Privacy Policy – How aa6 Protects Your Personal Data

1. Introduction

aa6 ("aa6", "we", "us", "our") operates the online gaming platform accessible at aa6.club, providing online casino, sportsbook, slots, and related services to members in Malaysia and other permitted jurisdictions. aa6 is committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered members, prospective members, and visitors to aa6.club.

This Privacy Policy ("Policy") describes the categories of personal data that aa6 collects, the purposes for which that data is processed, the legal bases upon which processing is conducted, the parties with whom data may be shared, the security measures aa6 applies to protect your data, and the rights available to you in relation to your personal data. This Policy applies to all aa6 services and should be read together with aa6's Terms and Conditions.

By registering an account at aa6.club or by using any aa6 service, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not create an account or use aa6's services.

2. Data Controller

For the purposes of applicable data protection law, aa6 is the data controller in respect of personal data collected through aa6.club and its associated services. All data protection enquiries, subject access requests, and complaints should be directed to the aa6 Data Protection contact channel specified in Section 14 of this Policy. aa6 processes personal data in accordance with applicable international data protection standards and the requirements of the gaming regulatory framework under which aa6 operates.

3. Personal Data We Collect

aa6 collects personal data across several categories depending on the nature of your interaction with the platform:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, MyKad or Passport number, nationality	Registration & verification
Contact Data	Email address, Malaysian mobile number, city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru)	Registration
Financial Data	Bank account details (Maybank, CIMB, Public Bank), e-wallet identifiers (Touch n Go, Boost), transaction history	Deposit & withdrawal
Technical Data	IP address, device type, browser type, operating system, session timestamps	All platform interactions
Usage Data	Games played, bet history, Sportsbook markets accessed, session duration, click-path data	Active gaming sessions
Communications Data	Support chat transcripts, email correspondence with aa6 support	Customer support interactions
Responsible Gaming Data	Deposit limits set, self-exclusion status, cooling-off periods	When tools are activated

aa6 does not collect special categories of personal data (as defined under applicable data protection law, including health data, biometric data for identification purposes, or political opinions) except to the extent strictly necessary to comply with anti-money laundering or responsible gaming obligations.

4. How We Collect Personal Data

aa6 collects personal data through the following means:

• Direct submission: Data you provide when registering your aa6 account, completing identity verification, submitting a withdrawal request, or contacting our support team.
• Automated technical collection: Technical and usage data collected automatically via server logs, cookies, and similar tracking technologies when you access aa6.club or use any aa6 service.
• Third-party verification providers: Identity and age verification data received from accredited third-party KYC (Know Your Customer) service providers engaged by aa6 to fulfil regulatory obligations.
• Payment processors: Transaction confirmation and payment status data received from Malaysian payment processors and e-wallet providers, including Touch n Go eWallet and Boost.
• Fraud prevention and AML screening services: Data received from third-party anti-fraud and anti-money laundering screening providers as part of aa6's compliance programme.

5. Purpose and Legal Basis for Processing

aa6 processes personal data only where a valid legal basis exists under applicable data protection law. The primary purposes for which aa6 processes personal data, and the corresponding legal bases, are as follows:

• Contract performance: Processing necessary to create and maintain your aa6 account, process deposits and withdrawals, settle bets and casino results, and provide customer support. Without this processing, aa6 cannot provide its services to you.
• Legal obligation: Processing necessary to comply with applicable laws and regulatory requirements, including age verification obligations (minimum 21 years), anti-money laundering (AML) screening, Know Your Customer (KYC) procedures, and responsible gaming obligations.
• Legitimate interests: Processing necessary for aa6's legitimate interests in fraud prevention, platform security, detection of prohibited conduct (including multi-accounting and bonus abuse), improvement of platform features, and business analytics — provided such interests are not overridden by your rights and interests.
• Consent: Where aa6 relies on your consent as a legal basis (for example, for certain marketing communications), you have the right to withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

6. Data Sharing and Disclosure

aa6 does not sell your personal data to third parties. aa6 may share your personal data with the following categories of recipients, strictly to the extent necessary for the stated purpose:

• Payment service providers: Malaysian banks (Maybank, CIMB, Public Bank) and e-wallet operators (Touch n Go eWallet, Boost) for the purpose of processing deposits and withdrawals.
• KYC and age verification providers: Accredited third-party providers engaged to verify your identity and confirm that you meet the minimum age requirement of 21 years.
• AML and fraud screening services: Third-party compliance service providers engaged to conduct anti-money laundering screening and fraud risk assessment.
• Gaming software and live studio providers: Game content providers whose software powers aa6's casino and sportsbook services may receive limited technical identifiers necessary to deliver personalised game sessions.
• Regulatory and law enforcement authorities: aa6 will disclose personal data to regulators, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction.
• Professional advisers: Lawyers, auditors, accountants, and insurers engaged by aa6 in the course of its business operations, subject to professional confidentiality obligations.

All third-party service providers engaged by aa6 are contractually required to process personal data in accordance with aa6's instructions and applicable data protection law. aa6 does not permit third parties to use member personal data for their own independent purposes.

7. International Data Transfers

The aa6 platform serves Malaysian members and, where possible, personal data is processed on infrastructure located in the Asia-Pacific region. However, some of aa6's third-party service providers — including game content providers and compliance services — may process data in other jurisdictions. Where personal data is transferred outside Malaysia or the jurisdiction of collection, aa6 ensures that appropriate safeguards are in place, including contractual protections equivalent to applicable data protection standards. By using aa6.club, you acknowledge and consent to the transfer of your personal data as described in this section.

8. Data Retention

aa6 retains personal data for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law. Specific retention considerations include:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulatory requirements.
• KYC and identity verification records are retained for the period required by the gaming regulatory framework applicable to aa6's operations.
• Support communications are retained for three (3) years from the date of the relevant interaction.
• Technical and usage data may be retained in anonymised or aggregated form for longer periods for platform analytics and improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with aa6's data retention procedures.

9. Security Measures

aa6 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and aa6.club.
• Encryption of sensitive data fields (including payment credentials) at rest in aa6's database infrastructure.
• Access controls restricting internal access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of aa6's platform infrastructure.
• Anomaly detection systems monitoring for unusual login or transaction patterns.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is completely secure. aa6 cannot guarantee absolute security of your personal data and you transmit data to aa6.club at your own risk. You are responsible for maintaining the confidentiality of your aa6 login credentials. If you suspect unauthorised access to your account, contact aa6 support immediately at [email protected].

10. Cookies and Tracking Technologies

aa6.club uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and collect analytics data. The principal categories of cookies used are:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your aa6 account during a gaming session. These cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to understand how members navigate and use aa6.club — which games are accessed most frequently, where navigation issues occur, and how the platform can be improved. Data collected is aggregated and not used to identify individuals.
• Preference cookies: Used to remember your settings and preferences, including language and display preferences, to improve your experience on return visits.

You may manage cookie preferences via your browser settings. Disabling certain cookies may affect the functionality of aa6.club, including the ability to maintain an authenticated session. aa6 does not use third-party advertising cookies or sell behavioural data to advertising networks.

11. Your Data Rights

Subject to applicable law and the terms of this Policy, you have the following rights in relation to your personal data held by aa6:

• Right of access: The right to request a copy of the personal data aa6 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to aa6's legal and regulatory obligations (which may require aa6 to retain certain data notwithstanding your request).
• Right to restriction: The right to request that aa6 restrict processing of your personal data in certain circumstances.
• Right to data portability: The right to receive personal data you have provided to aa6 in a structured, commonly used, machine-readable format.
• Right to object: The right to object to processing of your personal data on the basis of aa6's legitimate interests.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, submit your request to aa6 via email at [email protected]. aa6 will respond to all valid requests within the timeframe required by applicable law. aa6 may require proof of identity before fulfilling any data rights request.

12. Children and Minors

aa6's services are strictly prohibited for individuals under the age of 21 years. aa6 does not knowingly collect personal data from persons under 21. If aa6 discovers that personal data has been collected from an individual who has not met the minimum age requirement, that data will be deleted immediately and the associated account terminated. If you believe aa6 has inadvertently collected personal data from an underage individual, please notify us immediately at [email protected].

13. Changes to This Privacy Policy

aa6 reserves the right to update or amend this Privacy Policy at any time. The revised Policy will be posted at aa6.club/privacy-policy with an updated effective date. Where changes are material, aa6 will notify registered members via the email address associated with their account. Your continued use of aa6's services following notification of a material change constitutes acceptance of the revised Policy. We encourage you to review this Policy periodically.

14. Contact and Complaints

For all privacy-related enquiries, data subject access requests, or complaints regarding aa6's handling of your personal data, please contact the aa6 Data Protection team: Email: [email protected] (plain text — not a link). Our support team is available 24/7 via in-platform live chat. aa6 is committed to resolving all privacy complaints promptly and in good faith.