66aa Club Privacy Policy — Data Protection for Malaysian Members

66aa Club ("We", "Platform") is the operator of an online casino platform and takes full responsibility for the protection of our members' personal data. This Privacy Policy has been prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and sets out in detail how we handle the personal data you provide when registering for and using 66aa Club's services.

We believe privacy is a fundamental right of every individual. As such, 66aa Club collects only the personal data genuinely necessary to operate the platform, deliver the best possible service to members, and comply with legal obligations in force in Malaysia. We have never sold, and will never sell, member personal data to any third party for marketing or advertising purposes.

This Privacy Policy applies to all information collected through the 66aa Club website, mobile applications, email communications, and any other point of contact between you and our platform.

66aa Club collects your personal data through several channels — directly from you during registration, automatically as you use the platform, and in certain cases from legitimate third parties such as payment providers. The categories of data we collect are as follows:

66aa Club uses your personal data solely for legitimate and transparent purposes. We do not process your data for any purpose beyond those stated below without first obtaining your consent.

• Identity verification and member eligibility checks during registration and the KYC process to ensure the security of your account
• Processing of deposits and withdrawals via Malaysian local payment methods including Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX
• Member account management, including account settings, transaction history, and game records
• 24/7 customer support in Bahasa Malaysia, with assistance tailored to your account history
• Enforcement of the platform's Terms & Conditions and prevention of fraud, money laundering, and other unlawful activities
• Compliance with legal obligations under Malaysia's PDPA and other applicable regulations
• Sending important communications regarding your account, changes to our terms, or security matters
• Sending relevant 66aa Club promotional offers and bonuses — you may unsubscribe at any time
• Platform improvements and user experience enhancements based on anonymised usage data
• Responsible gambling support, including monitoring for concerning gambling patterns

66aa Club processes your personal data on solid legal grounds under Malaysia's PDPA. Depending on the nature of the data and the purpose of processing, the legal bases we rely on are as follows:

• Consent: For marketing communications, promotional notices, and any processing beyond what is strictly required to fulfil your contract — your explicit consent is obtained at the point of registration or through your account settings
• Performance of Contract: For processing deposits and withdrawals, account management, and the delivery of platform services you have requested — this processing is necessary to fulfil the service agreement between you and 66aa Club
• Legitimate Interest: For fraud prevention, platform security, service improvement, and internal analytics that do not compromise your privacy rights
• Legal Obligation: For KYC compliance, mandatory reporting to relevant Malaysian authorities, and record retention as required by law

66aa Club does not sell, rent, or disclose member personal data to third parties for marketing purposes. We share your data only in the following limited and specific situations, and strictly to the extent necessary:

• Payment Providers: Required transaction details are shared with Malaysian payment service providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX banks to securely process your deposits and withdrawals
• Game Providers: Minimum technical data required is shared with gaming software providers such as Pragmatic Play, Evolution Gaming, and SA Gaming to ensure your gaming sessions run smoothly
• IT Service Providers: Technical infrastructure providers, such as hosting and security services, that process data on behalf of 66aa Club under strict data processing agreements
• Legal Authority: When required by Malaysian law or a valid court order — any such disclosure is made in full compliance with the PDPA
• Anti-Fraud Agencies: Information required to verify identity and prevent fraud, money laundering, or suspicious financial activity

66aa Club continually invests in the latest security technologies and procedures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The key security measures we employ are:

• 256-bit SSL encryption on all communications between your browser and 66aa Club's servers — the same level of security used by Malaysia's leading banks
• Passwords are stored using strong one-way hashing — your password is never saved in plain text anywhere in our systems
• Two-factor authentication (2FA) is available for all member accounts as an additional layer of security
• Strict access controls ensure that only authorised 66aa Club personnel who genuinely need access to specific data to carry out their duties are permitted to do so
• Round-the-clock security monitoring to detect any suspicious activity or unauthorised access attempts
• Regular penetration testing by independent cybersecurity experts to identify and address potential vulnerabilities
• A clear, tested incident response procedure for unexpected data breach situations

While we take all reasonable steps to protect your data, no security system is completely foolproof. You also play an important role in keeping your account secure by using a strong password and not sharing it with anyone.

66aa Club retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to meet applicable legal obligations. Our retention policy is as follows:

• Active Account Data: Retained for the duration your account is active and for six years following account closure, in accordance with Malaysian legal requirements
• Financial Transaction Records: Retained for a minimum of seven years in accordance with the requirements of the Companies Act and Malaysian financial regulations
• KYC Data: Retained for the lifetime of the account and for at least five years following closure, as required by anti-money laundering (AML) regulations
• Support Communication Data: LiveChat and email records are retained for three years for reference and service improvement purposes
• Technical Logs: Server logs and diagnostic data are retained for 90 days for security and technical troubleshooting purposes
• Marketing Data: Retained until you withdraw your consent or request deletion, whichever comes first

Once the retention period expires, your personal data will be securely deleted or anonymised in a manner that can no longer be linked back to your identity.

The 66aa Club platform uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and better understand how members use our platform. Cookies are small text files stored in your web browser when you visit the 66aa Club platform.

• Essential Cookies: Required for core platform functions such as login session verification and security — cannot be disabled
• Preference Cookies: Stores your preferences such as language (Bahasa Melayu) and display settings — enabling a more personalised experience
• Analytics Cookies: Helps us understand which pages are most visited and how members interact with the platform — this data is used for improvements
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account

You can manage or disable cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of the 66aa Club platform. Continued use of our platform is considered consent to the use of cookies as described above.

Under Malaysia's PDPA and 66aa Club's own policies, you have the following rights in relation to your personal data. You may exercise any of these rights by contacting us at support@66aaclub.click:

In the course of operating an online casino platform, some personal data of 66aa Club members may be processed or stored on servers located outside Malaysia — for example, by cloud infrastructure providers or international game software providers such as Evolution Gaming, which operates on a global scale.

Where such transfers occur, 66aa Club ensures that all cross-border data transfers are safeguarded by adequate protection mechanisms, including data processing agreements that require recipients outside Malaysia to comply with data protection standards equivalent to or higher than those required under Malaysia's PDPA.

The 66aa Club platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process personal data from any individual under the age of 18. The 66aa Club registration process includes age verification steps to prevent sign-ups by minors.

Should 66aa Club discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and terminate the account in question. Parents or guardians who believe their child has registered a 66aa Club account are encouraged to contact us promptly at support@66aaclub.click.

66aa Club reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. The "Updated" date at the top of this document will always reflect the latest version currently in effect.

For material amendments that significantly affect your privacy rights, we will send a notice via email to the address registered on your account at least 14 days before the changes take effect. Continued use of the 66aa Club platform after such notice will be considered acceptance of the amended Privacy Policy.

If you have any questions or concerns, or wish to exercise your privacy rights regarding personal data held by 66aa Club, please reach out to our privacy team through the following channels:

• Email: support@66aaclub.click — please include "Privacy Enquiry" in the subject line
• LiveChat: Available directly on the 66aa Club platform — accessible 24 hours a day, 7 days a week
• Support Languages: Bahasa Melayu and English
• Response Time: We are committed to responding to all privacy enquiries within 30 business days
• For frequently asked questions about privacy, visit the FAQ us

If you are not satisfied with our response to your privacy enquiry or complaint, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) under the Ministry of Communications and Digital.