Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by aa666, the operator of the online casino and sports betting platform accessible at aa666.casa ("Platform", "we", "us", "our"). This Policy explains how aa666 collects, uses, stores, and discloses personal data in connection with your registration, use of the Platform, and any communications you have with us.

aa666 recognises the importance of privacy to its players, including the many Malaysians who use the Platform from cities such as Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, and Johor Bahru. We are committed to handling personal data responsibly, in compliance with applicable international data protection standards and our operating licence obligations.

This Policy applies to all personal data collected through the Platform, including data collected when you browse the site without registering, when you create an account, when you make deposits or withdrawals via Malaysian payment channels such as DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX, Maybank2u, CIMB Clicks, or Public Bank Online, and when you contact our support team.

By registering an account or otherwise using the Platform, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. If you do not agree, please do not register or continue using the Platform.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, date of birth, government ID number, payment details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, aa666.
• "Data Processor" means a third party that processes Personal Data on behalf of aa666 under a contractual arrangement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "KYC" means Know Your Customer identity and age verification procedures required by aa666's operating licence and anti-money laundering obligations.
• "Cookie" means a small text file placed on your device by the Platform to store session state, preferences, or analytics data.
• "Player" / "User" / "you" means any individual who accesses or uses the aa666 Platform.

3. Personal Data We Collect

aa666 collects Personal Data through multiple channels and at different stages of your interaction with the Platform. The categories of data collected are set out below.

3.1 Registration & Account Data

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Residential address (including city, postcode, and country)
• Email address and mobile phone number
• Username and encrypted password
• Preferred currency (MYR for Malaysian players)
• Communications preferences

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (MyKad, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or equivalent)
• Payment method ownership documentation (e.g., confirmation of your DuitNow registration, Touch 'n Go eWallet account, or bank account in your name)
• Selfie or video verification image, where required by enhanced due diligence procedures

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references
• Account balance history
• Bonus credit and wagering records
• Cryptocurrency wallet addresses where applicable (BTC, USDT)
• Bank account identifiers associated with your withdrawals (e.g., last four digits of an account number held with Maybank, CIMB, or Public Bank)

3.4 Technical & Usage Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, and browser version
• Session duration, pages visited, and features accessed
• Game session logs, bet history, and game outcomes
• Click stream and navigation data collected via cookies and analytics tools

3.5 Communications Data

• Content of live chat conversations with aa666 support agents
• Email correspondence with our team
• Responses to player surveys or feedback requests
• Records of any complaints or disputes filed

4. Legal Basis for Processing

aa666 processes your Personal Data only where a valid legal basis exists. The primary legal bases applicable to our processing activities are:

• Contractual necessity: Processing required to perform the contract between you and aa666 — including account management, deposit processing, game delivery, and withdrawal fulfilment.
• Legal obligation: Processing required to comply with applicable licensing conditions, anti-money laundering (AML) regulations, and KYC mandates imposed by our operating jurisdiction.
• Legitimate interests: Processing carried out for aa666's legitimate business interests, including fraud prevention, platform security, and improving the quality of our services, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your prior consent. You may withdraw consent at any time by contacting support or adjusting your account preferences.

5. How We Use Your Personal Data

aa666 uses the Personal Data we collect for the following purposes:

• Creating, maintaining, and administering your player account
• Processing deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and other supported payment channels
• Conducting KYC and age verification to comply with our licensing obligations and to ensure the Platform is used only by players aged 21 and above
• Delivering casino games, live dealer tables, and sports betting functionality
• Applying bonus credits and managing VIP programme tier benefits
• Providing customer support via live chat and email
• Detecting, investigating, and preventing fraudulent activity, money laundering, and other prohibited conduct
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts
• Sending promotional and marketing communications where you have opted in or where permitted under applicable rules
• Conducting responsible gambling monitoring, including detecting signs of problem gambling behaviour and activating safeguards where appropriate
• Improving the Platform through analytics, A/B testing, and user research
• Complying with legal obligations, regulator requests, and court orders

6. Data Sharing with Third Parties

aa666 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share your data only in the circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Service Providers (Data Processors)

aa666 engages third-party service providers who process Personal Data on our behalf under data processing agreements. These include:

• Payment processing infrastructure providers facilitating DuitNow, FPX, e-wallet integrations, and cryptocurrency transactions
• KYC and identity verification technology providers
• Cloud infrastructure and data hosting providers
• Customer support platform providers
• Fraud detection and anti-money laundering screening services
• Email and communication delivery services
• Website analytics and performance monitoring providers

All service providers are contractually prohibited from using your data for any purpose other than providing the specified service to aa666.

6.2 Regulatory & Legal Disclosures

aa666 may disclose your Personal Data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so, where disclosure is necessary to protect the rights or safety of aa666 or its users, or where required under our operating licence conditions.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of aa666's assets, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer via email or a prominent notice on the Platform, and the acquirer will be required to honour the commitments made in this Policy.

7. International Data Transfers

aa666 operates internationally, and your Personal Data may be transferred to and processed in countries outside Malaysia. Where Personal Data is transferred internationally, aa666 takes steps to ensure that appropriate safeguards are in place, including standard contractual clauses or equivalent transfer mechanisms, to ensure your data receives a comparable level of protection wherever it is processed.

8. Data Retention

aa666 retains your Personal Data for as long as is necessary to fulfil the purposes outlined in this Policy, or as required by applicable law and our licensing obligations.

• Active account data: Retained for the lifetime of your account plus a minimum of five (5) years following account closure, as required by AML record-keeping standards.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification, or longer if required by the licensing jurisdiction.
• Transaction records: Retained for a minimum of five (5) years from the transaction date.
• Support communications: Retained for up to three (3) years from the date of the communication, or longer if related to an unresolved dispute.
• Marketing data: Retained until you withdraw consent or request erasure, provided no legal obligation requires continued retention.

When Personal Data is no longer required and no legal basis for continued retention exists, it will be securely deleted or anonymised in accordance with aa666's data disposal procedures.

9. Cookies & Tracking Technologies

aa666 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device when you visit a website. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These enable login sessions, security tokens, and core site functionality. They cannot be disabled without impairing your ability to use the Platform.
• Performance & Analytics Cookies: Collect anonymised data about how visitors interact with the Platform — which pages are visited most, session duration, and error events — to help us improve site performance. These require your consent.
• Functional Cookies: Remember your preferences such as language setting, preferred currency display (MYR), and gameplay interface settings to provide a more personalised experience.
• Marketing Cookies: Used to deliver relevant promotional content and track the effectiveness of our campaigns. Only deployed with your prior consent.

You may manage cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the availability or performance of Platform features. Most modern browsers allow you to block or delete cookies via the browser's settings menu.

10. Data Security

aa666 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit TLS (Transport Layer Security) encryption on all data transmissions between your device and aa666's servers
• Encryption of sensitive data fields at rest within our database infrastructure
• Access controls ensuring that only authorised personnel with a legitimate need can access Personal Data
• Multi-factor authentication (MFA) enforced for all aa666 administrative system access
• Regular security audits and penetration testing of our infrastructure
• Incident response procedures for detecting and responding to data security breaches

While aa666 applies industry-standard security measures, no system can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, aa666 will notify affected players without undue delay and take appropriate remediation steps.

You also have a role to play in protecting your account. Use a strong, unique password for your aa666 account, enable two-factor authentication (2FA) where available, and never share your login credentials with any third party.

11. Your Data Rights

Subject to applicable law and the terms of our operating licence obligations, you have the following rights in respect of your Personal Data held by aa666:

Right	What It Means	How to Exercise
Right of Access	You may request a copy of the Personal Data aa666 holds about you, along with information about how it is processed.	Contact support via live chat or email. We will respond within 30 days.
Right to Rectification	You may request correction of inaccurate or incomplete Personal Data held in your account.	Update most details via account settings, or contact support for KYC record corrections.
Right to Erasure	You may request deletion of your Personal Data where there is no overriding legal basis for continued retention.	Submit a deletion request to support. Note: AML and licensing obligations require retention of certain records for minimum periods regardless of this request.
Right to Restriction	You may request that aa666 temporarily restricts processing of your data in certain circumstances, such as while a dispute is under review.	Contact support with details of your request and the reason for restriction.
Right to Data Portability	Where processing is based on consent or contract, you may request a structured, machine-readable copy of the data you have provided to aa666.	Submit a portability request to support. We will provide data in CSV or JSON format where feasible.
Right to Object	You may object to processing carried out on the basis of legitimate interests, including direct marketing. Objections to marketing will be actioned promptly.	Unsubscribe via email footer links or contact support.
Right to Withdraw Consent	Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.	Manage consent preferences via account settings or contact support.

aa666 will not charge a fee for exercising any of the above rights unless a request is manifestly unfounded or excessive. We will respond to all valid requests within 30 calendar days. Where a request cannot be fulfilled in full — for example, because legal obligations require continued retention — we will explain the reason clearly.

12. Minors & Age Policy

aa666 is strictly an adult-only platform. We do not knowingly collect Personal Data from individuals under the age of 21. If you are under 21, you must not register an account or provide any Personal Data to aa666.

If aa666 becomes aware that Personal Data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on our Platform, please contact us immediately via support.

13. Changes to This Policy

aa666 reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players via email and/or a prominent notice displayed on the Platform prior to the changes taking effect. The "last updated" date at the top of this page will be revised to reflect the date of any amendment.

If you continue to use the Platform after a revised Policy takes effect, you will be deemed to have accepted the updated terms. If you do not agree with a revised Policy, you must stop using the Platform and may request account closure by contacting our support team.

We encourage you to review this Policy periodically to stay informed about how aa666 handles your Personal Data. Historical versions of this Policy are available upon request.

14. Contact Us & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or aa666's handling of your Personal Data, please contact us using the details below. We are committed to responding to all privacy-related enquiries promptly and thoroughly.

• Live Chat: Available 24 hours a day, 7 days a week, via the chat widget on aa666.casa. This is the fastest channel for most queries.
• Email: [email protected] (plain text — this is not a clickable link)

When submitting a data rights request or privacy complaint, please include: your registered username, the nature of your request, and sufficient detail to allow us to locate and act upon the relevant data. This helps us process your request efficiently and within the 30-day response window.