Reference

Terms, Privacy and Policy Framework

We keep our legal framework clear and accessible. Your account with coffeeking66 operates under transparent terms, a privacy policy that explains data handling, and cookie settings you control — all written for Malaysia players funding via Touch 'n Go eWallet, Boost or GrabPay.

Terms of ServicePrivacy PolicyCookie SettingsLive casino and slots
coffeeking66 Terms, Privacy and Policy Framework
DATA HANDLING

How We Protect Account and Payment Information

We built coffeeking66 to handle Malaysia payment rails securely and transparently. Here's how we manage data, cookies, security checks and retention — the four pillars of our privacy posture.

Payment Data We store only the reference number from your Touch 'n Go eWallet, Boost or GrabPay transaction — not your wallet PIN or bank credentials. Transfers are verified server-side via the payment provider's API.
Cookie Policy Essential cookies keep you logged in and remember language preference; analytics cookies track which game lobbies you visit to improve layout. You can disable analytics cookies in account settings without losing access.
Account Security Withdrawal requests trigger an OTP sent to your registered phone number. Deposits show the exact ringgit amount and timestamp on your wallet page, so you can cross-check every transfer immediately.
Data Retention Active accounts retain full history. Closed accounts keep transaction logs for seven years as required by gaming compliance, then we purge email, phone and IP address records. To request early deletion of non-mandatory data, email support.
POLICY CONTACT

Reach Us for Legal and Privacy Questions

If you have questions about our terms, need to submit a data-subject request, or want clarification on how we handle withdrawal verification, our support team responds through live chat and email. Policy enquiries are answered within two business days.

Team online

Live Chat

Open the chat widget in your account dashboard, select Legal & Privacy from the topic menu, and an agent will assist with terms questions, data requests or cookie settings.

Email Support

Send data-subject requests or detailed policy questions to the email address shown on your account overview page — include your registered email and account ID for faster verification.

FAQ Archive

Our FAQ library covers common term and privacy queries: how long we keep transaction logs, what cookies we set, and how to update communication preferences.

Common Legal and Privacy Questions

We collect email address, phone number for OTP verification, device type and IP address when you log in, and payment transaction references from Touch 'n Go eWallet, Boost or GrabPay. We do not ask for identity documents unless withdrawal activity triggers a fraud review.

Email support with your registered email and account ID, stating 'data subject access request'. We send a JSON export of your account profile, transaction history, cookie consent log and session timestamps within fourteen business days.

We share transaction references with Touch 'n Go eWallet, Boost and GrabPay to verify deposits, and with regulators when legally required for fraud investigations. We never sell data to marketing firms or affiliate networks.

Transaction logs and withdrawal verification records are retained for seven years under gaming compliance rules. Email, phone number, device fingerprints and IP addresses are deleted after that statutory period. You can request accelerated deletion of optional marketing data immediately.

Visit your account dashboard, tap Privacy in the settings menu, then toggle analytics and preference cookies off or on. Essential session cookies remain active so you can stay logged in and navigate the lobby.

Both documents are linked at the bottom of every page. The terms cover account eligibility, deposit and withdrawal rules, and dispute resolution. The privacy policy details data collection, retention periods, cookie usage and your data-subject rights under applicable law.
Reference

Legal

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.