AA66 Official Documents

AA66 Privacy Policy – Malaysian Player Data Protection

AA66 takes every member's privacy seriously. This policy clearly explains what data we collect, how it is used, who can access it, and your rights as a Malaysia player to control your own personal information.

Last Updated: 1 January 2026

AA66's Six Privacy Commitments to Malaysian Players

These are not just words on paper — they are the technical and operational standards we uphold every day.

256-Bit SSL Encryption

All data transmitted between your browser and aa66's servers is protected with 256-bit SSL encryption — the same standard used by Maybank, CIMB, and Malaysia's leading financial institutions.

Your Data Is Never Sold

AA66 has never and will never sell, rent, or transfer your personal data to advertisers, data brokers, or any third party for commercial purposes.

Restricted Data Access

Only aa66 staff who require data access for legitimate operational purposes are permitted to view members' personal information, and every instance of access is automatically logged for internal audit.

Right to Erasure

You may request the deletion of your personal data from aa66's records at any time, subject to data retention requirements mandated by applicable Malaysian law.

Rapid Breach Notification

In the event of any data security breach affecting your information, aa66 is committed to notifying affected members within a reasonable timeframe in accordance with applicable law.

Malaysian Legal Compliance

The aa66 Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable regulations governing online platform operators in Malaysia.


AA66 Full Privacy Policy

This document outlines aa66's policies and practices regarding the collection, use, storage and protection of members' personal data. By registering for or using the aa66 platform, you agree to the terms of this Privacy Policy.

1Introduction and Scope of This Policy

AA66 ("we", "the platform") operates as an online entertainment platform offering a wide range of games — including slots, Live Casino, Sports Betting, e-sports, jackpots, roulette, and blackjack — to Malaysian players. In running these operations, aa66 collects and processes members' personal data to ensure our services function safely, smoothly, and responsibly.

This Privacy Policy applies to all personal information collected through the aa66 website, the aa66 mobile app and all official aa66 communication channels including email and customer support live chat. This document also defines your rights as a data subject and how you may exercise them.

AA66 is committed to full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable laws and regulations. We take seriously our responsibility as a data controller entrusted with the personal information of over 850,000 members across Malaysia.

This Privacy Policy should be read together with Terms & Conditions aa66. Both documents together form the complete agreement between you and the aa66 platform regarding your use of our services.

2Types of Personal Data We Collect

AA66 collects several categories of personal data to enable the platform to operate effectively and securely. Below is a full list of the data categories we collect from members:

Identity Data:

  • Full name as it appears on your official identification document.
  • An active mobile number registered in your name.
  • Email address (if provided during registration or correspondence).
  • Date of birth (for the purpose of verifying the 18-year age requirement).
  • National identity card number (MyKad) or other identity document, if requested during the KYC verification process.

Financial & Transaction Data:

  • Payment account details used — TNG eWallet account number, GrabPay, Boost, ShopeePay, DuitNow, FPX account number, Maybank2u, or CIMB Clicks.
  • Records of all deposit and withdrawal transactions, including amounts, timestamps and payment methods.
  • Account balance records and betting history on the aa66 platform.

Technical & Usage Data:

  • The IP address of the device used to access the aa66 platform.
  • Device information including browser type, operating system and screen resolution.
  • Login, logout and in-platform activity logs.
  • Cookie data and similar tracking technologies (see Section 8).
  • General location information based on IP address (state/city within Malaysia).

Important Note: AA66 does not directly collect credit or debit card numbers. All payments are processed through third-party payment gateways that hold their own PCI-DSS security certification. AA66 only receives transaction success confirmations and does not store your payment card details.

3How Personal Data Is Collected

AA66 collects your personal data through several key channels. Understanding these channels helps you make more informed decisions about the information you share with us:

  • Account registration: When you complete the registration form on aa66, you voluntarily provide your name, phone number, and other basic details we need to open your account.
  • Financial transactions: Every time you make a deposit or withdrawal via TNG eWallet, GrabPay, DuitNow, FPX, or any other payment method, our system records the transaction details for account records and audit purposes.
  • Gaming activity: Every bet placed, every game round, and every interaction at aa66's live casino tables is automatically recorded by our system for bet settlement, bonus calculation, and fraud detection purposes.
  • Customer support communications: When you contact the aa66 support team via live chat or email, your conversation transcript is saved for service quality improvement and future reference purposes.
  • Cookies and tracking technologies: The aa66 platform uses session cookies and persistent cookies to maintain your login session, remember your preferences, and analyse platform usage patterns in aggregate.
  • Identity verification (KYC): When required for compliance purposes, aa66 may ask you to submit a copy of your identification document. This process is carried out through secure, encrypted channels.

4How We Use Your Personal Data

AA66 uses your personal data only for legitimate, relevant, and necessary purposes. We do not process your data for any purpose not stated in this policy without first obtaining your consent. The following are the specific purposes for which aa66 uses your data:

  • Account management: Opening, managing and securing your aa66 account, including processing logins, verifying your identity and managing passwords.
  • Financial transaction processing: Processing deposits from TNG eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u or CIMB Clicks, as well as withdrawals of winnings to your account — accurately and promptly.
  • Bet settlement: Ensuring all football bets, Live Casino games, slots, and other games are settled correctly based on accurate results.
  • Fraud prevention and anti-money laundering: Analyzing transaction patterns and gaming activity to detect and prevent fraudulent behavior, money laundering, or misuse of the aa66 platform.
  • Responsible gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support, and reaching out to them with relevant information.
  • Service communications: Sending important account-related notifications such as deposit confirmations, withdrawal notices, security alerts and terms updates.
  • Customer support: Helping you resolve any technical issues, account enquiries, or transaction disputes efficiently and accurately.
  • Legal compliance: Complying with all legal and regulatory requirements applicable to online platform operations in Malaysia, including mandatory record-keeping and reporting to lawful authorities when required.
  • Platform improvements: Analysing aggregated, anonymised usage data to understand how members use the aa66 platform and to make ongoing improvements to the user experience.

AA66 may use your phone number to send important account notifications via SMS. If you prefer not to receive marketing communications (as distinct from account notifications), you may contact our support team to adjust your communication preferences.

5Disclosure of Data to Third Parties

AA66 takes a highly cautious approach to sharing members' personal data with external parties. Our core principle is clear: we do not sell, rent, or disclose your data to third parties for their own commercial purposes. However, there are limited situations where sharing data with certain parties is necessary for platform operations:

  • Payment service providers: Required transaction information is shared with payment gateway providers — including FPX, DuitNow, and e-wallet providers — to process your deposits and withdrawals. All such providers are bound by strict confidentiality agreements with aa66.
  • Game providers: Technical data required for bet settlement and game records is shared with live casino studios and game software providers that partner with aa66, solely for game operation purposes.
  • Lawful authorities: AA66 will disclose personal data to government authorities, law enforcement bodies or courts when required by Malaysian law or pursuant to a valid court order.
  • Professional auditors and consultants: Certain information may be shared with independent auditors or legal consultants appointed by aa66 for compliance purposes, all of whom are bound by professional confidentiality agreements.

In all of the above cases, aa66 ensures that only the necessary data is shared, and all recipient parties are bound by confidentiality and data protection obligations that are equivalent to or stricter than aa66's own standards.

6Data Security Measures at AA66

Protecting members' personal data is aa66's highest technical and operational priority. We continuously invest in security infrastructure to keep your data safe from the increasingly sophisticated threats of today's digital landscape.

The technical security measures we have in place include:

  • Encryption in transit: All communications between your device and aa66's servers are secured with TLS 1.3 protocol and 256-bit encryption, ensuring no third party can intercept your data in transit.
  • Storage encryption: Sensitive data stored in aa66's databases — including passwords, payment account details, and identity verification documents — is encrypted using strong encryption algorithms before being stored.
  • Role-based access controls: Only aa66 staff with a specific and legitimate operational need are granted access to members' personal data. All access is logged and continuously monitored.
  • Two-factor authentication (2FA): Internal aa66 staff accounts with access to members' personal data are protected by mandatory two-factor authentication, reducing the risk of unauthorised access through credential theft.
  • Continuous security monitoring: aa66's infrastructure is monitored around the clock to detect any suspicious activity, intrusion attempts or unusual access patterns.
  • Regular security audits: AA66 undergoes independent security audits on a regular basis to identify and address any system vulnerabilities before they can be exploited.

Shared Responsibility: While aa66 implements robust security measures, the safety of your account also depends on your own actions. Never share your password with anyone, use a strong and unique password for your aa66 account, and contact us immediately if you suspect your account has been compromised.

7Data Retention Period

AA66 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. AA66's general data retention schedule is as follows:

Data Category Retention Period Reason
Account registration data Duration of active account + 5 years PDPA compliance and audit requirements
Financial transaction records 7 years from the transaction date Malaysian financial legal requirements
Game activity logs 3 years from the date of activity Dispute resolution and game fairness auditing
Customer support transcripts 2 years from the date of interaction Service quality improvement and reference
KYC verification documents Duration of active account + 5 years Malaysia AML compliance requirements
Cookie and session data Up to 12 months or until deleted Platform technical functions

Once the retention period has expired and no legal obligation requires further storage, aa66 will securely delete or anonymise the data so it can no longer be linked to any specific individual.

8Cookie Policy

The aa66 platform uses cookies — small text files stored on your device — to enable various essential platform functions to work correctly. Below are the types of cookies aa66 uses and their purposes:

You can manage cookies through your browser settings. However, disabling essential cookies may significantly affect the functionality of the aa66 platform. For information on how to manage cookies in your browser, please refer to your browser's documentation.

9Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and aa66's own policies, you have the following rights regarding the personal data we hold about you. We respect and facilitate the exercise of all these rights:

01
Right of Access

You have the right to request a copy of the personal data we hold about you. AA66 will provide this information within a reasonable timeframe upon receiving a valid request from you.

02
Right to Rectification

If any personal data we hold about you is inaccurate or out of date, you have the right to request an immediate correction. Please contact our support team to update your information.

03
Right to Erasure

You may request the deletion of your personal data from aa66's records, subject to mandatory data retention obligations under Malaysian law that we are unable to waive.

04
Right to Restrict Processing

Under certain circumstances, you have the right to request that aa66 restrict how we process your data — for example, while you are disputing the accuracy of your data or awaiting a response to a request.

05
Right to Object

You have the right to object to the processing of your data for specific purposes, such as marketing communications. You may withdraw this consent at any time by contacting our team.

06
Right to Data Portability

You have the right to receive the personal data you provided to aa66 in a machine-readable format and to transfer it to another data controller as you see fit.

To exercise any of the above rights, please contact the aa66 privacy team by email at support@aa66.in with the subject line "Personal Data Rights Request" or via aa66's platform live chat. We will respond to your request within a reasonable timeframe and no later than 21 business days from the date we receive your complete request.

To protect your privacy, aa66 may require identity verification before processing any data rights request. This is a security measure to ensure that only you can access or request changes to your data.

10Amendments to This Privacy Policy

AA66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or developments in the technology we use. Any amendments will take effect once the updated Privacy Policy is published on the aa66 website.

The "Last Updated" date shown at the top of this page will be revised whenever an amendment is made. For material and significant changes — those that substantially alter how we collect or use your data — aa66 will endeavour to notify members via in-platform notifications or SMS to your registered phone number with reasonable notice before the changes take effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the aa66 platform after any amendments are published will be considered your acceptance of those changes.

11Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way aa66 handles your personal data, we encourage you to reach out to us directly. The aa66 privacy and support team is always on hand to help:

  • Privacy email: support@aa66.in — please use the subject line "Privacy Enquiry / Privacy Policy" to help us process your request faster. Response time is typically under 4 hours.
  • Live Chat: Available 24 hours a day, 7 days a week in Bahasa Melayu and English via the chat icon on the aa66 platform.

AA66 takes every privacy-related complaint seriously. We will thoroughly investigate all complaints received and provide a meaningful response within a reasonable timeframe. If you are not satisfied with our response, you also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) as the relevant regulatory authority.


AA66's Privacy Commitment to Every Malaysian Player

We understand that your trust is aa66's most valuable asset. Without the trust of the 850,000 Malaysian members who choose to play with us, this platform would not exist. Protecting your personal data is therefore not merely a legal obligation for us — it is a moral responsibility we embrace wholeheartedly.

Every MYR you deposit via TNG eWallet, GrabPay, DuitNow, or FPX; every bet you place at a Baccarat table or on your favourite slots; and every interaction with the aa66 support team — all of this information is handled to the highest privacy standards we set for ourselves, not just those required by law.

Your data is never sold to any third party
256-bit SSL encryption on all transactions
Right to erasure can be exercised at any time
Full compliance with Malaysia's PDPA

Play with Peace of Mind – Your Privacy Is Protected by AA66

With over 700 games, deposits from RM 10, withdrawals in 5 minutes and full privacy protection — aa66 is the online casino home Malaysian players trust most.

Protected Data
256-bit SSL, no data selling
Fast Withdrawals
TNG, GrabPay, DuitNow — 3–5 minutes
700+ Games
Slots, Live Casino, football & more
24/7 Support
Bahasa Melayu, response < 2 minutes

AA66 supports Responsible Gaming. 18+ only.

Bahasa Melayu