AEC66 Privacy Policy — Personal Data Protection for Malaysian Players

AEC66 takes your privacy seriously. We understand that when you share personal information with us, you are placing a great deal of trust in this platform. We honour that trust with full responsibility.

As an online entertainment platform serving Malaysian players, we are bound by Malaysia's Personal Data Protection Act 2010 (PDPA). This means the collection and use of your data is governed by a clear legal framework, not left to our sole discretion.

This Privacy Policy explains in detail:

• What personal data we collect from you
• Why we need that data and how it is used
• Who may have access to your data
• Security measures we take to protect your data
• Your rights concerning the personal data we hold about you

AEC66 collects your personal data through various means — directly when you register or interact with the platform, and automatically as you browse our website. Below is a summary of the data we collect:

We not collect sensitive data such as your medical information, political views, or religious beliefs unless you voluntarily disclose it to us in your communications.

Every piece of data we collect has a clear and legitimate purpose. aec66 uses your personal data for the following purposes:

• Account management — Creating, verifying, and managing your player account securely.
• Transaction processing — Processing deposits, withdrawals, and bonus payments accurately and promptly.
• Identity verification (KYC) — Verifying that player identities are genuine and meet anti-money laundering legal requirements.
• Customer Support — Helping you resolve issues, answer enquiries, and providing technical assistance.
• Platform security — Detecting and preventing fraud, account abuse, and suspicious activity.
• Service improvement — Analysing usage patterns to improve your gaming experience.
• Marketing communications — Sending promotional information and special offers, subject to your preferences.
• Legal compliance — Meeting legal obligations and the requirements of relevant regulatory bodies.

AEC66 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, in the course of operating the platform, we may share your data with the following parties on a limited and controlled basis:

• Payment service providers — Financial institutions and payment gateways that process your transactions, such as local banks and licensed digital wallet providers.
• Game providers — Licensed game software providers that supply the Slots, Live Casino, and Sports Betting content available on our platform.
• Technical infrastructure providers — Cloud hosting and cybersecurity companies that help us operate the platform securely.
• Regulatory bodies and law enforcement authorities — When required by law, court order, or an official request from a competent authority.

All third parties we work with are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes. They are not allowed to disclose or use your data for any other purpose.

AEC66 invests seriously in security infrastructure to ensure your personal data is always protected. The security measures we have implemented include multiple layers of protection:

• 256-bit SSL Encryption — All data transmitted between your device and our servers is protected with industry-grade encryption.
• Encryption of stored data — Sensitive information such as financial details and passwords is stored in encrypted format in our database.
• 24/7 security monitoring — Our threat detection system operates around the clock to identify any suspicious activity.
• Strict internal access controls — Only aec66 staff with a legitimate business need are granted access to player personal data.
• Regular security audits — Vulnerability assessments and penetration testing are conducted regularly by independent security experts.
• Two-Factor Authentication (2FA) — Available for all player accounts as an additional layer of protection during login.

As an aec66 player and data subject under Malaysia's PDPA, you have specific rights regarding the personal data we hold. We fully respect and support the exercise of these rights:

To exercise any of the rights above, please contact our privacy team via live chat or support email. We will process your request within 14 working days.

AEC66 uses cookies and similar tracking technologies to enhance your browsing experience on our platform. Cookies are small text files stored on your device when you visit our website.

The following are the types of cookies we use:

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect platform functionality. Session cookies are automatically deleted when you close your browser, while persistent cookies are stored until a set period expires or until you delete them manually.

AEC66 retains your personal data for as long as your account is active or as required for the purposes stated in this Privacy Policy. After an account is closed, we retain certain data in accordance with applicable legal and regulatory requirements:

• Financial transaction data — Retained for a minimum of 7 years in line with Malaysia's anti-money laundering legal requirements.
• KYC records and identity verification — Retained for 5 years after account closure.
• Customer support communication logs — Retained for 2 years for reference and dispute resolution purposes.
• Technical data and security logs — Retained for 90 days for fraud detection and security purposes.
• Marketing data — Deleted within 30 days after you withdraw from marketing communications.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

In some situations, your personal data may be transferred to or processed in countries outside Malaysia, particularly when we use cloud services or international technology providers. This may include servers located in Southeast Asia, Europe, or the United States.

When international data transfers occur, AEC66 ensures equivalent protection is provided through:

• Data processing agreements compliant with Malaysia's PDPA standards
• Use of companies with internationally recognised security certifications
• Implementation of standard data protection clauses in all contracts with third-party providers

AEC66 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or service improvements. We encourage you to review this page periodically.

When significant changes are made to this Privacy Policy, we will notify you via:

• Clear in-platform notifications when you log in
• Email to the address registered on your account
• Updates to the "Last Updated" date shown at the top of this document

Your continued use of the aec66 platform after changes are published will be considered as your acceptance of the updated privacy terms.

If you have any questions, concerns, or wish to exercise your privacy rights, please contact our Data Protection Officer through the following channels:

• Live Chat — The fastest option, available 24/7 directly within the aec66 platform.
• Email — [email protected] (responded to within 2 business days)
• FAQ — Privacy-related FAQs are available on the FAQ we

For data protection complaints that we are unable to resolve, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (JPDP), the authority responsible for overseeing PDPA compliance in Malaysia.