Privacy Policy a66 — Data Protection Member Profile

01 — Information Collected

A66 collects several categories of personal information from members in the course of providing safe and responsible online entertainment services. The information collected falls into two main categories: information you voluntarily provide and information automatically collected while you use our platform.

Information You Provide Directly:

• Full name as shown on your official identification document
• Valid national ID or passport number for KYC identity verification purposes
• Active email address used as the primary account identifier and communication channel
• An active Malaysian mobile number for two-factor authentication and security notifications
• Date of birth to verify that you meet the minimum age requirement of 18 years
• Local Malaysian bank account details for processing fund deposits and withdrawals
• Current residential address for regulatory compliance and identity verification purposes
• KYC supporting documents such as ID card images, utility bills or bank statements when requested

Information Collected Automatically:

• Your device's IP address each time you access the a66 platform
• The type of device, model, operating system, and web browser version you are using
• Login and logout timestamps, as well as session duration records
• Full transaction history including deposits, withdrawals, wagering, and wins
• Approximate geolocation data based on IP address for regional compliance requirements
• Platform usage patterns including games played and access frequency

02 — How Data Is Collected

A66 collects personal data through several clearly identified channels that are disclosed transparently to members. Understanding how data is collected helps you make more informed decisions about the information you share with us.

• Account Registration: When you complete the registration form on the a66 platform, all information you enter is collected and stored in our secure systems.
• KYC Process: During identity verification, you will be asked to upload an identification document, which is then securely stored in our systems for regulatory compliance purposes.
• Financial Transactions: Every deposit and withdrawal you make records the associated bank account details, amount, and transaction time in our financial records.
• Support Communications: Any communication via live chat, email, or other support channels is stored for staff training, quality monitoring, and investigative reference purposes where necessary.
• Cookies & Tracking Technologies: The a66 platform uses cookies, tracking pixels, and similar technologies to analyze how you use the platform and improve your experience.
• Third-Party Integration: Payment providers and game software providers may share transaction-related data with a66 as part of their service delivery.

03 — Purpose of Data Use

Every piece of data collected by a66 has a clear and legitimate purpose. a66 will not use your data for any purpose not stated in this Privacy Policy without first obtaining your consent.

04 — Data Sharing

A66 has never and will never sell members' personal data to third parties for profit. However, there are limited situations where a66 needs to share your data with certain parties to enable our services to function properly and to comply with the law.

• Payment Service Providers: Transaction information is shared with payment processors and partner banks to enable deposits and withdrawals to be processed securely and promptly.
• Game Software Providers: Non-directly identifiable player identifiers are shared with third-party game providers to allow you to access their games within the a66 platform.
• Regulatory Authority: a66 will disclose members' personal data to the relevant authorities when required by Malaysian law, a valid court order, or a financial crime investigation.
• Analytics Providers: De-identified usage data is shared with analytics platforms to help us understand and improve the a66 platform user experience.
• Independent Auditor: Appointed independent audit firms may access certain data for compliance audit purposes and gaming system integrity verification.

05 — Data Storage & Security

The security of your personal data is a technical responsibility we take extremely seriously. a66 invests in high-grade security infrastructure to ensure your data is protected at every layer.

• Encryption in Transit: All data moving between your browser or app and a66's servers is protected by HTTPS with the latest TLS 1.3 encryption.
• Encryption at Rest: Sensitive data such as bank account numbers, KYC information and passwords are stored in encrypted format using AES-256 algorithms in our database.
• Layered Firewall: a66 servers are protected by a multi-layered firewall system that monitors and filters all incoming and outgoing traffic to prevent unauthorised access.
• Periodic Vulnerability Scanning: The a66 technical security team conducts regular penetration testing and vulnerability scanning to identify and patch any system weaknesses.
• 24/7 Monitoring: An automated security monitoring system operates around the clock to detect suspicious activity and alert our security team in real time.

Data Retention Period:

• Financial transaction records are retained for a minimum of 7 years as required by Malaysia's anti-money laundering laws.
• KYC documents are retained for the duration of the active account period plus 5 years after account closure.
• Customer support communication logs are retained for 3 years for reference and training purposes.
• De-identified usage analytics data may be retained longer for platform improvement purposes.

06 — Your Rights

As an a66 member and as an individual protected under Malaysia's Personal Data Protection Act (PDPA) 2010, you hold the following rights regarding the personal data we hold on you:

• Right of Access: You have the right to request a copy of all personal data a66 holds about you. This request will be processed within 21 business days.
• Right to Rectification: If you find that any personal data we hold is inaccurate or outdated, you have the right to request an immediate correction.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal data — subject to legal record-keeping obligations that override this right.
• Right to Withdraw Consent: For data collected based on your consent (such as marketing communications), you may withdraw that consent at any time.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format for transfer to another platform where applicable.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or in circumstances where you believe such processing is unjustified.

07 — Cookies & Tracking Technologies

The a66 platform uses cookies and similar tracking technologies to enhance user experience, ensure account security, and analyze platform performance. Below are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for core platform functions such as login authentication, session security, and language preferences. Without them, the platform will not function properly.
• Performance Cookies: Collects anonymous information about how you use the platform — such as most frequently visited pages and response times — to help us improve website performance.
• Functional Cookies: Stores your personal preferences such as display settings, favourite game selections, and language preferences to deliver a more personalised experience.
• Analytics Cookies: Allows us to understand overall platform usage patterns in aggregate to make better development decisions for the benefit of all members.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the a66 platform. For more information, refer to your web browser's documentation.

08 — Children's Privacy

A66 maintains a zero-tolerance policy against the use of the platform by minors. The a66 platform is exclusively for individuals aged 18 and above, and we take active measures to prevent access by children and teenagers.

• A66 does not intentionally collect any personal data from individuals under the age of 18.
• Should we find that we have inadvertently collected data from a minor, that data will be deleted immediately and the relevant account will be terminated.
• Parents or guardians who suspect their child has registered an account at a66 are requested to contact our support team immediately.
• A66 performs age verification during the registration and KYC process to confirm that all members meet the minimum age requirement.

09 — Privacy Policy Amendments

A66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, new legal requirements, or enhanced data protection measures for the benefit of our members.

• Any material amendments to this Privacy Policy will be communicated to members via registered email or in-platform notification at least 14 days before the amendments take effect.
• The "Last Updated" date at the top of this document will be updated whenever changes are made.
• Continued use of the a66 platform after any amendments are published will be considered acceptance of the updated privacy terms.
• If you disagree with any amendments made, you have the right to close your account and request deletion of your data.

10 — Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we manage your personal data, do not hesitate to contact the a66 privacy team.