alpha666 Privacy Policy

01 Data Controller

alpha666 (referred to in this policy as "alpha666", "we", "us", or "our") is the data controller responsible for personal data collected through the alpha666.win platform. As data controller, alpha666 determines the purposes and means of processing your personal data and is accountable for compliance with applicable data protection laws.

alpha666 operates under international gaming authority licensing and is subject to data protection and privacy obligations as conditions of that licensing. Our data practices are subject to periodic review by our licensing authority.

02 Personal Data We Collect

alpha666 collects personal data from you in the following categories, depending on how you interact with the platform:

alpha666 does not collect sensitive personal data (such as biometric data, health records, or political opinions) unless specifically required for compliance with applicable regulatory obligations, in which case explicit consent will be sought.

03 How alpha666 Uses Your Personal Data

alpha666 uses the personal data we collect for the following purposes:

• Account creation and management: To register your alpha666 account, verify your identity, and maintain accurate account records.
• Service delivery: To provide access to alpha666's casino, sportsbook, live dealer, and all related gaming services.
• Payment processing: To process deposits, withdrawals, and associated financial transactions via supported Malaysian payment methods including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank.
• KYC and compliance: To fulfil know-your-customer, anti-money-laundering, and responsible gaming obligations under our international gaming authority licensing requirements.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other malicious activity on the alpha666 platform.
• Customer support: To respond to your queries, resolve disputes, and provide assistance with account, payment, or gameplay issues.
• Platform improvement: To analyse usage patterns and improve the alpha666 platform's features, performance, and user experience.
• Marketing (where consented): To send you promotional offers, game recommendations, and platform updates by email or in-platform notification, where you have opted in to receive such communications.

04 Lawful Bases for Processing

alpha666 processes your personal data only where a lawful basis exists. The primary lawful bases relied upon are as follows:

• Contractual necessity: Processing required to fulfil our obligations to you under the alpha666 Terms and Conditions — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements under alpha666's international gaming authority licensing, including KYC, AML, and responsible gaming obligations.
• Legitimate interests: Processing undertaken in pursuit of alpha666's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Where alpha666 relies on your consent as the lawful basis for processing — such as for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

05 Data Sharing & Disclosure

alpha666 does not sell, rent, or trade personal data to third parties for their own commercial purposes. Personal data is shared only in the following circumstances and only to the extent necessary:

• Payment service providers: Financial data is shared with payment processing partners — including FPX, Touch n Go eWallet, and Boost — to the extent required to process transactions.
• Game and software providers: Limited technical data may be shared with certified game providers to facilitate gameplay and RNG verification.
• Regulatory authorities: alpha666 will disclose personal data to licensing authorities, law enforcement agencies, or courts where required to do so by law or court order.
• Anti-fraud and AML services: Identity and transaction data may be shared with third-party compliance service providers for KYC verification and anti-money-laundering screening.
• IT and infrastructure providers: Technical service providers who process data on our behalf under data processing agreements that restrict their use of your data to the provision of services to alpha666.

All third-party service providers with whom alpha666 shares personal data are contractually required to handle that data in accordance with applicable data protection laws and alpha666's data security standards.

06 Cookies & Tracking Technologies

alpha666 uses cookies and similar tracking technologies on the alpha666.win platform. Cookies are small text files placed on your device that allow us to maintain your session, remember your preferences, and collect platform usage analytics.

alpha666 uses the following categories of cookies:

• Strictly necessary cookies: Required for the operation of the alpha666 platform. These include session authentication tokens and security cookies. These cannot be disabled without affecting platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how Players navigate and use the alpha666 platform, enabling us to identify and fix issues and improve the user experience.
• Functional cookies: Used to remember your preferences such as language settings and last-visited game categories to provide a more personalised platform experience.
• Marketing cookies: Used to track your interactions with alpha666 promotional content. These are only deployed with your explicit consent and can be withdrawn at any time via your account settings.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing core alpha666 platform functions including login and gameplay.

07 Data Retention

alpha666 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active Account plus a minimum of five years following Account closure, to comply with anti-money-laundering and gaming regulatory requirements.
• Transaction and financial data: Retained for a minimum of seven years from the date of the transaction, in accordance with financial recordkeeping obligations.
• Support and communications data: Retained for three years from the date of the relevant interaction, or longer where the communication relates to an unresolved dispute.
• Technical and usage data: Retained in identifiable form for up to 24 months, after which it may be retained in anonymised aggregated form for analytical purposes without time limit.

Following the expiry of applicable retention periods, alpha666 will securely delete or anonymise your personal data in accordance with our data disposal procedures.

08 Security Measures

alpha666 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit TLS encryption for all data in transit between your browser and alpha666's servers.
• AES-256 encryption for sensitive data stored at rest, including financial credentials and identity documents.
• Role-based access controls limiting access to personal data to authorised personnel on a need-to-know basis.
• Continuous security monitoring and intrusion detection systems on all platform infrastructure.
• Regular third-party security audits and penetration testing as required under our licensing obligations.
• Two-factor authentication (2FA) available and encouraged for all Player accounts.

While alpha666 takes all reasonable steps to protect your personal data, no system can guarantee absolute security. In the event of a data security incident that is likely to result in a high risk to your rights, alpha666 will notify you as required by applicable law.

09 Your Data Rights

Subject to applicable data protection law and regulatory retention obligations, you have the following rights in respect of your personal data held by alpha666:

• Right of access: You may request a copy of the personal data alpha666 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data in your alpha666 account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to restrict processing: You may request that alpha666 restricts the processing of your data in certain circumstances, such as where you contest the accuracy of the data.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that alpha666 provides your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where alpha666 relies on your consent as the lawful basis for processing, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact alpha666 support at [email protected]. We will respond to verified data rights requests within 30 days. Identity verification will be required before requests can be processed.

10 International Data Transfers

alpha666 may transfer your personal data to countries outside Malaysia in connection with the provision of its services, including to service providers hosting infrastructure in other jurisdictions. Where such transfers take place, alpha666 ensures that appropriate safeguards are in place to protect your data, in accordance with applicable data protection requirements.

Such safeguards may include contractual protections with the receiving entity, reliance on jurisdiction-specific adequacy frameworks, or binding corporate rules where applicable. Information about specific transfer mechanisms can be obtained by contacting alpha666 at [email protected].

11 Children and Minors

The alpha666 platform is strictly for individuals aged 21 years and above. alpha666 does not knowingly collect personal data from individuals under the age of 21. If alpha666 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be closed.

If you believe that alpha666 may have inadvertently collected data from a minor, please contact us at [email protected] immediately so that appropriate action can be taken.

12 Updates to this Privacy Policy

alpha666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material, alpha666 will provide notice by posting the updated policy on alpha666.win with a revised "Last Updated" date and, where appropriate, by sending a notification to your registered email address.

Your continued use of the alpha666 platform after any updated Privacy Policy has been published constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed of how alpha666 is protecting your personal data.

13 Contact & Data Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way alpha666 handles your personal data, please contact our support team. We are committed to resolving all privacy-related enquiries promptly and professionally.

Email: [email protected]

Please include "Privacy Enquiry" or "Data Rights Request" in the subject line of your email. Our team is available 24 hours a day, 7 days a week. For formal written complaints, we aim to acknowledge receipt within 3 business days and provide a substantive response within 30 days.