Aa6 Privacy Policy – Your Data, Our Responsibility

Welcome to the aa6 Privacy Policy. This document outlines our data protection practices for all users who access the aa6 platform via our website aa6.vin or the official aa6 mobile app.

Aa6 takes every player's privacy seriously. As an online entertainment platform serving users in Malaysia, we understand the trust you place in us when you register and share personal information. We uphold that trust with full responsibility.

This Privacy Policy explains:

• What types of personal information we collect from you
• How that information is used to enhance your experience
• Who may access your information under limited circumstances
• The technical and organisational measures we take to protect your data
• Your rights as a data owner and how to exercise them

This policy applies to all registered users, active players, prospective players browsing the aa6 website, and any party that interacts with our platform in any capacity.

Aa6 only collects information that is strictly necessary to provide a safe, seamless, and responsible service. Below are the categories of data we collect along with their specific purposes:

Sensitive Data: aa6 does not collect sensitive information such as medical records, political views, or religious beliefs. Credit/debit card details are not stored on aa6 servers — all payment processing is handled through PCI-DSS certified payment gateways.

Every piece of information we collect has a clear and legitimate purpose. aa6 does not use your data for purposes unrelated to delivering platform services. The following are the primary purposes for which your data is used:

• Account Management: Processing registrations, verifying your identity at login, and maintaining accurate and up-to-date account records.
• Transaction Processing: Processing deposits and withdrawals securely, verifying financial transactions, and maintaining financial records required for compliance purposes.
• Identity Verification (KYC): Conducting Know Your Customer procedures in accordance with anti-money laundering requirements and legal compliance obligations.
• Service Provision: Running games, calculating and crediting wins, managing bonuses and promotions, and providing customer support.
• Platform Security: Detecting and preventing fraud, unauthorised access, account abuse, and activities that violate platform terms.
• Platform Improvement: Analysing usage patterns in aggregate (not individually) to improve platform design, performance, and features.
• Service Communications: Sending important account-related notifications, security updates, and transaction alerts.
• Marketing (with consent): Sending promotional information and special offers only to players who have given explicit consent to receive marketing communications.
• Legal Compliance: Fulfilling legal obligations, responding to requests from lawful authorities, and maintaining records required by law.

Your data security is not just a priority — it is at the core of how aa6 operates. We continuously invest in industry-grade security infrastructure to ensure your information is always protected.

aa6 Security Infrastructure:

• Data Encryption in Transit: All communications between your device and aa6 servers are secured with TLS 1.3 protocol and 256-bit SSL encryption, the same standard adopted by leading banking institutions.
• Data Encryption at Rest: Sensitive data stored in the aa6 database is encrypted using AES-256 encryption. This means that even if your data is accessed without authorisation, it cannot be read without the encryption key.
• Multi-Level Access Control: Access to user data within aa6 is restricted to staff who require it to perform their duties. All access is logged and monitored.
• Two-Factor Authentication (2FA): aa6's internal systems require 2FA for all administrative access. You are also encouraged to enable 2FA on your personal account.
• Periodic Security Audits: aa6 conducts regular penetration testing and security audits by independent third parties to identify and address any security vulnerabilities.
• 24/7 Monitoring: Our automated monitoring system operates around the clock to detect suspicious activity and respond immediately to security threats.

Data Retention Period: aa6 retains your personal data for as long as your account is active and for the period required by law following account closure. Generally, financial records are retained for 7 years in line with Malaysian legal requirements, while technical data such as access logs is retained for 12 months.

Aa6 does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. However, there are limited circumstances in which we may need to share your data with other parties to ensure the platform operates safely and in compliance with the law:

• Payment Service Providers: Payment gateways such as FPX, TNG, GrabPay, and partner banks receive only the minimum transaction information required to process your deposits and withdrawals. All such providers are subject to strict data protection agreements.
• Game Service Providers: Third-party gaming platforms such as Pragmatic Play, PG Soft, and Evolution Gaming receive the game session information required to run games. They do not receive your full identity information.
• Technical Services: Technical infrastructure providers such as cloud services, CDN, and analytics tools may process technical data in their capacity as service providers bound by the same privacy obligations.
• Legal Authorities: aa6 will disclose user information to Malaysian or international authorities when required by a valid court order, warrant, or legal obligation. aa6 will not disclose data beyond what is legally required.
• Fraud Prevention: In cases of suspected serious fraud or illegal activity, aa6 may share relevant information with the appropriate financial institutions or authorities for investigation purposes.

In all data sharing cases, aa6 ensures that recipients are bound by confidentiality and data security obligations equal to or higher than aa6's own standards.

Aa6 uses cookies and similar tracking technologies to enhance your experience, understand how the platform is used, and maintain the security of your login sessions. Below is an explanation of the types of cookies we use:

• Essential Cookies (Required): These cookies are required for core platform functions such as maintaining your login session, remembering your language preference, and ensuring account security. Without them, the platform cannot function properly. These cookies cannot be disabled.
• Performance Cookies: We use analytics cookies to understand how players interact with the platform — which pages are visited most frequently, how long sessions last, and where players encounter difficulties. This data is used in aggregate and without individual identification.
• Functional Cookies: These cookies remember your personal preferences such as display settings, preferred language, and game choices to deliver a more personalised experience each time you log in.
• Security Cookies: Used to detect suspicious login attempts, verify trusted device identity, and prevent CSRF (Cross-Site Request Forgery) attacks.

Managing Cookies: You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect your ability to log in and use the aa6 platform fully.

Cookie Duration: Session cookies are automatically deleted when you close your browser. Persistent cookies that store your preferences typically expire within 30 to 365 days depending on their function.

As an aa6 user, you have certain rights regarding your personal data under Malaysia's PDPA. aa6 fully respects and facilitates the exercise of these rights.

Aa6 reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, technological advancements, or improvements to our operations.

Amendment Notice: Any material changes to this Privacy Policy will be communicated to you via in-platform notifications or email at least 14 days before the changes take effect. The "Last Updated" date at the top of this document will always reflect the most current version.

Acceptance of Amendments: Your continued use of the aa6 platform after the effective date of any amendment constitutes your acceptance of the revised policy. If you disagree with the changes, please contact us to discuss available options, including account closure.

Previous Versions: You may request a copy of any previous version of this Privacy Policy by contacting the aa6 support team. We maintain a version archive for transparency purposes.