Privacy Policy
a66 Malaysia Platform

This Privacy Policy is published by a66, an online casino platform operating under the domain a66.st. This document outlines our practices regarding the collection, use, storage, and protection of personal data of users who access or use a66 services.

By registering an account, accessing the platform, or using any services provided by a66, you acknowledge that you have read and understood this Privacy Policy. We encourage you to read it carefully and contact us if you have any questions or concerns.

A66 only collects data necessary to provide a safe, responsible, and high-quality service. The following are the categories of data we collect:

We do not collect sensitive information such as biometric data, medical records, or religious information unless required by applicable law.

The personal data we collect is used solely for legitimate purposes necessary to operate the a66 platform. The following are the primary purposes for which your data is used:

• Account management — to create, verify, and maintain your account on the platform.
• Transaction processing — to process deposits, withdrawals, and bonus payments securely and accurately.
• Identity verification (KYC) — to verify that you meet the minimum age requirement and to prevent identity fraud.
• Platform Security — to detect and prevent fraudulent activity, money laundering, and unauthorised access.
• Service improvement — to analyse usage patterns and enhance your gaming experience.
• Service communications — to send important notifications related to your account, transactions, and security updates.
• Legal compliance — to fulfil reporting and audit obligations set by regulatory authorities.

A66 does not sell or transfer your personal data to third parties for commercial purposes. However, there are limited situations where we need to share your information with certain parties:

• Payment service providers — to process your deposits and withdrawals securely. These providers are bound by strict confidentiality agreements.
• Game software providers — limited technical information required to run games within the a66 platform.
• Identity verification services — KYC partners who assist in verifying your identity during registration and large withdrawals.
• Regulatory authorities — when required by law, court order, or a legitimate request from a law enforcement agency.

The security of your personal data is the highest priority at a66. We continuously invest in security infrastructure and operational procedures to ensure your information is always protected.

The technical security measures we implement include:

• Data encryption in transit using TLS 1.3 protocol and 256-bit SSL encryption.
• Data encryption at rest in databases using AES-256.
• Role-based access control (RBAC) ensuring staff can only access data relevant to their responsibilities.
• 24/7 system monitoring with real-time threat detection and automated alert systems.
• Regular penetration testing conducted by independent security experts.
• Encrypted data backups stored at separate locations to ensure service continuity.

The a66 platform uses cookies and similar tracking technologies to enhance the user experience, analyse traffic, and maintain the security of your login session.

Types of cookies we use:

• Essential Cookies — required for core platform functions such as login session security and navigation. These cookies cannot be disabled.
• Functional Cookies — to save your preferences such as language and display settings for your convenience.
• Performance Cookies — to collect anonymous information about how you use the platform, helping us improve our services.
• Marketing Cookies — used to display relevant offers within the platform, with your consent.

You can manage your cookie preferences through your web browser settings. Please note that disabling essential cookies may affect platform functionality.

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and international best practices, you have the following rights regarding your personal data held by a66:

A66 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or for the period required under applicable Malaysian law.

• Active account data — retained for the duration that your account remains active on the platform.
• Financial transaction records — retained for a minimum of 7 years in accordance with financial reporting and anti-money laundering requirements.
• KYC Documents — retained for 5 years after account closure or the end of the business relationship.
• Support communication logs — retained for 3 years for dispute resolution purposes.
• Technical log data — retained for 12 months for security and performance analysis purposes.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you personally.

A66 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any amendments will be published on this page along with the new effective date.

For material amendments — changes that significantly alter how we use or protect your data — we will provide advance notice via email or in-platform notification at least 14 days before the effective date.

If you have any questions, concerns, or complaints regarding how a66 manages your personal data, we encourage you to contact us directly. We are committed to addressing every enquiry seriously and in a timely manner.

You may reach our Data Protection Officer via:

• Live Chat — available 24 hours a day, 7 days a week via the a66 platform.
• Support email — [email protected] (response within 1–2 business days).

If you are dissatisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant regulatory authority in your country.