Aa666 Privacy Policy — Our Commitment to Protecting the Personal Data of Malaysian Players

Aa666 collects your personal data through various means throughout your use of our platform. Below are the categories of data we collect and their sources:

1.1 Data You Provide Directly

When registering an aa666 account, you provide us with the following personal information:

• Full name as stated on your MyKad or passport
• An active Malaysian mobile number
• An active, accessible email address
• Date of birth for age verification (18 years and above)
• The account password you create yourself

When you use aa666's financial services – including deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX (Maybank2u, CIMB Clicks) – additional information that may be collected includes:

• Name of the e-wallet or bank account holder used
• Bank account number or e-wallet identifier (stored in encrypted format)
• Records of deposit and withdrawal transactions in MYR

If you contact the aa666 support team via Live Chat, email, or WhatsApp, the content of those communications — including your enquiries and complaints — may also be retained for service improvement and staff training purposes.

1.2 Automatically Collected Data

When you access and use the aa666 platform, our systems automatically collect the following technical data:

• Your device's IP address
• Web browser type and version
• Your device's operating system (Android, iOS, Windows, etc.)
• Access time and date
• Pages visited within the aa666 platform
• Gaming and betting session data (game type, play duration, bet amounts in MYR)
• Geolocation data (country/region only — not precise GPS coordinates)

This technical data is collected via cookies, web beacons, tracking pixels and similar technologies, as described in further detail in Section 5 of this Privacy Policy.

1.3 Identity Verification Data

In certain circumstances – particularly when you request a withdrawal exceeding a specified limit, or if aa666's security systems detect activity requiring verification – we may request identity verification documents such as:

• Copy of MyKad (front and back) or passport
• Proof of current address (utility bill or bank statement)
• Screenshots or proof of payment transaction

These documents are used solely for the purpose of identity verification and compliance with standard industry anti-money laundering (AML) procedures.

Aa666 collects and uses your personal data solely for the following legitimate, clearly stated purposes. We do not use your data for any other purpose without first obtaining your consent:

Aa666 does not use your data to make automated decisions that materially affect you without human review. If you have concerns about any of the purposes stated above, please contact us at support@aa666-jit.com for further clarification.

The security of your personal data is aa666's top priority. We continuously invest in the latest security infrastructure to ensure your data is protected at all times. The following are the security measures we employ:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and aa666's servers are fully encrypted using TLS 1.3 with 256-bit key length — the same standard used by major banks in Malaysia.
• Password Hashing: Your password is never stored in plain text. We use the bcrypt hashing algorithm with a unique salt value for each account — making your password irrecoverable even by aa666 staff.
• Two-Factor Authentication (2FA): You can enable 2FA for an added layer of security on your aa666 account. With 2FA active, accessing your account requires both your password AND a one-time OTP sent to your registered mobile number.
• Real-Time Activity Monitoring: aa666's systems monitor all account activity in real time to detect suspicious patterns — such as login attempts from unusual locations, unexpected changes to account details, or abnormal transaction activity.
• Secure Server Infrastructure: Your data is stored in a data centre environment protected by layered physical and digital access controls, an intrusion prevention system (IPS), and regular data backups.
• Regular Security Audits: aa666 conducts regular internal and independent security audits to identify and address any vulnerabilities in our systems before they can be exploited.

While aa666 takes all reasonable steps to protect your data, no online security system can be guaranteed 100% safe from every threat. We encourage you to play your part in keeping your account secure by using a strong and unique password, not sharing your login credentials with anyone, and enabling 2FA on your aa666 account.

Aa666 maintains a strict data-sharing policy — we do not sell or commercialise your personal data in any way. However, there are limited circumstances in which we may need to share your data with specific third parties in order to provide our services to you:

• Payment Service Providers: To process your deposits and withdrawals in MYR, aa666 is required to share the necessary transaction details with the payment gateways used – such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX processors. Data shared is limited strictly to what is needed to complete the transaction, and all such providers are bound by stringent data protection agreements.
• Game Software Providers: To provide casino and slots games, aa666 works with providers such as Evolution Gaming, Pragmatic Play, and others. Data shared is limited to the game session information required and does not include directly identifiable personal information.
• Cloud & Infrastructure Service Providers: aa666 uses certified third-party cloud services for data storage and platform operations. All such providers are bound by data processing agreements that comply with international data protection standards.
• Anti-Fraud Agency: aa666 may share data with third-party identity verification and fraud prevention services to maintain platform integrity and protect all members.
• Legal Authority: aa666 will comply with any valid court order or official request from the relevant authorities to disclose member data. In such cases, aa666 will disclose only the data required by that order or request and will endeavour to notify the affected member where permitted by law.

All third parties who receive aa666 member data are bound by confidentiality and data protection agreements that require them to use the data solely for specified purposes and to protect it to a standard equivalent to that of aa666.

The aa666 platform uses cookies and similar tracking technologies to enhance your experience and ensure certain features function correctly. Below are the types of cookies used by aa666:

• Essential Cookies: These cookies are required for the aa666 platform to function properly. They include session cookies that maintain your login status, security cookies to prevent unauthorised access, and language preference cookies. Essential cookies cannot be disabled, as doing so will cause the platform to malfunction.
• Performance & Analytics Cookies: These cookies help aa666 understand how members use our platform — which pages are visited most often, where members encounter difficulties, and how the navigation flow can be improved. Data collected is aggregated and is not used to identify any individual specifically.
• Functional Cookies: These cookies store your personal preferences — such as your chosen odds format (decimal, fractional, or American), display settings, and other configurations — to ensure a consistent aa666 experience every time you visit.
• Marketing Cookies: With your consent, aa666 may use marketing cookies to display ads relevant to your interests within the aa666 platform only. aa666 does not use cookie data to serve advertisements on third-party websites.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality of the aa666 platform. For instructions on managing cookies in popular browsers, please refer to your browser's help documentation (Chrome, Firefox, Safari, and so on).

As an aa666 member and the owner of your personal data, you have the following rights, which we are committed to respecting and facilitating:

Aa666 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required by applicable law. The following are our data retention policies:

• Active Account Data: For as long as your account remains active, aa666 will retain all personal data associated with that account.
• Data After Account Closure: After you close your aa666 account, we will retain your personal data for the minimum period required by law and compliance obligations — typically between three (3) and seven (7) years — before it is permanently deleted or anonymised.
• Financial Transaction Records: Financial transaction records in MYR may need to be retained for a longer period in accordance with anti-money laundering and tax reporting legal requirements.
• Support Communication Records: All communications with the aa666 support team are retained for two (2) years for dispute resolution and service improvement purposes.
• Cookie Data: Session cookies expire automatically when you close your web browser. Persistent cookies have a set expiry period ranging from 30 days to 12 months, depending on their type.

Once the retention period ends or you submit a valid data deletion request, aa666 will delete or aggregate/anonymise your data in a manner that ensures it can no longer be used to identify you as an individual.

The aa666 platform is strictly for individuals aged 18 and above. aa666 does not knowingly collect personal data from anyone under the age of 18. Should aa666 discover that personal data from a minor has been inadvertently collected, we will take immediate steps to delete that data and close the associated account.

If you believe a child or individual under the age of 18 has registered an account on aa666, please contact us immediately at support@aa666-jit.com so we can take the appropriate action without delay.

Aa666 also provides parental controls for parents or guardians concerned about their children accessing online gambling platforms. If you need assistance or information about child protection tools for shared family devices, please reach out to our support team — we're here to help.

Aa666 reserves the right to amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes in the way we deliver our services. When material amendments are made, aa666 will notify you via:

• In-platform notifications on aa666 upon your next login
• Email to the address registered to your account (for amendments that materially affect your privacy rights)
• Current as of the "Last Updated" date at the top of this page

We encourage you to review this Privacy Policy page periodically. Your continued use of the aa666 platform after any amendments take effect constitutes your acceptance of the revised policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your data by contacting support@aa666-jit.com.

If you have any questions, concerns, or requests regarding this Privacy Policy or how aa666 handles your personal data, please contact us through the channels below. Our team is available to assist in both Bahasa Melayu and English:

• Privacy Email: support@aa666-jit.com — Please use the subject line "Data Privacy Enquiry" to ensure your email is handled by the right team. We aim to respond to privacy enquiries within 24–48 hours.
• Live Chat 24/7: Available directly within the aa666 platform — best suited for general privacy enquiries and managing your account settings.
• WhatsApp Support: Available 24 hours a day, seven days a week for immediate enquiries.

For formal requests relating to data rights (access, correction, deletion, and so on), please send an email with the subject "Data Rights Request", including your aa666 account number and a clear description of your request. We will verify your identity before processing and will respond within 30 days.

All data privacy communications you send to aa666 are handled in strict confidence and accessed only by staff responsible for handling privacy matters.