA. In some cases, we may need to verify your identity before proceeding to ensure your account remains secure.

8

Data Retention Period

Bull66 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by applicable Malaysian law. Our data retention guidelines are as follows:

  • Active account data: Retained for as long as your account is active and for the required period following account closure to fulfil legal obligations.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's applicable accounting and financial legal requirements.
  • Identity verification (KYC) records: Retained for a minimum of 5 years from the date of last verification or account closure, in accordance with AML/KYC compliance requirements.
  • Customer support communication logs: Retained for 2 years for reference and resolution of any disputes that may arise.
  • Usage data & analytics: Deleted or anonymised 12 months after the date of collection.

Once a retention period expires or data is no longer required, Bull66 will delete or anonymise it in a secure and irreversible manner. If you request account deletion, we will remove all data not subject to legal retention obligations within 30 days of receiving your request.

9

Children's Privacy

The Bull66 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. If you are a parent or guardian and believe that your child or ward who is a minor has registered an account on Bull66, please contact us immediately at support@bull66.best so we can take appropriate action, including closing the account and deleting all associated data.

Bull66 employs multiple age verification mechanisms during the registration and KYC process to ensure our platform cannot be accessed by minors under the age of 18. Protecting young users is a social responsibility we take seriously as part of our commitment to responsible gaming.

10

Changes to This Privacy Policy

Bull66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements to the way we handle data. Any material changes will be communicated to you via:

  • Via an in-platform notification on Bull66 the next time you log in.
  • An email will be sent to the address registered to your account at least 14 days before significant changes take effect.
  • Updates the "Last Updated" date at the top of this document.

Your continued use of the Bull66 platform after any changes take effect will be considered your acceptance of the updated policy. If you disagree with any changes, you have the right to close your account by contacting our support team.

11

Contact Us About Data Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Bull66 handles your personal data, we encourage you to get in touch with us directly:

  • 24/7 Live Chat: The fastest way — access live chat within the Bull66 platform and our Malay-speaking team will assist you right away.
  • Email: support@bull66.best — for privacy enquiries requiring written documentation, we will respond within 3 business days.

For more information about your rights under Malaysia's PDPA 2010, you may refer to the Department of Personal Data Protection Malaysia. Bull66 is committed to cooperating fully with any investigation conducted by the relevant data privacy regulatory body in Malaysia.

This Privacy Policy was last updated on 1 January 2026. The latest version of this Policy is always available at bull66.best/privacy-policy.

Related Policies
Platform Security Status
SSL Encryption 256-bit ✓
PDPA Compliance Active ✓
Security Audit Periodic ✓
24/7 Monitoring Active ✓
Data Sold to Third Parties No ✗
Privacy Enquiries?

Reach the Bull66 support team, available in Bahasa Malaysia 24 hours a day, for any enquiries regarding your personal data.

Privacy Email
support@bull66.best
Data Request Response
Within 21 Business Days
Licensed Payment Providers

All payments are processed by these licensed providers — your financial data is never stored on Bull66's servers.

Touch 'n Go eWallet GrabPay Boost & ShopeePay DuitNow FPX – Maybank2u, CIMB Clicks

A Platform That Fully Respects Your Privacy

Privacy at Bull66 is more than a document — it's part of our culture. Here are six concrete ways we protect the personal information of every Malaysian member, every single day.

256-bit SSL End-to-End Encryption

Every byte of data transmitted between your phone or computer and Bull66's servers is protected by 256-bit SSL encryption. This means that even if someone were to intercept that communication, they would not be able to read any meaningful information.

Strict Internal Access Controls

At Bull66, access to member personal data is strictly limited to staff with a clear and legitimate business need. Every access is logged and audited. No Bull66 employee may access member data without a valid business justification and department head approval.

Full PDPA Malaysia 2010 Compliance

Bull66 operates in full compliance with Malaysia's Personal Data Protection Act 2010. This is not merely a box we tick — it is the legal framework that has shaped every aspect of how we handle data since day one of our operations.

No Data Sales to Advertisers

Bull66's business model does not rely on selling user data to advertisers or third parties. Your data will never be sold, rented, or shared with any data brokers or advertising platforms — this is a non-negotiable policy.

Your Data Rights, Made Simple

Your PDPA rights are fully actionable at Bull66, not just legal theory. We've made it straightforward for members to access, correct, or delete their data — simply contact our support team and we'll process your request within 21 business days.

Complete Control Over Your Communications

You have full control over the communications you receive from Bull66. Unsubscribe from any marketing communications at any time through your account settings or by contacting our support team — requests are processed within 7 business days.

Your Data Is Safe with Bull66 — Register with Complete Confidence

Bull66 is built on a foundation of trust and transparency. By understanding how we protect your privacy, you can now register and enjoy Malaysia's finest digital entertainment experience with complete confidence — knowing that your personal information is always in responsible hands.

Bull66 Privacy Guarantee
Your data is never sold to anyone
256-bit SSL encryption across all data
Full compliance with the PDPA 2010
Right to data deletion fully respected
24/7 privacy support in Bahasa Malaysia

*Subject to Terms & Conditions platform

Bahasa Melayu