aa6 Privacy Policy

1. Introduction

aa6 ("we", "us", "our") is committed to safeguarding the privacy and personal data of all individuals who interact with the aa6 platform, accessible at aa6.one. This Privacy Policy sets out in clear terms what personal information aa6 collects, the purposes for which it is used, how it is stored, who it may be shared with, and the rights available to you as a data subject.

This Policy applies to all users of the aa6 website and platform — including registered account holders, prospective players who browse the site without registering, and individuals who contact aa6 customer support. By using the aa6 platform or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Data Controller

For the purposes of applicable data protection legislation, aa6 is the data controller in respect of personal data collected through the aa6 platform. Queries regarding data handling practices, requests to exercise data subject rights, or concerns about this Policy should be directed to the aa6 data team at [email protected].

3. Personal Data We Collect

aa6 collects the following categories of personal data:

• Identity Data — full legal name, date of birth, national identity card or passport number, and any other documentation provided during Know Your Customer (KYC) verification;
• Contact Data — email address, telephone number, and residential address as provided at registration;
• Financial Data — payment method details (e.g., Touch n Go eWallet account reference, Boost account reference, bank account details for Maybank, CIMB, or Public Bank), transaction history, deposit and withdrawal records, and account balance information;
• Account Data — username, encrypted password, account preferences, bonus and promotion history, and account status;
• Gaming Data — bet history, game session logs, win and loss records, wagering patterns, and responsible gaming tool settings;
• Technical Data — IP address, device type, browser type and version, operating system, screen resolution, time zone, and session timestamps;
• Usage Data — pages visited, features used, search queries within the platform, and navigation paths;
• Communications Data — records of correspondence with aa6 customer support, including live chat transcripts and email exchanges.

4. How We Collect Your Data

aa6 collects personal data through the following means:

• Direct interactions — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion;
• Automated technologies — as you interact with the aa6 platform, we automatically collect Technical Data and Usage Data through cookies, server logs, and similar tracking technologies (see Section 8);
• Third-party sources — identity verification and fraud prevention service providers may supply supplementary identity data to assist with KYC compliance; payment processors transmit transaction confirmation data; and responsible gaming agencies may notify aa6 of self-exclusion registrations.

5. How We Use Your Personal Data

aa6 uses your personal data for the following purposes:

• To create and manage your aa6 account and verify your identity in accordance with KYC obligations imposed by our gaming licence;
• To process deposits, wagers, winnings, and withdrawal requests in Malaysian Ringgit (MYR);
• To communicate with you regarding your account, transactions, promotions, and any changes to the aa6 platform or these policies;
• To detect, prevent, and investigate fraud, money laundering, bonus abuse, and other prohibited activities;
• To operate responsible gaming tools and monitor account activity for indicators of problem gambling, including enforcing self-exclusion and deposit limits;
• To comply with applicable legal, regulatory, and licensing obligations, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements;
• To improve the aa6 platform — including game library curation, interface performance, and customer support quality — through analysis of usage and gaming data;
• To send you promotional communications and personalised offers, where you have provided consent or where aa6 has a legitimate interest in doing so, subject to your right to opt out at any time.

6. Legal Basis for Processing

aa6 processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform the contract between aa6 and you as an account holder (e.g., account management, payment processing, KYC verification);
• Legal obligation — processing required to comply with AML, CTF, gaming licence, and other applicable legal requirements;
• Legitimate interests — fraud prevention, platform security, responsible gaming monitoring, and business analytics, where such interests are not overridden by your rights and interests;
• Consent — for direct marketing communications and optional cookies, where consent has been obtained and may be withdrawn at any time.

7. Data Sharing & Third Parties

aa6 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Personal data may be disclosed to the following categories of third party for the purposes described in this Policy:

• Payment processors — Touch n Go eWallet, Boost, and banking partners (Maybank, CIMB, Public Bank) for the processing of deposits and withdrawals;
• Identity verification providers — third-party KYC and AML screening services used to verify player identity and prevent financial crime;
• Gaming technology providers — game studios and platform software providers who may process limited data in connection with game delivery and fairness auditing;
• Responsible gaming authorities — where required by our licence or where a player has registered for self-exclusion through an external programme;
• Regulatory and law enforcement authorities — where disclosure is required by law, court order, or regulatory demand;
• Professional advisers — legal, accounting, and audit professionals, under strict confidentiality obligations.

All third parties are contractually required to handle your data securely and to use it only for the purposes for which it was disclosed.

8. Cookies & Tracking Technologies

aa6 uses cookies and similar technologies (including pixel tags and session tokens) to operate the platform, remember your preferences, maintain your login session, and support responsible gaming monitoring. The following categories of cookie are used:

• Strictly necessary cookies — essential for the platform to function correctly, including session management and security tokens. These cannot be disabled;
• Functional cookies — remember your preferences, such as language settings and responsible gaming limit configurations;
• Analytics cookies — collect aggregated data about platform usage to help aa6 improve the player experience;
• Marketing cookies — used to deliver relevant promotional content within the aa6 platform. These require your consent and may be declined.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair platform functionality.

9. Data Retention

aa6 retains personal data for as long as your account remains active and for a period thereafter as required by applicable legal, regulatory, and licensing obligations. In particular, transaction records and KYC documentation are retained for a minimum of five years following account closure in accordance with AML regulatory requirements. Gaming data and responsible gaming records may be retained for longer periods where required by our licensing authority.

Where data is no longer required, aa6 will securely delete or anonymise it in accordance with our data retention schedule.

10. Your Data Subject Rights

Subject to applicable law and regulatory limitations, you have the following rights in respect of your personal data held by aa6:

• Right of access — to request a copy of the personal data aa6 holds about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data, subject to legal retention obligations;
• Right to restriction — to request that aa6 restrict processing of your personal data in certain circumstances;
• Right to data portability — to receive your personal data in a structured, machine-readable format;
• Right to object — to object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, submit a written request to [email protected]. aa6 will respond within five business days of receiving a valid request and will complete the request within 30 days.

11. Data Security

aa6 implements appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data transmissions, encrypted storage of sensitive personal and financial data, role-based access controls limiting internal data access to authorised personnel, regular security audits, and intrusion detection systems.

While aa6 takes all reasonable steps to protect your data, no digital system can guarantee absolute security. You are also responsible for maintaining the confidentiality of your aa6 account credentials and should notify aa6 immediately if you suspect any unauthorised access to your account.

12. Children & Minors

The aa6 platform is strictly restricted to persons aged 21 years and above. aa6 does not knowingly collect or process personal data from individuals under the age of 21. Where aa6 becomes aware that personal data has been collected from a person under this age, the relevant account will be immediately closed and all data deleted, except to the extent that legal retention obligations require otherwise.

13. Changes to This Privacy Policy

aa6 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or platform operations. When material changes are made, aa6 will notify registered account holders by email or prominent notice on the platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Continued use of the aa6 platform following notification of an updated Policy constitutes acceptance of the revised terms.

14. Contact & Complaints

For all privacy-related queries, requests to exercise data subject rights, or concerns about aa6's data handling practices, please contact us at [email protected]. Our data team is available to respond within five business days.

If you are not satisfied with aa6's response to a data-related complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction or to the dispute resolution procedures prescribed by aa6's licensing authority.