Official Documents

Privacy Policy 66sl — Indonesia User Data Protection

At 66sl, privacy is more than a legal obligation — it is a promise to every user. We clearly explain what data we collect, how it is used, how we protect it, and what rights you have as the owner of that data.

Effective date: January 1, 2026
256-bit SSL Encryption
Data is not sold
User rights protected
PCI-DSS Standard

Six Principles Privacy We Stand By

Every decision about data at 66sl is based on the following principles — not just words on paper.

Data Minimization

We only collect data that is strictly necessary to operate our services. There is no excessive data collection or information irrelevant to the operation of 66sl.

Layered Security

User data is protected with 256-bit SSL encryption in transit, encryption at rest, strict role-based access controls, and automated 24-hour security monitoring.

Full Transparency

We are always transparent about what we do with your data. No hidden usage, no sharing with third parties without your consent unless required by law.

You Are in Control

You have the right to access, update, download, or delete your personal data at any time. All such requests are handled directly through your account settings or the 66sl support team.

Financial Data Protection

Card and bank account information is processed by PCI-DSS Level 1 certified gateways. 66sl does not store full card numbers — only encrypted tokens that cannot be reversed.

Limited Data Retention

Data is retained only for as long as necessary for legitimate purposes. Once the retention period expires or an account is closed, data is securely deleted using non-recoverable methods.

This Privacy Policy describes the data management practices applied by 66sl across all its services. By registering or continuing to use the platform, you confirm that you have read and understood this policy. Please contact us if anything is unclear.

1 Introduction

66sl operates as an online entertainment platform serving users in Indonesia. In doing so, we inevitably process certain personal data — from information provided directly during registration to data collected automatically through your use of the platform.

This Privacy Policy applies to all services provided by 66sl, including the main website at 66sl.org, mobile app, live chat feature, affiliate program, and all affiliated subdomains. By using any of these services, you agree to the collection and use of data as described in this policy.

We update this policy periodically to reflect changes to our services or applicable regulatory requirements. The date of the most recent update is always shown at the top of this document.

2 Data We Collect

66sl collects data from several sources across a number of different categories:

Data you provide directly:

  • Identity Data: Full name, date of birth, gender, and ID number (National ID/Driver's License/Passport) for KYC verification.
  • Contact Data: Active email address, phone number, and residential address.
  • Financial Data: Account holder name, bank account number, and e-wallet name used for transactions. Card numbers are not stored on our servers.
  • Verification Documents: Photos or scans of official identity documents uploaded for the KYC process.
  • Communications: Live chat conversation records and email correspondence with our support team.

Automatically collected data:

  • Technical Data: IP address, browser type and version, operating system, screen resolution, and device identifiers.
  • Usage Data: Pages visited, session duration, buttons clicked, access times, and navigation paths within the platform.
  • Gaming Activity Data: Betting history, games played, number of rounds, play time, and game outcomes.
  • Transaction Data: Complete history of deposits, withdrawals, claimed bonuses, and other financial activity on your account.
  • Location Data: Approximate location information based on IP address for fraud detection and regulatory compliance purposes.

We do not collect sensitive data such as health information, sexual orientation, political views, or religious beliefs. Biometric data collection is performed solely in the context of identity verification and is not used for any other purpose.

Data Category Example Basis of Collection Retention
Identity Name, National ID, date of birth KYC & account verification 5 years
Contact Email, phone number Service communications While account is active
Financial Bank account, e-wallet Deposit/withdrawal transactions 7 years
Technical IP, browser, device Security & analytics 12 months
Gaming Activity Betting history, sessions Audit & compliance 3 years

3 How We Use Your Data

The data we collect is used for the following specific purposes:

  • Account Management: Creating, verifying, and managing user accounts; processing new registrations; and restoring access in the event of login issues.
  • Service Operations: Processing deposit and withdrawal transactions, running games, calculating and distributing bonuses, and managing the VIP program.
  • Identity Verification (KYC): Verifying user age and identity as required by regulations to prevent unauthorized access to the platform.
  • Security & Fraud Prevention: Detecting and preventing suspicious activity, duplicate account creation, money laundering, and bonus abuse.
  • Service Improvement: Analyzing usage patterns to improve the interface, add needed features, and optimize platform performance.
  • Communications: Sending important notifications regarding your account, policy updates, transaction details, and — with your consent — relevant promotional offers.
  • Regulatory Compliance: Fulfilling legal obligations, responding to requests from legitimate authorities, and maintaining required audit records.

4 Legal Basis for Data Processing

All data processing at 66sl is always based on at least one valid legal basis:

  • Contract Performance: Processing required to fulfill our obligations to you as a user — including processing transactions, running games, and providing support services.
  • Legitimate Interests: Processing required for legitimate business interests, such as fraud detection, platform security enhancement, and service analytics — provided it does not override your rights and freedoms.
  • Legal Obligation: Processing required to comply with applicable legal obligations, including KYC/AML requirements and reporting duties to competent authorities.
  • Consent: For marketing communications and non-essential cookie usage, we request your explicit consent. You may withdraw this consent at any time.

5 Sharing Data with Third Parties

66sl does not sell, rent, or trade users' personal data to any party. Data is shared only under the following limited circumstances:

  • Service Providers (Processors): Technical partners supporting 66sl operations, including game providers, payment gateways, cloud platforms, and analytics service providers — all bound by confidentiality agreements and prohibited from using data for any purpose other than serving 66sl.
  • Legal Obligation: When required by a court, law enforcement authority, or competent regulator under applicable law.
  • Rights Protection: To protect the rights, property, or safety of 66sl, other users, or the public from fraudulent or illegal activities.
  • Explicit Consent: With your direct consent for a specific, previously stated purpose.

Third-party game providers (such as Pragmatic Play, PG Soft, etc.) receive the gameplay session data necessary to run games technically. They do not receive your full identity information and are subject to their own equally strict privacy policies.

6 Data Security

Protecting your data is a responsibility we take very seriously. Below are the technical and organizational security measures we apply:

  • Transmission Encryption: All data transmitted between your device and 66sl servers is encrypted using TLS 1.3 protocol with 256-bit SSL certificates.
  • Storage Encryption: Sensitive data in the database is encrypted at rest using the AES-256 algorithm.
  • Access Security: Access to production systems is restricted on a least-privilege basis — each employee can only access the data strictly required for their role.
  • Multi-Factor Authentication: All internal access to systems containing user data requires a minimum of two-factor authentication.
  • Ongoing Monitoring: Intrusion detection and anomaly monitoring systems run 24/7 to detect security threats in real time.
  • Security Audits: Penetration testing and security audits are conducted periodically by independent third parties.
  • Incident Response: Our security team has documented incident response procedures that are routinely tested to minimize impact in the event of a security breach.

While we apply the highest reasonable security standards, no system is completely immune to all threats. If you detect any suspicious activity on your account, contact the 66sl support team immediately.

7 Cookies and Tracking Technologies

66sl uses cookies and similar technologies to ensure the platform functions properly and delivers an optimal experience. Below are the categories of cookies we use:

  • Essential Cookies: Required for core platform functions such as maintaining login sessions, remembering language preferences, and security (CSRF protection). These cookies cannot be disabled as the platform will not function without them.
  • Functional Cookies: Used to remember your preferences and settings (such as game preferences, display themes, and notification settings) so you do not need to reconfigure them every time you log in.
  • Analytics Cookies: Helps us understand how users interact with the platform — which pages are visited most, which features are used most, and where users commonly encounter difficulties. This data is used to improve the platform.
  • Security Cookies: Used to detect and prevent suspicious activity, including brute-force login attempts and automated account creation.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies will affect platform functionality.

8 Data Retention and Deletion

Your data is not stored indefinitely. 66sl enforces a strict retention policy based on operational needs and legal obligations:

  • Active account data is retained for as long as the account remains active, plus a set period after account closure for dispute resolution purposes.
  • Financial transaction data is retained for 7 years to meet financial reporting obligations and anti-money laundering compliance requirements.
  • Technical data and activity logs are retained for 12 months unless an active investigation requires longer retention.
  • KYC verification documents are retained for 5 years in accordance with industry standards and applicable regulations.

After the retention period expires, data is securely deleted using methods that ensure it cannot be recovered. For data stored in physical format, we use certified document shredding.

If you request account closure, the data deletion process begins once the minimum retention period required by regulation has been fulfilled. We will notify you when the deletion process is complete.

9 User Rights

As a 66sl user, you have the following rights regarding your personal data:

Right to Access

You have the right to receive a copy of all personal data we hold about you in a readily readable format.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request an immediate correction.

Right to Erasure

You have the right to request deletion of your personal data, except for data that must be retained by law.

Right to Restriction

You have the right to request restriction of data processing in certain situations, such as when you are disputing the accuracy of your data.

Right to Portability

You have the right to receive your data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to data processing based on legitimate interests, including profiling for marketing purposes.

To exercise any of the above rights, submit your request via live chat or email to the 66sl support team. We will respond within 30 business days. For complex requests, this timeframe may be extended by 60 days with prior notice.

10 Cross-Border Data Transfers

In its operations, 66sl may transfer data to servers or partners located outside Indonesia — for example, when data is sent to game provider servers based in Europe or Southeast Asia.

All cross-border data transfers are carried out ensuring data protection equivalent to or higher than the standards applicable in Indonesia. We use protection mechanisms such as:

  • Data Processing Agreements with all partners who receive user data.
  • Standard contractual clauses ensuring consistent data protection standards across all jurisdictions.
  • Partner selection based on their compliance with recognized international privacy standards.

11 Protection of Underage Users

The 66sl platform is explicitly intended for individuals aged 18 and above. We do not knowingly collect data from individuals below that age.

Age verification is carried out during registration and through KYC procedures. If we find that data from a user under 18 has been collected inadvertently, it will be deleted immediately and the associated account will be deactivated.

If you are a parent or guardian who becomes aware that a minor has registered at 66sl, please contact our support team immediately. We will handle such reports with the highest priority.

12 Privacy Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in our practices, technology updates, or regulatory changes. Any material changes will be communicated through:

  • Notifications on the platform homepage and privacy policy page.
  • Email to the address registered on your account, at least 7 days before the changes take effect.
  • An in-platform notification banner displayed when you first log in after a change is announced.

By continuing to use the platform after the effective date of any changes, you are deemed to have accepted the updated policy. A history of all previous versions of the Privacy Policy is retained and available upon request.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data at 66sl, we are ready to assist through the following channels:

  • Live Chat: Available 24/7 directly on the 66sl platform — the fastest way to get a response.
  • Support Email: [email protected] — for written requests requiring documentation.
  • FAQ Page: Many common privacy questions are already answered in FAQ page ours.

For privacy rights requests (access, update, or deletion of data), include the following in your request: your registered full name, your 66sl account username, and a clear description of your request. This helps us process it faster and more accurately.

Our privacy team is committed to responding to all data inquiries within 72 business hours. For formal user rights requests (access, deletion, etc.), the maximum response time is 30 business days as required by applicable regulations.

Your Privacy Is Protected. Now Let's Play.

Your data is safe with 66sl. Register now and enjoy thousands of games with the peace of mind that your privacy is fully protected.

By registering you agree to this Privacy Policy and Terms and Conditions 66sl. For users aged 18 and above only.

Bahasa Indonesia