Privacy Policy mcd66

1 Introduction

Mcd66 is committed to protecting the privacy of every member who registers and uses our platform at mcd66.onl. This Privacy Policy is provided to inform you about our personal data collection and management practices in a transparent and clear manner.

This document applies to all mcd66 platform users, including website visitors, registered members, and anyone who interacts with our services through our website, mobile app, or official communication channels. By using the mcd66 platform, you agree to the terms outlined in this Privacy Policy.

Mcd66 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection regulations. We never sell, rent or disclose your personal data to third parties for marketing purposes without your consent.

2 Information Collected

Mcd66 collects various types of information from members to ensure our services function properly, remain secure and meet every user's needs. The information we collect falls into several main categories:

Information You Provide Directly:

• Full name as stated on official identification documents.
• Date of birth for age eligibility verification (18 years and above).
• Active email address for account communications.
• Mobile phone number for two-factor authentication (2FA).
• Current residential address for KYC verification purposes.
• Bank account or digital wallet details for transaction processing.
• A copy of your identity document (MyKad / passport) when required for KYC verification.

Information Collected Automatically:

• IP address and approximate location data.
• Device type, operating system and web browser version.
• Session log data including login times, session duration, and in-platform actions.
• Wagering history and transactions within the platform.
• Cookie data and related tracking technologies.

3 How We Use Your Data

Every piece of information collected by mcd66 has a clear and legitimate purpose. We do not use your data for any purpose not stated in this Privacy Policy. The table below summarises the primary purposes for which your personal data is used:

Mcd66 also uses your personal data to fulfil legal obligations, including compliance with Anti-Money Laundering (AML) requirements, reporting suspicious transactions to the relevant authorities when required by law, and verifying member eligibility to ensure the platform is used only by qualified individuals.

You have the right to withdraw your consent for any consent-based data processing at any time. Withdrawal of consent will not affect the validity of any processing carried out prior to the withdrawal.

4 Data Sharing

Mcd66 does not sell, rent or transfer your personal data to any third party for commercial purposes without your explicit consent. However, in the course of operating the platform, we may need to share your information with certain parties in the following situations:

5 Data Security

Mcd66 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, disclosure, alteration or destruction. Our security infrastructure is continuously updated to address the latest cyber threats.

Key security measures we practise include:

• 256-bit SSL Encryption — All data transmitted between your device and mcd66's servers is encrypted using the latest Transport Layer Security (TLS) protocol, ensuring no third party can intercept your information in transit.
• Two-Factor Authentication (2FA) — An additional security layer requiring verification via your mobile number each time you log in from a new device or perform an important transaction.
• 24/7 Monitoring — Our cybersecurity team continuously monitors systems to detect any suspicious activity or intrusion attempts.
• Data Segregation — Sensitive financial data is stored separately from general profile data, with access restricted to authorised personnel only.
• Regular Security Testing — The mcd66 platform undergoes regular penetration testing and security audits conducted by accredited independent parties.
• Staff Access Control — Only mcd66 staff with a legitimate operational need are permitted to access member personal data, and all access is logged and monitored.

While we take all reasonable precautions, no security system can be guaranteed 100% safe. We therefore encourage members to also take preventive steps such as using strong passwords, not sharing login credentials, and reporting any suspicious activity to our support team promptly.

6 Cookies & Tracking Technologies

Mcd66 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small data files stored in your web browser when you visit our website.

Types of cookies we use:

• Essential Cookies — Cookies required for basic platform functions such as login session authentication and security. These cookies cannot be disabled as the platform will not function properly without them.
• Preference Cookies — Saves your preferences such as language, time zone, and display settings for a smoother repeat experience.
• Analytics Cookies — Helps us understand how members use our platform so we can make relevant improvements. Data collected is anonymised.
• Functional Cookies — Enhances platform functionality by remembering the preferences you set during your gaming session.

In addition to cookies, the mcd66 platform also uses technologies such as web beacons and tracking pixels to monitor the effectiveness of email communications and in-platform activity. All these technologies operate in accordance with this privacy policy and are not used to collect sensitive personal information without your knowledge.

7 Your Privacy Rights

As a mcd66 member and under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

• Right of Access — You have the right to request a copy of the personal data we hold about you.
• Right to Rectification — If any of your personal data is inaccurate or incomplete, you have the right to request that a correction be made.
• Right to Erasure — In certain circumstances, you may request that your personal data be deleted, subject to legal obligations we are required to comply with.
• Right to Restriction of Processing — You may request that the processing of your personal data be restricted in certain circumstances provided for by law.
• Right to Data Portability — You may request that your personal data be provided to you or a third party in a machine-readable format.
• Right to Object — You may object to the processing of your personal data for certain purposes such as direct marketing.
• Right to Withdraw Consent — You may withdraw your consent to consent-based data processing at any time.

To exercise any of the above rights, please contact our data protection team through mcd66's customer support channels. We will process your request within 30 working days. In complex cases, this period may be extended to up to 60 days with written notice to you.

8 Data Retention Period

Mcd66 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Once the data is no longer needed, it will be securely deleted or anonymised.

Our general data retention period guidelines are as follows:

• Active Account Data — Retained for the duration your account is active and for a reasonable period after account closure.
• Financial Transaction Records — Retained for a minimum of 7 years in accordance with Malaysia's accounting and tax legal requirements.
• KYC Documents — Retained for a minimum of 6 years after the business relationship ends, in line with AML requirements.
• Communication Logs — Retained for 2 years for dispute resolution and internal audit purposes.
• Session & Technical Data — Retained for 12 months for security and technical troubleshooting purposes.
• Marketing Data — Retained until you withdraw consent or request deletion.

9 Third-Party Links & Services

The mcd66 platform may contain integrations with third-party service providers such as game suppliers, payment processors, and analytics tools. While we are careful in selecting partners who share our commitment to privacy, mcd66 is not responsible for the privacy practices of those third parties.

Every third-party provider we engage is bound by a data processing agreement requiring them to protect your data to the standards we set. Nevertheless, we encourage members to read each provider's privacy policy when interacting directly with their services.

If you access third-party services through the mcd66 platform, any data you share directly with them falls outside mcd66's control and is subject to their own privacy policies.

10 Changes to the Privacy Policy

Mcd66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business operations, new legal requirements or industry best practices. All changes take effect immediately upon publication on this page.

For material or significant changes, MCD66 will notify members via their registered email or in-platform notifications at least 14 days before the changes take effect. The "Updated" date at the top of this document will always reflect the latest version of our Privacy Policy.

Continued use of the mcd66 platform after changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account by contacting the mcd66 support team.