Privacy Policy – How alpha66 Protects Your Data

1. Who We Are

This Privacy Policy applies to the alpha66 online gaming platform, accessible at alpha66.asia and all associated sub-domains and services (collectively, the "Platform"). In this document, references to "alpha66", "we", "us", or "our" refer to the operator of the Platform. alpha66 is the data controller in respect of personal data collected from members and visitors through the Platform.

alpha66 operates as an online casino and sportsbook serving Malaysian players and the broader Southeast Asian market. Our primary user base comprises players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Kota Kinabalu, and surrounding areas. The Platform processes personal data in connection with account registration, gaming activity, financial transactions, and customer support interactions.

If you have any questions about this Privacy Policy or the data we hold about you, please contact us using the details in Section 14.

2. Personal Data We Collect

alpha66 collects the following categories of personal data from members and platform visitors:

2.1 Identity and Account Data

• Full legal name
• Date of birth (for age verification — minimum age 21)
• Username and account credentials (passwords are stored in hashed form and are never readable by alpha66 staff)
• Government-issued identification number or document reference (where required for KYC/AML compliance)
• Copies of identity documents submitted for verification purposes (passport, national identity card, or equivalent)

2.2 Contact Data

• Email address
• Mobile phone number
• Residential address (city, state, country)

2.3 Financial Data

• Payment method identifiers (e.g., masked bank account numbers, e-wallet account references for Touch n Go eWallet, Boost, or Visa card details)
• Transaction history: deposits, withdrawals, and adjustments in MYR
• Source of funds documentation (where required under AML obligations)

2.4 Gaming and Behavioural Data

• Bet history, game session records, and wagering patterns
• Bonus and promotion participation records
• Responsible gaming tool settings (deposit limits, self-exclusion status)
• Live chat and customer support interaction transcripts

2.5 Technical Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session timestamps, login history, and page interaction logs
• Cookie identifiers and analytics data (see Section 6)

3. How We Collect Your Data

alpha66 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, submitting support requests, or opting in to promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, session logs, and cookie data.
• Third-party payment processors: Transaction confirmation data received from payment service providers including Touch n Go, Boost, Maybank, CIMB, and Visa processing networks.
• Identity verification providers: Data received from third-party KYC and AML screening providers in connection with account verification obligations.
• Gaming software providers: Game round and session data transmitted from third-party game providers integrated into the alpha66 platform.

4. How We Use Your Personal Data

alpha66 uses the personal data it collects for the following purposes:

• Account creation and management: To register and maintain your alpha66 member account, verify your identity and age, and administer your account settings.
• Service delivery: To process deposits and withdrawals in MYR, grant access to gaming products, and settle bets and game outcomes.
• Legal and regulatory compliance: To fulfil obligations under applicable anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and international gaming authority licensing conditions, including age verification and source-of-funds checks.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, collusion, and other forms of abuse or prohibited conduct on the Platform.
• Customer support: To respond to your queries, resolve disputes, process complaints, and provide technical assistance.
• Promotions and marketing: To send you promotional communications about alpha66 bonuses, offers, and events, where you have provided consent or where such communications relate directly to services you have used (subject to your opt-out rights).
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling, enforce self-exclusion and deposit limit settings, and provide responsible gaming support where appropriate.
• Platform improvement: To analyse usage patterns, conduct platform testing, and improve the performance, content, and features of the alpha66 Platform.

5. Legal Bases for Processing

alpha66 processes your personal data on the following legal bases:

• Performance of a contract: Processing necessary to create and administer your account, process transactions, and deliver gaming services under the alpha66 Terms & Conditions.
• Legal obligation: Processing required to comply with AML regulations, KYC requirements, age verification obligations, and other applicable legal or regulatory requirements.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming oversight, and platform improvement, where those interests are not overridden by your rights.
• Consent: Processing for direct marketing communications where consent has been specifically obtained. You may withdraw consent at any time by contacting support or adjusting your communication preferences in your account settings.

6. Cookies and Tracking Technologies

The alpha66 Platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure browsing experience. Cookies are small data files stored on your device by your browser.

Types of Cookies Used

• Essential cookies: Required for the Platform to function correctly, including session management, login authentication, and security tokens. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences, language settings, and account display options to provide a consistent experience across sessions.
• Analytics cookies: Collect anonymised data about how members navigate and interact with the Platform, used to identify areas for improvement.
• Marketing cookies: Used to measure the effectiveness of promotional campaigns. These are only deployed where you have consented to marketing communications.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing your alpha66 account or gaming products, though some personalisation features may be affected.

7. Data Sharing and Third Parties

alpha66 does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary:

• Payment processors: Transaction data is shared with payment service providers (Touch n Go, Boost, Maybank, CIMB, Visa networks) solely to process deposits and withdrawals.
• KYC and AML providers: Identity and address data is shared with regulated identity verification and screening providers to fulfil our legal compliance obligations.
• Game software providers: Your account reference and gaming session data are shared with third-party game providers integrated into the Platform to enable gameplay and settle outcomes.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, gaming regulatory authorities, or courts when required to do so by applicable law or valid legal process.
• Professional advisors: Legal, financial, and audit advisors may access data where necessary in connection with advisory services, subject to confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of the Platform's business or assets, personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third-party service providers who process data on behalf of alpha66 are contractually required to maintain appropriate technical and organisational security measures and to process data only in accordance with our instructions.

8. Data Retention

alpha66 retains personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data and transaction records: Retained for a minimum of 5 years from the date of account closure, in accordance with AML record-keeping obligations applicable to the gaming industry.
• KYC documentation: Retained for a minimum of 5 years from the completion of the business relationship or the date of the relevant transaction, whichever is later.
• Customer support records: Retained for 3 years from the date of the interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing consent records: Retained for as long as marketing communications are sent plus 3 years thereafter, to demonstrate consent compliance.
• Technical log data: Retained for 12 months from collection, unless longer retention is required for security investigation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents reconstruction of identifiable information.

9. Data Security

alpha66 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmissions between member devices and the Platform — the same encryption standard used by major Malaysian banks for internet banking.
• Hashed storage of passwords — no alpha66 employee can view or retrieve your password in plain text.
• Access controls ensuring that personal data is accessible only to staff with a legitimate operational need.
• Regular security audits and penetration testing by independent technical specialists.
• Real-time fraud and anomaly detection systems monitoring login and transaction patterns.
• Secure, redundant data storage with regular encrypted backups.

Notwithstanding these measures, no online system can guarantee absolute security. Members are encouraged to use strong, unique passwords and to activate two-factor authentication on their alpha66 accounts.

10. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by alpha66:

• Right of access: You may request a copy of the personal data alpha66 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where there is no legitimate or legal basis for continued retention. Note that erasure requests cannot be fulfilled in respect of data subject to mandatory AML/KYC retention obligations.
• Right to restriction: You may request that processing of your data be restricted in certain circumstances, including during the resolution of a rectification or objection request.
• Right to data portability: Where processing is based on consent or contract, you may request your personal data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. Objections to marketing will be actioned without delay.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact the alpha66 support team using the details in Section 14. We will respond to all verified requests within 30 days. We may need to verify your identity before processing requests relating to account data.

11. Children and Underage Users

The alpha66 Platform is strictly intended for use by persons aged 21 years of age or older. alpha66 does not knowingly collect personal data from persons under the age of 21. Age verification is required during the account registration and KYC process.

If alpha66 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, personal data will be deleted to the extent permitted by applicable law, and any accrued winnings may be forfeited. If you believe that a person under 21 has accessed the Platform, please notify us immediately at [email protected].

12. International Data Transfers

Some of alpha66's third-party service providers — including game software providers, KYC platforms, and payment processors — may process personal data in locations outside of Malaysia. Where such transfers occur, alpha66 ensures that appropriate safeguards are in place to maintain a level of data protection consistent with this Privacy Policy and applicable data protection standards. These safeguards may include contractual clauses, data processing agreements, or the use of service providers operating in jurisdictions recognised as providing adequate data protection.

13. Changes to This Policy

alpha66 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered members via email notification or prominent in-platform notice prior to the changes taking effect.

The "Last updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of the Platform following notification of a material update constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or alpha66's data processing activities, please contact the support team through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 on the alpha66 Platform.
• WhatsApp: Contact details are provided in the member dashboard upon login.

We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days. For requests relating to your statutory data rights, the 30-day response window begins upon successful verification of your identity.