ali66 Privacy Policy

This Privacy Policy (the "Policy") issued by ali66 (hereinafter "ali66", "we", "us", or "our"), the operator of the online gaming platform accessible athttps://ali66.cam (the "Platform"). This Policy describes our practices with respect to the collection, use, storage, disclosure, and protection of personal data relating to registered members, prospective users, and visitors to the Platform (collectively, "you" or "the Data Subject").

ali66 is committed to handling your personal data responsibly and in a manner consistent with internationally recognised data protection principles, including those reflected in Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection frameworks. While ali66 operates under an international gaming licence rather than a Malaysian domestic licence, we apply PDPA-aligned principles as a baseline standard for all data processing activities involving Malaysian players.

By accessing the Platform, creating an account, or otherwise interacting with ali66's services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" — Any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transfer, or deletion.
• "Data Controller" — ali66, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — A third party that processes personal data on behalf of ali66, subject to contractual obligations and data protection requirements.
• "Sensitive Personal Data" — A subset of personal data warranting heightened protection, including financial information, identity documents, and data relating to health or biometric characteristics.
• "Cookies" — Small text files placed on your device by the Platform to enable functionality, analytics, and personalised content delivery.
• "KYC Data" — Identity and verification documentation collected as part of the Know Your Customer process, including government-issued identification and proof of address.

ali66 collects only the personal data that is necessary and proportionate to the purposes described in this Policy. The categories of personal data we collect are set out in the table below:

ali66 collects personal data through the following channels and mechanisms:

4.1 Data You Provide Directly

The majority of personal data we hold is provided by you voluntarily at various stages of your relationship with ali66, including during account registration, KYC submission, payment transactions, support interactions, and participation in promotional activities.

4.2 Data Collected Automatically

When you access the Platform, certain technical and usage data is collected automatically through server logs, analytics tools, and cookies. This includes your IP address, device identifiers, session durations, page interaction data, and geolocation at the country or region level. This data is used primarily for security, fraud prevention, and platform optimisation purposes.

4.3 Data from Third Parties

ali66 may receive limited personal data from authorised third-party sources in the following circumstances:

• From payment processors and e-wallet providers (such as Touch 'n Go eWallet, Boost, GrabPay, and FPX gateway operators) — transaction confirmation data and payment method identifiers.
• From identity verification service providers — verification results and risk assessment outputs part of the KYC process.
• From fraud prevention and AML screening services — risk scoring data and watchlist screening results.
• From responsible gambling databases — self-exclusion status where inter-platform sharing agreements are in place.

ali66 processes your personal data one or more of the following lawful grounds, depending on the purpose of the specific processing activity:

5.1 Contractual Necessity

Processing is necessary to perform our contractual obligations to you under the Terms & Conditions. This includes account creation and management, payment processing, game delivery, bonus administration, and withdrawal processing. Without this processing, we cannot provide the services you have contracted for.

5.2 Legal and Regulatory Compliance

Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements, Know Your Customer (KYC) obligations under our international gaming licence, and age verification requirements. Records generated for compliance purposes may be retained for extended periods as required by applicable law.

5.3 Legitimate Interests

Certain processing activities are carried out on the basis of ali66's legitimate interests, provided those interests are not overidden by your data protection rights. These include:

• Platform security monitoring and fraud detection
• Prevention of multi-accounting and bonus abuse
• Responsible gambling monitoring and early intervention
• Service analytics and platform improvement
• Legal claims handling and dispute resolution

5.4 Consent

Where ali66 relies on your consent as the legal basis for processing — specifically for direct marketing communications and non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal. Withdrawal of marketing consent will not affect your ability to use the Platform.

ali66 does not sell, rent, or otherwise commercially transfer your personal data to third parties. We may, however, share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

6.1 Payment Service Providers

To process your deposits and withdrawals, we share relevant financial and identity data with our payment partners, including local Malaysian payment processors operating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank gateway integrations, as well as cryptocurrency exchange and settlement services. These providers act as data processors bound by contractual data protection obligations.

6.2 Identity Verification & Compliance Services

For KYC, AML, and fraud screening purposes, we share identity documentation and transactional data with authorised third-party compliance service providers. These providers process data solely for the specific compliance function and are prohibited from using it for any other purpose.

6.3 Game Content Providers

Where game software is delivered by third-party game studios or aggregators, limited session and gameplay data (such as player ID, bet amounts, and game outcomes) is shared with those providers to enable game delivery, RNG certification, and jackpot pool management. Game providers do not receive personally identifiable contact or financial data beyond what is technically required for game delivery.

6.4 Regulatory and Law Enforcement Authorities

ali66 may be required to disclose personal data to regulatory authorities, law enforcement agencies, tax authorities, or courts of competent jurisdiction where required or permitted by applicable law — for example, in response to a valid legal order or as part of anti-money laundering reporting obligations.

6.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of ali66's business operations, player data may be transferred as part of the transaction to the successor entity, subject to that entity assuming equivalent data protection obligations.

ali66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Our general retention principles are as follows:

• Account Data: Retained for the duration of the active account relationship and for a period offive (5) years following account closure, to meet AML, fraud prevention, and legal obligations.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of last account activity, in line with standard AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, for regulatory compliance and dispute resolution purposes.
• Gaming Activity Logs: Retained for two (2) years from the date of each session, for responsible gambling monitoring and dispute resolution.
• Customer Support Communications: Retained for two (2) years from the date of each interaction, for quality assurance and dispute resolution.
• Marketing Preferences: Retained until you withdraw consent or request erasure, subject to any overiding legal retention requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents re-identification.

ali66 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures include:

• 256-bit TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Data Encryption at Rest: Sensitive data stored in our systems, including KYC documents, financial records, and authentication credentials, is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data within ali66 is strictly limited to authorised personnel on a role-based, need-to-know basis. Access logs are maintained and reviewed regularly.
• Two-Factor Authentication (2FA): 2FA is available and encouraged for all player accounts as an additional layer of authentication security.
• Penetration Testing: Our platform infrastructure undergoes regular independent security assessments, including penetration testing and vulnerability scanning.
• Incident Response: ali66 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to affected individuals, we will notify relevant parties within the timeframe required by applicable law.

ali66 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve user experience, and — where you have provided consent — deliver personalised content and analytics insights. The categories of cookies we use are as follows:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They enable authentication, session management, security features, and core navigation. These cookies cannot be disabled without breaking Platform functionality, and no consent is required for their use.

9.2 Functional Cookies

Functional cookies remember your preferences — such as language settings, display preferences, and previously selected deposit methods — to provide a more personalised and efficient experience. These cookies do not track browsing activity outside the Platform.

9.3 Analytics Cookies

With your consent, ali66 uses analytics cookies to collect aggregated, anonymised data about how players interact with the Platform. This data helps us understand feature usage, identify areas for improvement, and optimise Platform performance. Analytics cookies do not identify you as an individual.

9.4 Marketing Cookies

Where you have given consent, marketing cookies may be used to track your engagement with ali66 promotional content and to deliver relevant offers. These cookies do not track your activity on third-party websites. You may withdraw consent for marketing cookies at any time via your account preferences.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookie categories may affect Platform functionality or your ability to access specific features.

Subject to applicable law and any overiding regulatory obligations (such as AML record-keeping requirements), you have the following rights with respect to your personal data held by ali66:

To exercise any of the above rights, please contact our Data Protection team using the details in Section14. We will respond to all verified requests within thirty (30) calendar days. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

Please note that some rights are subject to limitations. For example, we may be unable to delete data that we are legally obligated to retain under AML regulations, or that is necessary for the resolution of an outstanding dispute with your account.

The ali66 Platform is strictly for persons aged21 years and above. We do not knowingly collect personal data from any individual under the age of 21. Age verification is conducted as part of our KYC process, and all accounts are subject to age confirmation checks.

If ali66 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any real money deposits in accordance with our Terms & Conditions. If you believe that an underage individual has registered an account on our Platform, please contact us immediately at the details provided in Section 14.

ali66 operates under an international gaming licence and may process and store your personal data in jurisdictions outside of Malaysia. Where such transfers occur, ali66 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Malaysian PDPA principles and applicable international data protection frameworks.

Safeguards used for international data transfers may include:

• Contractual data processing agreements incorporating standard data protection clauses with all third-party data processors
• Transfer to jurisdictions that maintain an adequate level of data protection as recognised by applicable authorities
• Binding corporate rules or equivalent intra-group data transfer mechanisms where applicable

For further information about the safeguards applicable to a specific international transfer of your data, please contact our Data Protection team using the details in Section 14.

ali66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform functionality. Material changes to this Policy will be communicated to registered players via email notification or a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date displayed at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to remain informed about how we handle your personal data. Your continued use of the Platform following the publication of any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or ali66's data processing practices, please contact our Data Protection team through the following channels:

For general platform enquiries, please refer to our FAQ page. For responsible gambling tools and self-exclusion requests, please visit our Responsible Gambling page.