Privacy Policy AEC66 – Personal Data Protection for Malaysian Players

AEC66 takes our responsibility toward the privacy and personal data protection of every Malaysian player on aec66.ws seriously. This Privacy Policy is written to explain things clearly and transparently — not in complex legal language, but in plain terms that every player can understand.

This document applies to all personal information collected via the aec66.ws website, the aec66 mobile app, and all related services provided by the aec66 platform. This includes information you provide directly during registration, financial transaction data, and information collected automatically through your use of the platform.

By using the aec66 platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us for further information.

Aec66 collects only the data necessary to provide Malaysian players with a quality, secure experience. The following are the categories of data we collect:

AEC66 does not collect sensitive data such as health information, religious beliefs, or political views unless specifically required to comply with certain legal obligations.

Personal data of aec66 players is collected through the following channels:

• Account Registration: When you complete the registration form on aec66, we collect basic information such as your name, Malaysian phone number, and email address.
• KYC Verification Process: During identity verification, you may be asked to upload supporting documents such as a photo of your Malaysian IC or a local bank statement.
• Financial Transactions: Every time you make a deposit via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, or FPX (Maybank2u/CIMB Clicks), the transaction details are automatically recorded.
• Platform Usage: The aec66 system automatically records game activity, football betting history, slots played, and usage patterns as part of normal platform operations.
• Cookies & Similar Technologies: Your web browser receives cookies from the aec66 server, which help us recognise you and enhance your user experience.
• Communication with Support: When you reach out to the aec66 support team via live chat or email, the contents of that communication are stored for record-keeping and service improvement purposes.

AEC66 uses collected personal data solely for legitimate, clearly stated purposes. We will never use your data in any way that goes beyond the scope described below:

• Service Delivery: To allow you to log in, play games, place bets on Malaysia Super League or EPL football, and access all features on the aec66 platform.
• Identity Verification: To comply with KYC (Know Your Customer) requirements and anti-money laundering (AML) procedures as mandated.
• Payment Processing: To process deposits via local Malaysian payment methods and pay out winnings to your bank account or e-wallet in MYR.
• Fraud Prevention: To detect and prevent fraudulent activity, collusion, bot usage, and abuse of the aec66 platform.
• Service Communications: To send transaction notifications, security updates, and important information regarding your account.
• Responsible Gaming: To monitor gaming patterns and identify players who may need support related to problem gambling.
• Marketing (with consent): To send you promotional information, bonuses, and exclusive aec66 offers — only where you have given your consent.
• Platform Improvements: To analyse aggregated usage data in order to improve the overall aec66 user experience.

AEC66 does not sell players' personal data to any third party for commercial purposes. However, in certain limited circumstances, we may share data with the following parties:

• Payment Service Provider: Malaysian e-wallet operators such as Touch 'n Go, GrabPay, DuitNow, Boost, and ShopeePay, as well as local banks, to process legitimate financial transactions.
• Gaming Software Providers: Gaming software providers that supply slots, poker, and live casino games to aec66 may receive session data required for technical functionality.
• Anti-Fraud Services: Security and anti-fraud technology providers that assist aec66 in detecting and preventing unlawful activity on the platform.
• Legal Authorities: aec66 will disclose personal data to Malaysian authorities when required by law, court order, or a valid request from an enforcement agency.
• Auditors & Advisors: Professionals engaged in auditing, legal, or financial advisory services who require access to aec66 platform records, subject to strict confidentiality agreements.

All third parties receiving data from aec66 are required to comply with data protection standards equivalent to or higher than those set out in this Privacy Policy.

AEC66 implements multiple layers of technical and organisational security controls to protect players' personal data from unauthorised access, loss, or disclosure:

• 256-bit SSL Encryption: All data transmitted between your device and aec66's servers is fully encrypted using the latest TLS/SSL protocols.
• Database Encryption: Sensitive data, including financial information and verification documents, is stored in encrypted format within aec66's databases.
• Tiered Access Control: Only staff who require access to specific data to perform their duties are granted permission — the principle of least privilege is strictly enforced.
• Ongoing Monitoring: The aec66 system is monitored 24/7 to detect any suspicious activity or intrusion attempts.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA for added account protection.
• Incident Response Plan: AEC66 has clear procedures in place to respond to data breaches, including notifying affected players within the timeframe stipulated by the PDPA.

Under Malaysia's PDPA and aec66's Privacy Policy, you have the following rights regarding your personal data:

The aec66 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The following types of cookies are used:

You can manage or disable cookies through your web browser settings. Please note that disabling essential cookies may affect certain functions on the aec66 platform.

AEC66 retains players' personal data only for as long as necessary for the purposes stated in this policy, or as required by Malaysian law.

• Active Account Data: For as long as your account remains active on the aec66 platform.
• KYC & Verification Documents: Minimum 5 years after account closure, as required under Malaysia's AML legislation.
• Financial Transaction Records in MYR: Minimum 7 years in accordance with Malaysia's financial record-keeping requirements.
• Security Logs: Up to 2 years for security investigation purposes if required.
• Support Communication Data: Up to 3 years after the last interaction.
• Marketing Data: Until you withdraw consent or request deletion.

Once the retention period has expired, data will be securely deleted or fully anonymised so that it can no longer be linked to any individual.

In the normal course of aec66 platform operations, some data may be processed or stored on servers located outside Malaysia — primarily for international game software providers and cloud infrastructure services.

In all such cases, aec66 ensures:

• Data transfers are governed by valid and binding data processing agreements.
• The recipient country or organisation provides a level of data protection equivalent to or greater than that required under Malaysia's PDPA.
• Data is transferred solely for the stated purposes and is not used beyond those purposes.

The aec66 platform is strictly for individuals aged 18 and above. AEC66 does not knowingly collect or process personal data of children under the age of 18.

If you are a parent or guardian and believe that your child who is underage has registered or used the aec66 platform without your knowledge, please contact our support team immediately. We will take steps to close the account in question and delete all associated data as soon as possible.

AEC66 employs multiple age verification measures to confirm players' ages, including identity document checks during the KYC process. This forms part of our commitment to responsible gaming and the protection of vulnerable individuals.

AEC66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, Malaysian legal requirements, or technological developments. The "Last updated" date at the top of this page will reflect the most recent revision.

For significant amendments that affect your privacy rights, aec66 will provide notice via:

• A notification pop-up displayed when you log in to your aec66 account.
• A notification email to your registered address.
• A clear notice displayed on the aec66 platform homepage.

Continued use of the aec66 platform after an amendment is published will be considered acceptance of the updated policy. We encourage you to review this page periodically.

For any enquiries, concerns, or requests relating to your privacy and personal data on the aec66 platform, please reach us through the following channels:

• Live Chat: Available 24/7 directly on the aec66 platform — the fastest way to get an immediate response.
• Privacy Email: support@aec66.ws — include "Privacy Enquiry" in the email subject line to expedite processing.
• Frequently Asked Questions: Visit the aec66 FAQ page for answers to the most frequently asked privacy questions.

We are committed to responding to all privacy-related enquiries within 5 business days. For full requests relating to PDPA rights, the response period is up to 21 working days as required by law.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the body responsible for enforcing the PDPA in this country.