Privacy Policy A66 Tech – Malaysian User Data Protection

1Introduction

A66 Tech ("we", "a66 tech", or "Platform") takes seriously its responsibility to protect the privacy of every user who entrusts us with their personal information. This Privacy Policy is crafted to ensure you fully understand how your data is managed — from the point of collection through to deletion.

The a66 tech platform operates in Malaysia and complies with the Personal Data Protection Act 2010 (PDPA) as well as relevant international data protection standards. We believe transparency is the foundation of trust — which is why we provide this document in plain, easy-to-understand language, not confusing legal jargon.

This policy applies to all users of the a66 tech platform, including website visitors, registered users, and anyone who interacts with our services via the website, mobile app, or any official a66 tech communication channel.

This Privacy Policy should be read together with the Terms and Conditions and Responsible Gaming Policy us for a comprehensive understanding of your rights and responsibilities as an a66 tech platform user.

2Information We Collect

A66 tech collects your personal information through several means — either provided directly by you, collected automatically as you use the platform, or obtained from trusted third-party sources for identity verification purposes.

Information you provide directly:

• Full name as stated on your identification document.
• Date of birth for age verification purposes (you must be 18 years of age or older).
• An active email address used for communications and account verification.
• An active Malaysian mobile phone number.
• Bank account or e-wallet details for processing deposits and withdrawals.
• Identity verification documents (national ID, passport) for the KYC process.

Information collected automatically:

3How We Use Your Data

Every piece of information we collect has a clear and legitimate purpose. a66 tech does not use your data for any purpose other than those stated here without first obtaining your additional consent.

• Identity verification and KYC: Ensuring every user is at least 18 years old and uses a valid identity to comply with legal requirements.
• Payment processing: Managing deposits via DuitNow QR, FPX, Touch 'n Go eWallet, and GrabPay, as well as processing withdrawals to your bank account or e-wallet securely and promptly.
• Account security: Detecting suspicious login activity, unauthorised access attempts, and potential fraud or money laundering.
• Personalize your experience: Personalising game recommendations, promotions, and platform content based on your playing habits and preferences.
• Service communications: Sending important notifications about your account, security updates, policy changes, and promotional information you have agreed to receive.
• Analytics & improvement: Analysing aggregated platform usage patterns to improve performance, user interface, and the overall gaming experience.
• Legal compliance: Complying with legal reporting requirements, retaining transaction records for the periods prescribed by Malaysia's financial regulations, and cooperating with authorities when required by law.

A66 tech applies the principle of data minimisation — we only collect information that is strictly necessary for the purposes stated above. We do not collect irrelevant or excessive data simply because it may be useful in the future.

4Sharing Information with Third Parties

A66 tech does not sell, rent, or disclose users' personal information to third parties for marketing or commercial purposes. However, in the course of operating the platform, we work with certain service providers who require limited access to your data.

Categories of third parties that may receive your data:

• Payment processors: Payment gateway providers that handle deposit and withdrawal transactions. They receive only the information necessary to process payments.
• KYC service providers: Third-party identity verification companies that help us verify documents and user identities in accordance with legal compliance requirements.
• Game providers: Game software providers may receive anonymized user IDs for technical integration purposes — not personally identifiable information.
• Cloud infrastructure providers: Cloud computing services that store and process our data in data centers protected by high-grade security standards.
• Legal authority: Government agencies, regulatory bodies, or law enforcement authorities where disclosure is required under applicable Malaysian law.

Any changes to our third-party partner list involving the processing of your personal data will be communicated through updates to this Privacy Policy.

5Cookies & Tracking Technologies

The a66 tech platform uses cookies and similar tracking technologies to enhance your experience, ensure account security, and understand how our platform is used. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as maintaining login sessions, CSRF security, and language preferences. These cookies cannot be disabled as the platform will not function without them.
• Performance Cookies: Collecting information on how you interact with the platform — most frequently visited pages, time spent, and errors encountered — to help us improve performance.
• Functional Cookies: Saving your preferences such as interface language, display settings, and frequently used account information to deliver a more personalised experience.
• Analytics Cookies: Helping us understand overall platform usage patterns through aggregated and anonymised data. This data is used to make better development decisions.

You can manage your cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality of the a66 tech platform and you may be unable to log in or use certain features fully.

6Data Security Measures

Protecting your personal data is a66 tech's highest priority. We have invested in comprehensive security infrastructure to ensure your information is always safeguarded against unauthorised access, data breaches, and misuse.

• 256-bit SSL/TLS Encryption: All communications between your device and a66 tech servers are protected by military-grade encryption that cannot be broken with current technology.
• Encryption of data at rest: Sensitive information such as passwords, KYC data, and financial details are stored in encrypted format (encrypted at rest) using the latest encryption algorithms.
• Two-factor authentication (2FA): An extra layer of security that ensures only you can access your account, even if your password is compromised.
• 24/7 Monitoring: Our automated threat detection system monitors all platform activity around the clock to identify and respond to potential security threats in real time.
• Internal access controls: Access to user data among a66 tech staff is restricted on a "need-to-know" basis — only personnel who require access to carry out their duties are permitted.
• Regular security audits: Our platform undergoes regular independent security audits to identify and address any vulnerabilities before they can be exploited.

While we take every reasonable step to protect your data, no system can be guaranteed 100% secure. We encourage you to also play your part in keeping your account safe by using a strong password, enabling 2FA, and not sharing your login credentials.

7Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the data protection principles we uphold, you have the following rights regarding your personal data held by a66 tech:

To exercise any of the above rights, contact the a66 tech customer support team via Live Chat within the platform. We will verify your identity before processing your request to ensure the security of your data.

8Data Storage & Deletion

A66 tech retains your personal data for as long as your account is active or as long as necessary to provide the services you have requested. Once an account is closed, we retain certain records in accordance with applicable legal obligations.

• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial legislation and anti-money laundering requirements.
• KYC Documents: Retained for 5 years after account closure in accordance with regulatory compliance requirements.
• Activity logs: Security and activity logs are retained for 2 years for investigation and dispute resolution purposes.
• Communication data: Customer support communication records are retained for 3 years.
• Game data: Gaming and wagering history is retained for the duration of the active account and 5 years after closure.

Once the mandatory retention period has expired, your data will be securely deleted using industry-standard data erasure methods — ensuring it cannot be recovered or misused.

9Changes to This Privacy Policy

A66 tech reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When we make significant changes, we will notify you through the following methods:

• In-platform notification when you log in after the amendment's effective date.
• A notification email will be sent to the address you registered with a66 tech.
• A prominent notice on the platform's home page for a minimum of 30 days.

The "Updated" date at the top of this page always reflects the date of the latest version of this Privacy Policy. You are encouraged to check this page periodically to stay informed of any recent changes.

Continued use of the a66 tech platform after any amendment to this Privacy Policy takes effect constitutes your acceptance of the updated terms. If you disagree with the changes made, please contact us or close your account before the amendment's effective date.

10Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the management of your personal data by a66 tech, please contact our team through the following channels:

• Live Chat: Our primary support channel — available 24/7 within the a66 tech platform. This is the fastest way to get a response.
• Email: [email protected] — for written inquiries requiring documentation. We will respond within 2 business days.
• Website: a66tech.win — for general information and access to all our platform policies.

For privacy rights requests (access, correction, deletion), please clearly state the type of request and provide sufficient proof of identity so we can process your request securely and accurately.

We value your trust in a66 tech and are committed to providing transparent, professional, and timely responses to all data privacy inquiries.