Data Protection

Privacy Policy a66cool — Malaysia Personal Data Protection

Your privacy is our priority. This document transparently explains how a66cool collects, uses, stores, and protects your personal data as a member of our platform in Malaysia.

Updated: January 2026  ·  Estimated reading time: 7 minutes  ·  Compliant with Malaysia's PDPA
Our Commitment

Your personal data is never sold to third parties for marketing purposes without your explicit consent.

PDPA Compliance

This Privacy Policy complies with the Personal Data Protection Act 2010 (PDPA) of Malaysia and international standards.

This Privacy Policy is part of Terms and Conditions a66cool and should be read together. By using the a66cool platform, you agree to the data collection and usage practices described herein.

Introduction

A66cool ("we", "Platform") takes seriously its responsibility to protect the privacy of all users and members who use our services. This Privacy Policy has been established to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices.

When you register as an a66cool member, use our web platform or mobile app, contact our support team, or carry out any financial transaction through the platform, you entrust some of your personal data to us. We do not take this responsibility lightly.

This document transparently sets out: what data we collect, why we collect it, how we use it, who can access it, how long we retain it, and what rights you have as the owner of that data. We believe transparency is the foundation of trust, and trust is the foundation of a long-term relationship between us and the Malaysian player community.


Personal Data We Collect

A66cool only collects data that is strictly necessary to provide you with a safe, legal, and quality service. The following are the categories of data we collect:

Data Category Example Information Primary Purpose
Identity Information Full name, IC number, date of birth, gender KYC Verification & member eligibility
Contact Information Email address, phone number Account communications & customer support
Financial Information Bank account number, account holder name, payment method Deposit & withdrawal processing
Technical Data IP address, device type, operating system version, web browser Account security & fraud prevention
Usage Data Game records, transaction history, wagering patterns Regulatory compliance & responsible gaming
Communications Data Support chat logs, email records Complaint resolution & service improvement

We do not collect sensitive data such as health information, political views or religious beliefs except in very limited circumstances and with your explicit consent. Biometric data is not collected by the a66cool platform.


How We Use Your Data

The personal data we collect is used exclusively for the following purposes:

  • Account Management: Securely creating, verifying and maintaining your member account on the a66cool platform.
  • Identity Verification (KYC): Meeting legal requirements to verify member identity in order to prevent money laundering and illegal activities.
  • Transaction Processing: Processing deposits, withdrawals and all financial transactions securely and efficiently.
  • Platform Security: Detecting and preventing fraud, unauthorized access, multi-account usage and any suspicious activity.
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offering appropriate assistance.
  • Service Improvement: Analyzing how members use the platform to improve user experience, platform speed and game variety.
  • Service Communications: Sending important notifications related to your account, transactions, policy changes and security updates.
  • Marketing Communications: Sending promotional information and bonus offers — only to members who have consented to receive marketing communications.
  • Legal Compliance: Fulfilling legal, regulatory and judicial obligations applicable to platform operations.
You may withdraw consent to receive marketing communications at any time by contacting our support team or through your account settings. Withdrawing marketing consent will not affect your account services.

Data Sharing with Third Parties

A66cool does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, we may share data with the following parties under limited and controlled circumstances:

  • Payment Service Providers: DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and Boost require transaction information to process your payments. They are each subject to their own privacy policies and security standards.
  • Game Software Providers: Third-party game studios may receive the minimum technical data necessary to ensure games function properly within the a66cool platform.
  • Identity Verification Services: Trusted third-party KYC providers help verify member identities in accordance with legal requirements.
  • Legal Authorities: a66cool will disclose data when required by court order, law enforcement directive, or legitimate regulatory requirement.
  • Cloud Services & Infrastructure: Technical infrastructure providers supporting platform operations, all bound by strict data processing agreements.

All third parties that receive data from a66cool are required to meet the same or higher data protection standards that we ourselves uphold. Written agreements are signed with every service provider to ensure your data is handled responsibly.


Data Security

Protecting your data from unauthorized access, loss or misuse is our technical priority. a66cool implements the following security layers:

  • 256-bit SSL Encryption: All data transmitted between your device and a66cool's servers is encrypted using the latest TLS 1.3 protocol.
  • Stored Data Encryption: Sensitive data such as financial information and verification documents is stored in encrypted form within our systems.
  • Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an additional layer of account protection.
  • Continuous Monitoring: A 24/7 security monitoring system that detects and responds to any suspicious activity in real time.
  • Internal Access Controls: Only authorised staff with a legitimate operational need may access member data, with every access logged and audited.
  • Penetration Testing: Independent security audits are conducted regularly to identify and address any system vulnerabilities.
  • Data Backup: Member data is automatically and regularly backed up to a secure, separate location to prevent data loss.
Data Breach: In the event of a data breach affecting your personal information, a66cool is committed to notifying you within 72 hours of the breach being identified, in line with international best practices.

Cookies & Tracking Technologies

A66cool uses cookies and similar tracking technologies to ensure the platform functions correctly and to provide you with a better experience. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as Login session management and security. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how you use the platform to help us identify technical issues and improve performance.
  • Functional Cookies: Remembering your preferences such as language, display settings and login details for a more convenient experience.
  • Analytics Cookies: Aggregated and anonymised data is used to understand platform usage patterns and inform improvement decisions.

You may manage or disable non-essential cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality or user experience of the platform.


Data Retention & Deletion Period

A66cool retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with legal obligations. Our retention period guidelines are as follows:

  • Active Account Data: Retained for as long as your account is active and for 7 years after account closure for legal compliance purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements for financial records.
  • KYC & Identity Verification Data: Retained for the duration the account is active and for 7 years after closure, subject to regulatory requirements.
  • Support Communication Logs: Retained for 3 years for reference and service improvement.
  • Technical Data & Logs: System logs and technical data are retained for 90 days for security and debugging purposes.

Once the retention period has elapsed and there is no legal requirement to retain the data, a66cool will securely delete or anonymise it using trusted deletion procedures.


Your Rights as a Data Owner

Under Malaysia's PDPA and a66cool's privacy policy, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure

In certain circumstances, you may request that we delete your personal data, subject to legal obligations.

Right to Restrict Processing

You may request that we restrict how we use your data in certain circumstances.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another service.

Right to Object

You may object to the processing of your data for direct marketing purposes or in certain other circumstances.

To exercise any of these rights, please contact our privacy team at [email protected]. We will respond to your request within 30 business days. In complex cases, this period may be extended up to 60 days with notice to you.

Some rights may be limited due to legal requirements. For example, we are unable to delete financial transaction records that are still within a retention period mandated by Malaysian law.

Children's Data Protection

The a66cool platform is exclusively for individuals aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21.

If we discover that personal data of a child or minor has been collected without our knowledge, we will immediately take the following steps:

  • Terminating the relevant account immediately.
  • Immediately deleting all associated personal data.
  • Withdrawing any funds in the account through the appropriate channels.
  • Reporting the case to the relevant authorities where necessary.

Parents or guardians who believe their child has registered an a66cool account without permission are urged to contact us immediately at [email protected].


Changes to the Privacy Policy

A66cool reserves the right to update or amend this Privacy Policy from time to time to reflect changes in data practices, legal requirements, or platform operations. The date of the most recent update will always be displayed at the top of this document.

For significant changes to how we use your personal data, we will notify you via:

  • A prominent in-platform notice displayed at your next login.
  • Email to your registered address at least 14 days before the changes take effect.

Continued use of the a66cool platform after any changes to the Privacy Policy take effect will be considered your acceptance of the updated policy.

This Privacy Policy was last updated on January 2026. We encourage you to review this page periodically.

Contact Our Privacy Team

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please reach us through the following channels:

  • Privacy Email: [email protected] — dedicated to privacy-related inquiries and data rights requests.
  • General Support Email: [email protected] — for general account and platform inquiries.
  • Live Chat: Available 24/7 on the a66cool platform or mobile app for immediate assistance.
  • FAQ: Browse our FAQ page for answers to common privacy questions.

Our privacy team is committed to addressing every enquiry transparently, professionally and within a reasonable timeframe.

Why Your Data Secure with a66cool

Six layers of protection keeping your personal information secure at all times

Military-Grade Encryption

Your data is protected with 256-bit SSL encryption and TLS 1.3 protocol — the same technology used by leading financial institutions and banks worldwide. Every bit of information travelling between your device and our servers is fully encrypted.

No Data Sales to Advertisers

A66cool has never and will never sell your personal data to advertisers or third-party marketing companies. Your data belongs to you, not as a business commodity of ours. We generate revenue from the gaming platform, not from selling member information.

Malaysia PDPA Compliance

All of a66cool's data handling practices are designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct regular compliance reviews and update our procedures whenever the law changes.

Strict Internal Access Controls

Access to member data within a66cool's internal systems is restricted to staff who genuinely require it for legitimate operational purposes. All access is logged, audited, and monitored by our information security team.

Clear Data Retention Policy

We retain your data only for as long as required by law or operational necessity. Data that has exceeded its retention period is securely deleted using trusted procedures, ensuring your old information is never left uncontrolled.

Immediate Breach Notification

In the event of any security incident affecting your data, the a66cool team is committed to notifying you within 72 hours. We believe in full transparency — you have the right to know if your privacy has been compromised.

Trusted Platform

Privacy Protected, Gaming Greater Peace of Mind

Register your a66cool account with complete confidence. Your personal data is protected by the latest technology and a transparent privacy policy — so you can stay focused on the game.

256-bit SSL Encryption  ·  PDPA Malaysia Compliant  ·  No Data Sales  ·  For Users 21+

Bahasa Melayu