Privacy Policy

1. Introduction

aa6 (the "Company", "we", "us", or "our") operates the online gaming platform accessible at https://aa6.cam (the "Platform"). We recognise that the privacy of our users is of fundamental importance, and we are committed to processing personal data responsibly, transparently, and in accordance with applicable data protection principles.

This Privacy Policy (the "Policy") describes in detail what personal information aa6 collects from users of the Platform ("Users" or "you"), the purposes for which that information is used, the circumstances in which it may be shared, how long it is retained, and the rights available to you in respect of your personal data.

By registering an Account on the Platform, or by continuing to access and use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy. If you disagree with any part of this Policy, please discontinue your use of the Platform and contact us to request deletion of your data as set out in Section 11.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Account" — a registered user profile created on the Platform.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identity number, email address, device identifiers, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Controller" — the Company, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Processor" — a third party that processes Personal Data on behalf of the Company under contractual instruction.
• "Cookie" — a small data file placed on your device by the Platform to facilitate functionality and analytics.
• "KYC" — Know Your Customer, the identity and source-of-funds verification process mandated for regulated gaming operations.

3. Data We Collect

aa6 collects the following categories of Personal Data in connection with its Platform and services:

3.1 Identity and Contact Data

• Full legal name as it appears on official identification documents
• Date of birth (used to verify the minimum age requirement of 21 years)
• Nationality and country of residence
• Email address and mobile phone number
• Residential address

3.2 Identity Verification (KYC) Documents

• Government-issued photo identification (e.g., MyKad, passport)
• Proof of residential address (e.g., utility bill, bank statement issued within three months)
• Proof of payment method ownership where required

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts in MYR
• Payment method identifiers (e.g., partial bank account numbers, e-wallet account references)
• Cryptocurrency wallet addresses used for transactions
• Bonus and promotional credit history

3.4 Account and Activity Data

• Username and encrypted password hash
• Login history including timestamps and approximate geolocation
• Game participation records, wager amounts, and outcomes
• Session duration and navigation patterns within the Platform
• Customer support correspondence and complaint records

3.5 Technical and Device Data

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser type and version
• Cookie identifiers and local storage data (see Section 10)
• Referring URLs and exit page information

4. How Data Is Collected

Personal Data is collected through the following means:

• Direct provision: information you submit during registration, KYC verification, payment processing, or when contacting customer support.
• Automated collection: technical data gathered automatically when you access the Platform via cookies, log files, and server-side analytics tools.
• Third-party sources: identity and fraud-risk data from KYC verification service providers, payment processors including those supporting DuitNow, FPX, Boost, and GrabPay, and analytics platforms contracted to assist in Platform improvement.

5. Data Processing & Purpose

aa6 processes Personal Data for the following purposes. The table below summarises the primary processing activities and the data categories involved:

6. Legal Basis for Processing

aa6 processes Personal Data on the following legal bases, depending on the specific activity:

• Contractual necessity: processing required to provide the Platform services you have registered for, including Account management, payment processing, and game delivery.
• Legal obligation: processing required to comply with applicable laws and regulations, including KYC, AML, and responsible gambling obligations.
• Legitimate interests: processing carried out to pursue the Company's legitimate business interests, including fraud prevention, security monitoring, and service improvement, provided those interests are not overridden by your rights.
• Consent: where processing is based on your freely given, informed consent, such as for optional marketing communications. You may withdraw consent at any time by contacting customer support.

7. Data Sharing

7.1 With Service Providers

aa6 engages carefully selected third-party service providers (Processors) who process Personal Data strictly on the Company's behalf and under contractual instruction. Categories of such providers include KYC verification providers, payment gateways supporting Malaysian payment channels, cloud hosting infrastructure providers, and analytics tools. These parties are bound by confidentiality and data protection obligations and are not permitted to use your data for their own purposes.

7.2 With Regulatory or Law Enforcement Authorities

The Company may disclose Personal Data to regulatory bodies, law enforcement agencies, or other competent public authorities where required to do so by applicable law, court order, or regulatory instruction. In such cases, aa6 will disclose only the minimum data necessary to satisfy the legal obligation.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's assets, Personal Data held by aa6 may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

7.4 No Sale of Personal Data

aa6 does not sell, rent, or trade your Personal Data to third parties for their own independent marketing or commercial purposes.

8. Data Retention

aa6 retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, subject to longer retention periods required by applicable law. The following indicative retention periods apply:

• Account and KYC data: retained for a minimum of five (5) years following Account closure, to satisfy anti-money laundering and regulatory record-keeping obligations.
• Transaction records: retained for a minimum of five (5) years from the date of the relevant transaction.
• Marketing consent records: retained for the duration of consent plus two (2) years to demonstrate compliance.
• Support correspondence: retained for three (3) years from the date of the most recent communication.
• Cookie and analytics data: retained for periods specified in our Cookie settings, typically not exceeding twenty-four (24) months.

Where data is no longer required and no legal basis for continued retention exists, it will be securely deleted or irreversibly anonymised.

9. Security Measures

aa6 implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encrypted storage of sensitive fields including passwords (stored as salted hashes, never in plaintext) and payment method identifiers;
• Access controls limiting data access to authorised personnel on a need-to-know basis;
• Regular internal and third-party security assessments of Platform infrastructure;
• Fraud and anomaly detection systems monitoring account and transaction activity in real time.

While aa6 takes reasonable precautions, no system is completely immune from risk. You are responsible for maintaining the confidentiality of your Account credentials and should notify us immediately if you suspect any unauthorised access to your Account.

10. Cookies & Tracking Technologies

The Platform uses cookies and similar tracking technologies to ensure proper functionality, measure Platform performance, and where consented to, deliver relevant content. The main categories of cookies used are:

• Strictly necessary cookies: essential for Platform operation, including session management and security tokens. These cannot be disabled without impairing Platform functionality.
• Functional cookies: used to remember your preferences, such as language settings and last-visited game category, to improve your experience.
• Analytics cookies: used in aggregated, anonymised form to understand how Users navigate the Platform and identify areas for improvement. No individual user is identified through this data.
• Marketing cookies: placed only with your prior consent, used to show relevant content and measure campaign effectiveness. You may withdraw consent at any time via cookie settings.

You can manage cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the Platform.

11. Your Rights

Depending on applicable data protection law, you may have the following rights in respect of your Personal Data held by aa6. To exercise any of these rights, please contact us using the details in Section 15.

• Right of Access: to request a copy of the Personal Data we hold about you and confirmation of how it is processed.
• Right of Rectification: to request correction of any inaccurate or incomplete Personal Data.
• Right of Erasure: to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected and no overriding legal obligation requires its retention.
• Right to Restrict Processing: to request that we limit processing of your data in specified circumstances, for example while the accuracy of data is contested.
• Right to Data Portability: to receive a structured, machine-readable copy of Personal Data you have provided to us, where processing is based on consent or contract.
• Right to Object: to object to processing carried out on the basis of legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

We will respond to verified rights requests within a reasonable timeframe, typically within thirty (30) days. Certain requests may be subject to identity verification before they can be actioned.

12. Protection of Minors

The Platform is strictly for adults aged 21 years and above. aa6 does not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Age verification is conducted as part of the Account registration and KYC process.

If we become aware that Personal Data has been collected from a person under the age of 21, we will take immediate steps to delete that data, close the associated Account, and where applicable, reverse any transactions processed through that Account. If you have reason to believe that a minor has registered an Account on the Platform, please contact our support team without delay.

13. Third-Party Links

The Platform may contain references to third-party services or payment providers. This Policy applies exclusively to data processed by aa6 in connection with the Platform. aa6 does not assume responsibility for the privacy practices of third-party services and encourages you to review the privacy notices of any external services you interact with, including payment processors and e-wallet providers such as Touch 'n Go eWallet, Boost, and GrabPay.

14. Policy Amendments

aa6 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform functionality. Where material changes are made, we will provide notification through the Platform. The "Last updated" date at the top of this page will reflect the most recent revision. Your continued use of the Platform following notification of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this page periodically.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by aa6, please contact our customer support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform — in English, Bahasa Melayu, and Mandarin
• Email: [email protected]
• Average response time: 3–5 minutes via live chat; within 4 hours via email