Privacy Policy — How turbo66 Handles Your Data

1. About This Privacy Policy

This Privacy Policy applies to all personal data processed by turbo66 in connection with the website located at turbo66.club and all associated services, including but not limited to account registration, sports betting, live casino, slots, crash games, payment processing, customer support, and promotional communications (collectively, the "Platform").

turbo66 is committed to handling personal data responsibly and in compliance with applicable data protection legislation. This Policy sets out what data we collect, why we collect it, how long we keep it, who we share it with, and what rights you have in relation to it.

2. Data Controller

For the purposes of applicable data protection law, turbo66 is the data controller in respect of personal data collected through the Platform. "Data controller" means the entity that determines the purposes and means of processing personal data.

If you have questions about how turbo66 processes your personal data, or wish to exercise any of your data rights, you may contact the turbo66 Data Protection contact via the support email address listed in the footer of this page or via live chat within the Platform after signing in through turbo66 Login.

3. Data We Collect

3.1 Data You Provide Directly

When you register for a turbo66 account, make a deposit, contact support, or participate in a promotion, we collect information that you provide directly, including:

• Full legal name, date of birth, and gender;
• Email address and mobile phone number;
• Residential address (including city, postcode, and country);
• Government-issued identity document details (IC number, passport number) provided during KYC verification;
• Payment method details (e-wallet identifiers, bank account numbers, card last-four digits) — full card numbers are never stored on turbo66 servers;
• Communications sent to support, including live chat transcripts and email correspondence.

3.2 Data Collected Automatically

When you access the turbo66 Platform, we automatically collect certain technical and usage data, including:

• IP address, device type, operating system, and browser type;
• Pages visited, time on page, session duration, and click-path data;
• Game activity logs, bet history, wager amounts, and session timestamps;
• Login timestamps and device identifiers used to access your account;
• Geolocation data derived from your IP address (country and region level).

3.3 Data From Third Parties

turbo66 may receive personal data about you from third-party sources in limited circumstances, including:

• Identity verification providers that confirm the authenticity of documents submitted during KYC;
• Payment processors that confirm transaction status and flag potential fraud indicators;
• Anti-money laundering screening databases used to fulfil regulatory obligations.

4. How We Use Your Personal Data

turbo66 uses personal data for the following purposes:

• Account management: Creating, verifying, and maintaining your turbo66 account, including processing turbo66 Login sessions and enforcing security measures;
• Service delivery: Processing bets, casino rounds, deposits, and withdrawals in MYR through your chosen payment method;
• Identity verification: Complying with know-your-customer (KYC) and age verification requirements, including confirming that all account holders are aged 21 and above;
• Fraud prevention and AML: Monitoring transactions and account activity for suspicious patterns, and fulfilling anti-money laundering obligations;
• Customer support: Responding to queries, resolving disputes, and communicating account-related information;
• Responsible gaming: Monitoring player behaviour for indicators of problem gambling and applying protective measures where requested or required;
• Marketing (with consent): Sending promotional communications, bonus notifications, and product updates to players who have opted in;
• Platform improvement: Analysing aggregated usage data to improve game performance, site navigation, and payment flows;
• Legal compliance: Meeting obligations imposed by applicable laws, regulatory directions, and court orders.

5. Legal Basis for Processing

turbo66 processes personal data under the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — primarily account management, bet processing, and payment handling;
• Legal obligation: Processing required to comply with KYC, AML, age verification, and regulatory reporting obligations;
• Legitimate interests: Processing for fraud prevention, platform security, and aggregate analytics, where our interests are not overridden by your data protection rights;
• Consent: Processing for direct marketing communications, where you have explicitly opted in and may withdraw consent at any time.

6. Data Sharing and Disclosure

turbo66 does not sell personal data to third parties. We may share personal data with the following categories of recipient in the circumstances described:

• Payment service providers: To process MYR transactions via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, Visa, and Mastercard;
• Identity verification providers: To confirm the authenticity of KYC documents and perform age verification;
• Game software providers: Limited game-session data shared with licensed game suppliers (e.g., bet amount, game ID) to facilitate game delivery and dispute resolution;
• Regulatory authorities: As required by applicable law or in response to valid legal process, including anti-money laundering reporting obligations;
• IT and security service providers: Hosting, infrastructure, cybersecurity, and support tooling providers under data processing agreements that restrict their use of your data.

7. Cookies and Tracking Technologies

The turbo66 Platform uses cookies and similar technologies to support Platform functionality and improve the user experience. The following categories of cookies may be set when you visit the Platform:

• Strictly necessary cookies: Required for the Platform to function, including session management, authentication, and security. These cookies cannot be disabled without impairing Platform functionality.
• Performance cookies: Used to collect aggregated data about how users navigate the Platform — which pages are visited most, where errors occur, and how long sessions last. This data is used to improve Platform performance.
• Functional cookies: Used to remember your preferences, such as display language and preferred payment method, to personalise your turbo66 experience.

You may control non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the turbo66 Platform, including turbo66 Login session persistence.

8. Data Retention

turbo66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account data (name, contact details, KYC documents): retained for the duration of the account and for a minimum of 5 years following account closure, to comply with AML and regulatory obligations;
• Transaction records (deposits, withdrawals, bet history): retained for a minimum of 5 years from the date of the transaction;
• Support communications: retained for 3 years from the date of the most recent interaction;
• Marketing consent records: retained until consent is withdrawn and for a period thereafter as required to demonstrate prior consent;
• Technical and session logs: retained for up to 12 months.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

9. Data Security

turbo66 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and turbo66 servers;
• Salted cryptographic hashing for all stored passwords — turbo66 staff cannot view your password in plain text;
• Role-based access controls limiting access to personal data to staff who require it for their duties;
• Regular security assessments and penetration testing of Platform infrastructure;
• Session anomaly detection that flags and challenges unrecognised login attempts automatically;
• Segregation of player funds from operational accounts to protect account balances in the event of business disruption.

No method of transmission over the internet is entirely secure. While turbo66 takes all reasonable steps to protect your data, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights, turbo66 will notify affected account holders in accordance with applicable notification obligations.

10. Your Data Rights

Subject to applicable law, you may have the following rights in relation to personal data that turbo66 holds about you:

• Right of access: Request a copy of the personal data turbo66 holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data where there is no legitimate reason for turbo66 to continue processing it, subject to legal retention obligations;
• Right to restriction: Request that processing of your personal data be restricted in certain circumstances;
• Right to data portability: Receive a copy of data you have provided to turbo66 in a structured, commonly used format;
• Right to object: Object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact turbo66 support via the email address in the footer or through live chat. turbo66 will respond to rights requests within 30 days, or within any shorter period required by applicable law.

11. Children's Privacy

The turbo66 Platform is strictly intended for persons aged 21 years of age and above. turbo66 does not knowingly collect or process personal data belonging to individuals under the age of 21. Age is verified as part of the account registration and KYC process.

If turbo66 becomes aware that personal data has been collected from an individual under 21 without verified parental consent, we will immediately suspend the account, delete the data, and return any funds deposited by the most verifiable method available. If you believe a minor has created a turbo66 account, please contact support immediately.

12. International Data Transfers

turbo66 primarily processes data within its operating jurisdiction. Where personal data is transferred to service providers or infrastructure located in other countries, turbo66 ensures that appropriate safeguards are in place to protect the data, including:

• Standard contractual clauses approved by the relevant data protection authority;
• Data processing agreements that bind recipients to confidentiality and security obligations equivalent to those in this Policy.

By using the turbo66 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside your country of residence. Such transfers are conducted in accordance with applicable data protection laws.

13. Updates to This Privacy Policy

turbo66 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or business operations. The "Last updated" date at the top of this page indicates when the most recent revision was made.

Material changes to this Privacy Policy will be communicated to registered account holders via the email address on file. Continued use of the turbo66 Platform after the effective date of any update constitutes acceptance of the revised Policy. If you do not agree with the updated terms, you should close your account before the effective date.

14. Contact Us

For questions about this Privacy Policy, to exercise your data rights, or to make a privacy-related complaint, please contact the turbo66 Data Protection team. The support email address is displayed as plain text in the footer of this page.

You may also use the live chat function available within the Platform after authenticating through the turbo66 Login page. turbo66 aims to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 days.

If you are not satisfied with turbo66's response to a privacy complaint, you may have the right to lodge a complaint with the applicable data protection supervisory authority in your jurisdiction.