🔒 aa66 Privacy Policy last updated: 1 January 2026 🛡️ Your data is fully protected by 256-bit SSL & Malaysia's PDPA 🎰 500+ games available – Slots, Baccarat, Blackjack, Roulette & Lottery 💳 Deposit via Touch 'n Go, GrabPay, DuitNow & FPX – all in MYR 🏆 31,000+ active Malaysian players trust aa66 every day 🔒 aa66 Privacy Policy last updated: 1 January 2026 🛡️ Your data is fully protected by 256-bit SSL & Malaysia's PDPA 🎰 500+ games available – Slots, Baccarat, Blackjack, Roulette & Lottery 💳 Deposit via Touch 'n Go, GrabPay, DuitNow & FPX – all in MYR 🏆 31,000+ active Malaysian players trust aa66 every day
aa66 Official Documents

Privacy Policy aa66 – Malaysian Casino Player Data Protection

Aa66 takes your privacy seriously. This document transparently explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010.

Updated: 1 January 2026 Applicable: Malaysia Language: Malay
Malaysia PDPA 2010 SSL 256-bit No Data Sales Guaranteed User Rights
aa66 Privacy Policy
Version 2.4  ·  1 Jan 2026
This document contains 12 sections covers data collection, use of information, user rights, data security, use of cookies, third parties, and complaints procedures.
Data Collected & Purpose of Use
Data Protection & Security
Right of Access, Correction & Erasure
Cookie & Tracking Policy
Data Sharing with Third Parties

Aa66's Privacy Commitment to Malaysian Players

Six core commitments by aa66 to protecting the privacy and personal data of every player.

256-bit SSL Encryption

All personal and financial data you submit to aa66 is protected with 256-bit SSL encryption — the same level of security used by Malaysian banking institutions. No third party can intercept or read your data in transit.

Malaysia PDPA Compliance

Aa66 operates in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. This means all your data is collected, processed, and stored within the legal framework established by the Malaysian government, providing you with robust legal protection.

No Data Sales

Aa66 has never and will never sell, rent, or commercially exploit players' personal data to any third party. Your data is used solely for the purposes stated in this Privacy Policy — nothing more. This is a commitment we stand firmly by.

Full Control in Your Hands

You have the right to access, correct, or request the deletion of your personal data held by aa66 at any time. The process is straightforward — simply contact our support team and we will handle your request within the timeframe set out under the PDPA.

Secure Data Storage

All aa66 player data is stored on servers protected by multiple layers of physical and digital security. Access to this data is restricted to staff who require it for operational purposes, and all access is recorded and continuously monitored.

Marketing Communications Control

You have full control over marketing communications from aa66. You can opt out of promotional emails, SMS notifications, or any form of marketing communication at any time through your account settings or by contacting our support team.

aa66's Privacy Commitment: By using the aa66 platform, you agree to the collection and use of your personal data as described in this Privacy Policy. If you have any questions, our team is ready to assist via support@aa66.express.

1Introduction

This Privacy Policy describes how aa66 (operating at https://aa66.express) collects, uses, discloses, and protects the personal information of users on our platform. aa66 is committed to safeguarding the privacy of every player who entrusts their data to us.

This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and applies to all individuals who access or use the aa66 platform, including website visitors, registered players, and anyone who interacts with our services.

This policy should be read together with Terms & Conditions aa66. Together, these two documents form the complete agreement governing the relationship between aa66 and its users.

Note: This Privacy Policy is effective from 1 January 2026 and supersedes all previous versions. aa66 reserves the right to update this policy from time to time. Users will be notified of any material changes via email or in-platform notification.

2Personal Data We Collect

Aa66 collects several types of personal data depending on how you interact with our platform. The following are the categories of data we collect:

Data Category Example Information Requirements
Identity Data Full name, date of birth, MyKad number Mandatory
Contact Data Email address, Malaysian phone number Mandatory
Financial Data Bank account number, e-wallet details (Touch 'n Go, GrabPay, DuitNow) Required for transactions
Technical Data IP address, browser type, device, operating system Automatic
Activity Data Game history, betting records, transaction history Automatic
Communication Data Support chat content, complaints, feedback Where relevant
Optional Data Favourite games, account settings, communication preferences Preferences

Sensitive Data: aa66 does not collect sensitive data such as health information, religious beliefs, or political views, except in the context of responsible gaming where you voluntarily disclose such information in order to seek assistance.

3How We Collect Data

Aa66 collects personal data through several methods:

  • Account Registration: When you register an aa66 account, you provide your identity and contact information directly.
  • Financial Transactions: Financial data is collected when you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX online banking, as well as when you make a withdrawal.
  • Gaming Activity: aa66's systems automatically record all your gaming activity — including play sessions, bets placed, and game outcomes — for audit and security purposes.
  • Tracking Technologies: aa66 uses cookies, tracking pixels, and similar technologies to collect technical data about how you use our platform.
  • Communications: When you contact our support team via live chat, email, or WhatsApp, the content of that communication is retained for training and service improvement purposes.
  • Third-Party Verification: In some cases, aa66 may receive data from third-party identity verification providers for AML (Anti-Money Laundering) and KYC (Know Your Customer) purposes.

4Purpose of Data Use

Aa66 uses your personal data solely for the following purposes:

  • Account Management: To create, manage, and maintain your player account, including processing deposits and withdrawals in Malaysian Ringgit (MYR).
  • Service Provision: To enable you to access and play the games available on the aa66 platform, including slots, baccarat, blackjack, roulette, lottery, and live casino.
  • Identity Verification: To fulfil legal obligations relating to age verification (18+), KYC, and AML compliance.
  • Platform Security: To detect and prevent fraud, unauthorised access, and illegal activity on the aa66 platform.
  • Customer Support: To process complaints, respond to enquiries, and provide assistance to players.
  • Responsible Gaming: To monitor gaming patterns and identify players who may benefit from responsible gaming support.
  • Marketing (with consent): To send you promotional information, bonuses, and special offers — only where you have given your consent to receive such communications.
  • Platform Improvements: To analyse usage patterns and improve the user experience on the aa66 platform.
  • Legal Compliance: To fulfil obligations under applicable laws, regulations, and court orders.

5Legal Basis for Data Processing

Aa66 processes your personal data on the following legal bases in accordance with Malaysia's PDPA 2010:

  • Consent: For marketing and promotional communications, aa66 relies on your explicit consent. You may withdraw this consent at any time.
  • Contract Performance: Processing necessary to fulfil the agreement between you and aa66 — including transaction processing, account management, and the provision of gaming services.
  • Legal Obligations: Processing required to comply with Malaysian law, including AML, KYC, and financial reporting obligations.
  • Legitimate Interests: Processing carried out for platform security, fraud prevention, and service improvement that does not affect your fundamental rights and freedoms.

6Data Sharing with Third Parties

Aa66 does not sell your personal data to anyone. However, in certain limited circumstances, aa66 may share your data with the following parties:

  • Payment Providers: Payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banks via FPX that are required to process your financial transactions. This sharing is strictly limited to the data necessary for that purpose.
  • Game Providers: Casino software providers such as Pragmatic Play, Evolution, Playtech, and others may receive the minimum game activity data required for game operations. These providers are bound by strict data protection agreements.
  • Governing Authority: aa66 is required to disclose data to Malaysian authorities (such as the PDRM, Bank Negara Malaysia, or the courts) when mandated by law, court order, or for legitimate investigative purposes.
  • Technical Service Providers: Companies that provide technical infrastructure, cybersecurity, and IT support services to aa66, bound by strict confidentiality agreements.
  • Identity Verification Providers: KYC and AML services used to verify user identities in compliance with legal requirements.

All third parties that receive aa66 user data are bound by data processing agreements requiring them to protect your data to a standard equal to or higher than aa66's own security standards.

7Data Security

Aa66 consistently invests in technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure. Our key security measures include:

  • Data Encryption in Transit: All data transmitted between your browser and aa66's servers is protected using TLS 1.3 with 256-bit SSL encryption.
  • Data Encryption at Rest: Sensitive data stored in aa66's databases is encrypted using AES-256 encryption.
  • Layered Access Controls: Access to user data is restricted to staff who require it for legitimate operational purposes, with detailed access logs maintained.
  • Two-Factor Authentication (2FA): aa66's internal systems require 2FA for all staff access to user data.
  • Continuous Monitoring: aa66's security systems are monitored 24/7 to detect any suspicious activity or intrusion attempts.
  • Penetration Testing: Security audits and penetration testing are conducted periodically by independent security specialists.
  • Incident Response Procedure: aa66 has a clear incident response procedure in place. In the event of a data breach that affects you, we will notify you and the relevant authorities within the timeframe required under the PDPA.

Your Account Security: While aa66 maintains robust security measures, you also play an important role in keeping your account safe. Use a strong, unique password, enable two-factor authentication, and never share your login credentials with anyone.

8Data Retention Period

Aa66 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by Malaysian law. The general data retention guidelines are as follows:

  • Active Account Data: Retained for as long as your account remains active and for 7 years after account closure, as required under Malaysian financial law.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with AML requirements and Malaysian tax law.
  • Gaming Activity Data: Game history records are retained for 3 years for audit and dispute resolution purposes.
  • Support Communication Logs: Retained for 2 years for training and service quality improvement purposes.
  • Technical Data & Server Logs: Retained for 12 months for security and performance monitoring purposes.
  • Marketing Data: Retained until you withdraw your consent or close your account, whichever comes first.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with appropriate data disposal procedures.

9Your Rights as a Data Subject

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by aa66:

Your Privacy Rights at aa66

These rights are guaranteed under Malaysia's PDPA 2010 and may be exercised at any time.

Right of Access

You have the right to request and receive a copy of the personal data aa66 holds about you. We will process such requests within 21 business days and provide the information in an easy-to-understand format.

Right to Correction

If you find that the personal data aa66 holds about you is inaccurate or incomplete, you have the right to request a correction. We encourage you to keep your account information up to date at all times.

Right to Erasure

Under certain circumstances, you may request that aa66 delete your personal data. However, this right is subject to aa66's legal obligations, which may require us to retain certain data for a prescribed period.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes. Such objections will be actioned immediately. You may also object to processing based on legitimate interests in certain circumstances.

Right to Restrict Processing

In certain situations — such as when you dispute the accuracy of your data or object to its processing — you may request that aa66 restrict the processing of your data while the matter is being resolved.

Right to Complain

If you believe aa66 has violated your privacy rights, you have the right to file a complaint with the Department of Personal Data Protection Malaysia or the relevant authority, after first attempting to resolve the matter directly with aa66.

To exercise any of the above rights, please contact us at support@aa66.express. We will process your request within 21 business days.

10Cookie Policy

Aa66 uses cookies and similar tracking technologies to enhance the user experience, analyse website traffic, and ensure the platform functions smoothly. The following are the types of cookies we use:

Essential Cookies Analytical Cookies Functional Cookies Session Cookies
  • Essential / Required Cookies: These cookies are required for the aa66 platform to function properly. They include login session cookies, security tokens, and cookies that remember your language preference. These cookies cannot be disabled as they are fundamental to the platform's operation.
  • Analytical Cookies: Used to collect statistical data on how users interact with the aa66 platform, such as the most frequently visited pages and session duration. This data is used in aggregate form and does not identify individual users.
  • Functional Cookies: Allows the aa66 platform to remember your preferences such as display settings, favourite games, and language selection in order to deliver a more personalised experience.
  • Session Cookies: Temporary cookies that are automatically deleted when you close your browser. These are used to maintain your active login session while you play on the aa66 platform.

You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect the functionality of the aa66 platform. For more information on managing cookies, refer to your browser's documentation.

11Third-Party Links and Services

The aa66 platform may contain links to third-party services such as payment providers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX) and game providers. When you interact with these third-party services, their own respective privacy policies will apply.

Aa66 is not responsible for the privacy practices or content of third-party websites you access through links on our platform. We encourage you to read the privacy policies of any third-party services you use, particularly your payment providers.

Payment Protection: When you make a deposit using Touch 'n Go eWallet, GrabPay, or other payment methods, your financial information is processed directly by the respective payment provider in accordance with their own privacy policy and security standards. aa66 does not directly store your card or bank account information.

12Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or how aa66 handles your personal data, please contact us through the following channels:

  • Privacy Email: support@aa66.express – For privacy-related enquiries and data rights requests, please include "Privacy Enquiry" in the subject line of your email.
  • 24/7 Live Chat: Available on the aa66 platform – for general privacy enquiries in Bahasa Melayu.

Aa66 will endeavour to respond to all privacy-related enquiries within 7 business days. For formal requests to access, correct, or delete data, the processing period is 21 business days in accordance with PDPA requirements.

Current Version: Privacy Policy Version 2.4 – Effective 1 January 2026. Any changes to this Policy will be communicated to registered users by email at least 14 days before the changes take effect.

Why Data Privacy Matters on the aa66 Online Casino Platform

When people talk about online casinos, the conversation usually centres on the games — RTP percentages, jackpot sizes, whether the live dealers are ready. But there's one thing that matters just as much, if not more: the security of your personal data. At aa66, we understand that when a Malaysian player signs up and starts using our platform, they're not only trusting us with their money — they're also trusting us with their personal information, phone number, e-wallet details, and activity records. That trust is not something we take lightly.

Malaysia's Personal Data Protection Act (PDPA) 2010 sets out the rights of Malaysians with regard to their personal data. aa66 operates in full compliance with the PDPA — not merely to satisfy a legal requirement, but because we genuinely believe every player deserves to know how their data is used and to have real control over it. If you've ever felt uneasy about what a company does with your information after you sign up, we understand that feeling. That's why aa66's Privacy Policy is written in plain, accessible language rather than dense legal jargon.

One area we take especially seriously is the security of financial transactions. When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u or CIMB Clicks, your financial information is processed through fully encrypted channels. aa66 does not store your card details or e-wallet passwords — processing is handled directly by the respective payment providers in accordance with their strict financial security standards. All transactions on aa66 are conducted in Malaysian Ringgit (MYR) with no hidden currency conversion charges.

Many players new to online casino platforms ask a perfectly reasonable question — "if I give you my phone number and email address, am I going to be flooded with non-stop promotions?" At aa66, marketing communications are consent-based. If you'd rather not receive promotional emails or SMS messages about bonuses and the latest offers, you can opt out at any time through your account settings. We do not sell your email address or phone number to any third party. If you do choose to receive communications from aa66, you'll hear about new bonuses, festive promotions, and exclusive member offers — and nothing beyond that.

Another common practice at other online casino platforms — but not at aa66 — is sharing user data with third parties without the user's knowledge. aa66 only shares your data with parties that genuinely need it: payment providers to process transactions, game providers to operate the games you play, and authorities when required by law. Every third party we work with is bound by strict data protection agreements, and we share only the minimum data necessary for the specific purpose.

For players who want to verify that their records are accurate, or who wish to know what information aa66 holds about them, exercising your data access rights is straightforward. Simply contact the aa66 support team by email at support@aa66.express and state your request. aa66 will process your request within 21 business days in accordance with PDPA requirements. If any data is found to be inaccurate, you have the right to request a correction, and we will action it promptly. Control over your personal data always remains in your hands — that is aa66's commitment to every Malaysian player who trusts our platform.

FAQ – aa66 Privacy Policy

Answers to the most frequently asked questions about privacy and data protection at aa66.

When you register an aa66 account, we collect basic identity information such as your full name, email address, and Malaysian phone number. Your phone number is used for OTP verification during registration and for important security communications such as unusual login notifications. aa66 does not require your MyKad number or any financial information at the point of registration — this additional information is only requested when needed for KYC verification, typically during your first withdrawal or when transaction volumes exceed certain thresholds as required under Malaysia's AML regulations.

No. aa66 never sells, rents, or shares your personal data with any third party for marketing purposes. This is a policy we uphold without exception. The only marketing communications you receive from aa66 come from aa66 itself — regarding bonuses, promotions, and offers related to your use of the platform. You can opt out of these communications at any time through your account settings or by contacting our support team.

When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, you will be redirected to the payment provider's secure interface to complete the transaction. aa66 never sees or stores your e-wallet password, PIN, or sensitive bank account details. What aa66 receives is solely a confirmation that the transaction was successful and the amount processed. All data transmissions between the aa66 platform and payment providers are protected using 256-bit SSL encryption and industry-recognised financial security protocols.

Yes, you have the right to request deletion of your personal data under Malaysia's PDPA 2010. However, this right is subject to certain legal limitations. aa66 is required by Malaysian law to retain financial transaction records for a minimum of 7 years for AML and tax purposes. Data needed to fulfil these legal obligations cannot be deleted immediately. That said, for data not subject to such retention requirements — such as marketing data, communication preferences, and gaming session history beyond the specified retention period — we will action your deletion request. Contact us at support@aa66.express to initiate this process.

When your aa66 account is closed — whether at your request or by aa66 — your data is not deleted immediately. aa66 retains data relating to your account for 7 years after closure in accordance with Malaysia's financial and AML legal requirements. Financial transaction records in particular must be kept for this period. Once the mandatory retention period ends, your data will be securely deleted or anonymised. During this retention period, your data is not used for any marketing purpose and access to it is restricted to compliance-related needs only.

Yes, aa66 uses cookies to ensure the platform functions correctly and to deliver a good user experience. We use four types of cookies: essential cookies (required for core platform functions such as maintaining your login session), analytics cookies (which collect usage statistics in aggregate form), functional cookies (which remember your preferences), and session cookies (which are deleted when you close your browser). You can manage cookies through your browser settings, though disabling essential cookies may affect your ability to use the aa66 platform. aa66 does not use cookies to track your activity on other websites or for third-party advertising purposes.

Your Data Is Safe at aa66 – Join with Confidence!

Register a free aa66 account and enjoy a 100% welcome bonus of up to RM500. A safe, fair Malaysian online casino platform that fully protects your privacy in accordance with PDPA 2010.

✓ 256-bit SSL Protected ✓ Malaysia PDPA Compliant ✓ No sale of personal data ✓ Deposit via Touch 'n Go & DuitNow ✓ 24/7 Bahasa Melayu Support
Bahasa Melayu