AEC66 is committed to protecting the personal data of every player on our platform. This Privacy Policy explains what information we collect, how we use it, how we keep it secure, and what rights you hold as a data subject.
Last Updated: 1 January 2026 | Version 3.1
All personal and financial data is stored on encrypted servers protected by 256-bit SSL technology. Access is restricted to authorised personnel on a strictly need-to-know basis.
AEC66 does not sell, rent, or trade your personal information to unaffiliated third parties for marketing or commercial purposes. Your data belongs to you.
You have the right to access, correct, or request deletion of your personal data held by AEC66. Submit a request to our support team and receive a response within 30 days.
We use cookies solely to improve your platform experience — session management, analytics, and preference retention. No third-party advertising cookies are placed without disclosure.
Payment details including DuitNow, FPX, Touch 'n Go eWallet, and bank account information are processed through certified payment gateways and never stored in plain text on our servers.
Personal data is retained only for as long as necessary to fulfil its stated purpose, comply with legal obligations, or resolve disputes. Data no longer required is securely deleted.
This Privacy Policy ("Policy") describes how AEC66 ("the Platform", "we", "us", "our") — accessible at aec66.cam — collects, uses, retains, discloses, and protects the personal data of individuals ("you", "Player", "User") who register for, access, or use any service offered on the AEC66 platform, including live casino, sports betting, slots, lottery, and related gaming services.
AEC66 processes personal data in accordance with applicable data protection legislation and the principles of transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. By registering an account or otherwise using the AEC66 platform, you acknowledge that you have read and understood this Policy.
This Policy should be read in conjunction with AEC66's Terms and Conditions, which govern the overall contractual relationship between AEC66 and its players.
For the purposes of this Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifier, or one or more factors specific to the physical, economic, or cultural identity of that person. |
| "Data Controller" | AEC66, which determines the purposes and means of processing personal data collected through the platform. |
| "Data Processor" | Any third party that processes personal data on behalf of AEC66, such as payment gateway providers, KYC verification services, and cloud hosting providers. |
| "Processing" | Any operation or set of operations performed on personal data, including collection, recording, organisation, structuring, storage, retrieval, use, disclosure, or erasure. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose. |
| "KYC" | Know Your Customer — the identity verification process required to activate full account functionality and process financial transactions. |
| "Cookie" | A small text file placed on a user's device by a website to store session data, preferences, or analytical identifiers. |
AEC66 collects the following categories of personal data, limited to what is necessary for the specific purposes described in this Policy:
AEC66 collects personal data through the following means:
AEC66 processes personal data only where a lawful basis exists. The table below sets out the primary purposes for which we process data and the corresponding legal basis:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract |
| Identity verification and KYC compliance | Legal obligation |
| Processing deposits and withdrawals in MYR | Performance of a contract |
| Anti-money laundering (AML) monitoring | Legal obligation |
| Fraud prevention and platform security | Legitimate interests |
| Providing customer support in English, BM, and Mandarin | Performance of a contract |
| Sending transactional communications (deposit confirmations, withdrawal status) | Performance of a contract |
| Sending promotional communications and bonus offers | Consent (opt-in) |
| Platform analytics and performance improvement | Legitimate interests |
| Responsible gambling monitoring and intervention | Legal obligation / Legitimate interests |
AEC66 does not sell, rent, or trade your personal data to unaffiliated third parties for commercial purposes. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:
All third-party Data Processors engaged by AEC66 are contractually obligated to process personal data only in accordance with AEC66's instructions and applicable data protection law, and to implement appropriate technical and organisational security measures.
The security of your financial information is a primary concern for AEC66. All payment transactions processed through the platform are routed through certified, PCI-DSS-compliant payment gateways. AEC66 does not store full payment card numbers, CVV codes, or full bank account details on its own servers.
When you transact using Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX, the relevant transaction data is processed directly by the respective payment provider in accordance with their own privacy and security policies. AEC66 receives only the confirmation reference and masked identifier necessary to credit or debit your AEC66 account.
AEC66 uses cookies and similar tracking technologies to operate and improve the platform. Cookies used on the AEC66 platform fall into the following categories:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain login session state, CSRF protection, and core platform functionality. Cannot be disabled without impacting platform operation. | Session |
| Functional | Remember language preference, game lobby layout, and display settings between sessions. | Up to 12 months |
| Analytical | Aggregate, anonymised data on page visits, session duration, and feature usage to guide platform improvements. | Up to 24 months |
| Security / Fraud Prevention | Device fingerprinting signals used to detect suspicious login attempts and fraudulent account activity. | Up to 6 months |
AEC66 does not use third-party advertising cookies. You may manage or disable non-essential cookies through your browser settings; however, disabling strictly necessary cookies will impair your ability to log in and use the platform.
AEC66 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, AEC66 will notify affected individuals in accordance with applicable legal obligations and without undue delay.
AEC66 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with applicable legal obligations, or to defend against legal claims. The following indicative retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of active account plus 5 years following closure |
| KYC identity documents | 5 years following account closure (AML legal obligation) |
| Financial transaction records | 7 years (accounting and AML legal obligation) |
| Gaming activity logs | 3 years following last account activity |
| Customer support records | 2 years following case resolution |
| Marketing consent records | Until consent is withdrawn plus 1 year |
| Analytical cookie data | Up to 24 months from collection |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised such that it can no longer be attributed to an identifiable individual.
Subject to applicable law, you hold the following rights in respect of the personal data AEC66 holds about you. To exercise any of these rights, please contact our support team using the details in Section 16.
Request a copy of the personal data AEC66 holds about you and information about how it is processed.
Request correction of inaccurate or incomplete personal data held in your account record.
Request deletion of personal data where it is no longer necessary, consent is withdrawn, or processing was unlawful. Subject to legal retention obligations.
Request that processing be suspended while accuracy is contested or a legitimate interest objection is assessed.
Receive a copy of data you provided to AEC66 in a structured, machine-readable format where technically feasible.
Object to processing based on legitimate interests or for direct marketing purposes. Marketing objections will be actioned immediately.
AEC66 will respond to all verified data subject requests within thirty (30) calendar days of receipt. We may require proof of identity before processing requests to prevent unauthorised disclosure. Where a request is complex or numerous, the response period may be extended by a further sixty (60) days with written notice.
The AEC66 platform is strictly intended for persons aged 21 years and above. AEC66 does not knowingly collect or process personal data from individuals under the age of 21.
If AEC66 becomes aware that personal data has been collected from a person under 21 years of age without appropriate consent or in breach of our registration terms, we will take immediate steps to delete that data and close the associated account. Any funds held in such an account will be returned to the depositing payment source.
AEC66 may transfer personal data to Data Processors located in jurisdictions outside Malaysia, including cloud infrastructure providers and KYC verification services operating internationally. Where such transfers occur, AEC66 ensures that appropriate safeguards are in place, including:
Malaysian players may request information about the specific safeguards applicable to international transfers of their personal data by contacting our support team.
AEC66 may send you promotional emails, platform notifications, or WhatsApp messages relating to new games, bonus offers, and promotions, provided that you have given your explicit consent to receive such communications at the time of registration or through your account preferences settings.
You may withdraw consent for marketing communications at any time by:
Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal. You will continue to receive transactional communications (deposit confirmations, withdrawal updates, security alerts) that are necessary for the operation of your Account, regardless of your marketing consent status.
AEC66 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. Where changes are material, we will provide notice via the platform homepage or to your registered email address at least seven (7) days before the revised Policy takes effect.
The "Last Updated" date at the top of this Policy indicates when the current version was published. We encourage you to review this Policy periodically. Your continued use of the AEC66 platform following publication of an amended Policy constitutes your acceptance of the revised terms.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by AEC66, please contact our support team through the following channels:
Formal data subject requests will be acknowledged within five (5) business days and substantively responded to within thirty (30) calendar days. AEC66 will request proof of identity before processing requests that would result in disclosure of personal data.
Your personal data is in safe hands. Explore Malaysia's premier online gaming platform, knowing your privacy is protected at every step.
For players aged 21 and above only. Please gamble responsibly.