A66 Privacy Policy — Security Your Data is Our Priority

Introduction and Scope of This Policy

This Privacy Policy describes the data collection and processing practices carried out by a66 in relation to users of our platform at a66.lv and the official a66 mobile app. This document is written for all Malaysia users and aims to provide a clear and transparent overview of how your personal data is managed.

When you register an account, make a deposit, play games, or interact with any part of the a66 platform, you share certain information with us. This policy explains what we do with that information, why we need it, and the rights you hold in relation to it.

This Privacy Policy should be read together with Terms and Conditions us, forming part of the overall agreement between you and a66. By using our platform, you agree to the practices described in this document.

Personal Data We Collect

A66 collects two main categories of data — information you provide directly and information collected automatically when you use our platform.

Information you provide directly:

• Registration information — full name, date of birth, phone number, email address, and your chosen password.
• Identity verification documents (KYC) — copies of MyKad, passport, or other identity documents required for the account verification process.
• Financial information — bank account details, account holder name, and related information required to process deposits and withdrawals.
• Delivery address — where applicable for physical prize delivery or official document dispatch.
• Support communications — live chat conversation records, support tickets, and any written communication between you and the a66 team.

Information collected automatically:

• Log and technical data — IP address, browser type, operating system, screen resolution, and device information.
• Game session data — login timestamps, session duration, games played, wagering amounts, and transaction history.
• Cookie and tracking data — session cookies, preference cookies, and analytics identifiers that help us understand how users interact with the platform.
• Approximate location data — location information based on IP address for compliance and fraud detection purposes. We do not collect precise GPS location data.

How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. We do not process your personal data for purposes unrelated to platform operations without your consent. The following are the primary purposes for data use:

• Account management — to create, verify, and manage your user account, including password resets and profile information updates.
• Transaction processing — to process deposits, withdrawals, and other financial transactions securely and efficiently.
• Legal compliance — to meet Anti-Money Laundering (AML), Know Your Customer (KYC), and other reporting obligations set by the relevant authorities.
• Platform security — to detect and prevent fraudulent activity, hacking, unauthorised access, and account abuse.
• Service improvement — to analyse usage patterns and improve user experience, platform performance, and game selection.
• Service communications — to send important account-related notifications, updated terms, and security information.
• Responsible gaming — to identify concerning gameplay patterns and provide appropriate support to players who need assistance.

Data Sharing with Third Parties

A66 does not sell, rent, or disclose your personal data to third parties except in the circumstances outlined below, and only to the extent necessary for legitimate purposes:

• Payment processors — payment service providers partnering with a66 to facilitate deposit and withdrawal transactions. These processors are bound by strict confidentiality agreements and only receive data necessary to complete the relevant transaction.
• Game providers — game software companies providing game content on the a66 platform. Minimal technical data is shared to ensure game functionality runs smoothly.
• Relevant authorities — law enforcement agencies or regulatory bodies when required by law or a valid court order.
• Technical service providers — companies providing web hosting, analytics, cybersecurity, and other technical support services. All such providers are bound by data processing agreements that comply with international data protection standards.

In every instance of data sharing, a66 ensures that the receiving party has adequate security protections and controls in place to safeguard your data. We do not permit third parties to use your data for their own purposes.

Data Security and Encryption

A66 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, alteration, or unintended disclosure:

• 256-bit SSL/TLS Encryption encrypts all data transmitted between your browser or app and a66's servers. This ensures sensitive information such as passwords and financial details cannot be intercepted during transmission.
• Data-at-rest encryption — sensitive data stored in our databases, including passwords and financial information, is encrypted using industry-recognised encryption algorithms.
• Internal access controls — only a66 staff with a legitimate business need who have passed strict background checks are permitted to access user data.
• Two-factor authentication (2FA) available to all user accounts and strongly recommended as an additional layer of security.
• Continuous security monitoring — our systems are monitored around the clock to detect and respond to any security threats promptly.
• Regular penetration testing — the a66 platform undergoes regular security testing by independent third-party auditors to identify and address potential vulnerabilities.

Cookies and Tracking Technologies

A66 uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and ensure optimal technical functionality. The following are the categories of cookies we use:

• Essential cookies — required for core platform functions such as login verification and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies — collects information on how users use the platform to help us identify areas that need improvement.
• Preference cookies — stores your preference settings such as language and display preferences so you do not need to reconfigure them each time.
• Analytics cookies — helps us understand overall platform usage patterns for service improvement purposes.

You can manage cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality and user experience of the a66 platform.

Your Rights Regarding Personal Data

As an a66 user, you have certain rights regarding your personal data. We respect and facilitate the exercise of these rights:

To exercise any of the above rights, contact our data protection team via live chat or email on the platform. We will process your request within 30 days of receipt.

Child Protection

A66 strictly prohibits the use of the platform by individuals under the age of 18. We do not knowingly collect or process personal data of children. Our registration process is designed to identify and block registration attempts by underage individuals.

If we discover that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered on the a66 platform are urged to contact our support team immediately.

Changes to This Privacy Policy

A66 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When we make material changes, we will:

• Updating the "Last Updated" date shown at the top of this document.
• Sending notifications via registered email or in-platform notifications at least 7 days before changes take effect.
• In the event of highly significant changes, request re-confirmation of consent from users.

Continued use of the a66 platform after the effective date of any policy change is considered acceptance of those changes. We encourage you to review this page periodically.