turbo6d Privacy Policy

1. Data Controller

turbo6d ("the Platform", "we", "us") operates as the Data Controller for personal data processed in connection with the provision of online gaming services at turbo6d.net. As Data Controller, turbo6d determines the purposes and means of processing Member personal data and is responsible for ensuring that such processing complies with applicable data protection obligations under its international gaming licence and relevant privacy legislation.

For data protection enquiries, Members may contact turbo6d's designated data handling team at [email protected].

2. Data We Collect

2.1 Registration Data

When you create a turbo6d account, we collect the following information:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify the mandatory 21+ age requirement)
• Email address (used for account communications and security alerts)
• Malaysian mobile number (used for two-factor authentication and account recovery)
• Preferred username and encrypted password
• Residential address (collected during or after KYC verification)

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and age verification requirements under turbo6d's international gaming licence, we collect:

• Copy of government-issued identity document (MyKad or valid passport)
• Proof of residential address (utility bill, bank statement, or equivalent, not older than three months)
• Source of funds documentation where required for high-value transaction processing
• Facial verification image where required by the KYC process

2.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and reference numbers
• Payment method identifiers (e-wallet IDs, bank account partial details, FPX transaction references)
• Account wallet balance history

2.4 Gaming Activity Data

• Game session logs including game titles, bet amounts, outcomes, and session duration
• Sportsbook bet slip records including markets, odds accepted, and settlement outcomes
• Bonus and promotion redemption history

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session timestamps and login/logout records
• Cookie identifiers and similar tracking technologies (see Section 9)

3. How We Collect Data

turbo6d collects Member personal data through the following means:

• Directly from you: Information provided at registration, during KYC verification, when contacting support, or when updating account settings.
• Automatically: Technical and device data collected through cookies, server logs, and similar technologies when you access the turbo6d platform.
• From third-party KYC providers: turbo6d uses accredited third-party identity verification services to process and validate KYC documentation. These providers act as data processors under turbo6d's instruction.
• From payment processors: Transaction confirmation data shared by payment providers including Touch 'n Go, Boost, GrabPay, and FPX banking partners to facilitate deposit and withdrawal settlement.

4. How We Use Your Data

turbo6d processes Member personal data for the following purposes:

5. Legal Basis for Processing

turbo6d processes Member personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the Member Account Agreement, including account operation, gaming service provision, and payment processing.
• Legal obligation: Processing required to comply with anti-money laundering legislation, age verification obligations, and regulatory reporting requirements under turbo6d's international gaming licence.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming surveillance, and platform improvement, where turbo6d's interests do not override Member rights.
• Consent: Processing for direct marketing communications, where Members have explicitly opted in. Consent may be withdrawn at any time by contacting turbo6d support or updating account communication preferences.

6. Data Sharing & Disclosure

turbo6d does not sell Member personal data. turbo6d shares Member personal data with third parties only in the following circumstances:

• KYC verification providers: Accredited identity verification service providers who process KYC documentation on turbo6d's behalf as data processors under binding contractual obligations.
• Payment processors: Transaction data shared with FPX banking partners, e-wallet providers (Touch 'n Go, Boost, GrabPay, DuitNow), and other payment gateways as necessary to complete financial transactions.
• Game content providers: Game session data may be shared with licensed third-party game providers (including RNG and live casino operators) as required to deliver and certify gaming outcomes.
• Regulatory and law enforcement authorities: turbo6d will disclose Member data to relevant authorities where required by law, court order, or gaming regulatory obligation — including mandatory suspicious activity reporting under AML obligations.
• Group companies: turbo6d may share data within its affiliated operating group for the purpose of consolidated compliance, fraud prevention, and operational efficiency, subject to equivalent data protection standards.

7. Data Retention

turbo6d retains Member personal data for the following periods:

• Active account data: Retained for the duration of the Member's account and for a minimum of five (5) years following account closure, as required under anti-money laundering obligations.
• KYC and identity verification records: Retained for a minimum of five (5) years from the date of account closure or the date of the relevant transaction, in compliance with applicable AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for two (2) years from the date of the final communication in a support thread, unless the matter relates to an ongoing dispute or regulatory investigation.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year following withdrawal for audit purposes.

Following the expiry of applicable retention periods, turbo6d will securely delete or anonymise Member personal data.

8. Data Security

turbo6d implements the following technical and organisational measures to protect Member personal data:

• 256-bit SSL/TLS encryption for all data transmitted between the Member's device and turbo6d's servers
• Encryption of personal data and financial records at rest using industry-standard encryption protocols
• Role-based access controls limiting staff access to Member data to those with a documented operational need
• Multi-factor authentication requirements for all internal system access by turbo6d personnel
• Regular penetration testing and security audits by independent third-party security firms
• Documented incident response procedures for data breach scenarios, including Member notification obligations

Notwithstanding these measures, no data transmission over the internet or electronic storage system is entirely risk-free. Members are encouraged to maintain strong, unique passwords for their turbo6d accounts and to enable two-factor authentication.

9. Cookies & Tracking Technologies

9.1 Types of Cookies Used

turbo6d uses the following categories of cookies on its platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional cookies: Store Member preferences such as language settings, game lobby layout, and last-used payment method to improve the user experience across sessions.
• Analytics cookies: Collect aggregated, anonymised data on platform usage patterns to inform product development and performance monitoring. No individual Member is identified through analytics processing.

9.2 Cookie Management

Members may manage cookie preferences through their browser settings. Disabling strictly necessary cookies will impair turbo6d account functionality. Disabling functional or analytics cookies will not affect access to Gaming Services but may result in a degraded user experience.

10. Your Rights

Members have the following rights in relation to their personal data held by turbo6d. Requests to exercise these rights should be submitted to [email protected] with appropriate identity verification:

• Right of access: You may request a copy of the personal data turbo6d holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where turbo6d no longer has a lawful basis for processing it. Note that regulatory retention obligations may prevent full erasure in certain circumstances.
• Right to restriction: You may request that turbo6d restrict processing of your data while accuracy or lawfulness is disputed.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request a machine-readable copy of data you have provided to turbo6d.
• Right to object: You may object to processing based on legitimate interests, including direct marketing processing. Marketing objections will be actioned immediately.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

turbo6d will respond to data rights requests within thirty (30) days. Complex requests may be extended to sixty (60) days with written notice to the Member.

11. Children & Minors

turbo6d Gaming Services are strictly restricted to persons aged 21 years and above. turbo6d does not knowingly collect or process personal data from persons under 21 years of age. The age verification process at registration and mandatory KYC documentation requirements are specifically designed to enforce this restriction. If turbo6d becomes aware that personal data has been collected from a person under 21 without appropriate verification, it will immediately suspend the relevant account and delete the associated data. Parents and guardians who become aware of unauthorised access by a minor should contact turbo6d support immediately.

12. Cross-Border Data Transfers

turbo6d's operational infrastructure and the third-party processors it uses may process Member personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, turbo6d ensures that appropriate safeguards are in place, including contractual data processing agreements that impose equivalent data protection standards on recipient processors. turbo6d does not transfer Member personal data to jurisdictions that lack adequate data protection frameworks without implementing compensating contractual or technical safeguards.

13. Policy Amendments

turbo6d reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or operational practice. Material amendments will be communicated to Members via their registered email address prior to the effective date of the change. The current version of this Privacy Policy is always available at turbo6d.net/privacy-policy. Continued use of turbo6d services following the publication of an amended Policy constitutes acceptance of the revised terms.

14. Contact & Complaints

For all data protection enquiries, subject access requests, or complaints regarding turbo6d's handling of your personal data, please contact the turbo6d data handling team:

• Email: [email protected]
• Live Chat: Available 24/7 in-platform via the turbo6d dashboard

turbo6d is committed to resolving data protection complaints fairly and promptly. If you are not satisfied with turbo6d's response to a privacy complaint, you may escalate the matter to the relevant data protection supervisory authority in the applicable jurisdiction.