Personal Data Protection

A666 Privacy Policy – Personal Data Protection for Malaysian Players

Your privacy is our absolute priority. This Privacy Policy sets out transparently how a666 collects, uses, stores, and protects your personal data β€” all in accordance with the provisions of the Personal Data Protection Act 2010 (PDPA 2010) of Malaysia.

Last Updated: 1 January 2026 PDPA 2010 Compliant SSL 256-bit
πŸ”’
a666's Privacy Commitment
Your data is safe with us
256-bit SSL Encryption
Compliant with Malaysia's PDPA 2010
No Sale of Data to Third Parties
Right of Access & Data Correction

A666's Privacy Commitment to You

Six core principles that underpin how a666 protects every member's personal data.

High-Level Encryption
All data transmitted between your device and a666's servers is protected by 256-bit SSL encryption β€” the same level of security used by Maybank, CIMB, and Malaysia's leading banks. Your data is never transmitted in an unsecured form.
Strict Access Controls
Your personal data is accessible only to a666 staff who genuinely require it to carry out their duties β€” and only after passing a rigorous verification process. Every access is logged and continuously monitored.
Compliant with Malaysia's PDPA 2010
a666 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) β€” the primary legislation governing personal data protection in Malaysia. We ensure all our data handling practices are kept up to date in line with the latest legal developments.
No Sale of Data to Third Parties
a666 has never sold, rented, or disclosed your personal data to any third party for marketing purposes without your explicit consent β€” and never will. Your data belongs to you; we are simply its custodians.
Right of Access & Rectification
You have the right to access, review, and correct your personal data held by a666 at any time. Send your request via email to support@a666.me and we will process it within 14 working days.
Right to Be Forgotten
When you close your a666 account, your personal data will be deleted or anonymised within 90 days, subject to mandatory data retention requirements under applicable Malaysian laws, including AML and tax obligations.
1Introduction

Welcome to the a666 Privacy Policy. This document explains transparently and clearly how a666 ("we", "platform", or "a666") collects, processes, stores, and protects your personal data ("you" or "Member") when you use the a666.me website and all related services.

A666 is an online entertainment platform fully committed to the privacy and data security of its members. We take our responsibilities as a data controller under the Personal Data Protection Act 2010 (PDPA 2010) of Malaysia seriously. This policy is designed to ensure you know exactly what data we collect, why we need it, and how it is used and protected.

This Privacy Policy applies to all users of the a666 platform β€” whether you are simply browsing our website or a registered member actively playing slots, live casino, or placing your favourite football and badminton bets. By continuing to use our platform, you agree to the terms of this Privacy Policy.

Important Note: This Privacy Policy should be read in conjunction with the a666 Terms & Conditions. In the event of any conflict between the two documents, this Privacy Policy shall prevail for all matters relating to personal data.
2Data We Collect

A666 collects various categories of personal data depending on the nature of your interactions with our platform. Below is a comprehensive summary of the data we may collect:

Data CategorySpecific ExamplesHow It's Collected
Identification DataFull name, date of birth, MyKad/passport numberRegistration form, KYC
Contact InformationPhone number, email addressRegistration, account updates
Financial DataBank account number, MYR transaction historyDeposits/withdrawals via TnG, GrabPay, DuitNow, FPX
Gaming DataBetting history, winnings, games playedAutomated platform activity
Technical DataIP address, device type, web browser, operating systemAutomated system logs
Usage DataPages visited, session duration, clicksCookies, analytics
Communication DataCustomer support chat logs, incoming emailsSupport interactions
a666 only collects data that is strictly necessary to provide our services. We do not collect sensitive data such as religious beliefs, ethnicity, or sexual orientation.
3How We Use Your Data

The personal data we collect is used solely for the following purposes and nothing beyond that:

  • Service Provision: To create and manage your account, process deposits and withdrawals in MYR, and give you access to all a666 games and services.
  • Identity Verification (KYC): To verify your identity in compliance with Malaysia's anti-money laundering (AML) legal requirements.
  • Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, or platform abuse.
  • Customer Support: To resolve enquiries, complaints, and technical issues you report to our support team.
  • Responsible Gaming: To monitor your gaming patterns and enable our responsible gaming protection systems to function effectively.
  • Service Communications: To send you important notifications regarding your account, policy updates, or bonus offers that you have opted in to receive.
  • Platform Improvements: To analyse aggregated usage patterns for the purpose of improving the user experience β€” in a form that cannot identify you as an individual.
  • Legal Compliance: To meet all reporting and compliance requirements under applicable Malaysian law.

A666 will not using your data for third-party marketing, building credit profiles, or any other purpose not stated above without first obtaining your additional consent.

4Legal Basis for Data Processing

Under Malaysia's PDPA 2010, all personal data processing must have a valid legal basis. a666 processes your data on the following grounds:

  • Consent: By registering and accepting this Privacy Policy, you give your consent for us to process your data for the purposes stated.
  • Contract: Processing required to fulfil the service contract between you and a666 β€” including processing your deposits and withdrawals in MYR.
  • Legal Obligations: Processing necessary to fulfil our legal obligations under Malaysian law, including AML and tax requirements.
  • Legitimate Interests: Processing carried out for platform security, fraud prevention, and service improvement purposes that do not infringe on your fundamental rights.
Right to Withdraw Consent: You have the right to withdraw your consent at any time. However, doing so may affect our ability to provide some or all of our services to you.
5Disclosure to Third Parties

A666 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, in the following limited circumstances, we may need to share your data:

  • Malaysian Payment Providers: Data required to process your transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and other FPX providers. These providers are bound by strict confidentiality agreements and receive only the minimum data necessary.
  • Game Providers: Account information required to enable you to play games from providers such as Evolution Gaming, Pragmatic Play, NetEnt, and Microgaming. This data is limited to your player ID and does not include your personal financial information.
  • Competent Authorities: When required by applicable Malaysian law, by a valid court order, or by authorities investigating financial crime or money laundering.
  • Technical Service Providers: Companies that help us operate our technical infrastructure, cloud hosting, and cybersecurity β€” all bound by strict data processing agreements.
All third parties that receive data from a666 are required to protect that data to a standard equal to or higher than our own. a666 is responsible for ensuring this compliance.
6Data Security

A666 takes cybersecurity infrastructure seriously to protect your personal data. The key security measures we employ include:

  • 256-bit SSL Encryption: All communications between your device and a666's servers are encrypted to TLS 1.3 standards β€” making your data unreadable to any unauthorised party.
  • Tiered Access Controls: A role-based access control system ensures that only authorised staff can access specific data categories, strictly in line with their job responsibilities.
  • 24/7 Monitoring: A round-the-clock security monitoring system to detect and respond to any unauthorised access attempts or suspicious activity.
  • Regular Security Testing: Penetration testing and security audits are conducted regularly by independent parties to identify and remediate any vulnerabilities.
  • Secure Data Backups: Data is backed up regularly and stored in a separate location with the same level of encryption.
While we take all reasonable steps to protect your data, no security system is 100% impenetrable. In the event of a significant data breach affecting your rights, a666 will notify you and the relevant authorities within the timeframe required by Malaysian law.
7Data Retention Period

A666 does not retain your personal data for longer than necessary. Our data retention policy is as follows:

  • Active Account Data: Retained for the duration of your active account and for a reasonable period thereafter for customer service purposes.
  • Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysian tax and AML legal requirements.
  • KYC Data: Retained for a minimum of 5 years after the business relationship ends, in accordance with Malaysia's Anti-Money Laundering Act.
  • Support Communication Logs: Retained for 2 years for service quality and dispute resolution purposes.
  • Technical Log Data: Retained for 90 days for security and technical debugging purposes.

Once the applicable retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked back to you as an individual.

8Your Rights as a Data Subject

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by a666:

πŸ‘οΈ
Right of Access
Request a copy of the personal data we hold about you at any time.
✏️
Right to Rectification
Request corrections to any inaccurate or incomplete information held in our records.
πŸ—‘οΈ
Right to Erasure
Request deletion of your data when there is no longer a legitimate reason for us to retain it.
🚫
Right to Object
Object to the processing of your data for direct marketing purposes at any time.
πŸ“¦
Right to Portability
Request your data in a machine-readable format for transfer to another platform.
⏸️
Right to Restriction
Request that we restrict the processing of your data while a dispute or review is in progress.
How to Exercise Your Rights: Submit a written request to support@a666.me with the subject line "Personal Data Request". Please include your account number and the nature of your request. We will respond within 14 working days.
9Cookies & Tracking Technologies

A666 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions β€” login, session management, and security. These cookies cannot be disabled.
  • Functional Cookies: Remembering your preferences such as language, currency, and display settings to deliver a more personalised experience.
  • Analytics Cookies: To help us understand how users interact with our platform so we can continue to improve it. This data is collected in aggregate form and does not identify you as an individual.

You can manage and customise your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of some features on the a666 platform.

10Children's Data

A666 is a platform exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If you are a parent or guardian and believe your child has registered an account with a666, please contact us immediately at support@a666.me. We will investigate the matter promptly, close the account, and delete all associated data.

Registration by individuals under the age of 18 is a serious violation of a666's Terms & Conditions. Any account found to have been registered by a minor will be closed immediately.
11Cross-Border Data Transfers

In some cases, your personal data may be transferred to and stored on servers located outside Malaysia β€” particularly in connection with the cloud hosting services and global technical infrastructure we use.

A666 ensures that any cross-border data transfers occur only to destinations with an adequate level of data protection, or under appropriate contractual safeguard mechanisms. We will not transfer your data to any country that lacks adequate data protection laws without putting appropriate additional safeguards in place.

12Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way a666 handles your personal data, please reach out to us through the following channels:

  • Privacy Email: support@a666.me (subject: "Privacy Enquiry")
  • Live Chat: Available 24/7 from the a666.me homepage
  • WhatsApp Business: Via the number listed on our contact page

We are committed to responding to all privacy-related enquiries within 14 working days. For more complex requests, we may require additional information to verify your identity before processing your request.

If you are not satisfied with how we have handled your privacy enquiry or complaint, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia, established under PDPA 2010.

Why You Can Trust a666 with Your Data

Trust is the foundation of our relationship with every a666 member. We understand that when you register and make deposits using Touch 'n Go or GrabPay, you are entrusting us not only with your money β€” but also with your personal information. That trust is something we take to heart.

Unlike some platforms that treat privacy as a mere formality, a666 makes real investments in infrastructure, processes, and staff training to ensure your data is genuinely secure and used only for purposes you have agreed to.

Responsible Gaming
Full Compliance with Malaysia's PDPA 2010

A666 is in full compliance with all provisions of the Personal Data Protection Act 2010. We undergo regular compliance audits and continuously update our practices in line with the latest guidelines from the Personal Data Protection Commissioner of Malaysia.

Ongoing Staff Training

All a666 staff who handle members' personal data undergo comprehensive and regular data protection training. They are bound by robust confidentiality agreements and take their responsibilities seriously.

No Spam, No Data Sales

A666 will not use your data to send unsolicited communications or sell your information to third-party advertisers. All marketing communications from a666 are based on the preferences you set during registration, and you may unsubscribe at any time.

Transparent Policy Updates

Whenever we make changes to this Privacy Policy, we will notify you via email or an in-platform notification before the changes take effect. The date of the latest update is always clearly displayed at the top of this document.

FAQ – a666 Privacy Policy

No. a666 has never sold, rented, or traded your personal data to any third party for marketing or commercial purposes, and never will. Your data is shared only with service providers that assist us in operating the platform β€” such as Touch 'n Go, GrabPay, and FPX payment providers β€” and only the minimum data necessary is shared with them.

You may submit a written request to support@a666.me with the subject line "Personal Data Access Request". Please include your a666 account number and the type of request β€” whether access, correction, or deletion of data. We will process your request and respond within 14 business days. For basic account information such as phone number or email address, you may also update these directly from your account settings page.

Retention periods vary by data type. Financial transaction and KYC data are retained for a minimum of 5–7 years in accordance with Malaysia's AML and tax requirements. General account data will be deleted or anonymised within 90 days of account closure. Once all mandatory retention periods have elapsed, your data will be securely and irreversibly deleted.

Yes, a666 uses cookies to keep the platform running smoothly, remember your preferences, and improve your overall experience. You can manage cookie settings through your web browser. However, disabling essential cookies will affect the platform's login and security functions. Analytics and marketing cookies can be disabled without impacting the platform's core functionality.

While we take all necessary security measures, should a significant data breach occur that affects your rights or freedoms, a666 is committed to notifying you within the timeframe stipulated under Malaysia's PDPA 2010. We will also report the incident to the Personal Data Protection Commissioner of Malaysia. You will receive clear information about what happened, what data was involved, and the steps we are taking to address it.
πŸ›‘οΈ

Your Data Is Safe. Your Experience Is Guaranteed.

Join over 200,000 Malaysian players who already trust a666 β€” a platform that is safe not only for gaming, but also for your personal data. Register today and enjoy a fully protected, responsible entertainment experience.

SSL 256-bit
PDPA 2010
No Data Sales
Right of Data Access
Bahasa Melayu