Privacy Policy Alpa66 — Data Protection & Information Security

1 Introduction

Alpa66 is committed to protecting the privacy of every user on our platform. This Privacy Policy explains in detail how we collect, store, use, and disclose your personal information when you access or use alpa66's services at alpa66.vip.

As a sports betting and online gaming platform serving users in Malaysia, we are bound by the obligation to comply with the Personal Data Protection Act 2010 (PDPA) and international standards in user data management. Every decision involving your data is made with security, transparency, and trust as our top priorities.

By registering or continuing to use the alpa66 platform, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, we encourage you to discontinue use of our platform and contact our support team for further clarification.

2 Information We Collect

Alpa66 collects various types of information from users depending on how you interact with our platform. Generally, this information falls into two main categories: information you provide directly and information collected automatically.

Information you provide directly:

Information collected automatically:

• IP address and geographical location information derived from it.
• Device type, operating system, and web browser version used.
• Session data including login times, session duration, and pages visited.
• Records of wagering activity, deposits, withdrawals, and transactions within the platform.
• Cookie and tracking technology data as further described in Section 6.
• Error logs and diagnostic data used for system improvements.

3 How We Use Your Data

The personal information we collect is used solely for legitimate purposes directly related to the provision of alpa66 services. The following is a detailed description of the purposes for which such data is used:

Alpa66 will not use your data for any purpose other than those stated above without first obtaining your explicit consent. You have the right to withdraw consent for marketing communications at any time through your account settings.

4 Data Encryption & Security

User data security is alpa66's number one priority. We implement multiple layers of technical and organisational measures to ensure your personal information is always protected against unauthorised access, disclosure, alteration, or destruction.

• 256-bit SSL/TLS Encryption: All communications between your browser and alpa66's servers are secured with industry-standard SSL/TLS encryption protocols. This means all data transmitted — including login credentials and financial transactions — cannot be read by any third party.
• Encryption of data at rest: Sensitive information such as passwords, bank card numbers, and KYC documents is encrypted using AES-256 encryption algorithms before being stored in our database.
• Two-factor authentication (2FA): alpa66 fully supports 2FA for all user accounts, adding an extra layer of protection that requires a second identity verification step during login.
• 24/7 Monitoring: Our systems are continuously monitored by our cybersecurity team to detect and respond to any threats or suspicious activity in real time.
• Internal access controls: Access to user data within our organisation is restricted to staff who genuinely require it for their duties, and every access is logged for audit purposes.
• Regular security testing: The alpa66 platform undergoes regular penetration testing and security audits conducted by certified independent security firms.

5 Data Sharing & Disclosure

Alpa66 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. We only share user data in limited and specific circumstances as described below:

• Payment service providers: Transaction information is shared with licensed and authorised payment processors to facilitate deposit and withdrawal processing. All such providers are bound by strict confidentiality agreements.
• KYC service providers: Identity verification documents may be processed by an approved third-party KYC platform for faster and more secure automated verification.
• Regulatory bodies and law enforcement agencies: alpa66 will disclose user information to the relevant authorities when required by law, including investigations into financial crime, fraud, or money laundering.
• Group sharing: Information may be shared with companies within the same group as alpa66 for internal operational and compliance purposes.
• Business transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the business assets, provided the recipient maintains an equivalent level of protection.

In all data sharing situations, alpa66 ensures that receiving parties are bound by adequate confidentiality and security obligations, and that data is used only for the agreed purposes.

6 Cookies & Tracking Technologies

Alpa66 uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage patterns, and tailor content to your preferences. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as maintaining your login session and ensuring transaction security. Without these cookies, the platform cannot function properly. These cookies cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language, display settings, and game preferences so you do not need to reconfigure them each time you access the platform.
• Analytics Cookies: Helps us understand how users interact with the platform, which pages are most popular, and where users encounter difficulties. This data is used solely for platform improvement.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect the integrity of user accounts.

You can control and manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality and user experience of the alpa66 platform. For more information on managing cookies, refer to your web browser's help section.

7 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and alpa66's privacy policy, you have the following rights regarding the personal data we hold about you:

To exercise any of the above rights, please contact the alpa66 support team via email or live chat. We will process your request within 14 business days. For complex cases, this period may be extended to up to 30 days with prior notice provided to you.

8 Data Retention Period

Alpa66 only retains your personal data for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations. The following are general guidelines for our data retention periods:

• Active account data: Retained for as long as your account remains active and for a minimum of 5 years after account closure for financial compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with anti-money laundering (AML) legal requirements enforced in Malaysia.
• KYC Documents: Retained for the duration of the active account period plus 5 years after account closure, or as required by regulatory authorities.
• Activity logs and session data: Retained for 12 months for analytics and security purposes, then automatically deleted or anonymised.
• Customer support communication data: Retained for 3 years after case resolution for reference and service quality purposes.

Once the designated retention period has ended, your personal data will be securely deleted or anonymised in accordance with recognised industry-standard procedures.

9 Child Protection

Alpa66 is a platform exclusively for adults aged 18 and above. We do not knowingly collect or process any personal information from individuals under the age of 18.

If we discover that personal information of a minor has been collected without valid parental or guardian consent, we will take immediate steps to delete that information and close the associated account. Parents or guardians who become aware that their child has registered on our platform are requested to contact the alpa66 support team immediately.

10 Privacy Policy Amendment

Alpa66 reserves the right to amend, update, or replace this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological improvements. Any material amendments will be communicated to users via an in-platform notice or email at least 7 days before taking effect.

The "Updated" date shown at the top of this page reflects the last time this Privacy Policy was revised. We encourage you to review this page periodically to stay informed about how we protect your data.

Continued use of the alpa66 platform after any amendments to this Privacy Policy take effect will be deemed as your acceptance of the revised terms. If you do not agree with the changes made, you have the right to close your account and cease using the platform.

11 Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, the alpa66 Data Protection Officer (DPO) team is ready to assist you through the following channels:

• Privacy Email: [email protected] — please specify "Privacy Request" in your email subject line for faster processing.
• Live Chat: Available 24/7 via the live chat button within the platform. Our team will help direct your request to the appropriate department.
• FAQ: For privacy-related FAQs, visit our FAQ page for an immediate response.

We aim to respond within 3 business days for all privacy-related enquiries, and within 14 business days for formal data rights requests. You may also refer to Responsible Gaming page us for more comprehensive user protection information.