Alpha66 XYZ Privacy Policy – Player Data Protection in Malaysia

Alpha66 XYZ ("we", "our platform") operates an online entertainment platform providing Sports Betting, live casino, slots, poker, roulette, and e-sports services to eligible users in Malaysia. In delivering these services, we necessarily collect and process certain personal data from our members.

This Privacy Policy applies to all personal data collected through the website alpha66xyz.best, including all pages, subdomains, mobile interfaces, and any related services we operate. It also applies to communications between you and Alpha66 XYZ via email, live chat, or any support channel we provide.

We understand that your trust is our most valuable asset. Malaysian players using Alpha66 XYZ need confidence that their information is handled with full accountability, transparency and in line with industry best practices. That is why we have drafted this Privacy Policy in plain, straightforward language — so you know exactly what happens to your data, rather than simply accepting and clicking "Agree" without understanding what you are consenting to.

Alpha66 XYZ collects your personal data from several key sources. Below is a detailed breakdown of the types of data collected:

Data You Provide Directly:

• Registration Data: Full name, Malaysian phone number, email address, username, and password chosen during account registration.
• Identity Verification Data: A copy of your identity document (MyKad), identity card number, and date of birth — collected when required for the KYC (Know Your Customer) process in relation to withdrawal requests or regulatory compliance obligations.
• Financial Data: E-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), bank account numbers for FPX and DuitNow transactions. We do not store full credit or debit card details in our systems.
• Communication Data: Live chat transcripts, emails and any other communications you initiate with our support team.

Automatically Collected Data:

• Technical Data: IP address, browser type, operating system, device model, and application version.
• Usage Data: Pages visited, time spent in each section, games played, total bets placed, and complete transaction history.
• Location Data: Approximate geographic location derived from your IP address for regional verification and fraud prevention purposes. We do not track your device's GPS location.
• Cookie Data: Session cookies, preference cookies, and unique device identifiers to enhance your experience on the platform.

Alpha66 XYZ collects your personal data solely for legitimate and necessary purposes in the operation of our services. The following are the core purposes that form the basis of our data processing:

• Account Management: To create, verify and maintain your member account, including the login process, password resets and two-factor authentication.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and to carry out winnings withdrawals to your bank account or e-wallet accurately and securely.
• Legal Compliance (KYC/AML): To meet legal requirements relating to identity verification, anti-money laundering (AML), and compliance with financial regulations applicable to online betting platform operators.
• Platform Security: To detect and prevent fraud, unauthorised multi-account usage, hacking attempts, poker collusion, and any platform abuse that could harm other members.
• Service Improvement: To analyse usage patterns, identify popular games, resolve technical issues, and develop new features relevant to Malaysian players.
• Service Communications: To send important notices relating to your account, such as transaction confirmations, security alerts, policy updates and promotional communications you have opted in to receive.
• Customer Support: To handle enquiries, complaints, and support requests effectively, including maintaining communication records for future reference.
• Responsible Gambling: To detect gameplay patterns that may indicate problem gambling and to operate protective tools such as automatic deposit limits and self-exclusion notices.

Alpha66 XYZ will not use your data for any purpose beyond those listed above without first obtaining your explicit consent.

Alpha66 XYZ does not sell or commercialise member personal data under any circumstances. However, in the course of operating our services, there are specific situations where data may need to be shared with carefully selected third parties:

• Game Providers: Companies such as Pragmatic Play, PG Soft, Evolution Gaming, and Play'n GO require minimum game session data to run their games. This data is limited to session identifiers and does not include full personally identifiable information.
• Payment Processors: Payment gateway providers that process deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, and FPX are required to receive the necessary transaction information. All payment processors we work with are licensed and regulated by Bank Negara Malaysia.
• Security Services: Fraud detection and cybersecurity service providers who help us protect the platform against threats. These providers are bound by strict confidentiality agreements.
• Legal Authorities: Where required by law, court order or direction from a competent law enforcement agency in Malaysia, we may be required to disclose certain data to the relevant authorities.

All third parties that receive Alpha66 XYZ member data are bound by data processing agreements that restrict them to using the data only for specified purposes and require them to meet appropriate data protection standards. We do not permit any third party to use your data for their own marketing purposes.

Alpha66 XYZ continually invests in security infrastructure to ensure member personal data is protected to the highest achievable standard. Our key data protection measures include:

• Data Encryption in Transit: All communications between your browser or app and our servers are secured with TLS 1.3 and a 256-bit SSL certificate, ensuring your data cannot be intercepted even over public networks or unsecured Wi-Fi.
• Data Encryption at Rest: Sensitive data stored in our database — including passwords (stored as one-way hashes that cannot be decrypted) and financial information — is encrypted using the latest industry standards.
• Internal Access Controls: A role-based access control (RBAC) system ensures that only staff with a legitimate operational need can access specific data categories. All internal access is comprehensively logged and reviewed on a regular basis.
• Two-Factor Authentication: All internal systems containing member data require two-factor authentication for every login, including staff access from unrecognised locations or devices.
• Regular Security Testing: We conduct regular penetration testing and independent third-party security audits to identify and address vulnerabilities before they can be exploited.
• Incident Response Plan: Alpha66 XYZ has a detailed incident response procedure in place to address any data security breaches swiftly and effectively, including notification procedures for affected members.

While we take all reasonable steps to protect your data, no system is 100% immune to every cyber threat. We therefore encourage you to take your own precautions as well — use a strong password, enable two-factor authentication on your account, and never share your login credentials with anyone.

Alpha66 XYZ uses cookies and related tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as maintaining your login session, remembering your language preference, and processing transactions securely. Without them, the platform cannot function properly. These cookies cannot be declined.
• Performance Cookies: Collects statistical information about how users interact with the platform — which pages are visited most often, where users spend the most time, and where they encounter issues. This data is used in aggregate and without personal identifiers to help us improve the platform.
• Functional Cookies: Remembering your preferences — such as favourite games, display settings, and notification preferences — so you don't have to reconfigure them every time you log in.
• Security Cookies: Used to detect suspicious login activity, prevent CSRF (Cross-Site Request Forgery) attacks, and verify that your active session is legitimate.

You can manage cookies through your browser settings. However, disabling all cookies may affect platform functionality, including the ability to log in. For more information on managing cookies in popular browsers, please refer to your browser's help documentation.

Alpha66 XYZ retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. The following are our data retention guidelines for key data categories:

• Active Account Data: Retained for as long as your account is active and for a period of 7 years after account closure for legal compliance and audit purposes.
• Transaction History: Deposit, withdrawal, and betting activity records are retained for 7 years from the date of each transaction, in line with Malaysia's financial record-keeping requirements.
• Security Logs: Access logs, authentication logs and security activity logs are retained for 2 years for incident investigation and audit support purposes.
• Communication Records: Live chat sessions and email correspondence are retained for 1 year for service quality control and dispute reference purposes.
• Identity Verification Data (KYC): Copies of identification documents and verification records are retained for 7 years after account closure in accordance with anti-money laundering legal requirements.

Once the designated retention period has ended, data is securely erased using deletion methods that ensure it cannot be recovered. You may request further information about your specific data retention period by contacting our support team.

As an Alpha66 XYZ member, you have the following rights regarding your personal data. We are committed to facilitating the exercise of these rights without unnecessary barriers:

To exercise any of the rights above, contact our support team by email at support@alpha66xyz.best with the subject line "Data Privacy Request". Include your username and the details of your request. We will verify your identity before processing any request relating to your personal data.

Alpha66 XYZ takes child protection very seriously. Our platform is strictly restricted to individuals aged 21 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 21.

Should we discover that data from a minor was inadvertently collected due to incorrect age information provided during registration, the account in question will be closed immediately and all associated data will be deleted within a reasonable timeframe.

If you are a parent or guardian who believes your child has registered an account on Alpha66 XYZ, please contact us immediately at support@alpha66xyz.best for prompt data deletion and account closure.

Alpha66 XYZ reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our service practices, legal requirements or technological developments. Whenever material changes are made, we will take the following steps to notify you:

• The "Updated" date at the top of this document will be revised to reflect the date of the most recent changes.
• An in-platform notice will be displayed the first time you log in after the changes take effect.
• For significant changes, a notification email will be sent to the registered email address on your account at least 14 days before the changes take effect.

Your continued use of the Alpha66 XYZ platform after any changes to the Privacy Policy take effect will be considered acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your data.

If you have any questions, concerns or complaints regarding this Privacy Policy or the way Alpha66 XYZ handles your personal data, please contact us through the following channels:

• Privacy Email: support@alpha66xyz.best (use the subject line "Data Privacy Enquiry" for a faster response)
• Live Chat: Available 24/7 via the live chat button at the bottom-right corner of the platform
• Response Time: We are committed to responding to all privacy-related enquiries within 3 business days

For formal data rights requests — including access, rectification, or deletion — please email us with your account username and a clear description of your request. We may require additional identity verification before processing requests that involve sensitive data.

Alpha66 XYZ values every piece of privacy feedback from our members, as it helps us continuously improve our data protection practices for the benefit of all Malaysian players who trust our platform.