Privacy Policy

1. Introduction

aec66 ("aec66", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our Platform at aec66.net and any associated subdomains or mobile interfaces (the "Platform"). This Privacy Policy explains how aec66 collects, uses, stores, shares, and protects your personal information in connection with your use of our online casino, sports betting, lottery, and related gaming services.

This Privacy Policy applies to all current and former registered members of aec66, visitors to the Platform who have not registered, and any individual whose personal data aec66 processes in the course of its operations. By accessing or using the aec66 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein.

This Privacy Policy should be read alongside our Terms & Conditions, which govern your use of the aec66 Platform in full.

2. Data We Collect

aec66 collects personal data from you in the following categories, depending on the nature of your interaction with the Platform:

2.1 Registration & Identity Data

• Full legal name;
• Date of birth (to verify you are 21 years of age or older);
• Email address;
• Username and encrypted password;
• Residential address, including city (e.g. Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya);
• Government-issued identity document details (Malaysian MyKad or passport) where KYC verification is required.

2.2 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references;
• Payment instrument details (e.g. bank account numbers, e-wallet identifiers for Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, Visa, Mastercard) — stored only in tokenised or masked form;
• Wallet balance history and betting records.

2.3 Technical & Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Login timestamps, session duration, and pages visited;
• Game activity logs, including games played, bets placed, and outcomes;
• Cookies and similar tracking data (see Section 6).

2.4 Communications Data

• Records of your interactions with aec66's customer support team, including live chat transcripts and email correspondence;
• Your stated communication preferences and marketing opt-in or opt-out status.

3. How We Use Your Data

aec66 uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and manage your aec66 account, including identity verification and KYC compliance;
• Service delivery: To provide access to games, process deposits and withdrawals, and fulfil your betting transactions;
• Security & fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and unauthorised account access;
• Regulatory compliance: To fulfil our obligations under applicable anti-money laundering laws, our gaming licence, and any lawful requests from regulatory or law enforcement authorities;
• Platform improvement: To analyse usage patterns and improve the functionality, performance, and content of the aec66 Platform;
• Personalisation: To tailor your experience on aec66, including surfacing relevant games, promotions, and content based on your activity history;
• Marketing communications: To send you information about aec66 promotions, bonuses, and events where you have given consent or where we have a legitimate interest in doing so — subject always to your right to opt out;
• Responsible gaming: To monitor gaming behaviour patterns and, where appropriate, proactively contact players who may be showing signs of problem gambling.

4. Legal Basis for Processing

aec66 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to provide you with the aec66 services you have requested, including account management and transaction processing;
• Legal obligation: Processing required to comply with anti-money laundering regulations, gaming licence obligations, and other applicable legal requirements;
• Legitimate interests: Processing conducted for fraud prevention, security monitoring, platform improvement, and responsible gaming purposes, where such interests are not overridden by your fundamental rights;
• Consent: Processing for marketing communications and non-essential cookies, where we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

aec66 does not sell or rent your personal data to any third party. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: Local Malaysian payment providers and card networks (Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, Visa, Mastercard) for the purpose of processing deposits and withdrawals;
• KYC and identity verification providers: Third-party services that assist aec66 in verifying member identities in compliance with regulatory requirements;
• Game content providers: Software developers and live casino operators who supply games to the aec66 Platform, to the extent necessary to facilitate your game sessions;
• Regulatory and law enforcement authorities: Where aec66 is required by law, court order, or our gaming licence obligations to disclose personal data to competent authorities;
• Professional advisers: Legal, audit, and compliance professionals who are bound by confidentiality obligations;
• Business successors: In the event of a merger, acquisition, or sale of all or part of aec66's business, your data may be transferred to the acquiring entity subject to equivalent privacy protections.

All third parties with whom aec66 shares personal data are required to implement appropriate technical and organisational security measures and to process your data only for the specified purpose.

6. Cookies & Tracking Technologies

aec66 uses cookies — small text files stored on your device — and similar technologies such as web beacons and local storage to operate and improve the Platform. The categories of cookies we use include:

• Strictly necessary cookies: Essential to the functioning of the Platform, including session management and security features. These cannot be disabled.
• Functional cookies: Used to remember your preferences such as language settings and login state.
• Analytics cookies: Used to collect aggregated data on how members use the Platform, helping aec66 identify areas for improvement.
• Marketing cookies: Used to deliver relevant aec66 promotions and measure the effectiveness of our marketing campaigns, subject to your consent.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the aec66 Platform.

7. Data Retention

aec66 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including the following retention periods:

• Account and identity data: retained for the duration of your aec66 membership and for a minimum of five (5) years following account closure, to comply with anti-money laundering record-keeping requirements;
• Transaction records: retained for a minimum of seven (7) years from the date of the transaction;
• Customer support communications: retained for three (3) years from the date of the interaction;
• Marketing consent records: retained until consent is withdrawn and for a reasonable period thereafter for compliance verification purposes.

Where data is no longer required, aec66 will securely delete or anonymise it in accordance with our internal data retention schedule.

8. Data Security

aec66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:

• End-to-end encryption of all data in transit using TLS 1.3;
• Encryption of sensitive data at rest, including payment information and identity documents;
• Role-based access controls limiting data access to authorised personnel only;
• Regular security audits, penetration testing, and vulnerability assessments;
• Multi-factor authentication for internal systems access;
• Incident response procedures, including breach notification protocols.

In the event of a personal data breach that poses a risk to your rights, aec66 will notify affected individuals and relevant regulatory authorities in accordance with applicable legal requirements.

9. Your Rights

Subject to applicable law and aec66's legal obligations, you have the following rights in respect of the personal data we hold about you:

• Right of access: To request a copy of the personal data aec66 holds about you;
• Right of rectification: To request correction of inaccurate or incomplete personal data;
• Right of erasure: To request deletion of your personal data where retention is no longer necessary or lawful, subject to our regulatory record-keeping obligations;
• Right to restrict processing: To request that we limit the processing of your data in certain circumstances;
• Right to object: To object to processing based on our legitimate interests, including direct marketing;
• Right to data portability: To receive your personal data in a structured, machine-readable format where technically feasible;
• Right to withdraw consent: To withdraw consent for consent-based processing at any time, without affecting prior lawful processing.

To exercise any of these rights, please contact the aec66 data protection team via live chat or email at [email protected]. We will respond to all requests within 30 calendar days.

10. Children's Privacy

The aec66 Platform is strictly intended for adults aged 21 years and above. aec66 does not knowingly collect, process, or store personal data relating to individuals under 21 years of age. If aec66 becomes aware that personal data of an under-age individual has been collected, we will take immediate steps to delete such data and close the associated account. If you believe a minor has registered on the Platform, please contact our support team immediately.

11. Third-Party Services

The aec66 Platform may integrate with third-party services including payment gateways, game providers, and analytics tools. aec66 is not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you interact with in connection with the Platform. aec66 conducts due diligence on all third-party processors and requires them to comply with equivalent data protection standards through binding contractual agreements.

12. Changes to This Policy

aec66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered members via email to the address on file and via a prominent notice on the aec66 Platform at least 14 days prior to the effective date of the change. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way aec66 handles your personal data, please contact our data protection team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the aec66 Platform;
• Email: [email protected] (plain text — not a clickable link);
• Response time: under 3 minutes for live chat; within 2 business days for email enquiries.

This Privacy Policy was last reviewed and updated on 12 June 2026. aec66 is committed to maintaining the highest standards of data protection for all members across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, and Petaling Jaya.