A66 Space Privacy Policy – Malaysian Player Data Protection

This Privacy Policy is issued by a66 space ("we", "platform") and applies to all players, users and visitors who access the a66 space platform via our website or any associated digital channels. This document describes our data handling practices and complies with the Personal Data Protection Act (PDPA) Malaysia 2010 and its amendments as in force from time to time.

At a66 space, we understand that player trust is our most valuable asset. When you share your personal information with us — whether to register an account, make a deposit via Touch 'n Go eWallet or GrabPay, or reach out to customer support — you deserve to know exactly how that information is handled. That is why this document was written: in plain language, free of confusing legal jargon, so every Malaysian player can understand it.

By registering an account on a66 space, accessing our platform or providing us with any personal information, you are deemed to have read and agreed to this Privacy Policy. If you do not agree with any part of this policy, you are advised not to use a66 space's services.

A66 space collects your personal data through a variety of means — directly from you during registration or use of the platform, automatically through technologies within our platform, and in limited cases, from licensed third-party sources. The following are the categories of data we collect:

Data you provide directly:

• Identity information: Full name, date of birth, national identification number (required for the KYC process)
• Contact information: Malaysian phone number, email address
• Account information: Chosen username, password (stored in a hashed format that cannot be read)
• Financial information: Details of the payment method used — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX — along with e-wallet or bank account numbers for withdrawal purposes
• Verification documents: A copy of your identity card or passport if requested for KYC purposes or for the withdrawal of certain amounts

Data collected automatically during platform use:

• Technical data: IP address, device type, operating system, phone model (Android or iOS), screen resolution, browser type
• Usage data: Pages visited, games played (slots, live casino, sports betting), session duration, betting history and winnings
• Transaction data: Deposit and withdrawal records, including amounts, dates, times and payment methods used
• Communication data: Records of interactions with our customer support team via live chat, WhatsApp or email
• Location data: General location based on IP address for compliance purposes — we only serve players from Malaysia

A66 space uses collected personal data solely for legitimate purposes necessary to operate our platform. The following are the primary purposes for which your data is used:

• Account management: Creating, verifying and managing your player account on a66 space, including the login process and identity verification (KYC)
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as processing your winnings withdrawals within the stipulated timeframe
• Service delivery: Allowing you to access and play all games on a66 space, including slots, live casino, table games, poker, roulette, Malaysia Super League and EPL football betting, cricket, badminton and e-sports
• Security and fraud prevention: Detecting and preventing fraud, money laundering, unauthorised access, and other suspicious activity that could harm the platform or other players
• Customer support: Answering enquiries, resolving complaints and providing technical assistance in Bahasa Malaysia 24/7
• Legal compliance: To fulfil legal obligations under Malaysia's PDPA, anti-money laundering laws, and other applicable regulations
• Platform improvement: Analysing usage patterns (in aggregate and anonymised form) to improve the performance, interface, and overall experience of the a66 space platform
• Marketing communications: Sending information about a66 space promotions, bonuses and latest offers — only if you have opted in to receive such communications
• Responsible gambling: Monitoring gameplay patterns to identify players who may need support through the programme Responsible Gaming ours

A66 space will not use your data for any purpose other than those stated above without first obtaining your explicit consent.

Under Malaysia's PDPA, a66 space processes your personal data on the following lawful legal bases:

• Consent: You have given explicit consent for data processing at the time of account registration, or specifically for certain purposes such as receiving marketing communications
• Contract: Processing is necessary to perform the service contract between you and a66 space — including processing deposits, withdrawals and enabling access to games
• Legal obligations: Certain processing is necessary for a66 space to fulfil its legal obligations under applicable Malaysian law
• Legitimate interests: Processing for security, fraud prevention and service improvement purposes that does not adversely affect your fundamental rights and freedoms as a player

A66 space does not sell, rent or trade your personal data to any third party for their own marketing purposes. However, we share data in the following limited circumstances to enable our platform to operate:

• Payment providers: Transaction data that must be shared with Malaysian e-wallet and online banking providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) to process your deposits and withdrawals
• Game providers: Minimal data is shared with licensed game providers (such as Pragmatic Play, Evolution Gaming, Play'n GO and others) solely to enable games to function within your account
• Technical infrastructure providers: Cloud and hosting service providers that support the technical operations of the a66 space platform, subject to strict data processing agreements
• Regulatory and law enforcement bodies: Where required by Malaysian law or a valid court order — a66 space will comply with official requests that follow proper legal procedures
• Business transfer: In the event of a merger, acquisition or sale of assets of a66 space, player data may be transferred to the successor entity, which will be bound by this Privacy Policy

All third parties with whom we share data are required to maintain data protection standards equivalent to or higher than those of a66 space. Legally binding confidentiality and data processing agreements are signed with all third-party partners before any data sharing takes place.

Protecting your personal data is a66 space's top priority. We implement multiple layers of technical and organisational security to ensure your data is always protected from unauthorised access, loss, or disclosure:

• 256-bit SSL Encryption: All data transmitted between your device and a66 space's servers is protected by 256-bit Secure Socket Layer (SSL) encryption — the same standard used by leading financial institutions worldwide
• Password hashing: Your password is stored using a strong one-way hashing algorithm (bcrypt) — which means your password cannot read by anyone, including a66 space's own technical staff
• Two-factor authentication (2FA): An additional layer of security is available for your account via OTP sent to your registered phone number
• 24/7 Monitoring: Our intrusion detection system runs automatically around the clock to identify and block security threats before they can cause any impact
• Internal access controls: Access to player data within a66 space's internal systems is restricted on a "need-to-know" basis — only staff who require specific data to perform their job duties are granted access
• Regular security audits: a66 space undergoes penetration testing and security audits conducted by independent third-party security experts on a regular basis
• Secure data backups: Data is backed up regularly to a secure, encrypted location to ensure service continuity

A66 space retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law. Our data retention policy is as follows:

• Active account data: Retained for as long as your a66 space account is active and for a period of 5 years after account closure for legal compliance purposes
• Transaction records: Retained for 7 years after each transaction in accordance with financial record-keeping requirements under Malaysian law
• KYC Records: Identity verification documents are retained for 5 years after the business relationship ends
• Communication logs: Customer support conversation records are retained for 2 years for quality purposes and for reference should any dispute arise
• Technical logs: Server logs and activity data are retained for 12 months for security purposes and technical troubleshooting
• Marketing data: Marketing preference information and communication history are retained for as long as you consent to receive them, or for 3 years from the last communication

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be associated with you. The deletion process uses industry-standard methods to ensure the data cannot be recovered.

A66 space uses cookies and similar tracking technologies to enhance your experience on our platform and to ensure certain features function correctly. The following are the types of cookies we use:

• Essential cookies (required): Required for the platform to function — maintaining your login session, remembering your language preference and ensuring security features work correctly. These cookies cannot be disabled.
• Performance cookies: Help us understand how players use the platform — which pages are most visited, where players spend the most time, and any technical issues that may arise. This information is used in aggregated, anonymised form.
• Functional cookies: Remembering your preferences such as favourite games, display settings and interface preferences to deliver a more personalised experience.
• Marketing cookies (optional): Used to display relevant promotions and offers to you based on your gaming activity on a66 space. You may opt out of these cookies without affecting the core functions of the platform.

You can manage your cookie settings through your browser settings at any time. However, disabling certain cookies may affect some functions of the a66 space platform. a66 space does not use third-party cookies for advertising outside our platform.

As a data subject under Malaysia's PDPA, you have the following rights regarding your personal data held by a66 space. We are committed to making it easy for you to exercise these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a readable format within 21 business days of the request.
• Right to Rectification: If any data we hold about you is inaccurate or out of date, you have the right to request a correction. We encourage you to update your profile information directly through the account panel.
• Right to Erasure: You may request the deletion of your personal data, subject to any applicable legal retention obligations.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict how we use your data while a dispute is being resolved.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time, with immediate effect.
• Right to Data Portability: You may request your data in a structured, machine-readable format for transfer to another party where applicable.

To exercise any of the above rights, contact the a66 space Data Privacy Officer via email at support@a66space.com clearly stating the right you wish to exercise and sufficient information for us to verify your identity. We aim to respond to all privacy rights requests within 21 business days.

A66 space has a zero-tolerance policy on platform use by individuals under the age of 18. Our platform is strictly for adults, and we take active measures to prevent access by children or minors.

The protective measures we have implemented include:

• Age verification at registration using a Malaysian phone number, which requires physical possession of the device
• KYC checks may be required at any time to verify a user's age
• Monitoring for suspicious gameplay patterns that may indicate use by underage individuals
• Immediate account termination for accounts proven to belong to individuals under 18 years of age

If you are a parent or guardian who believes your child has accessed a66 space, please contact us immediately at support@a66space.com. We will take immediate action to investigate and close the account in question, and process any remaining balance in accordance with applicable law.

A66 space reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, evolving legal requirements, or service improvements. All amendments will be updated on this page, with a new "Last Updated" date shown at the top of the document.

For material amendments — that is, changes that significantly affect how we use your data or your privacy rights — a66 space will:

• Sending a notice to your registered email address at least 14 days before the changes take effect
• Displaying a prominent notice within the a66 space platform when you log in
• In some cases, requiring you to acknowledge the updated policy before you can continue using the platform

Your continued use of the a66 space platform after any amendments to this Privacy Policy take effect will be considered your acceptance of the latest version. We encourage you to review this page periodically to stay informed about our privacy practices.

If you have any questions, concerns, or complaints about how a66 space handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

• Privacy Email: support@a66space.com — state "Privacy Enquiry" or "Privacy Complaint" in the subject line
• Live Chat: Through the a66 space platform — available 24 hours a day, 7 days a week in Bahasa Melayu
• WhatsApp: Contact the a66 space support team via WhatsApp for immediate assistance

We aim to respond to all privacy-related enquiries within 3 business days and resolve complaints within 21 working days. For more complex cases, we will keep you updated on the progress of your request at regular intervals.

If you are dissatisfied with our response to your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) or seek legal remedy through the relevant Malaysian courts. a66 space will cooperate fully with any investigation by the relevant authorities.