alpha66 Privacy Policy

1. Introduction

1.1 alpha66 is committed to protecting the privacy and personal data of all its Members. We process personal data only for the purposes described in this Policy and only to the extent necessary to fulfil those purposes, comply with our legal obligations, and operate the Platform safely and responsibly.

1.2 This Policy applies to all personal data collected through the Platform, including data collected via our website, mobile browser experience, customer support channels, and any promotional activities we may conduct. It does not apply to data collected by third-party websites, services, or game studios that may be accessible through the Platform, each of which operates under its own privacy practices.

1.3 We take our obligations under applicable data protection law seriously. Where we act as the data controller — that is, where we determine the purposes and means of processing your personal data — we are responsible for ensuring that processing is lawful, fair, and transparent.

2. Data Controller

2.1 alpha66 operates as the data controller in respect of personal data collected from Members using the Platform. As data controller, alpha66 determines the purposes for which, and the manner in which, your personal data is processed.

2.2 Where alpha66 engages third-party service providers to process data on its behalf, those providers act as data processors and are contractually obligated to process personal data only in accordance with alpha66's documented instructions and applicable data protection law.

3. Personal Data We Collect

alpha66 collects personal data in the following categories:

3.1 We do not collect special categories of personal data (such as biometric data, health information, or racial/ethnic origin) unless required by law or expressly provided by you in a support context.

3.2 Where you provide personal data about a third party (for example, a referral), you represent that you have the authority to do so and that the third party has consented to their data being shared with alpha66 for the relevant purpose.

4. How We Use Your Personal Data

alpha66 uses your personal data for the following purposes:

• Account administration: Creating, maintaining, and managing your alpha66 account; processing login and authentication; communicating account-related notices and alerts.
• KYC and fraud prevention: Verifying your identity and age in compliance with our licensing obligations; detecting, investigating, and preventing fraudulent activity, money laundering, and other prohibited conduct.
• Payment processing: Processing deposits and withdrawals in MYR via your selected payment methods (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and others); reconciling financial records.
• Platform operation: Delivering game content, sportsbook markets, 4D lottery products, and all other platform features; maintaining service availability and technical performance.
• Customer support: Responding to your enquiries, resolving disputes, and providing assistance via live chat, email, and other support channels.
• Responsible gaming: Monitoring for indicators of problem gambling behaviour; applying deposit limits, loss caps, self-exclusion restrictions, and other responsible gaming measures.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may opt out at any time.
• Legal and regulatory compliance: Complying with applicable law, regulatory obligations, and lawful requests from competent authorities.
• Platform improvement: Analysing aggregated usage data to improve platform design, game selection, and user experience.

5. Legal Basis for Processing

Where applicable data protection law requires a legal basis for the processing of personal data, alpha66 relies on the following bases:

• Contractual necessity: Processing required to perform our contract with you, including account creation, game delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering obligations, KYC requirements, and responsible gaming obligations under our gaming licence.
• Legitimate interests: Processing necessary for the legitimate interests of alpha66, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, such as the receipt of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

6.1 alpha66 does not sell your personal data to third parties. We may share your personal data with the following categories of recipient where necessary and proportionate:

• Payment service providers: Financial institutions and e-wallet operators (such as Touch n Go, Boost, Maybank, and CIMB) to the extent necessary to process deposits and withdrawals.
• Game content providers: Studio partners and platform technology providers who provide game software or ancillary platform services, subject to contractual data processing obligations.
• Identity verification services: Third-party KYC and anti-fraud service providers who assist alpha66 in verifying member identities and detecting suspicious account activity.
• Regulatory and legal authorities: Competent authorities, regulatory bodies, law enforcement agencies, and courts where disclosure is required by law, a court order, or a lawful regulatory direction.
• Professional advisers: Legal, audit, and compliance advisers bound by professional confidentiality obligations.

6.2 Where alpha66 undergoes a corporate restructure, merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction subject to appropriate safeguards.

7. Cookies & Tracking Technologies

7.1 The alpha66 Platform uses cookies and similar tracking technologies (including local storage and session tokens) to operate platform functionality, maintain login sessions, detect fraud, and analyse user behaviour in aggregate.

7.2 Strictly necessary cookies are required for the Platform to function and cannot be disabled. These include session cookies, authentication tokens, and load-balancing cookies.

7.3 Analytics cookies help alpha66 understand how the Platform is used in aggregate — which pages are visited, how long sessions last, and which features are most commonly accessed. This data is used only for internal platform improvement purposes.

7.4 Preference cookies store your display preferences and settings across sessions to improve your experience on return visits.

7.5 You may configure your browser to reject non-essential cookies. Please note that disabling cookies may impair the functionality of certain platform features, including login persistence and game performance.

8. Data Retention

8.1 alpha66 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are as follows:

• Account data and KYC records: Retained for a minimum of five (5) years from the date of account closure or last account activity, in accordance with anti-money laundering record-keeping obligations.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for a minimum of two (2) years from the date of each interaction unless subject to an ongoing dispute or investigation requiring longer retention.
• Marketing consent records: Retained for three (3) years from the date of last consent or opt-out activity.

8.2 Where retention is no longer legally required, personal data is securely deleted or anonymised in accordance with our internal data deletion procedures.

9. Data Security

9.1 alpha66 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the alpha66 servers;
• Encrypted storage of passwords using industry-standard hashing algorithms;
• Two-factor authentication (2FA) available on all accounts;
• Role-based access controls limiting internal access to personal data to authorised personnel only;
• Regular security audits, penetration testing, and vulnerability assessments of the Platform infrastructure.

9.2 Notwithstanding the measures described above, no method of data transmission or storage is completely secure. While alpha66 takes every reasonable step to protect your personal data, we cannot guarantee absolute security and you transmit data to the Platform at your own risk. In the event of a data breach that is likely to result in a risk to your rights and freedoms, alpha66 will notify affected Members in accordance with applicable law.

10. Your Data Rights

Subject to applicable law, you may have the following rights in relation to your personal data held by alpha66:

• Right of access: You may request a copy of the personal data alpha66 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances, including where you contest its accuracy or object to its processing.
• Right to data portability: You may request that personal data you have provided to us be transmitted to you or to another data controller in a structured, commonly used format where technically feasible.
• Right to object: You may object to processing of your personal data based on our legitimate interests. You have an absolute right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of prior processing.

To exercise any of these rights, please contact the alpha66 Data Privacy team at the contact details set out in Section 15. We will respond to verifiable requests within a reasonable time and in accordance with applicable law.

11. Children's Privacy

11.1 The alpha66 Platform is strictly restricted to persons aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. Registration by a person under 21 is a breach of our Terms and Conditions, and any such account will be permanently closed on discovery.

11.2 If you have reason to believe that a person under 21 has registered an alpha66 account, please contact our support team immediately at [email protected] so that appropriate action can be taken. 21+ Only

12. International Data Transfers

12.1 alpha66 may transfer your personal data to recipients located in countries outside Malaysia in connection with the provision of platform services, including game studio partners, payment processors, and cloud infrastructure providers. Where such transfers occur, alpha66 takes steps to ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable law, including contractual protections equivalent to those required under Malaysian data protection standards.

12.2 By using the alpha66 Platform, you consent to the transfer of your personal data to recipients in other countries for the purposes described in this Policy.

13. Third-Party Links & Services

13.1 The alpha66 Platform may contain links to third-party game content delivered by our studio partners. These studios operate their own privacy practices, over which alpha66 has no control. We encourage you to review the privacy policies of any third-party services you access through the Platform.

13.2 alpha66 is not responsible for the privacy practices of third-party studios, payment providers, or any other external services accessible through the Platform. References to third-party services do not constitute an endorsement of those parties' privacy practices.

14. Changes to This Policy

14.1 alpha66 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform services. The revised Policy will be published on this page with an updated "Last Updated" date. Where material changes are made, we will notify registered Members by email or via an in-platform notification prior to the changes taking effect where reasonably practicable.

14.2 Your continued use of the alpha66 Platform following publication of any revised Privacy Policy constitutes your acceptance of the updated practices. If you do not agree to a revised Policy, you must cease using the Platform and may request account closure in accordance with our Terms and Conditions.

15. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or alpha66's data practices, or if you wish to exercise any of your data rights, please contact us using the following details: