A66 Privacy Policy — Your Personal Data Protection

1 Introduction

Welcome to the a66 Privacy Policy. This document constitutes the official agreement between you as the user and a66 as the operator of the online entertainment platform at a66.ad. We take our responsibility to protect the privacy of every individual who interacts with our platform seriously.

This policy is formulated to comply with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia — the law governing the collection, processing, and use of personal data by business organisations in Malaysia. By using a66 services, you agree to the data protection practices described in this document.

We believe transparency is the foundation of trust. That is why this policy is written in plain, easy-to-understand language — not confusing legal jargon. Our goal is for you to truly understand what happens with your personal data from the moment you register an account to the moment you choose to close it.

2 Data We Collect

A66 collects your personal data from several different sources when you use our platform. All data collection is carried out lawfully, fairly, and with a clear purpose.

2.1 Data You Provide Directly

The following information is collected when you register an account, update your profile, or contact our support team:

• Identity information: Full name, date of birth, gender, identity card number (MyKad), and nationality.
• Contact information: Email address, mobile number, and current residential address.
• Financial information: Bank account number, bank name, and payment method details used for deposits or withdrawals.
• KYC verification documents: MyKad copy, proof of address (such as utility bills or bank statements), and other supporting documents we request for identity verification purposes.
• Support communications: Live Chat conversation history, emails you have sent to us, and feedback you have provided.

2.2 Data Collected Automatically

When you browse or use the a66 platform, our systems automatically record the following technical information:

3 How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. a66 does not process your personal data for undisclosed purposes without obtaining your consent first.

• Account management: Creating, verifying, and maintaining your account. This includes the mandatory KYC process to ensure the safety of all members.
• Transaction processing: Processing deposits, withdrawals, and bonus payments securely and on time using the financial information you provide.
• Fraud prevention: Detecting and investigating any suspicious activity, account misuse, or violations of the terms of service to protect the interests of all members.
• Legal compliance: Fulfilling reporting obligations to the relevant authorities as required under Malaysian law.
• Customer support: Answering your enquiries, resolving disputes, and providing effective technical assistance.
• Personalise your experience: Personalising promotional offers, content, and game recommendations based on your preferences — in a responsible manner.
• Responsible gaming: Monitoring gaming patterns to identify early signs of problem gambling and provide appropriate support.
• Marketing communications: Sending you promotions, exclusive offers, and platform updates — only if you have consented to receive such communications.

4 Data Sharing

A66 does not sell, rent, or transfer your personal data to any third party for their own marketing or commercial purposes. However, in operating a safe and lawful platform, we may need to share certain data with the following parties:

4.1 Trusted Service Providers

We work with carefully selected third-party service providers to support our platform operations. All such providers are bound by strict confidentiality agreements and are only permitted to process your data in accordance with specific instructions from a66:

• Payment gateway provider: FPX, DuitNow, Touch 'n Go, and other payment partners to securely process your financial transactions.
• KYC service provider: A third-party identity verification platform that helps us verify member documents and identities.
• Cloud infrastructure provider: Servers and data storage services that meet international security standards.
• Analytics provider: Analytics tools that help us understand platform usage for improvement purposes — aggregate data only, with no personally identifiable information.

4.2 Legally Required Disclosures

A66 may be required to disclose your data to government authorities or law enforcement bodies when:

• Required by a valid court order or writ of summons
• Required to assist in criminal investigations including money laundering or fraud
• Required to comply with applicable legal reporting obligations

5 Data Storage & Security

The security of your personal data is an absolute priority for a66. We continuously invest in the latest security infrastructure to ensure your information is protected at all times — whether in transit, during processing, or in storage.

5.1 Technical Security Measures

• Data encryption in transit: All communication between your browser and the a66 servers is protected by Transport Layer Security (TLS) 1.3 encryption — the highest security standard in the industry.
• Data encryption at rest: Sensitive data such as financial information and KYC documents are encrypted using AES-256 encryption before being stored in our database.
• Layered access control: Only authorised a66 staff with a legitimate business need are permitted to access member personal data. All access is logged and audited on a regular basis.
• Two-factor authentication (2FA): Member accounts can be protected with an extra layer of security through the 2FA feature we provide.
• 24/7 threat monitoring: Our security systems monitor platform activity around the clock to detect and respond to any security threats as swiftly as possible.
• Periodic penetration testing: We conduct regular security audits and penetration testing (penetration testing) periodically by independent security experts to identify and address any system vulnerabilities.

5.2 Data Retention Period

A66 retains your personal data for as long as your account is active and for any additional period required by law or legitimate business needs:

• Active account data: Retained for the lifetime of your account
• Financial transaction data: Minimum 7 years after account closure (legal requirement)
• KYC documents: Minimum 5 years after the business relationship ends
• Support communication logs: 3 years from the last interaction
• Analytics and system log data: 2 years in aggregate and de-identified form

6 Cookies & Tracking Technologies

A66 uses cookies (cookies) and similar tracking technologies to ensure the platform runs smoothly and to deliver a better experience for you. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies (Required): These cookies are required for core platform functions such as login sessions, security, and cart management. Without them, the platform cannot operate. This type of cookie cannot be disabled.
• Functional Cookies: Saving your preferences such as preferred language, odds format, and display settings to provide a more personalised experience on future visits.
• Analytics Cookies: Helping us understand how members use our platform — which pages are most popular, how long sessions last, and where members encounter issues. This information is used in aggregated form for platform improvements.
• Security Cookies: Used to detect suspicious activity, prevent unauthorised access, and protect your account from attacks.

Managing Your Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, delete, or block specific cookies. However, disabling essential cookies may affect the functionality of the a66 platform and your overall experience.

7 Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data. a66 is committed to respecting and facilitating the exercise of these rights.

To exercise any of the above rights, please contact our data protection team by email at [email protected] or via 24/7 Live Chat on the platform. We will verify your identity before processing your request to ensure data security.

8 Children's Data

The a66 platform is exclusively for users aged 18 years and above. We do not intentionally collect, process, or store any personal data from individuals under the age of 18.

All account registrations require age verification through a rigorous KYC process. Should we find that an account has been registered by or on behalf of a minor, the account will be closed immediately, all balances will be refunded (after applicable deductions), and all related data will be deleted from our systems.

9 Privacy Policy Amendment

A66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology used, or new legal requirements. We are committed to informing you of any material changes.

When significant amendments are made to this policy, we will:

• Sending a notification to your registered email at least 14 days before the amendments take effect.
• Displaying prominent notices on our platform's home page during the notice period.
• Updating the "Last Updated" date at the top of this document.
• Maintaining an archive of previous versions of the Privacy Policy that members may request if needed.

Your continued use of the a66 platform after the effective date of any amendment constitutes your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account before the effective date.

10 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, do not hesitate to reach out to us. Our data protection team is ready to assist you.

• Data Protection Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform
• Response Time: We are committed to responding to all privacy-related enquiries within 3 working days

For enquiries regarding data access, correction, or deletion rights, please include your account number and a brief description of your request in your communication to help us process it more efficiently.