Aa66 Casino Malaysia Privacy Policy – Our Commitment to Protecting Your Data

aa66 collecting several categories of personal information from users. We only gather information that is genuinely necessary to provide you with a safe, responsible, and high-quality service. The categories of information we collect are as follows:

• Identity Information: Full name, date of birth, Malaysian identity card number (MyKad) or passport number, and gender. This information is collected during account registration and the identity verification (KYC) process.
• Contact Information: Malaysian mobile number, email address, and residential address. This information is used to communicate with you regarding your aa66 account, transactions, and promotions.
• Financial Information: Details of the payment methods used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX), deposit and withdrawal history, and your bank account number where applicable. Full card numbers and sensitive card details are not stored directly on aa66's servers.
• Platform Activity Information: Betting history, game records (Live Casino, slots, Sports Betting), limits you have set, and any Responsible Gaming options you have enabled.
• Technical Information: IP address, web browser type, device operating system, login session information, and platform usage analytics data collected automatically.
• Support Communications: Records of live chat conversations, emails, and any other communications you have with the aa66 support team.

Aa66 does not collect sensitive information such as biometric data, health information, or your political or religious views. If additional verification is required for the KYC process, we will only request documents that are relevant and specified by compliance requirements.

Your personal data is collected by aa66 through several different methods, depending on how you interact with our platform:

• Directly from You: When you register a new account, complete your KYC form, contact customer support, or submit any enquiry or complaint to aa66.
• During Platform Use: Activity information, betting history, and game preferences are collected automatically while you use the aa66 platform, whether via a web browser on your computer or smartphone.
• Via Financial Transactions: When you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, or any other accepted Malaysian payment method, your transaction information is collected and recorded.
• Automatically via Technology: Cookies, tracking pixels, and other standard web technologies collect technical information about how you use the aa66 platform. Please refer to Section 6 for more details on cookie usage.
• From Authorised Third Parties: In specific cases, such as for identity verification or fraud prevention purposes, aa66 may receive information from authorised third-party service providers who are bound by strict data protection agreements.

Aa66 does not purchase personal data from data brokers or third parties unrelated to our platform's operations. Every data source is legitimate and necessary for running aa66 responsibly.

aa66 using personal data collected solely for purposes that are legitimate, relevant, and directly related to the delivery of our platform services. The key purposes for which your data is used are as follows:

• Account Management: To create, verify, and manage your user account on aa66. This includes the identity verification (KYC) process required to comply with legal obligations and prevent fraud.
• Transaction Processing: To securely and accurately process deposits and withdrawals via accepted Malaysian payment methods, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX.
• Service Delivery: To give you full access to all aa66 games and services, including live casino, slots, and Sports Betting (Malaysia Super League football, EPL, badminton, MLBB e-sports, and more).
• Security & Fraud Prevention: To identify, investigate, and prevent any fraudulent activity, money laundering, bonus abuse, or security threats that may affect the aa66 platform or other users.
• Service Communications: To send you important account-related notifications, transaction confirmations, security alerts, and relevant policy updates.
• Marketing Communications: To keep you informed about aa66 promotions, bonuses, and special offers that may interest you — subject to your communication preferences. You may opt out of marketing communications at any time.
• Platform Improvements: To analyse usage patterns and improve the overall user experience on the aa66 platform, including enhancements to the interface, speed, and usability.
• Legal Compliance: To fulfil applicable legal and regulatory obligations, including reporting requirements under relevant Malaysian laws.

Aa66 will not use your personal data for any purpose beyond those stated above without first obtaining your consent.

aa66 does not sell, rent, or share your personal data with third parties for their own marketing purposes. However, there are limited situations where aa66 needs to share your data with specific parties to keep our services running properly:

• Payment Service Providers: To process your deposits and withdrawals, transaction information must be shared with providers such as Touch 'n Go, GrabPay, DuitNow, FPX, and the banks involved. These parties are bound by their own strict privacy policies and security standards.
• Game Software Providers: Live casino and slots game providers that partner with aa66 may receive the technical information needed to run games properly. This information is limited and does not include sensitive identity data.
• Technology Service Providers: Companies that provide the technical infrastructure, server hosting, cybersecurity services, and data analytics required to operate the aa66 platform. All such providers are bound by strict data protection agreements with aa66.
• Regulatory Authorities & Law Enforcement: Where required by Malaysian law or a court order, aa66 may be obligated to disclose user information to the relevant authorities. aa66 will notify you of any such disclosure unless prohibited from doing so by law.

In all data-sharing arrangements, aa66 ensures that the receiving party holds equivalent data protection responsibilities and is not permitted to use your data for any purpose beyond what has been stated. All third parties working with aa66 are audited regularly to ensure compliance with established data protection standards.

aa66 implement a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, use, disclosure, alteration, or destruction. The key security measures we practise are:

• 256-bit SSL/TLS Encryption: All data transmitted between your web browser and aa66's servers is encrypted using the latest SSL/TLS protocols. This means every detail you enter — from your password to your payment information — is fully protected in transit.
• Data Encryption at Rest: Sensitive data stored in aa66's databases, including identity and financial information, is encrypted using industry-standard encryption algorithms.
• Strict Access Controls: Only aa66 staff with a legitimate business need who have undergone thorough background checks are permitted to access user data. Access is granted on a least-privilege basis.
• Two-Factor Authentication (2FA): aa66's internal systems containing user data are protected with two-factor authentication for all staff access. Users may also enable 2FA on their own accounts for an additional layer of protection.
• Real-Time Threat Monitoring: aa66's automated security monitoring system operates 24/7 to detect and respond to any suspicious access attempts, cyberattacks, or anomalous activity on the platform.
• Regular Security Audits: aa66 conducts regular independent penetration testing and security audits to identify and address any vulnerabilities before they can be exploited.
• Staff Training: All aa66 staff who handle user data undergo comprehensive data protection training and receive regular updates on information security best practices.

While aa66 takes all reasonable steps to protect your data, no security system can be guaranteed 100% secure. In the event of a data breach affecting your information, aa66 is committed to notifying you within the timeframe required by applicable law and taking immediate remedial action.

Platform aa66 using cookies and similar web tracking technologies to enhance the user experience and gather analytics data. Below is an explanation of the types of cookies we use:

• Essential Cookies: These cookies are required for the basic functions of the aa66 platform, such as login authentication, session management, and security. Without them, the platform will not function properly. This type of cookie cannot be disabled.
• Performance Cookies: Collects information on how users interact with the aa66 platform — including the most frequently visited pages, time spent, and navigation paths. This data is used to improve platform performance and layout. Information collected is aggregated and does not directly identify individuals.
• Functional Cookies: Allows the aa66 platform to remember your preferences — such as your selected language, display settings, and game preferences — so you don't have to reconfigure them each time you log in.
• Analytics Cookies: aa66 uses approved third-party analytics tools to understand platform usage patterns in aggregate. This information helps us make data-driven decisions to improve the overall user experience.

You can manage cookie settings through your web browser. Most browsers allow you to view, delete, and block cookies. However, please note that disabling certain cookies may affect the functionality of the aa66 platform and your gaming experience.

Aa66 does not use cookies for third-party advertising purposes or to track your activity on websites outside the aa66 platform.

As a user aa66 and as a Malaysian citizen or resident, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA) and aa66's internal policies. These rights include:

• Right to Access: You have the right to request a copy of the personal data we hold about you. aa66 will provide this information in a readable format within 21 business days of receiving your request.
• Right to Correction: If you find that personal data held by aa66 is inaccurate or outdated, you have the right to request a correction. Certain details such as your name and date of birth can be updated directly through your account settings.
• Right to Erasure: Under certain circumstances, you may request that your personal data be deleted from aa66's systems. Please note that this right is not absolute — aa66 may need to retain certain data to fulfil legal obligations or resolve outstanding disputes.
• Right to Withdraw Consent: Where data processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of any processing that took place prior to withdrawal.
• Right to Object: You may object to the processing of your personal data for certain purposes, including direct marketing. Once an objection is received, aa66 will cease processing your data for that purpose unless there are overriding legal grounds to continue.
• Right to Lodge a Complaint: If you believe aa66 has violated your privacy rights, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or another relevant authority.

To exercise any of the rights above, please submit a written request to the aa66 privacy team at support@aa66.casino with the subject line "Privacy Rights Request". Include sufficient information for us to verify your identity before processing the request. We are committed to responding to every request within a reasonable timeframe and in accordance with applicable legal requirements.

aa66 does not retain your personal data any longer than necessary for the purpose it was collected, or as required by Malaysian law. aa66's general data retention policy is as follows:

• Active Account Data: For as long as your account remains active on aa66, personal data related to account management and service provision will be retained.
• Data After Account Closure: Following account closure, aa66 will retain identity data, transaction records, and betting activity records for a minimum of 7 years to satisfy applicable Malaysian legal and regulatory compliance requirements.
• KYC Data: Identity verification (KYC) documents, such as copies of your MyKad or passport, are retained for the period required under applicable Anti-Money Laundering (AML) laws in Malaysia.
• Communication Records: Customer support chat logs and emails are retained for 2 years for reference purposes and the resolution of any disputes.
• Technical Log Data: Technical and security logs are retained for 12 months and subsequently deleted or anonymised.

Once the specified retention period has ended, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally. The data deletion process follows standards that ensure data cannot be recovered once deleted.

aa66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable legal changes, or improvements to the way we provide services to users in Malaysia.

When we make material changes to this Privacy Policy, we will:

• Publishing the latest version on this page with a new "Last Updated" date.
• Notifying registered users via email or in-platform notifications on aa66 of any significant changes.
• For highly material changes that require renewed consent, asking you to review and agree to the updated policy before continuing to use the platform.

Your continued use of the aa66 platform following the publication of any amendments to this Privacy Policy will be considered your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we manage your personal data.

If you have any questions or concerns about this Privacy Policy or how aa66 handles your personal data, please don't hesitate to reach us at support@aa66.casino or via live chat on the platform. The aa66 privacy team is committed to responding to all enquiries transparently and within a reasonable timeframe.