taxi66 Privacy Policy

Introduction

taxi66 operates the website available at https://taxi66.cam and provides associated account, betting and gaming services primarily to adults aged 21 and above in Malaysia. This Privacy Policy describes how personal information submitted to or collected by taxi66 is handled, with particular reference to the practices relevant to users located in Malaysia.

By registering an account, depositing funds or otherwise accessing authenticated features, you confirm that you have read and understood this policy. If you do not agree with any part of it, you should not submit personal information or open an account.

This policy forms part of the broader agreement between taxi66 and each user alongside the Terms & Conditions and any applicable promotion-specific rules. Where a statutory provision imposes a higher standard, that provision takes precedence.

Scope and Definitions

This policy applies to all personal data processed by taxi66 in connection with:

• account registration and identity verification;
• sports betting, casino and gaming activity;
• deposit and withdrawal transactions in MYR or supported cryptocurrencies;
• responsible-gambling monitoring and controls;
• customer support interactions; and
• general browsing of the taxi66 website.

For the purposes of this policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably identify a living individual.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure and deletion.
• "User" means any individual who registers, accesses or interacts with taxi66.
• "Service Providers" means third-party companies engaged by taxi66 to support platform operations under confidentiality obligations.

Data We Collect

taxi66 may collect the following categories of personal information:

taxi66 does not intentionally collect sensitive data such as health information, racial origin, political views or religious beliefs unless such information is directly and necessarily relevant to a responsible-gambling intervention.

Purpose and Legal Basis for Processing

Personal data is processed for the following purposes:

• Account administration: registering an account, verifying identity, maintaining player records and processing login activity.
• Contract performance: accepting wagers, settling bets, processing deposits and withdrawals, and operating the player VIP programme.
• Legal and regulatory compliance: age verification, KYC, anti-money-laundering checks, fraud prevention and record-keeping where required by applicable law or the platform's international licensing context.
• Responsible gambling: monitoring patterns that may indicate harm, implementing user-requested limits, responding to self-exclusion instructions and supporting early-intervention processes.
• Security: detecting and preventing unauthorised access, fraudulent transactions and system abuse.
• Service communications: sending transaction confirmations, account security alerts, verification requests and material policy updates.
• Marketing communications: where you have provided consent or where another lawful basis exists, sending promotional content relevant to taxi66 services. You may withdraw consent at any time.
• Analytics and improvement: analysing aggregated usage patterns to improve platform performance, navigation and content.

Payments and KYC Data Processing

Deposit and withdrawal requests generate financial records linked to your taxi66 account. Information relating to the MYR amounts involved, the payment method used (including e-wallet provider, bank name, FPX reference or cryptocurrency network identifier) and transaction timestamps is retained as part of the account record.

Where a KYC review is triggered — whether at registration, before a withdrawal, or following an unusual transaction pattern — taxi66 may collect and store scanned identity documents, a facial likeness image, proof of residential address and a source-of-funds declaration. This data is processed solely for verification and anti-financial-crime purposes. Copies of verification documents are held only for as long as required by applicable obligations.

Payment information submitted via third-party providers such as Touch 'n Go eWallet, Boost or GrabPay is subject to those providers' own privacy practices. taxi66 receives transaction confirmation and reference data but does not store full payment credentials on its own systems where those credentials are managed by the provider.

Sharing and Disclosure of Personal Data

taxi66 does not sell personal data to third parties for their own commercial use. Data may be shared in the following circumstances:

• Service Providers: payment processors, identity-verification platforms, KYC solution providers, fraud-detection services, cloud infrastructure suppliers and customer-support tools engaged under data-processing agreements that require equivalent protection.
• Legal and regulatory requirements: disclosure to competent authorities, regulators, courts or law enforcement where required by a binding legal obligation or a valid court order.
• Anti-money-laundering obligations: where required under the platform's international licensing framework, financial intelligence reporting or sanctions screening.
• Business restructuring: in the event of a merger, acquisition or transfer of the platform's operations, personal data may be transferred to a successor entity subject to equivalent privacy commitments.

All third-party recipients are required to implement appropriate technical and organisational safeguards and to process personal data only for the specified purpose.

Retention Periods

Personal data is retained for no longer than necessary for the purpose for which it was collected, subject to applicable legal, regulatory or contractual requirements. As a general guide:

• Active account data is retained for the duration of the account relationship plus a period thereafter necessary to complete any outstanding verification, dispute, legal or financial obligation.
• Financial and KYC records may be retained for a period consistent with applicable anti-financial-crime requirements, which typically range from five to seven years from the relevant transaction or account closure date.
• Responsible-gambling records, including self-exclusion instructions, are retained for a minimum period to support ongoing enforcement and compliance monitoring.
• Marketing consent records are retained for as long as necessary to demonstrate compliance with consent obligations.
• Technical access logs may be retained for a shorter operational period sufficient for security review and fraud detection.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with the relevant procedures.

Data Security

taxi66 implements technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration or destruction. These include TLS-encrypted connections, access controls based on role and need, secure credential storage practices and internal data-handling procedures.

No transmission of data over the internet or method of storage is completely secure. Users should protect their own login credentials, avoid sharing passwords or one-time security codes, and use trusted devices when managing account information or processing financial transactions. If you believe your taxi66 account or associated personal data may have been compromised, please contact support without delay.

Cookies and Tracking Technologies

taxi66 uses cookies and similar technologies to support the operation of the website and to gather information about how users interact with it. Cookies are small data files stored on your device by your browser.

• Essential cookies: required for login sessions, security tokens and core website functionality. These cannot be disabled without impairing the service.
• Functional cookies: remember preferences such as language or display choices to improve your browsing experience.
• Analytical cookies: collect aggregated, anonymised data on page views, navigation patterns and session activity to help taxi66 improve the platform.
• Third-party cookies: certain Service Providers integrated into the platform may set their own cookies subject to their own privacy documentation.

Most browser settings allow you to view, limit or delete cookies. Disabling essential cookies may prevent account login and certain platform features from functioning correctly.

User Rights

Subject to applicable law and the constraints necessary to fulfil legal, security and anti-financial-crime obligations, users may hold the following rights in respect of their personal data:

• Access: to request confirmation of whether personal data is processed and to receive a copy of the data held.
• Correction: to request rectification of inaccurate or incomplete personal data, noting that verification may be required.
• Deletion: to request erasure of personal data where there is no overriding legitimate ground, legal obligation or contractual requirement to retain it.
• Restriction: to request a temporary pause on certain processing activities in defined circumstances.
• Objection: to object to processing carried out on the basis of a legitimate interest, particularly in relation to direct marketing.
• Withdrawal of consent: to withdraw consent for processing activities based on consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Requests should be submitted to taxi66 through your registered account or by contacting support. Verification of identity will be required before any data is disclosed or modified. Response timelines and the scope of rights available may depend on the applicable legal framework.

Minors and Age Restriction

taxi66 is intended solely for adults aged 21 and above. The platform does not knowingly collect personal data from individuals below the age of 21. Registration requires submission of accurate date-of-birth information, and identity verification may require documentary evidence of age.

Where taxi66 becomes aware that personal data has been collected from a person under the required age, that data will be deleted and the associated account closed without undue delay, subject to any statutory record-keeping requirement that may apply. Parents or guardians who believe a minor has submitted personal information to taxi66 should contact support promptly.

International Data Transfers

Personal data collected from Malaysian users may be processed or stored on servers located outside Malaysia by taxi66 or its Service Providers. Where personal data is transferred internationally, taxi66 takes reasonable steps to ensure that equivalent technical and contractual protections are in place, proportionate to the category of data involved and the nature of the processing activity.

Users who have concerns about the international processing of their personal data may contact support for further information about the relevant safeguards in place.

Changes to This Privacy Policy

taxi66 may update this Privacy Policy from time to time to reflect changes in operational practices, applicable legal requirements, new service features or updated security standards. Material changes will be noted with a revised effective date at the top of this document.

Continued use of the platform following the effective date of a revised policy constitutes acceptance of the changes, except where applicable law requires a different form of consent. Users are encouraged to review this page periodically and to contact support if any aspect is unclear.

Contact Us

Questions, data rights requests or privacy-related concerns may be submitted to the taxi66 support team. For security, please include only the minimum personal information necessary to identify your query and do not send passwords, one-time codes or complete banking credentials in any message.

Website email: [email protected]

Please allow a reasonable period for review. taxi66 will aim to respond through the registered account communication channel where identity can be confirmed.