Privacy Policy aa66 — Data Protection Our Members

Aa66 is an online sports betting and casino platform operating in Malaysia. As a platform trusted by over 500,000 registered members, we understand how important the privacy and security of personal information is to every one of our users.

This Privacy Policy is designed to give you a complete and transparent picture of how aa66 handles your personal data — from collection through to deletion. We do not believe in confusing "fine print" practices. Everything you need to know about your data privacy on the aa66 platform is here, in plain language.

The aa66 privacy commitment is built on three core principles: transparency in how we collect and use data, security in how we protect your information, and control we provide to you to manage your own personal data.

This policy also complies with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA), which requires all organisations processing personal data to do so responsibly and in accordance with prescribed procedures.

Aa66 only collects information that is genuinely necessary to provide safe, compliant, and quality services to our members. The following are the categories of information we collect:

We never collect sensitive information such as biometric data, health information, or political affiliation unless required by law. All information you provide is voluntary and consent-based, unless explicitly stated as a mandatory requirement for using a specific service.

Every piece of data we collect has a specific and legitimate purpose. aa66 does not use member data for purposes unrelated to service delivery. The following are the primary purposes for data use:

• Account management: Securely creating, verifying, and maintaining your member account
• Transaction processing: Handling all deposits, withdrawals, and financial activities within the aa66 platform
• Identity verification (KYC): Complying with legal requirements related to anti-money laundering (AML) and age verification
• Platform security: Detecting and preventing fraud, hacking, and account abuse
• Customer support: Helping you resolve technical issues, inquiries, and complaints more effectively
• Responsible wagering: Monitoring wagering patterns to identify members who may need support
• Platform enhancement: Analyzing how members use the platform to continually improve the user experience
• Marketing communications: Sending information about promotions and exclusive offers — you can unsubscribe at any time

Aa66 does not share members' personal information with external parties except in the following limited situations, where it is necessary and legally permissible:

• Payment service provider: Banks, e-wallet companies, and payment processors we partner with to facilitate secure deposits and withdrawals
• Identity verification provider: Third-party KYC services integrated with the aa66 system to verify members' identity documents
• Legal authorities: When required by court order, regulatory directive, or financial crime investigation
• Technology service provider: Hosting infrastructure and cloud services used to operate the aa66 platform — all bound by strict confidentiality agreements
• Verified business partners: In limited situations requiring technical integration, and only after obtaining your consent

Every third party that receives aa66 member data is required to adhere to the same rigorous data protection standards as our internal policies. Data processing agreements are signed with all third-party partners before any data exchange takes place.

Protecting members' personal and financial data is one of aa66's greatest investments. We employ multiple layers of technical and operational security to ensure your information is always protected:

• 256-bit SSL Encryption: All communications between your device and aa66 servers are encrypted using the latest TLS protocols
• Data-at-rest encryption: Sensitive information stored in our database is encrypted using AES-256 algorithm
• Two-factor authentication (2FA): An additional security layer that protects your account from unauthorized access
• 24/7 Monitoring: Intrusion detection systems and suspicious activity monitoring operate around the clock
• Data segregation: Financial information is stored separately from general personal data using a secure integrated architecture
• Periodic security audits: Penetration testing and security audits are conducted by independent cybersecurity firms on a regular basis

Aa66 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use and their purposes:

• Essential Cookies: Required for core platform functions such as maintaining your login session. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform to help us improve site speed and usability.
• Functionality Cookies: Saving your preferences such as language, currency, and display settings to deliver a more personalized experience.
• Analytics Cookies: Helping us understand usage patterns in aggregate and anonymized form for platform improvement purposes.

You can manage or disable non-essential cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some sections of the aa66 platform.

As an aa66 member and individual protected under the Personal Data Protection Act 2010, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact the aa66 customer support team. We will process your request within 14 business days.

Aa66 does not retain your personal data longer than necessary. Data retention periods are determined based on the purpose of collection and applicable legal requirements:

• Active account data: Retained for as long as your account remains active and in use
• Financial transaction records: Retained for 7 years in accordance with Malaysia's financial and tax legal requirements
• KYC documents: Retained for 5 years after account closure in accordance with AML requirements
• Technical log data: Retained for 90 days for security and investigation purposes
• Marketing and cookie data: Retained for 12 months or until you withdraw your consent

Once the retention period expires, data will be securely deleted or converted into anonymised format that cannot be linked to any specific individual. The deletion process follows industry-standard data removal methods.

Aa66 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or platform improvements. Every change made will be marked with a new "Updated" date at the top of this document.

For material changes — meaning changes that significantly affect how we use your data — we will provide at least 14 days before changes take effect via:

• In-platform notifications on aa66 when you log in
• Email to your registered address
• A prominent notice on the aa66 website homepage

Continued use of the aa66 platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you disagree with the changes, you may request account closure before the effective date.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way aa66 handles your personal data, we encourage you to contact us directly. Our team is ready to assist:

For formal complaints related to personal data protection that cannot be resolved through our support channels, you also have the right to contact the Department of Personal Data Protection Malaysia (JPDP) as the relevant regulatory authority.