Privacy Policy – terbo6 Malaysia Online Casino

1. Introduction

terbo6 (referred to throughout this document as "we", "us", "our", or "the Company") operates the online gaming platform accessible at https://terbo6.cam (the "Platform" or "Website"). We provide online casino games, sports betting, live dealer tables, lottery products, and related entertainment services to registered players in Malaysia and other eligible jurisdictions.

This Privacy Policy (the "Policy") sets out, in clear and accessible terms, how we collect, use, disclose, retain, and protect personal information about individuals who interact with us — whether as registered players, visitors to the Website, or persons who contact our support team.

Scope of this Policy: This Policy applies to all personal data processed by terbo6 in connection with the operation of the Platform, including data collected through account registration, identity verification (KYC), payment processing, customer support interactions, and website analytics. It does not apply to the privacy practices of third-party services that may be linked from the Platform.

By registering an account on the terbo6 Platform, making a deposit, or continuing to use our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to close your account.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

"Personal Data" means any information that identifies or could identify a living individual, either directly or in combination with other data held by us. This includes names, identification numbers, email addresses, IP addresses, and payment information.
"Data Controller" means terbo6, the entity that determines the purposes and means by which personal data is processed.
"Data Processor" means any third party that processes personal data on behalf of terbo6 under a contractual arrangement and our instruction.
"Processing" means any operation or set of operations performed on personal data, including collection, storage, retrieval, use, disclosure, erasure, and destruction.
"Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
"KYC" (Know Your Customer) means the identity verification process by which we confirm a player's identity, age, and payment method ownership before processing withdrawals or fulfilling certain compliance obligations.
"Cookies" means small text files placed on a user's device by a web browser upon visiting a website, used to store session information, preferences, and analytical data.
"Player" or "User" means any individual who has registered an account on the terbo6 Platform or is otherwise using the Website.

3. Personal Data We Collect

We collect the following categories of personal data in the course of providing and operating the terbo6 Platform. The specific data collected depends on the nature of your interaction with us:

Category	Data Items	Purpose
Identity Data	Full legal name, date of birth, gender, nationality, MyKad or passport number	Account registration, age verification, KYC compliance
Contact Data	Email address, mobile phone number, residential address (city: Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, etc.)	Account communication, support, notifications
Financial Data	Bank account details, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow), FPX transaction references, card partial numbers, BTC/USDT wallet addresses	Payment processing, fraud prevention, AML compliance
Identity Documents	Scanned copies or photographs of MyKad, passport, utility bills, bank statements	KYC verification, regulatory compliance
Technical Data	IP address, browser type and version, operating system, device identifiers, time zone	Security monitoring, fraud detection, geolocation compliance
Gaming & Behavioural Data	Wagering history, game activity logs, session duration, deposit and withdrawal records, bonus usage	Account management, responsible gambling monitoring, dispute resolution
Communications Data	Live chat transcripts, email correspondence, support ticket history	Customer service, dispute resolution, quality monitoring
Marketing Preferences	Promotional opt-in or opt-out status, preferred communication channels	Sending relevant promotions only to consenting players

4. How We Collect Your Data

terbo6 collects personal data through the following channels and mechanisms:

Direct Submissions: Data you provide during account registration, the KYC verification process, deposit and withdrawal requests, promotional opt-ins, or when contacting our support team via live chat or email.
Automated Technical Collection: Technical data including your IP address, device identifiers, browser fingerprint, and session activity is collected automatically through our Platform infrastructure when you visit or interact with the Website.
Payment Processors: We receive transaction confirmation data from Malaysian payment service providers including DuitNow, FPX-connected banks (Maybank, CIMB Bank, Public Bank, Hong Leong Bank), and e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay). We do not receive or store full card numbers or banking passwords.
Cookies and Analytics Tools: Our Platform uses cookies and similar tracking technologies to collect session data, measure platform performance, and personalise your experience. For full details, see Section 8 of this Policy.
Third-Party Identity Verification Services: In certain cases, we may use licensed third-party KYC or identity verification platforms to cross-reference submitted documents against authoritative data sources for compliance purposes.

5. Data Processing & Legal Basis

All personal data processed by terbo6 is done so on one or more of the following lawful bases, consistent with applicable data protection principles:

Contractual Necessity: Processing is necessary to perform our obligations under the Terms and Conditions you accepted at registration — including operating your account, processing deposits and withdrawals in MYR, and providing gaming services.
Legal Obligation: We are required to process certain personal data to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) obligations, and other applicable legal and regulatory requirements, including age verification to enforce the 21+ minimum age requirement.
Legitimate Interests: We process certain data for our legitimate business interests, such as fraud prevention, platform security, responsible gambling monitoring, and product improvement — provided these interests are not overridden by your fundamental privacy rights.
Consent: Where we rely on your consent to process data — such as for marketing communications — you are entitled to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

Important Note on Mandatory Data: Certain personal data — particularly identity documentation and financial information submitted during KYC — is required by law and by our operating conditions. Failure to provide this information may result in your inability to withdraw funds, access certain services, or maintain an active account on the terbo6 Platform.

6. How We Use Your Personal Data

We use your personal data for the following specific purposes:

To create, verify, and manage your terbo6 player account, including processing your registration information and conducting identity verification in compliance with our obligations;
To process deposits and withdrawals in Malaysian Ringgit (MYR) through your chosen payment method, and to reconcile transaction records for accounting purposes;
To operate, deliver, and improve the gaming services available on the Platform, including slots, live casino, sports betting, live football markets, lottery games, and arcade titles;
To administer VIP programmes, birthday bonuses, referral rewards, and promotional offers to eligible and consenting players;
To communicate with you regarding your account status, transaction confirmations, security alerts, and service updates;
To conduct responsible gambling monitoring, identify players who may be exhibiting signs of problem gambling, and apply protective measures such as deposit limits or self-exclusion where appropriate;
To detect, investigate, and prevent fraud, money laundering, unauthorised account access, and other prohibited activities in accordance with our anti-financial crime obligations;
To respond to player enquiries, complaints, and disputes received via live chat or email at [email protected];
To send marketing communications and promotional information, where you have given your express consent to receive such materials;
To comply with court orders, regulatory investigations, or requests from competent authorities.

7. Data Sharing & Disclosure

terbo6 does not sell your personal data to third parties under any circumstances. We may, however, share your data with the following categories of recipient where necessary and lawful:

Payment Service Providers: We share financial transaction data with payment processors facilitating your deposits and withdrawals, including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking partners such as Maybank, CIMB Bank, Public Bank, and Hong Leong Bank. These providers operate under their own privacy policies and applicable Malaysian financial regulations.
KYC and Identity Verification Partners: We may share identity documents with licensed third-party KYC verification platforms to fulfil our age verification and anti-money laundering obligations.
Game Technology Providers: Anonymised gameplay data may be shared with our licensed game studio partners for technical auditing, RNG certification, and platform integration purposes.
Regulatory and Law Enforcement Authorities: We will disclose personal data to competent governmental or regulatory authorities when required to do so by law, court order, or enforceable governmental request.
Fraud Prevention and Security Organisations: We may share data with industry fraud prevention agencies where disclosure is necessary to detect or prevent financial crime.
Professional Advisers: We may share data with legal counsel, auditors, or insurers in connection with our operational and compliance obligations, subject to professional confidentiality obligations.

Data Sale Prohibition: Under no circumstances does terbo6 sell, rent, or trade your personal data to marketing companies, data brokers, or any other commercial third party for their independent use.

8. Cookies & Tracking Technologies

The terbo6 Platform uses cookies and similar tracking technologies to provide, maintain, and improve the service. Cookies are small text files stored on your device by your browser when you visit our Website.

We use the following categories of cookies:

Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged into your account, security tokens, and load-balancing identifiers. These cannot be disabled without preventing core Platform functionality.
Functional Cookies: Store your preferences — such as your preferred language, display settings, and sports betting market selections — to personalise your experience across sessions.
Analytical Cookies: Help us understand how players interact with the Platform, which pages are most visited, and where performance can be improved. Data collected through analytical cookies is aggregated and does not identify individual users.
Security and Fraud Detection Cookies: Used to detect and prevent fraudulent account access, multiple account abuse, and other prohibited activity by monitoring patterns of Platform use.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the terbo6 Platform, including your ability to remain logged in or access certain game features.

9. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law and regulatory obligations. The following general retention periods apply:

Account and Identity Data: Retained for the duration of your active account relationship plus a minimum of five (5) years following account closure, in compliance with our anti-money laundering record-keeping obligations.
Financial Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction, consistent with standard financial record-keeping requirements.
KYC Documentation: Retained for the duration of your account and for a minimum of five (5) years after account closure or the last transaction, whichever is later.
Gaming Activity Logs: Retained for a minimum of three (3) years to support dispute resolution and responsible gambling programme auditing.
Marketing Preferences and Consent Records: Retained for as long as your account remains active plus a reasonable period to evidence consent compliance.
Support Communications: Live chat transcripts and email correspondence are retained for a period of two (2) years from the date of the interaction.

Once the applicable retention period has expired and there is no legal basis to retain the data further, personal data will be securely deleted or anonymised in a manner that prevents reconstruction.

10. Data Security

terbo6 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our security programme includes, but is not limited to:

256-bit SSL/TLS Encryption: All data transmitted between your device and the terbo6 Platform is encrypted in transit using industry-standard Transport Layer Security (TLS 1.2 or higher).
Encryption at Rest: Sensitive personal and financial data stored on our servers is encrypted at rest using industry-standard algorithms.
Access Controls: Access to personal data is restricted to terbo6 personnel and authorised third parties who have a legitimate need to access that data in the course of their duties. All staff with access to personal data undergo mandatory data protection training.
Intrusion Detection and Monitoring: Our security team operates continuous monitoring systems to detect and respond to suspicious activity, unauthorised access attempts, and potential data breach indicators.
Data Breach Response: In the event of a personal data breach that is likely to result in harm to affected individuals, we will notify the relevant data protection authority and affected players in accordance with applicable legal requirements and without undue delay.

Your Responsibilities: While terbo6 implements robust security controls, you are also responsible for maintaining the security of your account credentials. Do not share your password with any third party. If you suspect unauthorised access to your terbo6 account, contact our support team immediately via live chat or at [email protected].

11. Your Privacy Rights

Subject to applicable law and the nature of the processing activity involved, you have the following rights in respect of the personal data we hold about you:

Right of Access

Request a copy of the personal data we hold about you and information on how it is being used.

Right to Rectification

Request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure

Request deletion of your personal data where there is no compelling reason for its continued retention, subject to legal and regulatory obligations.

Right to Restriction

Request that we temporarily restrict processing of your data — for example, while the accuracy of data is being contested.

Right to Data Portability

Receive a structured, machine-readable copy of personal data you provided to us, where technically feasible and where processing is based on consent or contract.

Right to Object

Object to processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.

Right to Withdraw Consent

Withdraw consent to processing at any time where consent is the legal basis, without affecting any earlier processing.

Right to Lodge a Complaint

Lodge a complaint with the relevant data protection authority if you believe your rights have not been respected.

To exercise any of the above rights, please contact our support team via live chat or at [email protected] (displayed as plain text — not a clickable link). We will respond to all verified requests within thirty (30) days. In complex cases, we may require an additional thirty (30) days, of which we will notify you. We may need to verify your identity before fulfilling a request.

12. Minors & Age Verification

The terbo6 Platform is strictly intended for persons aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our KYC process and is enforced prior to the processing of any withdrawal request.

If we become aware that personal data has been collected from a person under the age of 21 — whether through registration, a support interaction, or any other means — we will immediately suspend the associated account, void any gaming activity, and delete the personal data collected, in accordance with our responsible gambling obligations and applicable child protection requirements.

Parental Guidance: If you are a parent or guardian and believe your child may have accessed or registered on the terbo6 Platform, please contact us immediately via live chat or at [email protected]. We take underage access seriously and will act promptly upon receipt of a verified notification.

13. Third-Party Services & Links

The terbo6 Platform integrates with a number of third-party service providers to deliver core platform functionality, including payment processing, game delivery, and identity verification. Each of these providers operates under its own privacy policy and data protection obligations, and processes personal data in accordance with its own terms.

Where terbo6 engages a Data Processor to handle personal data on our behalf — such as a KYC verification partner or payment gateway operator — we enter into appropriate data processing agreements to ensure that such parties process personal data only on our documented instructions and to standards consistent with this Policy.

The terbo6 Website does not contain links to external third-party websites for commercial purposes. Any reference to payment brands (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX) or game studio partner categories within this Platform is for informational and service delivery purposes only and does not constitute an endorsement of those parties' privacy practices.

14. International Data Transfers

In the course of operating a globally connected gaming platform, personal data held by terbo6 may be transferred to, stored in, or processed in countries outside of Malaysia. Such transfers may occur in connection with cloud infrastructure, game server hosting, or third-party KYC verification services.

Where personal data is transferred internationally, terbo6 takes appropriate safeguards to ensure that such transfers are conducted in compliance with applicable data protection requirements, including the use of standard contractual clauses or equivalent transfer mechanisms where legally required.

By using the terbo6 Platform, you acknowledge that your personal data may be processed in jurisdictions other than Malaysia, and you consent to such transfers being made in accordance with this Policy and applicable law.

15. Amendments to This Privacy Policy

terbo6 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or regulatory expectations. The date of the most recent revision is displayed at the top of this page.

Where material changes are made — such as a change to the categories of data collected, the purposes for which data is used, or the categories of third parties with whom data is shared — we will notify registered players by email or through a prominent notice on the Platform prior to the changes taking effect. Minor amendments, such as clarifications of existing language, may be made without specific individual notification.

We encourage you to review this Policy periodically. The most current version is always available at https://terbo6.cam/privacy-policy. Continued use of the Platform following notification of material changes constitutes acceptance of the revised Policy.

16. Contact Us — Data Protection Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which terbo6 handles your personal data, please contact us using the details below. All contact information is provided as plain text and is not a clickable link.

Email: [email protected] — mark the subject line as "Privacy Policy Enquiry" for prompt routing to our compliance team (response within 4 hours)
Live Chat: Available 24/7 directly from the terbo6 Platform — average first response under 3 minutes for registered players
Right to Erasure Requests: Contact us via live chat or email, quoting "Data Erasure Request" — we will acknowledge within 24 hours and respond substantively within 30 days

We serve players throughout Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions. Our compliance and support teams are equipped to handle data protection matters in a professional and confidential manner.

Summary: This Privacy Policy was last reviewed on 1 January 2026. If anything here is unclear, please reach out before using the Platform — we are happy to explain any aspect of our data practices in plain language. Your privacy and your trust are foundational to everything terbo6 does.

Privacy Policy — terbo6

Contents