Privacy Policy a66 group – Our Commitment to Protecting Malaysian Player Data

This Privacy Policy applies to all users of the a66 group platform — including unregistered website visitors, active registered members, and former members who have closed their accounts. It covers all products and services offered under the a66 group brand, including video slots, Live Casino, table games, progressive jackpots, Sports Betting (badminton, Malaysia Super League, EPL, MotoGP, and more), and e-sports.

A66 Group acts as the data controller for all personal information collected through our platform. This means we are responsible for determining the purposes and means of processing your personal data, and we take this responsibility seriously. We do not process your personal data for any purpose beyond what is stated in this Privacy Policy without first obtaining your consent.

This Privacy Policy is written in English to ensure all Malaysian players can read and understand it with ease. If you have any questions after reading this document, do not hesitate to reach out to our team — we are available to assist you 24 hours a day.

A66 Group operates on a data minimisation principle – we only collect data that is strictly necessary for legitimate purposes related to the operation of our platform. The following are the categories of data we collect:

Registration & Identity Data:

• Full name as stated on MyKad.
• An active Malaysian phone number (used for OTP verification and communications).
• Email address (if provided at registration or during profile updates).
• Date of birth (to verify the minimum age requirement of 21 years).
• MyKad identification number (required only during the KYC process for withdrawals exceeding certain limits).

Financial & Transaction Data:

• Records of all deposits and withdrawals, including amounts, dates, times, and payment methods used (Touch 'n Go eWallet, DuitNow, GrabPay, ShopeePay, Boost, FPX Maybank2u, or CIMB Clicks).
• E-wallet account number or bank details used for withdrawals (stored in encrypted format).
• Records of bonuses and promotions received and redeemed.

Platform Activity Data:

• Gaming records including game name, bets placed, winnings, and time played.
• Records of Sports Betting placed, including events, markets, odds, and outcomes.
• Login history including date, time, and device used.

Technical Data:

• The IP address of the device used to access the platform.
• Device type, operating system, and web browser version.
• Cookie data and related tracking technologies (as described in Section 9).

A66 group uses the personal data collected solely for the following purposes. We will not use your data for any other purpose without informing you in advance:

A66 Group processes your personal data on valid legal grounds. For most processing activities related to platform operations and the services you use, the legal basis is the fulfilment of a contractual agreement between you and A66 Group — namely the Terms & Conditions you agreed to at registration.

For processing related to fraud prevention, platform security, and general service improvement, a66 group relies on our legitimate interest as a platform operator to ensure safe and efficient operations for all users.

For direct marketing and personalised promotional communications, a66 group obtains your explicit consent at registration or through the preference settings in your account. You may withdraw this consent at any time without affecting your access to the platform.

In certain situations, A66 Group may need to process your data to fulfil applicable legal obligations — such as financial reporting requirements or responding to enquiries from legitimate authorities.

A66 group does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, in the course of operating the platform, we may share data with the following categories of parties under limited and controlled circumstances:

• Licensed Game Providers: Usernames and game history required to process bets and winnings through provider platforms such as Pragmatic Play, Evolution Gaming, and others. These providers are bound by strict data protection agreements.
• Payment Processors: Information required to process your deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, ShopeePay, Boost, or FPX — only the necessary transaction details are shared.
• Technical Service Providers: Providers of server hosting, cybersecurity, and technical infrastructure required to operate the a66 group platform. All such providers are bound by strict confidentiality agreements.
• Lawful Authorities: a66 group will disclose personal data when required to do so by law, court order, or an official request from a relevant law enforcement agency. In such circumstances, we will notify you where we are permitted to do so.

A66 group employs multiple layers of technical and organisational protection to keep your personal data secure at all times. Our security systems are built on the latest industry standards and regularly updated to address emerging threats:

• 256-bit SSL Encryption: All data transmitted between your web browser or app and the a66 group servers is encrypted using 256-bit SSL technology — the same standard used by leading financial institutions and banks in Malaysia.
• Internal Access Controls: Access to player personal data is restricted to a66 group staff who require it solely to carry out their specific duties. All access is logged and continuously monitored.
• Fund Segregation: Player deposit funds are held in a bank account completely separate from the company's operating funds — not only for financial security, but also to ensure a clear audit trail for every transaction.
• 24-Hour Threat Monitoring: A66 Group's security systems are continuously monitored by our technical team. Any suspicious activity or unauthorised access attempts will be detected and addressed immediately.
• Two-Factor Authentication: Sensitive operations such as withdrawals require verification via OTP sent to your registered phone number as an additional security layer.
• Regular Security Audits: a66 group conducts regular independent security audits of our systems to identify and address any vulnerabilities before they can be exploited.

While A66 Group takes all reasonable steps to protect your data, no system can guarantee 100% security under all circumstances. You also play an important role in protecting your account — always use a strong password, never share your login details with anyone, and contact us immediately if you suspect any suspicious activity on your account.

A66 Group does not retain your personal data longer than necessary for the purpose for which it was collected, or longer than required by applicable law. The following are the retention periods for key data categories:

• Active Account Data: Retained for the duration your account remains active with A66 Group, plus any additional period required to fulfil legal obligations following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in compliance with mandatory financial reporting and audit requirements.
• Support Communication Records: Retained for 3 years from the date of last communication for reference and dispute resolution purposes.
• Login & Security Activity Data: Retained for 12 months for security monitoring and fraud detection purposes.
• Marketing Data: Retained until you withdraw your consent to receive promotional communications, or until your account is closed.
• KYC Data: Retained for a minimum of 5 years after account closure in compliance with anti-money laundering requirements.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised data may be retained for statistical analysis and platform improvement purposes.

As an A66 Group player, you have the following rights regarding your personal data. We are committed to processing every request within a reasonable timeframe, not exceeding 30 working days:

• Right to Access: You have the right to request a copy of all personal data we hold about you. We will provide this information in a readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or outdated, you have the right to request an immediate correction. You may also update certain details directly within your account settings.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data from our systems. Please note that this right is not absolute — we may need to retain some data to fulfil legal obligations.
• Right to Object to Processing: You have the right to object to the processing of your data for specific purposes, particularly for direct marketing. Objections to marketing will be actioned immediately.
• Right to Data Portability: You have the right to receive the personal data you have provided to us in a structured, machine-readable format, for transfer to another data controller where applicable.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of any processing carried out prior to the withdrawal.

To exercise any of the above rights, please contact the a66 group privacy team by email at support@a66group.net by clearly stating your request along with your account number to help us process it efficiently. We may need to verify your identity before handling certain requests to ensure the security of your data.

A66 group uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions — such as maintaining your login session and ensuring transaction security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Stores your preferences such as display language, game display settings, and information that makes repeated use of the platform more convenient. Retained for 30 days.
• Analytics Cookies: Helps us understand how players use the platform — pages visited, time spent, and buttons clicked — in anonymised format. This information is used solely to improve the A66 Group platform.
• Security Cookies: Used to detect suspicious login activity, prevent automated access, and protect your account from unauthorised use.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the overall functionality of the a66 group platform. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

The A66 Group platform is strictly for individuals aged 21 and above. A66 Group does not accept registrations from minors, and we do not knowingly collect personal data from any individual under the age of 21.

If we discover or are made aware that we have collected personal data from an individual under the age of 21, we will take the following steps immediately:

• Suspending the account in question immediately while an investigation is carried out.
• Deleting all personal data belonging to that individual from our systems.
• Freezing all deposits and winnings in the account until the case is resolved in accordance with established procedures.
• Reporting the incident to the relevant authorities where deemed necessary.

Parents or guardians who suspect that their child or someone under their care has registered an account with A66 Group are encouraged to contact us immediately via email at support@a66group.net or through live chat for assistance.

A66 group reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or the latest data protection technologies. The most recent update date is always displayed at the top of this document.

For significant amendments — meaning changes that materially affect your privacy rights or the way we use your personal data — A66 Group will notify you via your registered email or an in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make any decisions you deem necessary.

Your continued use of the A66 Group platform after an amendment's effective date constitutes your acceptance of the updated Privacy Policy. If you do not agree with any amendment, you have the right to close your account and request deletion of your data before the amendment takes effect.

If you have any questions, concerns, or requests regarding this Privacy Policy or how a66 group handles your personal data, please do not hesitate to reach us through any of the following channels:

• Privacy Email: support@a66group.net – include "Privacy Enquiry" in your email subject line for faster handling.
• Live Chat: Available directly on the A66 Group platform — operating 24 hours a day, 7 days a week. The fastest option for general enquiries.
• WhatsApp: Contact us via the official A66 Group WhatsApp number listed in the platform's support section.

We are committed to responding to all privacy-related enquiries in Bahasa Malaysia within 1 to 3 business days. For more complex requests such as full data access or deletion requests, the process may take up to 30 business days depending on the complexity of the request.