Aa666 Privacy Policy – Our Commitment to Protection Every Malaysian Player's Personal Data

Aa666 collects your personal data solely for legitimate purposes related to the provision of platform services. Below are the categories of information we collect and their specific purposes:

Account Registration Information:

• Full name as stated in official identification documents
• Mobile phone number used for two-factor authentication
• Email address for account communications and important notifications
• Date of birth for minimum age verification of 18 years
• Passwords in encrypted form – aa666 does not store passwords in plain text

Identity Verification Information (KYC):

• A copy of a valid identity card (MyKad) or passport
• Proof of residential address such as a utility bill or recent bank statement
• Selfie or photo holding an identification document for liveness verification

Financial & Transaction Information:

• Payment method details used (Touch 'n Go, GrabPay, DuitNow, Boost, or ShopeePay e-wallet number, or FPX bank name)
• Deposit and withdrawal history in Malaysian Ringgit (MYR)
• Betting and gaming activity records for legal compliance purposes

Technical & Usage Information:

• IP address used when accessing the aa666 platform
• Device type, operating system, and browser used
• Login session data including time, approximate location, and session duration
• Cookie data and related web tracking technologies

Every piece of data we collect has a clear and legitimate purpose. aa666 uses your information exclusively for the following purposes:

• Account Management: Creating and managing your account, processing login requests, and keeping your account secure from unauthorised access.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, and FPX, as well as managing withdrawals to the same payment methods in MYR.
• KYC & Anti-Money Laundering Compliance: Verifying member identity to comply with legal requirements relating to Know Your Customer (KYC) and anti-money laundering.
• Age Verification: All members must meet the minimum age requirement of 18 years before being permitted to play on aa666.
• Customer Support: Using account records and transaction history to resolve inquiries, complaints, and support requests more efficiently.
• Platform Security: Detecting and preventing fraudulent activity, multi-account abuse, and other security threats that could affect the platform and other members.
• Platform Improvements: Analyzing aggregated and anonymized usage patterns to improve features, layout, and the overall performance of the aa666 platform.
• Service Communications: Sending important notifications about your account, policy changes, or security information you need to be aware of.
• Marketing Communications: Sending information about aa666 promotions, bonuses, and offers — you may opt out of marketing communications at any time through your account settings.

Aa666 does not sell, rent, or disclose members' personal data to third parties for marketing or commercial purposes. However, there are limited situations in which we may need to share certain information with trusted third parties:

• Payment Service Providers: Required transaction information is shared with local Malaysian payment processors that support methods such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX to facilitate deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Identity Verification Provider: KYC information may be processed through verified identity validation platforms to ensure compliance with anti-fraud and anti-money laundering requirements.
• Legal Authorities: aa666 complies with Malaysian legal requirements and will disclose information to relevant authorities such as the police or regulatory bodies when required by law or a valid court order.
• Technical Service Providers: Technical infrastructure providers — such as hosting and cybersecurity services that support aa666's platform operations — are all bound by strict data processing agreements.

In all of the above cases, aa666 ensures that the third parties involved maintain adequate data protection standards and receive only the minimum data necessary for their specific task.

Aa666 invests seriously in security infrastructure to ensure member data remains protected at all times. The following are the layers of protection we have in place:

• 256-Bit SSL Encryption: All communications between your device and aa666's servers are encrypted using TLS 1.3 protocol with a 256-bit SSL certificate. This ensures no third party can intercept or read data in transit.
• Encryption of Data at Rest: Personal data stored in aa666's databases is also encrypted — meaning even if someone gains unauthorized access to the servers, the data cannot be read without the encryption key.
• Two-Factor Authentication (2FA): aa666 recommends and supports two-factor authentication via SMS code as an added layer of security when logging into your account.
• Unusual Activity Monitoring: Our system continuously monitors login patterns and account activity to detect unauthorised access attempts or suspicious behaviour.
• Environment Isolation: Member data is stored in an environment isolated from internal operational systems, with strict access controls and full audit logs.
• Regular Penetration Testing: aa666 conducts regular security penetration testing by independent cybersecurity experts to identify and address vulnerabilities before they can be exploited.

While aa666 takes all reasonable steps to protect your data, no security system is entirely foolproof. You are also responsible for keeping your account password and login credentials secure.

Aa666 uses cookies and other web tracking technologies to enhance the user experience and understand how members interact with our platform. Here are the types of cookies we use:

You can manage or disable optional cookies through your browser settings. Please note that disabling essential cookies may affect core aa666 platform functionality, such as the ability to log in and save account settings.

As an aa666 member and owner of your personal data, you hold the following rights, which aa666 respects and facilitates:

• Right to Access Data: You have the right to request a copy of all personal data we hold about you. We will provide this in a readable format within 14 business days from the date of the request.
• Right to Correct Data: If any of your personal information is inaccurate or out of date, you have the right to request a correction. You can update much of this information directly through your account profile settings.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data. Please note that we may need to retain certain data to fulfil legal obligations even after your account is closed.
• Right to Object to Processing: You may object to us processing your data for specific purposes such as direct marketing. You can opt out of all marketing communications via the unsubscribe link in any email or through your account settings.
• Right to Data Portability: You have the right to request a copy of your data in a structured, reusable format – for example, CSV or JSON.
• Right to Withdraw Consent: Where aa666 relies on your consent as the legal basis for processing your data, you have the right to withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.

To exercise any of the rights above, contact us at support@aa666-bangla.com, stating the right you wish to exercise and the information needed to verify your identity. We will respond within 14 business days.

Aa666 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law. The following are our general data retention guidelines:

• Active Account Data: Your personal data is retained for the duration of your active account and for a reasonable period following account closure to facilitate the resolution of any outstanding disputes.
• Financial Transaction Records: All deposit and withdrawal records in MYR are retained for a minimum of seven years to comply with Malaysian accounting and anti-money laundering legal requirements.
• KYC Data: Identity verification documents are retained for the period specified by applicable compliance laws — typically five years from the date of verification or account closure, whichever is later.
• Security Log Data: Access logs and security activity are retained for a minimum of 12 months to assist with security incident investigations when required.
• Marketing Data: Information used solely for marketing purposes will be deleted once you opt out of marketing communications or after a reasonable period of inactivity.

When data is no longer required, aa666 applies secure deletion procedures to ensure it cannot be recovered. This includes data overwriting, cryptographic erasure for encrypted data, and physical destruction of storage media where applicable.

Aa666 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform service improvements. Whenever there are material changes to how we handle your data, we will:

• Updating the "Last Updated" date at the top of this document
• Notifying all active members via their registered email or in-platform notification at least 14 days before changes take effect
• Requires confirmation of receipt for highly significant changes that affect your fundamental rights as a member

Continued use of the aa666 platform after the effective date of any Privacy Policy changes constitutes acceptance of the updated terms. If you do not agree with the changes, you have the right to close your account before they take effect.

Contact aa666's Data Protection Officer: For any questions, concerns, or requests relating to your data privacy, please contact us at support@aa666-bangla.com. Include "Data Privacy Request" in the subject line. We aim to respond within three to four business days for privacy enquiries, and to reach a full resolution within 14 business days.