alpah66 Privacy Policy

1. Introduction

alpah66 ("we", "us", "our") is committed to protecting the privacy of all individuals who interact with our platform at alpah66.org ("the Platform"). This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which we process that data, the parties with whom we may share it, and the rights available to you as a data subject.

This Policy applies to all registered Players, prospective Players, and visitors to the alpah66 website, regardless of whether they are located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or any other location from which the Platform is accessed.

By accessing or using the alpah66 Platform, you acknowledge that you have read and understood this Policy. If you do not agree with the terms of this Policy, you should discontinue use of the Platform immediately.

This Policy should be read alongside the alpah66 Terms & Conditions, which govern the broader contractual relationship between alpah66 and its Players.

2. Categories of Personal Data We Collect

Depending on the nature of your interaction with the alpah66 Platform, we may collect the following categories of personal data:

We do not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) unless explicitly required for responsible gaming purposes (e.g., processing a self-exclusion request linked to a gambling harm concern).

3. How We Collect Personal Data

alpah66 collects personal data through the following channels:

• Direct collection — when you register an alpah66 account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to promotions;
• Automated collection — through cookies, web beacons, server logs, and similar tracking technologies as described in Section 9 of this Policy;
• Third-party sources — from payment service providers (including Touch 'n Go, Boost, Maybank2u, CIMB Clicks, and FPX) for transaction verification; from identity verification service providers for KYC purposes; and from fraud prevention databases where legally permitted;
• Publicly available sources — where necessary to verify information you have provided or to assess compliance with applicable regulations.

4. Purposes of Processing

alpah66 processes your personal data for the following purposes:

• To create and manage your alpah66 account and verify your identity;
• To process deposits and withdrawals in MYR and maintain accurate financial records;
• To deliver the gaming and betting services you request, including settling wagers and crediting winnings;
• To comply with anti-money laundering (AML), know-your-customer (KYC), and licensing obligations imposed by alpah66's international gaming authority;
• To detect, investigate, and prevent fraud, bonus abuse, and other prohibited conduct as defined in the alpah66 Terms & Conditions;
• To deliver customer support and respond to enquiries and complaints;
• To send you transactional communications (account statements, withdrawal confirmations, security alerts) and, where you have consented, promotional communications about alpah66 offers;
• To administer the alpah66 VIP programme and personalise your platform experience;
• To monitor responsible gaming indicators and, where appropriate, to apply protective measures in accordance with alpah66's responsible gaming obligations;
• To maintain the security and integrity of the Platform, including log analysis and intrusion detection.

5. Legal Bases for Processing

alpah66 processes personal data on the following legal bases:

• Contract performance — processing necessary to perform the alpah66 Terms & Conditions, including account management, game delivery, and payment processing;
• Legal obligation — processing required to comply with AML, KYC, responsible gaming, and data retention obligations under applicable law and alpah66's licensing framework;
• Legitimate interests — processing for fraud prevention, security monitoring, platform analytics, and VIP programme administration, where such interests are not overridden by your rights and interests;
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time by contacting alpah66 support or adjusting your cookie preferences.

6. Data Sharing & Third-Party Disclosure

alpah66 does not sell personal data to third parties. We may share your personal data with the following categories of recipients in the circumstances described:

• Payment service providers — Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Connect, for the sole purpose of processing your MYR transactions;
• Identity verification and KYC providers — third-party services engaged to verify identity documents and perform AML screening, operating under strict data processing agreements;
• Game content providers — casino software studios such as Pragmatic Play and NetEnt, who receive session and wagering data strictly as required to deliver and audit game outcomes;
• Regulatory and licensing authorities — where alpah66 is required to disclose data under its international gaming authority licensing obligations or in response to lawful requests from competent authorities;
• Professional advisers — legal, audit, and compliance professionals engaged by alpah66, subject to confidentiality obligations;
• Business successors — in the event of a merger, acquisition, or asset sale involving alpah66, subject to the acquirer maintaining equivalent privacy protections.

All third parties with whom alpah66 shares personal data are required to maintain appropriate technical and organisational security measures and to process personal data only for the purposes for which it was shared.

7. International Data Transfers

alpah66's Platform serves players across Malaysia, and our infrastructure and service providers may be located in multiple jurisdictions. Where personal data is transferred outside Malaysia, alpah66 ensures that appropriate safeguards are in place, including contractual protections equivalent to those required under applicable data protection frameworks.

Players who have questions about the specific jurisdictions to which their data may be transferred may submit a written enquiry to the alpah66 data contact address set out in Section 14.

8. Data Retention

alpah66 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by legal and licensing obligations:

• Account and KYC data — retained for a minimum of five (5) years following account closure, in accordance with AML and licensing record-keeping requirements;
• Financial transaction records — retained for a minimum of seven (7) years following the date of each transaction;
• Gaming session logs — retained for a minimum of three (3) years;
• Support and communications records — retained for two (2) years following resolution of the relevant matter;
• Self-exclusion records — retained indefinitely to prevent re-registration in breach of a self-exclusion order.

Following the expiry of applicable retention periods, personal data will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

9. Cookies & Tracking Technologies

alpah66 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies — required for session management, security, and core Platform functionality. These cannot be disabled without impairing Platform usability;
• Functional cookies — used to remember your preferences (e.g., language, game lobby layout, responsible gaming settings);
• Analytics cookies — used to understand aggregated usage patterns and improve Platform performance. No individual player is identified in analytics reports;
• Marketing cookies — used, with your consent, to tailor promotional content displayed within the alpah66 Platform. alpah66 does not serve third-party advertising on the Platform.

You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of your alpah66 account.

10. Your Data Subject Rights

Subject to applicable law and alpah66's legal obligations, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data alpah66 holds about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data, subject to legal retention requirements;
• Right to restriction — to request that processing of your data be temporarily restricted while a complaint or query is resolved;
• Right to data portability — to receive a copy of personal data you have provided to alpah66 in a structured, commonly used, machine-readable format;
• Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal;
• Right to object — to object to processing carried out on the basis of legitimate interests, including profiling for direct marketing.

To exercise any of these rights, please contact alpah66 using the details in Section 14. We will respond to verifiable requests within thirty (30) days. In complex cases, we may extend this period by a further thirty (30) days with prior notice.

11. Security Measures

alpah66 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• TLS 1.3 encryption for all data in transit between your device and alpah66 servers;
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Multi-factor authentication for all alpah66 internal systems that handle player data;
• Regular independent security audits and penetration testing of the alpah66 Platform;
• Automated anomaly detection systems monitoring for unusual access patterns or data exfiltration attempts.

While alpah66 takes all reasonable precautions, no system is entirely immune to security risks. In the event of a data breach that poses a risk to your rights and interests, alpah66 will notify affected Players in accordance with applicable legal requirements.

12. Children's Privacy

The alpah66 Platform is strictly for adults aged 21 and above. alpah66 does not knowingly collect or process personal data from individuals under the age of 21. If you believe that a minor has registered an alpah66 account or provided personal data to the Platform, please contact us immediately using the details in Section 14. Upon confirmation, alpah66 will close the account and delete all associated data in accordance with applicable legal obligations.

13. Policy Updates

alpah66 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Players via email to the address on file and by a prominent notice on the Platform at least seven (7) days prior to the changes taking effect. The "Last updated" date at the top of this Policy indicates when the most recent revision was made.

Continued use of the alpah66 Platform following the effective date of any revision constitutes acceptance of the updated Policy. If you do not agree with a revised Policy, you must discontinue use of the Platform and request account closure prior to the effective date.

14. Contact & Data Enquiries

For privacy-related enquiries, to exercise your data subject rights, or to report a suspected privacy incident, please contact the alpah66 data team via:

• Live chat — available 24/7 on the alpah66 Platform (fastest response);
• Email — [email protected] with the subject line "Privacy Enquiry — [Your Username]".

alpah66 will acknowledge all formal privacy enquiries within five (5) Malaysian business days and will aim to resolve substantive requests within thirty (30) calendar days.