Privacy Policy a66 cool — Personal Data Protection for Malaysian Members

1. Introduction & Scope of This Policy

A66 cool ("we", "Platform") is fully committed to protecting the privacy of every individual who uses our services. This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards.

This Policy applies to all users of the a66 cool platform, including website visitors, prospective members, and registered members. It covers all channels we operate — the main website at a66cool.pro, the mobile app for iOS and Android, and any of our official communication channels.

We understand that personal data is sensitive and must be handled with the utmost responsibility. Every data-handling decision at a66 cool is therefore made with your interests and privacy rights as our member at the forefront.

2. Personal Data We Collect

A66 cool only collects personal data that is genuinely necessary to provide you with a safe, efficient and quality service. The following are the categories of data we collect:

3. How We Use Your Data

Personal data collected by a66 cool is used solely for legitimate and reasonable purposes. We do not use your data for any purpose other than those stated below:

• Account Management: Processing registrations, verifying identities and securely managing your member account.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions made through our platform.
• KYC Verification: Complying with legal requirements related to customer identity verification (Know Your Customer) and anti-money laundering (AML).
• Platform Security: Detecting and preventing fraudulent activity, unauthorised access and other security threats that could compromise your account.
• Customer Support: Providing technical assistance and resolving any issues you report to our support team.
• Important Communications: Sending account-related notifications, policy updates and important security information.
• Service Improvement: Analysing usage patterns in aggregate to improve the user experience on the platform.
• Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate support.

We will only use your data for marketing and promotional purposes if you have given explicit consent. You may withdraw this consent at any time through your account settings.

4. Data Sharing & Disclosure

A66 cool does not sell, rent or transfer your personal data to third parties for their commercial purposes. However, in certain situations, we may need to share your information with the following parties:

• Service Providers: Third-party companies that help us operate the platform — such as payment gateway providers, cloud services and gaming software providers — are bound by strict confidentiality agreements.
• Regulatory Authority: Relevant authorities such as the Malaysian Communications and Multimedia Commission (MCMC) or law enforcement agencies when required by law.
• Licensed Partner: Licence holders and business partners integrated with the a66 cool platform, subject to equally stringent data protection agreements.
• KYC Verification Providers: Licensed and recognised third-party identity verification services that help us verify member identities accurately and securely.

5. Data Security & Protection

The security of your personal data is a66 cool's top priority. We implement multiple layers of technical and organisational protection to keep your data safe at all times:

• End-to-End Encryption: All data transmitted between your device and our servers is protected with 256-bit TLS/SSL encryption — the same level used by major Malaysian banks.
• Secure Storage: Personal data is stored on secure servers with strict access controls. Your password is stored in hashed form and cannot be read by anyone, including our team.
• 24/7 Monitoring: Our systems are continuously monitored to detect any suspicious activity or unauthorised access attempts.
• Regular Security Audits: We conduct regular internal and external security audits to identify and patch any system vulnerabilities.
• Internal Access Controls: Only staff with a legitimate need are permitted to access member personal data, and all such access is logged and monitored.

While we take all reasonable steps to protect your data, no system can guarantee absolute security. In the event of any data breach that affects you, we will notify you and the relevant authorities within the timeframe required by law.

6. Your Rights Under PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights, which we fully respect:

7. Data Retention & Deletion

A66 cool only retains your personal data for as long as necessary to fulfil the original purpose of its collection or as required by applicable law. The following are our data retention period guidelines:

• Active Account Data: Retained for as long as your account is active and for 5 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysia's accounting and tax legal requirements.
• KYC Verification Data: Retained for 5 years after the account closure date or the conclusion of the last business relationship.
• Access & Security Logs: Retained for 90 days for fraud detection and dispute resolution purposes.
• Support Communication Data: Retained for 2 years after case resolution for quality control purposes.

Once the retention period ends, your personal data will be securely deleted using methods that ensure it cannot be recovered by any party.

8. Cookies & Tracking Technology

The a66 cool platform uses cookies and similar tracking technologies to enhance the user experience, ensure platform security and understand how members interact with our services.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled.
• Analytics Cookies: Helping us understand how members use the platform so we can make continuous improvements. Data is collected anonymously.
• Functional Cookies: Remembering your preferences such as display settings, favourite game selections and interface language to deliver a more personalised experience.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of the a66 cool platform.

9. Children's Data Protection

The a66 cool platform is exclusively for individuals aged 18 and above. We do not knowingly collect, process or store any personal data from individuals under the age of 18.

If we find that we have inadvertently collected data from a minor, we will immediately delete that data and close the relevant account. Parents or guardians who discover that their child has registered on our platform are requested to contact us immediately at [email protected].

10. Changes to the Privacy Policy

A66 cool reserves the right to update this Privacy Policy from time to time to reflect changes in data handling practices, legal requirements or new platform features. All material changes will be communicated to you via:

• Email notifications sent to the address registered on your account.
• In-app or on-site notifications on the a66 cool platform.
• Updates the "Last Updated" date at the top of this document.

Your continued use of the a66 cool platform after changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request the deletion of your personal data in accordance with the established procedure.

11. Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

• Privacy Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom right corner of the platform
• Response Time: Within 3 business days for general enquiries; 30 days for formal PDPA rights requests

We take every privacy-related complaint seriously and will investigate and resolve each case fairly and transparently.