aec66 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how aec66 ("aec66", "We", "Us", "Our"), operating the platform at https://aec66.app, collects, uses, stores, and discloses personal data from individuals ("Member", "User", "You") who register or interact with the aec66 platform and its associated services.

This Policy applies to all personal data collected through the aec66 website, mobile web interface, customer support channels, and any associated services. It should be read alongside the aec66 Terms and Conditions, which govern the overall membership relationship.

By registering an account or using the aec66 platform, you acknowledge that you have read and understood this Policy. If you do not agree to the practices described herein, you should not access or use the aec66 platform.

2. Data We Collect

aec66 collects personal data in the following categories:

• Registration Data: Full name, date of birth, gender, nationality, residential address, email address, and Malaysian mobile number provided during account creation.
• Identity Verification (KYC) Data: Copies of government-issued identification documents (e.g., MyKad, passport), proof of address documents, and payment method ownership evidence submitted as part of the Know Your Customer process.
• Financial Data: Transaction history including deposits, withdrawals, wager amounts, game outcomes, bonus activity, and payment method identifiers (e.g., masked bank account numbers, Touch n Go eWallet registered phone number). aec66 does not store full payment card numbers.
• Technical Data: IP address, device type and operating system, browser type and version, session timestamps, geolocation data (country and region level), and cookies or similar tracking identifiers.
• Behavioural Data: Game history, session durations, betting patterns, feature usage, and responsible gaming tool interactions.
• Communications Data: Records of your correspondence with aec66 support via live chat, email, or any other channel, including the content of messages and timestamps.
• Voluntary Data: Any additional information you choose to provide to aec66, including preferences set in your account settings or information shared during support interactions.

3. How We Use Your Data

aec66 processes personal data for the following purposes:

• Account Administration: Creating and maintaining your member account, verifying your identity, processing login authentication, and managing your MYR wallet.
• Service Delivery: Operating the games, live casino, sportsbook, poker rooms, and arcade products that constitute the aec66 platform; processing deposits and withdrawals; crediting and tracking bonus activity.
• Legal Compliance: Meeting anti-money laundering (AML), Know Your Customer (KYC), counter-terrorism financing (CTF), and other regulatory obligations applicable to aec66's operating jurisdiction.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, collusion, and other prohibited activities. This includes automated monitoring of account and transaction patterns.
• Responsible Gaming: Monitoring behavioural indicators of problem gambling, administering self-exclusion and limit tools, and complying with responsible gaming obligations.
• Customer Support: Responding to enquiries, resolving disputes, processing complaints, and providing technical assistance.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the aec66 platform, optimise game loading performance for Malaysian mobile networks, and develop new features.
• Marketing Communications: Sending promotional offers, bonus alerts, and platform news to members who have opted in to receive such communications. You may opt out at any time.

4. Legal Basis for Processing

aec66 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the membership contract, including account management, game operation, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML, KYC, and responsible gaming obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where you have provided express opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Data

aec66 does not sell, rent, or trade your personal data. We may share personal data with the following categories of recipients under binding contractual obligations:

• Game Providers: Third-party studios (e.g., Pragmatic Play, PG Soft, Evolution Gaming) receive limited technical data required to authenticate game sessions. These providers do not receive your financial or full identity data.
• Payment Processors: Your transaction data is shared with payment service providers (including Touch n Go eWallet, Boost, and banking institutions) solely to process deposits and withdrawals.
• Identity Verification Partners: KYC document verification may be processed by accredited third-party identity verification services under data processing agreements.
• Fraud & Security Services: Technical and behavioural data may be shared with fraud detection platforms to identify and prevent prohibited activity.
• Regulatory & Law Enforcement Authorities: aec66 will disclose personal data to competent authorities where legally required, including in response to court orders, regulatory investigations, or statutory reporting obligations relating to AML/CTF compliance.
• Professional Advisers: Legal, accounting, and audit professionals may access personal data on a confidential basis where necessary for professional services engaged by aec66.

All third-party data processors engaged by aec66 are contractually required to process personal data only as directed, to maintain appropriate security measures, and not to disclose data to any further parties without authorisation.

6. Cookies & Tracking Technologies

aec66 uses the following categories of cookies and similar technologies on the platform:

• Essential Cookies: Required for the platform to function. These maintain your login session, preserve game state, and support security features. They cannot be disabled without disrupting core platform functionality.
• Functional Cookies: Remember your account preferences, language settings, and display configurations between sessions.
• Analytics Cookies: Collect aggregated data about how members navigate the aec66 platform to support performance optimisation. Data is anonymised prior to analysis.
• Fraud Detection Cookies: Identify devices and flag anomalous access patterns for security review.

aec66 does not use third-party advertising or retargeting cookies. You may manage or delete non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain platform features.

7. Data Retention

aec66 retains personal data for as long as necessary to fulfil the purposes described in this Policy and to meet applicable legal obligations. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your membership and for a minimum of 5 years following account closure, to meet AML record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years after the end of the business relationship, in accordance with applicable AML regulatory requirements.
• Transaction Records: Retained for a minimum of 5 years following the transaction date.
• Support Communications: Retained for 3 years following the resolution of the relevant enquiry or dispute.
• Marketing Consent Records: Retained for the duration of membership plus 1 year following opt-out or account closure.
• Technical Logs: Retained for 12 months on a rolling basis, unless required for longer as part of a fraud investigation or legal proceeding.

Where data is no longer required, aec66 will securely delete or anonymise it in accordance with our internal data disposal procedures.

8. Data Security

aec66 implements technical and organisational security measures appropriate to the sensitivity of the personal data processed. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and aec66's servers;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Role-based access controls restricting staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication requirements for internal administrative access to member data systems;
• Regular security audits, penetration testing, and vulnerability assessments;
• Incident response procedures for the detection, reporting, and remediation of data security incidents.

In the event of a personal data breach that poses a risk to your rights and freedoms, aec66 will notify affected members and relevant authorities in accordance with applicable obligations. You are also responsible for maintaining the security of your aec66 account credentials.

9. International Data Transfers

aec66's platform infrastructure and some of our third-party service providers may be located outside Malaysia. Where personal data is transferred internationally, aec66 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses or equivalent contractual protections binding the recipient to data protection standards comparable to those applied by aec66;
• Transfer only to jurisdictions with an adequate level of data protection as recognised by applicable frameworks;
• Encryption of data during transmission.

10. Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by aec66:

• Right of Access: Request a copy of the personal data aec66 holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Restriction: Request that aec66 restrict processing of your data in certain circumstances.
• Right to Data Portability: Request a copy of data you have provided to aec66 in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact aec66 support via live chat or the email address listed in Section 14. aec66 will respond to verified requests within 30 calendar days. Identity verification may be required before your request is actioned.

11. Children's Privacy

The aec66 platform is strictly restricted to individuals aged 21 years and above. aec66 does not knowingly collect personal data from individuals under the age of 21. Any account found to have been registered by a person under 21 years of age will be immediately closed and all associated data reviewed and deleted in accordance with this Policy, with the exception of records required for AML compliance.

If you believe that a person under the age of 21 has registered with aec66, please contact our support team immediately so that the matter can be investigated and the account closed.

12. Responsible Gaming & Data Processing

aec66 uses behavioural data to support its responsible gaming programme. This includes monitoring for indicators of problem gambling behaviour such as significant increases in session duration, deposit frequency, or loss chasing patterns. Where such patterns are detected, aec66 may proactively contact the member with responsible gaming information or apply temporary account controls.

Self-exclusion data is retained and actively enforced for the full duration of any self-exclusion period, and for a minimum of 5 years following expiry. aec66 will not send marketing communications to self-excluded members. Where a member requests permanent self-exclusion, their data is retained solely for the purpose of enforcing the exclusion.

The processing of data for responsible gaming purposes is in the legitimate interests of both aec66 and its members, and is required to meet responsible gaming obligations under the international gaming authority framework applicable to the platform.

13. Amendments to This Policy

aec66 reserves the right to update this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this page. Where changes are material, aec66 will endeavour to notify active members via their registered contact details or a prominent platform notification prior to the changes taking effect.

Your continued use of the aec66 platform following the publication of an updated Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically.