1. Home
  2. Privacy Policy
Official Documents

Privacy Policy gaco66 —
Your Personal Data Security

At gaco66, your privacy is not merely a legal requirement — it is our core commitment. This document clearly explains how we collect, use, store, and protect the personal data of every member who uses our platform in Malaysia.

Updated: 1 January 2026
Version: English
Our Commitment
  • 256-bit SSL encryption for all data
  • Data is not sold to third parties
  • Right to access & delete personal data
  • Malaysia PDPA Compliance
  • User-Manageable Cookie Controls
High-Grade Protection

Why Your Data Secure With gaco66

We invest in the most advanced data security infrastructure to ensure every member's personal information is protected at all times.

Banking-Grade Encryption

All data transmitted between your device and gaco66 servers is protected by SSL/TLS 256-bit encryption — the same standard used by Malaysia's leading financial institutions and banks. No one can intercept or read your information in transit.

Isolated Data Storage

Members' personal data is stored on isolated servers protected by multiple layers of security. Our servers undergo independent security audits every quarter, ensuring there are no vulnerabilities that could be exploited by unauthorized parties.

Two-Factor Authentication (2FA)

Gaco66 provides two-factor authentication for all member accounts, adding an extra layer of security to ensure only you can access your own account, even if your password is believed to have been compromised.

No Sale of Data to Third Parties

Gaco66 has never and will never sell, rent, or share member personal data with any third party for marketing or commercial purposes. Your data is used solely for platform operational purposes as clearly stated in this policy.

Malaysia PDPA Compliance

Our data handling practices are fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure that all data collection, processing, and storage processes meet applicable local legal requirements.

Full Control in Your Hands

Gaco66 members have the right to access, correct, download, or request deletion of their personal data at any time. Our Data Protection Officer team is ready to assist with all privacy-related requests within 5 business days.

Contents
01

Introduction & Scope of This Policy

This Privacy Policy is issued by gaco66, an online entertainment platform operating in Malaysia. This document explains in detail how we collect, process, store, protect, and share your personal data when you use the gaco66 website, our mobile app, and all related services.

By registering an account, making a deposit, or simply browsing the gaco66 platform, you give your consent to the data handling practices described in this document. If you do not agree, please stop using the platform and contact us to close your account and request deletion of your data.

This policy applies to all individuals who interact with the gaco66 platform, including registered members, unregistered visitors, competition winners, and individuals who contact our customer support team through any communication channel.

Gaco66 is the responsible Data Controller under Malaysia's Personal Data Protection Act 2010 (PDPA). We are appointed as the custodian of your data and take this responsibility seriously at every level of our operations.

02

Types of Personal Data We Collect

Gaco66 only collects data that is strictly necessary to provide a safe, responsible, and legally compliant service. We do not collect excessive data or data irrelevant to platform operations.

Data Category Type of Information Status
Personal Identity Full name, date of birth, MyKad/passport number, gender Mandatory
Contact Information Email address, phone number, residential address Mandatory
Financial Data Bank account number (partial), bank name, transaction history Mandatory
Technical Data IP address, device type, operating system, web browser, session logs Automatic
Usage Data Game history, wagering amounts, wins, session duration Automatic
KYC Documents MyKad/passport copy, utility bill (for address verification) During Verification
Communication Data Support chat records, emails, feedback, complaints If Applicable

Gaco66 never stores full credit/debit card numbers. All card transactions are processed directly by licensed payment gateways and we only receive verification tokens, not full card data.

03

How We Use Your Data

The personal data we collect is used exclusively for legitimate and transparent purposes. Every use of data has a clear legal justification under Malaysia's PDPA, whether based on your consent, fulfillment of a contract, legal obligation, or our legitimate interests as a licensed platform operator.

  • Account Management: Creating, verifying, and maintaining your member account, including the KYC process required by our operating licence.
  • Transaction Processing: Processing deposits, withdrawals, bonuses, and all other financial transactions accurately and securely.
  • Platform Security: Detecting and preventing fraud, money laundering, multiple account abuse, and other cybersecurity threats.
  • Customer Support: Resolving complaints, answering enquiries, and providing personalised technical support based on your account history.
  • Legal Compliance: Meeting reporting requirements to the relevant licensing authorities and law enforcement agencies.
  • Responsible Gaming: Monitoring usage patterns to identify signs of problem gambling and providing appropriate interventions.
  • Service Communications: Sending important notifications related to your account, security, promotions (with your consent), and policy changes.
  • gaco66 does not use your data for automated profiling that produces decisions with legal or similarly significant effects without human intervention.
04

Data Sharing with Third Parties

Gaco66 has a strict policy regarding data sharing. We does not sell, rent, or disclose member personal data to any third party for marketing or commercial purposes. Data sharing only occurs in limited situations based on legitimate operational needs.

  • Technical Service Providers: Cloud computing companies, licensed game software providers, and infrastructure providers bound by strict non-disclosure agreements (NDAs).
  • Payment Processors: Licensed and regulated payment gateways, receiving only the minimum data required to complete financial transactions.
  • Regulatory Body: The Curacao licensing authority and Malaysia law enforcement agencies when required by court order or legal obligation.
  • KYC & Fraud Prevention Services: Trusted third-party identity verification providers for anti-money laundering (AML) and know-your-customer (KYC) processes.
  • All third-party providers that receive gaco66 member data are bound by contractual agreements requiring them to protect that data to a standard equal to or higher than our own.

International Data Transfers: Some of our technical service providers operate outside Malaysia. In such cases, gaco66 ensures that data transfers are protected by data processing agreements that comply with international data protection standards.

05

Data Security Measures

Gaco66 continually invests in the latest security infrastructure to ensure the personal data of all members is protected against unauthorised access, disclosure, modification, or accidental or intentional destruction.

Our servers are hosted in certified data centres that undergo regular independent security audits. The gaco66 internal cybersecurity team monitors all systems continuously 24 hours a day, 7 days a week, to detect and respond to any threats in real time.

  • Data Encryption in Transit: SSL/TLS 256-bit encryption for all communications between clients and gaco66 servers.
  • Data Encryption at Rest: Sensitive data such as KYC information and financial details are encrypted using AES-256 when stored in the database.
  • Tiered Access Control: Principle of least privilege — only staff who require access to specific data to perform their duties are permitted.
  • Regular Security Audits: Penetration testing by independent security firms conducted every quarter.
  • Automatic Data Backup: Regular backups ensure no data is lost in the event of a system disruption or disaster.
  • Comprehensive Audit Logs: Every access to member personal data is logged for accountability and audit purposes.

Data Breach: In the event of a data breach affecting members' personal information, gaco66 will notify the affected members and the relevant authorities within 72 hours after the breach is detected, in line with international best practices.

06

Cookie Policy

Gaco66 uses cookies and similar tracking technologies to enhance user experience, analyse website traffic, and ensure essential platform functions run smoothly. Cookies are small text files stored on your device when you visit our website.

  • Essential Cookies (Required): Required for core platform functions such as login, gaming sessions, and account security. These cookies cannot be disabled.
  • Performance Cookies: Helping us understand how members use the platform — most frequently visited pages, errors encountered, and overall website performance.
  • Functional Cookies: Storing your preferences such as language, region, and display settings to deliver a more personalised experience.
  • Analytics Cookies: Used by internal analytics tools to help us improve the platform's design and content over time.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality and security of your gaming sessions on the gaco66 platform.

07

Your Rights Regarding Personal Data

As a gaco66 member, you have the following rights under Malaysia's PDPA and our internal policies. All data rights requests will be processed within 5 business days.

Right of Access

Request a copy of all personal data we hold about you in a readable format.

Right to Rectification

Correct any inaccurate or incomplete personal data in your account.

Right to Erasure

Request deletion of your personal data, subject to legal retention requirements.

Right to Object

Object to the processing of your data for specific purposes such as marketing communications.

Right to Portability

Obtain your data in a structured format that can be transferred to another platform.

Right to Restriction

Request a restriction on data processing while a dispute or investigation is ongoing.

08

Data Retention Period

Gaco66 retains your personal data for as long as your account is active and for a set period after account closure, to fulfil legal obligations, resolve disputes, and enforce our agreements. Data will not be retained longer than necessary.

  • Active Account Data: Retained for as long as your account is active on the gaco66 platform.
  • Financial Transaction Data: Retained for 7 years after transactions to meet financial reporting and AML requirements.
  • KYC Documents: Retained for 5 years after account closure in line with licensing requirements.
  • Communication Logs: Retained for 2 years for customer support and dispute resolution purposes.
  • Marketing Data: Deleted within 30 days after you withdraw consent for marketing communications.
  • In situations where a fraud investigation or legal proceedings are ongoing, the data retention period may be extended until the case is fully resolved.
09

Amendments to This Privacy Policy

Gaco66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, legislative changes, or changes to the services we offer. The date of the latest update will always be displayed at the top of this page.

For significant amendments involving changes to how we use your personal data, we will notify you via your registered email or in-account notification at least 14 days before the amendments take effect. Continued use of the platform after the effective date constitutes acceptance of the latest version of the Privacy Policy.

We encourage you to review this page regularly to stay informed about how we protect your personal data. Any questions regarding amendments may be directed to our Data Protection Officer.

10

Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how gaco66 handles your personal data, or if you wish to exercise any of the rights outlined in Section 07, please contact our Data Protection Officer (DPO) through the following channels:

Live Chat 24/7

Response within less than 3 minutes

DPO Email

[email protected]

Response Time

Within 5 business days

If you are not satisfied with how we handle your personal data requests, you have the right to file a complaint with the Malaysia Personal Data Protection Department or the relevant regulatory authority.

Start Playing Today

Your Data Protected — Play With Peace of Mind

Join over 100,000 active members who trust gaco66 as Malaysia's safest online entertainment platform. Register now and enjoy your exclusive welcome bonus.

Register a Free Account Download App
256-bit SSL Encryption
Malaysia PDPA Compliance
Data Not Sold
24/7 Support
Bahasa Melayu