A66 Casino Privacy Policy – Our Commitment to Protecting Malaysian Players' Data

A66 Casino is an online betting platform built specifically for Malaysian players. We are the data controller responsible for all personal information collected through our platform. This means we determine the purpose and manner in which your data is processed, and we are fully accountable for ensuring it is handled securely and in accordance with recognised data protection principles.

We understand that trust is the foundation of the relationship between A66 Casino and our players. In Malaysia, where the use of digital platforms for entertainment and betting is growing rapidly, we recognise that players need confidence that their information — from names and phone numbers to Touch 'n Go or DuitNow transaction details — is in the right hands and handled responsibly.

A66 Casino collects several categories of information when you use our platform. Below is a detailed explanation of each category:

A. Information You Provide Directly

• Your full name as it appears on your Malaysian identity card (MyKad).
• National identity card number (MyKad) or passport number for identity verification purposes.
• Date of birth, to verify that you meet the minimum age requirement of 18 years.
• Email address for account communications and platform notifications.
• A Malaysian mobile number for two-factor authentication and communications.
• A residential address in Malaysia.
• Payment method information you provide, such as your Touch 'n Go eWallet account number, GrabPay, Boost, ShopeePay, DuitNow account number, or FPX bank account details (Maybank2u, CIMB Clicks).

B. Information Collected Automatically

• The IP address of the device used to access the platform.
• Device information: device type, operating system, phone model, and web browser version.
• Session data: login time, session duration, and pages visited within the platform.
• Gaming activity records: betting history, game results, and transaction records.
• General geolocation information based on IP address to verify that you are accessing from Malaysia.

C. Information From Third Parties

• Identity verification from a certified KYC (Know Your Customer) service provider.
• Transaction verification information from Malaysian payment processors such as FPX and eWallet providers.
• Data from exclusion or restriction list checks conducted by relevant authorities, where required for compliance purposes.

A66 Casino uses collected personal data solely for legitimate purposes necessary to operate the platform and provide the best possible service to players in Malaysia. The following is a full breakdown of how your data is used:

• Account Management: Creating and managing player accounts, processing registrations, and verifying identity and age eligibility.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, as well as handling withdrawal requests to the same payment methods.
• Provision of Gaming Services: Enables access to all games including live baccarat, slots, poker, Malaysia Super League and EPL Sports Betting, lottery, virtual sports, and e-sports.
• Customer Support: Providing relevant and accurate assistance whenever you contact the A66 Casino support team in Bahasa Malaysia, available 24/7.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, duplicate account abuse, or any activity that violates the platform's terms.
• Marketing Communications: Sending you information about A66 Casino promotions, bonuses, and the latest offers — only with your consent, and you may unsubscribe at any time.
• Platform Improvements: Analysing aggregated usage patterns (without identifying individual users) to improve the platform's design, performance, and features.
• Legal Compliance: To meet legal obligations related to anti-money laundering (AML), identity verification, and reporting requirements to the relevant authorities.

A66 Casino processes your personal data on valid legal grounds. Understanding these grounds helps you know your rights in each situation:

• Contract: Processing necessary to perform a contract with you — such as handling deposits, running games, and processing withdrawals. This is the primary legal basis for most data processing at A66 Casino.
• Legitimate Interests: Processing for purposes of platform security, fraud prevention, and service improvement — where our legitimate interests do not override your fundamental rights.
• Legal Obligations: Processing required by applicable law, including KYC, AML, and reporting obligations to regulatory authorities.
• Consent: For marketing and promotional communications, we require your explicit consent. You may withdraw this consent at any time through your account settings or by contacting A66 Casino support.

A66 Casino does not sell players' personal data to anyone. However, there are limited situations where we share data with third parties necessary to operate the platform:

• Payment Processors: Malaysian eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow providers, and banks participating in FPX (Maybank, CIMB) receive the transaction data necessary to process your payments.
• Game Providers: Internationally licensed casino game software providers that supply live baccarat tables, slots, and other games may receive session data necessary to operate those games. They are bound by strict confidentiality agreements.
• KYC Service Provider: Identity verification companies that assist us in verifying players' identity and age in accordance with legal requirements.
• Analytics Services: The analytics tools we use to understand platform usage patterns in aggregate — data shared is anonymised and cannot be linked to any individual.
• Legal Requirements: Legal authorities, regulatory bodies, or courts issuing valid and legally binding orders or requests.

A66 Casino continuously invests in security infrastructure to protect the personal data of Malaysian players. The technical and organisational measures we employ include:

• 256-bit SSL Encryption: All communications between your browser and A66 Casino servers are encrypted to 256-bit SSL standard — the same standard used by Malaysia's major banks.
• Data-at-Rest Encryption: Sensitive data stored in our databases — including payment details and identity documents — is encrypted at the storage level using robust encryption algorithms.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA via SMS or an authenticator app for an additional layer of account security.
• 24/7 Security Monitoring: An automated monitoring system that operates around the clock to detect any intrusion attempts, unauthorised access, or suspicious activity.
• Internal Access Controls: A66 Casino staff only have access to the data required to carry out their specific duties. All access is logged and audited on a regular basis.
• Regular Security Testing: The A66 Casino platform undergoes regular penetration testing and security audits conducted by independent security specialists.
• Secure Data Backup: Data is regularly backed up to a secure, off-site location to ensure service continuity in the event of an incident.

A66 Casino retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy or as required by applicable law. The following are retention period guidelines for key data categories:

• Active Account Data: Retained for as long as your account is active and for an additional period following account closure as required by law.
• Financial Transaction Records: Retained for seven (7) years from the transaction date in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
• Identity Verification Documents (KYC): Retained for five (5) years from the date of verification or account closure, whichever is later, for regulatory compliance.
• Support Communication Logs: Retained for two (2) years from the date of communication, for reference and resolution of any disputes.
• Technical Data (Access Logs): Retained for twelve (12) months for security and incident investigation purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered. For any data held in physical form, documents are destroyed in accordance with established confidential document handling procedures.

As an A66 Casino player, you have the following rights regarding your personal data. We respect and facilitate the exercise of all these rights:

A66 Casino uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit a website. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session and enabling secure areas to operate. These cookies cannot be disabled as they are fundamental to the platform's operation.
• Performance Cookies: Collects information on how you use the platform — most frequently visited pages, session duration, and similar metrics. This information is used in aggregate form to improve the platform.
• Functional Cookies: Remembering your preferences — such as language, text size, and other settings — to provide a more personalised experience on future visits.
• Analytics Cookies: Used by our analytics tools to understand overall usage patterns without identifying individual players.

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the A66 Casino platform. Most modern browsers allow you to configure cookie preferences in detail by type or domain.

In operating the A66 Casino platform, some data may be processed or stored on servers located outside Malaysia. This occurs primarily in the context of international casino game providers that supply the technical infrastructure for live baccarat tables and other games.

When data is transferred outside Malaysia, A66 Casino ensures that:

• The recipient country or region provides an adequate and comparable level of data protection.
• Appropriate data transfer agreements — including standard data protection clauses — have been put in place with the data recipients.
• The same or stricter technical security measures are applied at the location where the data is stored or processed.
• Data transfers are carried out only when necessary to deliver the specific service you are using.

A66 Casino is an exclusively adult platform for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. All registration applications go through an age verification process designed to block access by underage individuals.

If we discover that personal data belonging to a minor has been collected without our knowledge, we will take immediate steps to delete that information and close the account in question. Parents or guardians who find that their child has registered on the A66 Casino platform without authorisation should contact us immediately at support@a66casino.asia for prompt action.

A66 Casino reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, applicable legal requirements, or other relevant operational reasons.

When there are material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the main page of the A66 Casino platform for a reasonable period.
• Sending notifications via email or in-platform alerts to registered players regarding significant changes.

Continued use of the A66 Casino platform after any amendments take effect will be considered acceptance of the updated privacy terms. We recommend reviewing this page periodically — at least every few months — to stay informed about how we manage your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please do not hesitate to reach out to the A66 Casino team. We take every privacy concern seriously and are committed to providing a clear and satisfactory response.

Ways to reach us regarding privacy matters:

• Live Chat: Available 24/7 via the chat icon within the A66 Casino platform — the fastest way to get an immediate response.
• Email: Send an email to support@a66casino.asia with the subject line "Privacy Inquiry" and a description of your issue. We aim to respond within 48 business hours.