A666 Privacy Policy – Malaysia Member Personal Data Protection

A666 is committed to protecting the privacy and security of every member's personal data. This document transparently explains how we collect, use, store, and protect your information.

A666's Privacy Commitment to You

Six core principles that guide how we handle personal data for a666 platform members

Full PDPA 2010 Compliance

A666 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). All data collection and processing is carried out in accordance with guidelines set by Malaysian regulatory authorities, ensuring your rights as an individual are always protected.

256-bit SSL Encryption

All data transmitted between your device and a666 servers is protected with 256-bit SSL encryption, the industry's highest security standard. This means your personal and financial information cannot be intercepted or read by unauthorised parties.

Your Explicit Consent

A666 does not collect or use your data without your explicit consent. During registration, you will be provided with clear information about the data collected and its intended use. You may withdraw your consent at any time through your account settings.

Secure & Limited Data Storage

Your personal data is stored on servers protected by layered access controls, firewalls, and intrusion detection systems. Only authorized personnel may access your data, and every access is logged for security audit purposes.

Full Control in Your Hands

As an a666 member, you have the right to access, correct, transfer, and request the deletion of your personal data. Our account management portal lets you manage your privacy preferences easily without needing to contact customer support for most basic changes.

No Sale of Data to Third Parties

A666 has never and will never sell, rent, or trade your personal data to any third party for marketing purposes. If data sharing is required for platform operations, it is only carried out with partners who have signed strict confidentiality agreements.

Privacy Policy Updated – 2026
Summary of Our Privacy Policy

This Privacy Policy outlines the data protection practices of a666. We collect only the data that is necessary, use it for the stated purposes, and protect it to the highest security standards. We do not sell your data, and you retain full control over your personal information.

1

Introduction and Scope of This Privacy Policy

This Privacy Policy ("Policy") describes how a666 ("we", "our platform") collects, uses, discloses, and protects your personal information when you use the official a666.ceo website and our mobile app (collectively referred to as the "Platform").

We understand that privacy matters deeply to every individual. That is why we have written this Policy in clear, straightforward language so you know exactly what happens with your information. Nothing is hidden.

This Policy applies to all users of the a666 Platform, including unregistered visitors, registered members, and former members whose accounts have been closed. By using our Platform, you agree to the terms of this Privacy Policy.

2

Types of Personal Data We Collect

A666 only collects data that is strictly necessary to provide a safe, efficient, and responsible service. Below is a summary table of the types of data we collect and their sources:

Data Category Examples of Information Source
Personal Identity Full name, date of birth, identification card number, gender Registration / KYC
Contact Information Email address, phone number, residential address Registration / Profile
Financial Bank account number, bank name, transaction history Deposit / Withdrawal
Technical IP address, device type, web browser, cookie data Automatically during use
Platform Usage Gaming history, activity logs, session duration Automatically during gameplay
Communications Support chat logs, complaint emails, feedback Support interactions
Data Minimisation Principle

A666 practises the principle of data minimisation — we only collect information that is strictly necessary for a specific purpose. We do not collect sensitive data such as medical information, political views, or religious beliefs.

3

How We Use Your Personal Data

The personal data we collect is used solely for the purposes stated below and will not be used for any other purpose without your additional consent:

  • Identity verification and KYC — Verifying that you are a legitimate individual who meets the age requirements to use the a666 platform.
  • Account management — Creating and maintaining your account, processing logins, and updating profile information.
  • Financial transaction processing — Managing deposits, withdrawals, and all financial activities related to your account.
  • Legal compliance — Fulfilling our obligations under PDPA 2010, anti-money laundering (AML) policies, and other regulatory requirements.
  • Platform security — Detecting and preventing fraud, unauthorised access, and suspicious activity.
  • Service communications — Sending important notifications related to your account, security, and platform updates.
  • Customer support — Helping you resolve issues and answering enquiries related to your account.
  • Platform improvements — Analysing usage patterns in aggregate to improve the user experience.
  • Responsible gaming — Monitoring gameplay patterns to identify signs of problem gambling and provide early assistance.

For marketing and promotional communications, we will only contact you if you have explicitly opted in to receive such communications during registration or through the communication preference settings in your account.

4

Data Sharing with Third Parties

A666 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, in the following limited situations, we may need to share your data:

  • Payment service providers — Financial institutions, payment processors, and digital wallet providers that process your transactions (DuitNow, FPX, Touch 'n Go, Boost, GrabPay). They only receive the minimum data necessary to process the transaction.
  • Gaming technology providers — Game software partners that operate games on the a666 platform may receive game session information necessary for game functionality.
  • Regulatory authorities and law enforcement agencies — When required by Malaysian law, a court order, or a legitimate investigation by authorities.
  • Security and anti-fraud services — Third-party security service providers that help us detect and prevent fraud and money laundering.

All third parties that receive your data are bound by strict data protection agreements and are required to use that data only for the specified purposes. They are not permitted to use your data for their own purposes.

Cross-Border Data Transfers

If your data needs to be transferred outside Malaysia, we ensure such transfers comply with PDPA 2010 requirements and are made only to countries or entities that provide a comparable level of data protection to Malaysia.

5

Use of Cookies and Tracking Technologies

The a666 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. The following are the types of cookies we use:

  • Essential cookies — Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance cookies — Collecting information about how you use the platform (pages visited, time spent) to help us improve it. This information is collected in aggregate and does not personally identify you.
  • Functional cookies — Remembering your preferences such as language, display settings, and game preferences to deliver a more personalised experience.
  • Security cookies — Helping detect suspicious activity and protecting your account from unauthorised access.

You can manage cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of the a666 platform. For more information on managing cookies, please refer to your web browser's help documentation.

6

Data Protection Security Measures

A666 invests seriously in security infrastructure to protect your personal data. The technical and organisational security measures we implement include:

  • Data encryption in transit using TLS 1.3 and 256-bit SSL protocols
  • Data at rest encryption for all sensitive information
  • Role-based access control (RBAC) — only authorized personnel may access specific data
  • Two-factor authentication (2FA) for all internal administrative access
  • 24/7 security monitoring and intrusion detection system (IDS)
  • Regular penetration testing by independent security auditors
  • Tested and documented security incident response procedures
  • Mandatory security training and privacy awareness for all a666 staff
Security Incident Notifications

In the event of a security incident affecting your personal data, a666 will notify you within the timeframe stipulated by PDPA 2010 and the relevant authorities. We will inform you of the nature of the incident, the data affected, and the steps we are taking to address it.

7

Your Rights Regarding Personal Data

Under Malaysia's PDPA 2010 and the a666 Privacy Policy, you have the following rights regarding your personal data:

Right of Access

Request a copy of the personal data we hold about you

Right to Correction

Correct inaccurate or outdated personal data

Right to Erasure

Request the deletion of your personal data under certain circumstances

Right to Object

Object to the processing of your data for specific purposes

Right to Data Portability

Receive your data in a machine-readable format

Right to Restriction

Request a temporary restriction on the processing of your data

How to Exercise Your Rights

To exercise any of the above rights, contact the a666 data protection team via in-platform live chat or our official email. We will process your request within 14 business days. For more complex cases, this period may be extended to up to 30 days with prior notification to you.

8

Personal Data Retention Period

A666 retains your personal data only for as long as necessary for the purposes stated in this Policy or as required by Malaysian law. Below are our data retention period guidelines:

  • Active account data — Retained for the duration that your account remains active on the a666 platform.
  • Post-account closure data — Retained for a minimum of 7 years after account closure to comply with legal and regulatory requirements, including AML and tax obligations.
  • Financial transaction records — Retained for 7 years in accordance with Malaysian financial legal requirements.
  • Customer support communication logs — Retained for 3 years for dispute resolution purposes.
  • Technical data and system logs — Retained for 90 days for security and technical troubleshooting purposes.
  • Marketing data — Deleted within 30 days after you withdraw your marketing consent.

Once the retention period expires, your data will be securely deleted or anonymized in accordance with the data deletion procedures approved by the a666 security team.

9

Changes to This Privacy Policy

A666 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. We are committed to notifying you of any significant changes.

When changes are made to this Policy:

  • The "Updated" date at the top of this page will be revised
  • For significant changes that affect how we use your data, we will send a notification to your registered email address
  • An in-platform notification will be displayed the first time you log in after changes are published
  • Continued use of the a666 platform after changes are published will be considered your acceptance of the updated Policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. A version history of this Policy is available upon request through our customer support team.

10

Contact Our Data Protection Officer

A666 has appointed a Data Protection Officer (DPO) responsible for ensuring our platform complies with all PDPA 2010 requirements and this Privacy Policy. If you have any questions, concerns, or complaints regarding your privacy and data protection, we are here to help.

You can reach the a666 data protection team via:

  • Live chat — Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the a666 platform.
  • Email — Contact us at the official a666 email address ([email protected]) for privacy-related enquiries.
  • Service language — We can assist with enquiries in Bahasa Melayu, English, and Mandarin Chinese.

If you believe your complaint has not been satisfactorily resolved by a666, you have the right to lodge a complaint with the Malaysia Department of Personal Data Protection or the relevant regulatory authority.

Response Time

We are committed to responding to all privacy-related inquiries within 3 business days. For formal personal data rights requests, the processing period is 14 business days, or up to 30 days for cases requiring more in-depth review.

Your Privacy Protected, Your Game Secure

Join millions of members who trust a666 as Malaysia's most secure online gaming platform. Register now and enjoy a transparent, protected gaming experience.

Register Now Login
Bahasa Melayu