Privacy Policy

1. Data Controller

alpa66 is the data controller responsible for personal data collected through the alpa66.app website and gaming platform. References to "alpa66", "we", "us", or "our" in this Privacy Policy refer to the operator of the alpa66 platform. References to "you", "Member", or "User" refer to any individual who has registered an account on or otherwise accesses the alpa66 platform.

alpa66 processes personal data in accordance with applicable data protection legislation and the requirements of our gaming licence. If you have any questions about this Privacy Policy or how alpa66 handles your personal data, please contact our support team via the live chat facility on the alpa66 platform.

2. Personal Data We Collect

alpa66 collects personal data through several channels, including account registration, identity verification, platform activity, payment processing, and customer support interactions. The categories of data alpa66 collects include:

2.1 Identity & Contact Data

• Full legal name, date of birth, and gender
• Email address and mobile phone number
• Residential address (including postcode, city, and country)
• Identity document details (for KYC verification — national identity card, passport)

2.2 Financial Data

• Payment method details (e.g., bank account identifiers, e-wallet account references such as Touch n Go eWallet or Boost)
• Transaction history, including deposits, withdrawals, and bet settlements in MYR
• Bonus and promotional account activity

2.3 Platform Activity Data

• Gaming history including bets placed, games played, and wagering patterns
• Login timestamps, session durations, and device identifiers
• Responsible gaming settings and self-exclusion elections

2.4 Technical Data

• IP address, browser type and version, operating system
• Cookie data and similar tracking technologies (see Section 6)
• Referring URL and on-site navigation data

2.5 Communications Data

• Records of correspondence with alpa66 support via live chat, email, or any other channel
• Survey responses and feedback submitted through the platform

alpa66 does not collect special category personal data (such as health, biometric, or political data) except where specifically required for responsible gaming compliance and only with your explicit consent.

3. How alpa66 Uses Your Personal Data

alpa66 processes your personal data for the following purposes:

4. Legal Basis for Processing

alpa66 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to provide the alpa66 platform services to you as a registered Member, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with our gaming licence conditions, anti-money laundering requirements, KYC obligations, and applicable data protection law.
• Legitimate interests: Processing conducted for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, certain cookies, and special category data, where we have obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

alpa66 does not sell your personal data to third parties. alpa66 shares your personal data only in the following limited circumstances:

• Payment processors: Financial data is shared with authorised payment service providers (including e-wallet operators and banks) solely to process MYR transactions on your behalf.
• Identity verification providers: Identity and document data is shared with regulated KYC service providers for the purpose of age and identity verification as required by our licence.
• Game content providers: Gameplay data (username and session tokens, not full identity data) is shared with licensed game providers to deliver casino and slot games within the alpa66 platform.
• Regulatory authorities: Personal data is disclosed to gaming regulators, law enforcement agencies, or other competent authorities when required by law, court order, or our licence conditions.
• Professional advisors: Legal, audit, and compliance advisors may access personal data on a strictly need-to-know basis under confidentiality obligations.

All third parties with whom alpa66 shares personal data are contractually required to handle that data securely and in accordance with applicable data protection law. alpa66 does not permit third parties to use your personal data for their own marketing purposes.

6. Cookies & Tracking Technologies

alpa66 uses cookies and similar tracking technologies on alpa66.app to support platform functionality and to understand how Members interact with the site. The categories of cookies alpa66 uses include:

• Strictly necessary cookies: Required for the alpa66 platform to function, including session authentication and security tokens. These cannot be disabled.
• Functional cookies: Store your preferences such as language settings and responsible gaming tool configurations within your alpa66 account.
• Analytics cookies: Collect aggregated data on platform usage patterns — such as pages visited and features used — to help alpa66 improve the member experience. These are deployed only with your consent.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent the alpa66 platform from functioning correctly. alpa66 does not use third-party advertising cookies or cross-site tracking technologies.

7. Data Retention

alpa66 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by our licence and applicable law:

• Member account records, KYC documentation, and transaction history: minimum five (5) years from account closure or last transaction, as required by anti-money laundering regulations.
• Responsible gaming records, including self-exclusion elections and limit settings: minimum five (5) years from the relevant event.
• Customer support and dispute records: minimum three (3) years from resolution.
• Marketing consent records: until consent is withdrawn, plus a reasonable administrative period thereafter.

Following the expiry of applicable retention periods, alpa66 securely deletes or anonymises personal data such that it can no longer be attributed to an identified individual.

8. Security Measures

alpa66 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. Specific measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the alpa66 platform
• Encrypted storage of passwords and sensitive financial identifiers
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security assessments and penetration testing of the alpa66 platform infrastructure
• Two-factor authentication available to all Members for account access protection

No security system is entirely impenetrable. In the event of a personal data breach that poses a risk to your rights, alpa66 will notify affected Members and the relevant supervisory authority in accordance with applicable data protection law and within mandatory notification timelines.

9. International Data Transfers

The alpa66 platform is operated with infrastructure that may be located in jurisdictions outside Malaysia. Where alpa66 transfers personal data internationally, we ensure that appropriate safeguards are in place in accordance with applicable data protection requirements. These safeguards may include standard contractual clauses, adequacy decisions, or other mechanisms recognised under applicable law. By using the alpa66 platform, you acknowledge that your personal data may be transferred and processed outside your country of residence.

10. Your Data Protection Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by alpa66:

• Right of access: You may request a copy of the personal data alpa66 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to our legal retention obligations.
• Right to restriction: You may request that alpa66 restrict processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a structured copy of your data.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting prior lawful processing.

To exercise any of the above rights, contact alpa66 via live chat or at the support email address displayed on the alpa66 platform. alpa66 will respond to verified requests within the timeframe required by applicable law. Identity verification may be required before alpa66 acts on a data subject request.

11. Children's Privacy

The alpa66 platform is strictly restricted to individuals aged 21 years and above. alpa66 does not knowingly collect personal data from individuals under the age of 21. If alpa66 becomes aware that personal data has been collected from a person under 21, that data will be deleted and the associated account suspended immediately. If you believe that a minor has provided personal data to alpa66, please contact us immediately via the support live chat.

12. Policy Updates

alpa66 reviews and updates this Privacy Policy periodically to reflect changes in our practices, platform features, or applicable law. Material changes will be communicated to registered Members via the email address on file and/or via a notice within the alpa66 platform prior to the change taking effect. The date of the most recent review is displayed at the top of this page. Continued use of the alpa66 platform following notification of a material update constitutes acceptance of the revised Privacy Policy.

13. Contact

For questions, concerns, or requests relating to this Privacy Policy or alpa66's handling of your personal data, please contact the alpa66 support team via live chat on the alpa66 platform. Our support team is available 24 hours a day, 7 days a week and will direct your enquiry to the appropriate compliance contact. For formal data subject requests, please state clearly that you are submitting a data protection request so that it can be prioritised and handled within the required regulatory timeframe.

For general enquiries, you may also write to us at: [email protected]