66aa Club Privacy Policy – Personal Data Protection for Malaysian Players

Privacy Policy 66aa Club applies to all individuals who access or use our platform, including registered players, website visitors, and anyone who interacts with our customer support services. It covers all types of personal data collected through the website, mobile application (if applicable), email, Live Chat, WhatsApp, and other communication channels associated with 66aa Club.

As a platform serving Malaysian players, we fully comply with the provisions of the Personal Data Protection Act 2010 (PDPA) of Malaysia. The PDPA governs how personal data may be collected, processed, stored, disclosed and transferred by business entities in Malaysia – and 66aa Club takes this responsibility very seriously.

If you are under 18 years of age, you are not permitted to use the platform 66aa Club and we do not knowingly collect personal data from minors. Should we become aware that a minor's data has been collected, it will be deleted immediately.

66aa Club collects various types of personal data depending on your level of interaction with our platform. The following are the main categories of data we may collect:

Registration Data & Identity Verification:

• Full name as stated on your official identification document (MyKad)
• An active Malaysian mobile phone number
• A valid and active email address
• Date of birth (for 18+ age verification)
• Copy of MyKad or other identification document (for KYC process)
• Current residential address (for certain accounts)

Financial Transaction Data:

• Deposit records – amount, method (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX), time and transaction reference
• Withdrawal records – amount, method, time, and status
• Account balance history and fund movements
• Registered e-wallet or bank account details for withdrawals (masked account number)

Gaming Activity Data:

• Gaming history – titles played, time, bet amounts and outcomes
• Records of bonuses claimed and rollover requirements
• Gaming statistics and platform usage patterns

Technical & Device Data:

• IP address when accessing the platform 66aa Club
• Browser type and device operating system
• Device information (phone model, screen size)
• Cookie and session data (see Section 6)
• Access logs and session duration

66aa Club uses collected personal data solely for legitimate and specific purposes. We do not use your data for purposes you would not reasonably expect or that are unrelated to your use of the platform. The primary purposes for data use are as follows:

• Account management and maintenance – to create, verify and manage your member account on the platform 66aa Club including phone number and email verification.
• Secure payment processing – verifying identity for deposit and withdrawal transactions, preventing financial fraud and ensuring funds are sent to the correct account.
• KYC (Know Your Customer) Compliance – meets compliance requirements for verifying member identities, preventing money laundering, and ensuring only eligible individuals use the platform.
• Customer support – to resolve queries, complaints and disputes submitted to the support team 66aa Club, including review of transaction records and game history where relevant.
• Platform security – detecting and preventing fraudulent activity, multi-account usage, bonus abuse, gaming bots and other security threats that could harm other players or the platform.
• Product and service improvement – analysing usage patterns in aggregate (not at an individual level) to better understand user needs and improve the platform experience 66aa Club.
• Service communications – sends important notifications related to your account, policy changes, security information and service updates that you cannot opt out of, as they are directly tied to your account usage.
• Marketing communications – sending information about promotions, new bonuses and special offers at 66aa Club – but only with your consent, and you may opt out at any time.
• Legal compliance – to comply with legal requirements, regulatory authority directives or valid court orders in Malaysia.

66aa Club does not sell, rent or trade your personal data to any third party for marketing or commercial purposes. Your data is only shared in the following limited and justifiable situations:

• Payment providers – Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX and other financial service providers require basic information to process your deposit and withdrawal transactions. This sharing is kept to the minimum necessary and is subject to each provider's own privacy policy.
• Game providers – Companies that supply Live Casino, slots, poker, and other games to 66aa Club may receive non-personally identifiable game session data for technical and troubleshooting purposes.
• IT and security service providers – Companies that assist in operating the platform's technical infrastructure, cybersecurity and fraud prevention 66aa Club. All these providers are bound by strict confidentiality agreements.
• Legal authorities – Where we are required by law, court order, or directive from a Malaysian law enforcement agency to disclose data, we will do so only to the extent necessary and within the limits permitted by law. We will notify you of such disclosure unless prohibited by law.

66aa Club implements a range of technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. The key measures we employ include:

• 256-bit SSL Encryption for all data transmitted between your browser and our servers – the same technology used by leading Malaysian banks such as Maybank and CIMB.
• Data encryption at rest – sensitive data stored on our servers is also encrypted, not only during transmission.
• Multi-layered access controls – only staff who require access to specific data to perform their duties are granted access permissions, based on the "least privilege" principle.
• 24/7 security monitoring – automated monitoring systems that detect suspicious activity, intrusion attempts and traffic anomalies on the platform 66aa Club in real time.
• Regular security audits – independent security assessments are conducted periodically to identify and address potential vulnerabilities before they can be exploited.
• Two-factor authentication (2FA) – available to all members as an additional security layer for account login.

In the event of a security incident involving your personal data, 66aa Club committed to notifying you within the timeframe stipulated by the PDPA, and appropriate remedial measures will be taken immediately.

Like most modern websites, 66aa Club uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better user experience. Below is an explanation of the types of cookies we use:

• Essential Cookies – Required for core platform functions such as login, user sessions and security. Without these cookies, the platform will not function properly. These cookies cannot be disabled.
• Preference Cookies – Stores your preferences such as language, your usual betting denomination and other display settings. This helps deliver a more personalised experience at 66aa Club.
• Analytics Cookies – Collects aggregated information on how visitors use our platform — most visited pages, time spent, and so on. This data helps us improve the platform. No individuals are personally identified from this information.
• Security Cookies – Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the 66aa Club. Please refer to your browser's documentation for guidance on managing cookies.

66aa Club retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by law. Retention periods vary by data type:

• Active account data – Retained for the duration of the active account plus the required period following account closure for legal and compliance purposes (typically 7 years after account closure, in accordance with Malaysian financial legislation).
• Financial transaction records – Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering (AMLA) legislation and tax compliance requirements.
• Customer support communication records – Retained for 3 years for reference and dispute resolution purposes.
• Technical log data – Access logs and technical data are retained for 90 days for security purposes and technical troubleshooting.
• Cookie data – Depends on the type of cookie; session cookies are deleted when the browser is closed, while persistent cookies have a set expiry date.

When data is no longer needed, 66aa Club will securely delete or anonymise such data using methods that ensure it cannot be recovered. For user-initiated data deletion requests, please refer to Section 8 (Your Privacy Rights).

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by 66aa Club:

To exercise any of the rights below, please contact the customer support team 66aa Club via email at support@66aaclub.best or through the platform's live chat. We will endeavour to process all valid requests within 14 business days.

Platform 66aa Club may contain links to third-party websites in certain contexts, including links to esports streaming sites, sports news sites or game providers. This Privacy Policy applies only to the 66aa Club only, and does not extend to any external websites or services.

We are not responsible for the privacy practices or content of third-party websites. When you click a link to an external site, you are leaving the platform 66aa Club and the privacy policy of that platform will apply. We encourage you to read the privacy policy of any website you visit.

If you have any questions, concerns or requests regarding this Privacy Policy or how 66aa Club handles your personal data, please contact us through the following channels. Our team is fluent in Bahasa Melayu and ready to assist you with any privacy-related enquiries.

We are committed to responding to all privacy enquiries within 3 business days and resolving more complex requests (such as data access or deletion) within 14 business days, as required by PDPA 2010.