Taxi66 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy ("Policy") describes how taxi66 — accessible via taxi66.xyz and its associated mobile apps — collects, uses, stores, protects and discloses your personal information when you use our platform and services.

This Policy applies to all users of the platform taxi66 including website visitors, registered members, active players, and former members whose accounts have been closed. By registering an account or using any of the services taxi66, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your personal information as described.

We take your privacy seriously. This Policy is not simply about fulfilling legal obligations — it is about ensuring you have a clear and complete picture of what happens to your information when you entrust it to us. Taxi66 adheres to data protection best practices grounded in the principles of minimal collection, legitimate purpose, and full transparency.

Taxi66 collects personal data through three main channels — information you provide directly, information collected automatically as you use the platform, and information from third parties required to verify your identity and transactions.

Taxi66 does not collect data beyond what is necessary to operate the platform. We do not request copies of identity documents except where additional identity verification is required for large transactions or where there are legitimate security concerns. Sensitive information such as passwords is stored in encrypted form and cannot be read by any taxi66 staff.

Taxi66 uses your personal data only for legitimate purposes directly relevant to the services you use. Here are the main ways your data is used:

• Account Operations: Manages your registration, login, identity verification, and account security at taxi66.
• Transaction Processing: Processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay securely and accurately.
• VIP Programme & Rewards: Automatically tracks cumulative deposits, calculates daily rebates and weekly cashback, and determines your VIP tier.
• Security & Fraud Prevention: Detects suspicious activity, duplicate accounts, and platform abuse to protect all taxi66 members.
• Customer Support: Provides relevant, personalised assistance whenever you contact the taxi66 support team via Live Chat, Telegram, or email.
• Responsible Gaming: Monitors gameplay patterns to identify early signs of problem gambling and provide relevant responsible gaming tools.
• Marketing Communications: Sending information about promotions, bonuses, and platform updates — only to members who have opted in to receive such communications.
• Platform Improvements: Analysing usage data in aggregate (not individually) to understand usage patterns and improve the taxi66 user experience.

Taxi66 does not use your data to make automated decisions that significantly affect you (such as account blocking) without human review. Any material decisions regarding your account involve a manual review by our team.

Taxi66 does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, in the course of operating the platform, we may need to share certain data with the following categories of parties:

• Payment Service Providers: Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), Boost and ShopeePay receive only the transaction information strictly necessary to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements and carry their own data security obligations.
• Game Software Providers: Slot and Live Casino game providers partnered with taxi66 receive only the minimum data necessary to verify gaming transactions and ensure fairness. They do not receive your personally identifiable information.
• Competent Authorities: Taxi66 will disclose personal information to government or law enforcement authorities when required by law, court order, or valid regulatory request. In such cases, we will notify you in advance where legally permitted to do so.
• Technical Infrastructure Providers: Cloud computing services and server providers that host the taxi66 platform have technical access to stored data, but are bound by comprehensive data protection agreements.

In all of the above data-sharing scenarios, taxi66 only shares the minimum information necessary for the stated purpose. We do not permit third parties to use shared data for their own purposes beyond the scope agreed upon with taxi66.

Taxi66 implementing comprehensive technical and organisational security measures to protect your personal data against unauthorised access, use, modification, or disclosure:

• 256-bit SSL Encryption: All communications between your device and taxi66's servers are fully encrypted — including login credentials, transaction details, and game history.
• Secure Password Storage: Member passwords are never stored in plain text — they are stored using a one-way hashing algorithm with a unique salt, making them virtually impossible to crack.
• Two-Factor Authentication (2FA): taxi66 members can enable 2FA for an added layer of protection on logins and large transactions.
• 24/7 Security Monitoring: The taxi66 security team continuously monitors the platform to detect unusual activity, intrusion attempts, and suspicious usage patterns.
• Fund Segregation: Member funds are held in accounts separate from taxi66's operating funds, protected by strict access controls.
• Staff Access Controls: Only taxi66 staff with a legitimate business need have access to members' personal data, and all access is logged for audit purposes.
• Regular Penetration Testing: The taxi66 platform undergoes regular security testing by independent experts to identify and address vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no security system is entirely foolproof. In the event of a data breach affecting your personal information, taxi66 committed to notifying you within a reasonable timeframe via email or in-platform notification, along with the steps we are taking to address the situation.

Taxi66 retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. Our general principles are as follows:

• Active Account Data: Retained for as long as your account remains active on taxi66, or until you request deletion.
• Transaction Records: Deposit, withdrawal, and betting history are retained for a minimum of 7 years for financial audit and legal compliance purposes — even after an account is closed.
• Security Logs: Access, activity, and security logs are retained for 12 months for the purpose of security incident investigations.
• Customer Support Data: Support conversation records are retained for 2 years to assist in resolving any recurring disputes.
• Marketing Data: If you withdraw consent for marketing communications, your marketing data will be deleted within 30 days — except for the minimum data required to verify your opt-out status.

When the retention period expires or when you submit an eligible data deletion request, taxi66 will securely delete or anonymise your data so that it can no longer be linked to you as an individual. Anonymised data may be retained for aggregate analytics purposes with no identifying information attached.

Platform taxi66 uses cookies and similar tracking technologies to ensure proper functionality and a better user experience. The following are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login session authentication, account security, and remembering your language preference. These cookies cannot be disabled as they are essential for the platform to operate correctly.
• Functional Cookies: Saving your preferences such as favourite sports, display settings, and frequently visited sports to personalise your taxi66 experience. You can disable these cookies, but some personalisation features may not function as intended.
• Analytics Cookies: Helps us understand how members use the platform through aggregated, anonymised data — most-visited pages, session duration, and navigation patterns. This data is used to improve the overall taxi66 platform.

Taxi66 does not use third-party tracking cookies that record your browsing behaviour on other websites or apps. We do not share cookie data with advertising networks. You can manage your cookie settings through your browser, although disabling essential cookies may affect the functionality of the taxi66 platform.

When you visit the platform taxi66 for the first time, we display a cookie notice requesting your consent for non-essential cookies. You can update this preference at any time via the link in the website footer.

As a member taxi66, you have the following rights regarding your personal data. We respect and facilitate the exercise of all these rights:

• Right to Access: You have the right to obtain a copy of all personal data we hold about you, in a readable format.
• Right to Rectification: If any of your personal information is inaccurate or incomplete, you have the right to request an immediate correction.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data in certain circumstances — for example, when the data is no longer needed for the purpose it was originally collected. Please note that we may be required to retain certain data to meet legal obligations, such as financial transaction records.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another party where technically feasible.
• Right to Restrict Processing: In certain circumstances, you may request that we limit how we use your data while an issue is being resolved.

To exercise any of the rights above, please contact the taxi66 via email at support@taxi66.xyz with the subject line "Personal Data Request" and state the specific right you wish to exercise. We are committed to processing all requests within 48 business hours. No charges will be imposed for reasonable requests.

Platform taxi66 may contain links to third-party services or content related to our offerings, such as game providers, payment processors, or sports information sources. This Privacy Policy not applicable to those third-party websites or services.

When you click a link that takes you to a third-party website, you will be subject to that website's privacy policy. Taxi66 is not responsible for the privacy practices or content of third-party websites, though we do select partners that meet high security standards.

For Malaysian payment service providers such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX — your payment processing is also subject to each provider's own privacy policy. We encourage you to read their respective policies to fully understand how your transaction information is handled on their end.

Taxi66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, technology, legal requirements or other relevant factors. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this page.
• Notifying all active members via email or in-platform notification at least 14 days before the changes take effect.
• For highly significant changes, we will seek members' renewed consent before they continue using the platform.

Continued use of the platform taxi66 after the effective date of any Privacy Policy update will be considered acceptance of the latest version. If you disagree with any changes, you have the right to close your account and request deletion of your data before the changes take effect. Previous versions of this Privacy Policy are available upon request — contact us at support@taxi66.xyz to request a copy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how taxi66 manage your personal data, please reach us through any of the following channels:

• Email (Recommended for Privacy Enquiries): support@taxi66.xyz — Please state "Privacy Policy Enquiry" in your email subject line.
• Live Chat: Available 24/7 within the taxi66 platform for general privacy and data enquiries.
• Telegram: Contact the support team taxi66 via Telegram for fast responses in Bahasa Malaysia.

Team taxi66 is committed to responding to all privacy-related enquiries within 48 business hours. For formal data rights requests (such as data access or deletion requests), please use the email channel for better record-keeping and request status tracking.

We welcome your feedback on this Privacy Policy. If you feel our privacy practices could be improved, we'd love to hear from you — our commitment to your privacy is ongoing and we are always looking for ways to strengthen the protection of taxi66 members' personal data.