Official Documents

Alpha66 Privacy Policy – Personal Data Protection for Malaysian Players

Alpha66 takes player privacy very seriously. This policy clearly outlines what data we collect, how it is used, who it is shared with, and what your rights are as a Malaysian player. Everything is stated transparently, without confusing language.

Updated: 1 January 2026 Version 3.1 • English (en-MY)

Alpha66's Six Privacy Commitments to Malaysian Players

Here is a summary of the most important things you need to know about how Alpha66 handles your personal data.

256-bit SSL Encryption for All Data

Every piece of information you submit to Alpha66 — from registration details to payment information via Touch 'n Go eWallet or FPX — is protected with industry-standard 256-bit SSL encryption. No third party can intercept or read your data in transit. This is the same standard used by Malaysian financial institutions.

No Data Sales to Advertisers

Alpha66 does not sell, rent or trade players' personal data to any advertising companies or third parties for marketing purposes. Your data belongs to you. We only use your information for platform operations and to fulfil legal obligations related to the services we provide.

Restricted Data Access to Trained Personnel Only

Only Alpha66 staff who require access to player data in order to perform their authorized duties are permitted to view that information. All internal access is logged and regularly audited. Our staff sign strict confidentiality agreements and receive routine data protection training.

Full Data Access & Correction Rights

You have the right to request a copy of all personal data we hold about you, correct any inaccurate information, and request deletion of your data under certain circumstances. Requests will be processed within 30 working days and can be submitted via live chat or our support email.

Full Control Over Marketing Communications

You have full control over whether you wish to receive promotional emails, SMS notifications or push messages from Alpha66. Opt-out options are available in every marketing email or through your account settings. We respect your communication preferences immediately.

Data Protection Law Compliance

Alpha66 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection requirements. We conduct regular internal reviews to ensure our practices remain in line with current laws and the latest industry standards.


Contents
Questions about your privacy?

Contact us 24/7 via live chat or email at support@alpha66.world

Important: This Privacy Policy explains how Alpha66 collects, uses, discloses and protects your personal information when you use our platform. By registering an account or using Alpha66's services, you agree to the practices described in this policy. Please read it carefully and contact us if you have any questions.

1
Personal Data We Collect

Alpha66 collects your personal information through various methods as you interact with our platform. We only collect data that is necessary to deliver our services safely and effectively. Below are the categories of data we collect and the purposes for which they are collected:

Data Category Example Information How It's Collected
Identity Information Full name, date of birth, identity card number or passport number Registration form, KYC process
Contact Information Email address, Malaysian phone number, residential address Account registration, profile updates
Financial Data E-wallet account numbers (TnG, GrabPay, Boost, ShopeePay), FPX details, transaction history in MYR Deposit and withdrawal processing
Gaming Activity Data Betting history, games played, wins and losses, time spent playing Recorded automatically during gameplay
Technical Data IP address, device type, operating system, web browser, screen resolution Automatically collected while browsing the platform
Communication Data Live chat records, support tickets, email content sent to our support team Interactions with the customer support team

Sensitive Data: Alpha66 does not collect or process sensitive data such as health information, religious beliefs, political views, or sexual orientation. Identification documents submitted during KYC are used solely for identity verification and retained in accordance with applicable legal requirements — not for any other purpose.

For players accessing the Alpha66 platform via smartphone, we may also collect general location data (state or city level) for geographic compliance purposes, not for precise location tracking. You can disable location permissions through your phone settings without affecting the platform's core functionality.

2
How We Use Your Personal Data

Alpha66 uses collected personal data solely for legitimate purposes directly related to our services. We do not process your data for purposes unrelated to platform operations or for which you have not given consent. The following are the primary purposes for which your data is used:

  • Account Management: Creating and managing your account, verifying your identity at login, recovering forgotten accounts, and managing your player profile.
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and managing withdrawals of winnings in Malaysian Ringgit (RM) quickly and securely.
  • Service Delivery: Allows you to play slots, table games such as Blackjack and Baccarat, live casino, and place Sports Betting on badminton, Malaysia Super League football, EPL, and e-sports.
  • Platform Security: Detecting and preventing fraud, money laundering, bonus abuse, multiple account ownership, and suspicious or unlawful activity.
  • Legal Compliance: Fulfilling anti-money laundering (AML) reporting obligations, Know Your Customer (KYC) requirements, and related legal obligations.
  • Customer Support: Resolving your enquiries, complaints and disputes effectively using records of previous interactions.
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of potential problem gambling and offering appropriate support to players who may need it.
  • Marketing Communications: Sending information about Alpha66 promotions, bonuses and new offers to players who have given their consent to receive such communications. You may unsubscribe at any time.
  • Product Improvement: Analysing usage patterns in aggregate and anonymised form to understand how players interact with the platform and improve the overall user experience.

Legal Basis for Processing: Alpha66 processes your data on the following bases: (1) performance of a contract between you and Alpha66, (2) compliance with legal obligations, (3) Alpha66's legitimate interests in operating a safe and responsible business, and (4) consent you have given for specific purposes such as marketing communications.

3
Data Sharing with Third Parties

Alpha66 does not sell or rent players' personal data to any third party. However, in the course of operating the platform, we may need to share certain data with selected third parties who help us deliver our services. All data sharing is limited to what is strictly necessary and is subject to strict confidentiality agreements.

The categories of third parties that may receive your personal data are as follows:

  • Payment Service Providers: Malaysian e-wallet and online banking providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX banks receive the transaction information necessary to process your deposits and withdrawals. These providers maintain their own privacy policies and security standards.
  • Game Software Providers: Game providers supplying slots, table games, and live casino content to the Alpha66 platform may receive limited gameplay data for technical maintenance and compliance purposes.
  • KYC Service Providers: Third-party identity verification companies we engage to assist with the KYC process receive the identification documents you submit for verification purposes only.
  • Regulatory Authority: Relevant regulatory authorities and law enforcement agencies may receive data as required under our legal obligations, including mandatory AML reports.
  • Technical Infrastructure Providers: Server and cloud hosting companies that keep the Alpha66 platform running securely and reliably have limited access to system data for technical maintenance purposes only.

International Data Transfers: In some cases, your data may be transferred to servers located outside Malaysia to ensure platform redundancy and availability. Any such transfer is carried out with appropriate security safeguards, including data processing agreements that comply with recognized data protection standards.

4
Alpha66 Data Security Measures

The security of your personal and financial data is Alpha66's highest priority. We continuously invest in security technology and processes to ensure your data remains protected at all times. The following are the key technical and organisational security measures we have in place:

  • Data Encryption in Transit: All communications between your browser or app and Alpha66's servers are protected by TLS 1.3 with AES-256 encryption, ensuring your data cannot be intercepted in transit.
  • Stored Data Encryption: Sensitive data stored in Alpha66's databases, including financial information and identity documents, is encrypted using industry-standard encryption at rest.
  • Two-Factor Authentication: Alpha66 offers two-factor authentication (2FA) for all player accounts. We strongly encourage you to enable 2FA for an added layer of account security.
  • 24/7 Security Monitoring: Alpha66's cybersecurity team monitors our systems continuously, 24 hours a day, 7 days a week, to detect and respond to any threats or suspicious activity.
  • Regular Security Audits: Penetration testing and independent security audits are conducted periodically by certified third-party security specialists to identify and address potential vulnerabilities.
  • Internal Access Controls: Access to player data within Alpha66's internal systems is restricted using the principle of least privilege — staff only have access to the data required to perform their specific duties, and nothing beyond that.

Your Security Responsibilities: While Alpha66 takes comprehensive security measures, the safety of your account also depends on your own actions. Make sure you use a strong, unique password for your Alpha66 account, do not share your login details with anyone, log out when using a shared or public device, and contact us immediately if you suspect any unauthorised activity on your account.

In the event of a data breach that materially affects your personal data, Alpha66 is committed to notifying you within a reasonable timeframe in accordance with applicable legal requirements, and to taking immediate steps to contain and remediate the situation.

5
Your Rights Regarding Personal Data

As an Alpha66 player and an individual whose data we process, you hold the following rights under applicable data protection laws. Alpha66 is committed to respecting and facilitating the exercise of these rights:

Right of Access

You have the right to request a copy of all personal data we hold about you. We will provide a complete report within 30 days of your request, at no charge for the first request within any 12-month period.

Right to Rectification

If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. You can also update your basic profile information directly through your account settings on the Alpha66 platform.

Right to Erasure

You may request the deletion of your personal data under certain circumstances, for example when the data is no longer needed for its original purpose. Such requests are subject to legal retention obligations that may prevent the immediate deletion of certain records.

Right to Restriction of Processing

In certain circumstances — such as when you dispute the accuracy of your data or object to its processing — you may request that Alpha66 restrict the processing of your data while the matter is being resolved.

Right to Data Portability

You have the right to receive the personal data you have provided to Alpha66 in a structured, commonly used, and machine-readable format, and to transfer that data to another data controller where applicable.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances, and Alpha66 will cease processing unless there are compelling overriding grounds to continue.

To exercise any of the rights above, please contact Alpha66 by email support@alpha66.world with the subject line "Privacy Rights Request", or via our 24/7 live chat. We will verify your identity before processing any request to ensure the security of your data.


6
Cookies, Tracking & Similar Technologies

Alpha66 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure proper functionality, and analyse how the platform is used. The following are the types of cookies we use:

You can manage cookie settings through your web browser. Most browsers let you view, delete, or block cookies. However, disabling essential cookies may affect the functionality of the Alpha66 platform. For guidance on managing cookies in popular browsers, refer to your respective browser's help documentation.

7
Data Retention & Deletion

Alpha66 does not retain your personal data for longer than is necessary for the purpose it was collected, or as required by applicable law. Retention periods vary depending on the type of data and the purpose of processing:

  • Active Account Data: For as long as your account remains active and for 5 years following voluntary account closure, to allow for account recovery if needed and to fulfil regulatory obligations.
  • Financial Transaction Records: Minimum 7 years from the date of transaction, as required under Malaysia's accounting and anti-money laundering legislation.
  • KYC and Identity Verification Records: 5 years following the end of the business relationship, in accordance with applicable AML/CFT (Counter-Terrorism Financing) requirements.
  • Security & Activity Logs: 2 years to support the investigation of security incidents and disputes that may arise.
  • Support Communication Records: 3 years from the date a ticket is closed, for customer support reference and quality training purposes.
  • Consent-Based Marketing Data: Until you withdraw your consent or request deletion.

Secure Deletion Process: When a retention period expires and there is no legal obligation to retain the data further, Alpha66 applies secure data deletion methods — including cryptographic erasure and physical destruction of relevant storage media where required. This ensures your data is permanently deleted and cannot be recovered.

If you request deletion of your account, Alpha66 will initiate the data deletion process within 30 days, except for records that must be retained to fulfil legal obligations. You will receive a confirmation once the deletion process is complete.

8
Contact Us & Privacy Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Alpha66 handles your personal data, we encourage you to contact us directly first so we can address the matter promptly and effectively.

You can reach Alpha66's privacy team via:

  • Email: support@alpha66.world (mark the subject as "Privacy Enquiry" or "Privacy Request")
  • Live Chat: Available 24/7 within the Alpha66 platform — the fastest way to get a response
  • Response Time: We aim to respond within 2–4 hours for live chat and within 24 hours for email. For formal privacy rights requests, processing may take up to 30 working days.

Alpha66 is committed to resolving every privacy complaint fairly and transparently. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

Privacy Policy Updates: Alpha66 will update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or player feedback. Material changes will be communicated via email or in-platform notifications. The date of the most recent update is always displayed at the top of this page. Continued use of the platform after an update constitutes acceptance of the revised policy.


Frequently Asked Questions About Privacy at Alpha66

Quick answers to the questions Malaysian players ask most about data protection and privacy at Alpha66.

Yes. Your payment details — including your Touch 'n Go eWallet account number, GrabPay, Boost, ShopeePay or FPX information — are protected by 256-bit SSL encryption during data transfer and encrypted at rest within our systems. Alpha66 does not store your full e-wallet account number; we only retain the information needed to verify the recipient's identity during withdrawal processing. Alpha66 staff do not have access to your wallet password or PIN.

No. Alpha66 does not sell, rent, or share players' personal data with advertising companies, data brokers, or any third party for third-party marketing purposes. Your data is only shared with third parties directly involved in delivering our services, such as payment providers and game software providers, and only the minimum necessary data is shared. All such third parties are bound by strict confidentiality agreements.

There are several easy ways to stop receiving marketing communications from Alpha66. The simplest is to click the "Unsubscribe" link found at the bottom of any promotional email we send. You can also update your communication preferences through your account settings on the platform, or reach out to our support team via live chat or email. Changes will take effect within 2 business days. Please note that opting out of marketing emails does not stop essential operational emails such as transaction confirmations or account security notifications.

Yes, this is your right under applicable data protection laws. To request a copy of your personal data (also known as a Data Subject Access Request), contact Alpha66 by email at support@alpha66.world with the subject line "Data Access Request", or via live chat, and state your request clearly. We will verify your identity first to ensure data is provided to the correct individual. Your data report will be prepared within 30 business days from the date of identity verification. There is no charge for the first request made within any 12-month period.

The KYC (Know Your Customer) process is an industry-standard requirement for online casinos and a legal obligation we must fulfil under applicable anti-money laundering (AML) regulations. The primary purpose of KYC is to verify that you are a real individual, aged 21 or above, and that your account is not being used for any unlawful financial activity. Identification documents you submit — whether a Malaysian identity card or passport — are stored securely with strict encryption and are only accessible to staff responsible for conducting KYC checks. These documents are not shared with third parties except as required by law.

When you voluntarily close your Alpha66 account, the deletion of your personal data will be initiated within 30 days. However, certain data must be retained for a specified period to meet legal obligations. For example, financial transaction records must be kept for a minimum of 7 years under Malaysian accounting and AML laws. KYC records are retained for 5 years after account closure. Data not subject to legal retention obligations will be securely deleted. You will receive an email confirmation detailing which data has been deleted and which is still retained, along with the reasons.

Your Data Is Protected at Alpha66

Play Safe, Your Data Always Stays Secure

Over 500,000 Malaysian players trust Alpha66 with their personal data. Register now and enjoy a safe, secure online casino experience.

Deposit via: Touch 'n Go GrabPay Boost ShopeePay DuitNow FPX

Minimum deposit RM20 • SSL 256-bit • Age 21 and above only


Related Documents & Pages


Bahasa Melayu