Privacy Policy

1. Introduction

Welcome to the aa6666 Privacy Policy. This document explains how aa6666 (referred to as "we," "us," "our") collects, uses, discloses, and protects your personal information when you use our online gaming platform at https://aa6666.cam (the "Website") and related services.

aa6666 is committed to protecting your privacy and ensuring the security of your personal data. We comply with applicable data protection laws and international standards, including the General Data Protection Regulation (GDPR) where applicable. By using aa6666 services, you consent to the data practices described in this Privacy Policy.

We understand that as an Indonesian player, you trust us with sensitive information including your identity documents, banking details, and gaming activity. This Privacy Policy explains our commitment to safeguarding that trust through robust data protection measures, transparency in our data practices, and respect for your privacy rights.

2. Data Controller Information

aa6666 is the data controller responsible for your personal information. This means we determine how and why your personal data is processed. Our contact information for data protection inquiries:

• Platform: aa6666 (https://aa6666.cam)
• Email: [email protected]
• General Support: [email protected]
• Data Protection Officer: Available upon request via the email addresses above

If you have questions or concerns about how we handle your personal data, please contact us using the information provided above. We will respond to privacy inquiries within 14 business days.

3. Data We Collect

aa6666 collects several types of information to provide, maintain, and improve our services. The categories of personal data we collect include:

3.1 Account Registration Data

When you create an aa6666 account, we collect:

• Personal Identifiers: Full legal name, date of birth, nationality, gender
• Contact Information: Email address, mobile phone number, residential address
• Account Credentials: Username, encrypted password, security questions (if used)
• Preferred Language and Currency: Language preference (Indonesian/English), currency preference (IDR)

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering regulations and verify you are 21 years or older, we collect:

• Government-Issued ID: Scanned or photographed copy of your Indonesian KTP (Kartu Tanda Penduduk), passport, or driver's license
• Proof of Address: Utility bills, bank statements, or government correspondence showing your residential address
• Facial Verification: In some cases, a photograph or video of you holding your ID document for identity matching
• ID Numbers: NIK (Nomor Induk Kependudukan) from KTP, passport number, driver's license number

3.3 Financial and Payment Data

For deposits, withdrawals, and financial transactions, we collect:

• Banking Information: Bank name (BCA, BRI, BNI, Mandiri, etc.), account holder name, account number
• E-Wallet Information: OVO, DANA, GoPay account details (phone number or account ID)
• Transaction History: Deposit amounts, withdrawal requests, transaction dates and times, payment method used
• Payment Verification: Screenshots or documents verifying account ownership

We do not store full credit card numbers or CVV codes. Payment processing is handled securely through encrypted channels, and sensitive payment data is tokenized.

3.4 Gaming and Betting Activity Data

We collect information about your use of aa6666 services, including:

• Betting History: Sports bets placed, casino games played, wager amounts, odds selected, bet outcomes (win/loss)
• Game Preferences: Favorite games, game categories played (slots, live casino, sports betting, togel)
• Session Data: Login times, session duration, games accessed during each session
• Bonus Activity: Bonuses claimed, wagering progress, bonus terms compliance
• Account Balance: Current balance, deposit history, withdrawal history, win/loss records

3.5 Technical and Device Data

We automatically collect technical information when you access aa6666:

• Device Information: Device type (mobile/desktop), operating system, browser type and version, screen resolution
• IP Address and Location: Your IP address and approximate geographic location (city-level, used to verify you are in Indonesia)
• Cookies and Tracking Technologies: Cookies, local storage, device fingerprints for session management and security
• Usage Analytics: Pages viewed, buttons clicked, features used, time spent on site, navigation patterns
• Network Information: Mobile carrier (if accessing via mobile network), connection type (Wi-Fi/cellular)

3.6 Communications Data

When you contact aa6666 customer support or participate in promotions, we collect:

• Support Conversations: Live chat transcripts, email correspondence, phone call recordings (with notice)
• Feedback and Surveys: Responses to customer satisfaction surveys, feature requests, complaints
• Marketing Preferences: Consent for promotional emails, SMS notifications, push notifications

4. How We Use Your Data

aa6666 uses your personal data for the following purposes:

4.1 Account Management and Service Provision

• Creating and maintaining your aa6666 account
• Verifying your identity and age (21+ requirement)
• Processing deposits, withdrawals, and financial transactions
• Providing access to sports betting, casino games, slots, and other gaming products
• Recording and settling bets and wagers
• Calculating and crediting winnings to your account
• Managing bonus claims and tracking wagering requirements

4.2 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Preventing fraud, identity theft, and financial crime
• Enforcing our Terms & Conditions and detecting violations
• Responding to legal requests from law enforcement or regulatory authorities
• Maintaining records required by our gaming license
• Verifying you are a legal resident of Indonesia and 21 years or older

4.3 Security and Fraud Prevention

• Detecting and preventing fraudulent transactions, bonus abuse, and collusion
• Monitoring for suspicious account activity and unauthorized access
• Identifying duplicate accounts and enforcing our single-account policy
• Protecting against cyberattacks, hacking attempts, and data breaches
• Investigating disputes, chargebacks, and payment issues

4.4 Customer Support

• Responding to your inquiries via live chat, email, WhatsApp, or in-app messaging
• Resolving technical issues, account problems, and payment disputes
• Providing game explanations, bonus clarifications, and betting assistance
• Recording support interactions for quality assurance and training purposes

4.5 Product Improvement and Analytics

• Analyzing user behavior to improve Website functionality and user experience
• Understanding which games, betting markets, and features are most popular
• Identifying technical issues, bugs, and areas for optimization
• Testing new features and game integrations
• Conducting market research and player satisfaction surveys

4.6 Marketing and Promotions (With Your Consent)

• Sending promotional emails about bonuses, free bets, and special offers
• Notifying you of new game releases and platform features
• Providing personalized bonus offers based on your gaming preferences
• Sending seasonal promotions (Indonesian Independence Day, Chinese New Year, Idul Fitri)
• Delivering SMS or push notifications about time-sensitive promotions (if you've opted in)

Marketing Opt-Out: You can unsubscribe from promotional communications at any time by clicking the "unsubscribe" link in emails, adjusting your account notification settings, or contacting support. Opting out of marketing does not affect transactional communications (e.g., withdrawal confirmations, security alerts).

4.7 Responsible Gaming

• Monitoring for signs of problem gambling behavior
• Enforcing deposit limits, loss limits, and session time limits you've set
• Processing self-exclusion and cooling-off period requests
• Providing access to responsible gaming resources and support organizations

5. Data Sharing and Disclosure

aa6666 does not sell your personal data to third parties. However, we may share your information in the following circumstances:

5.1 Service Providers

We share data with trusted third-party service providers who assist in operating aa6666:

• Payment Processors: Banks, e-wallet providers, and payment gateways that process deposits and withdrawals (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay)
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and other software providers whose games you play
• Identity Verification Services: Third-party KYC providers that verify your government ID and age
• Cloud Hosting: Secure data centers where aa6666 servers are hosted
• Customer Support Tools: Live chat platforms, ticketing systems, and communication software
• Analytics Services: Tools that help us understand Website traffic and user behavior (with anonymized or aggregated data where possible)

All service providers are contractually bound to protect your data, use it only for the purposes we specify, and comply with applicable data protection laws. We perform due diligence on service providers before engagement and regularly audit their security practices.

5.2 Legal Obligations

We may disclose your personal data if required by law or in good faith belief that such disclosure is necessary to:

• Comply with legal processes, court orders, or government requests
• Enforce our Terms & Conditions and investigate potential violations
• Detect, prevent, or address fraud, security issues, or technical problems
• Protect the rights, property, or safety of aa6666, our users, or the public
• Cooperate with law enforcement in investigations of criminal activity

5.3 Business Transfers

In the event aa6666 undergoes a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such change via email and/or a prominent notice on our Website. The new entity will be required to honor this Privacy Policy.

5.4 With Your Consent

We may share your data with third parties if you explicitly consent. For example, if you participate in a promotion sponsored by a third party, we may share your contact information with that sponsor (with your permission).

5.5 Aggregated and Anonymized Data

We may share aggregated, anonymized data that cannot identify you personally (e.g., "X% of Indonesian players prefer slots over live casino") for business analysis, industry reports, or marketing purposes. This data does not constitute personal information under privacy laws.

6. Data Security Measures

aa6666 employs industry-leading security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

6.1 Encryption

• SSL/TLS Encryption: All data transmitted between your device and aa6666 servers is encrypted using 256-bit SSL (Secure Socket Layer) technology - the same encryption standard used by banks
• Data-at-Rest Encryption: Personal data stored on our servers is encrypted using AES-256 encryption
• Password Hashing: Your password is hashed (one-way encrypted) and salted. aa6666 staff cannot view your plain-text password

6.2 Access Controls

• Personal data is accessible only to authorized aa6666 personnel who require access to perform their job functions
• Multi-factor authentication (MFA) is required for staff accessing sensitive systems
• Role-based access controls limit what data each staff member can view
• All access to personal data is logged and audited regularly

6.3 Network Security

• Firewalls protect aa6666 servers from unauthorized network access
• Intrusion detection systems monitor for suspicious activity and cyberattacks
• Regular security audits and penetration testing identify vulnerabilities
• DDoS (Distributed Denial of Service) protection ensures Website availability

6.4 Physical Security

• Servers are hosted in secure, climate-controlled data centers with 24/7 monitoring
• Physical access to data centers is restricted and logged
• Redundant power supplies and backups ensure data availability

6.5 Data Breach Response

In the unlikely event of a data breach that affects your personal information, aa6666 will:

• Notify affected users via email within 72 hours of discovering the breach
• Provide details about what data was compromised and steps being taken
• Offer guidance on protecting yourself (e.g., changing passwords)
• Report the breach to relevant data protection authorities as required by law

7. Data Retention

aa6666 retains your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, and resolve disputes.

7.1 Active Accounts

While your account remains active, we retain all personal data, transaction history, betting records, and communications necessary to provide services and comply with regulations.

7.2 Closed Accounts

When you close your account (voluntarily or due to inactivity), we retain certain data for legal and compliance purposes:

• KYC Documents and Transaction Records: Retained for 7 years from account closure to comply with anti-money laundering regulations
• Betting History and Game Logs: Retained for 7 years to resolve potential disputes and comply with licensing requirements
• Marketing Data: Deleted within 30 days of account closure or upon request
• Support Conversations: Retained for 3 years for dispute resolution purposes

7.3 Inactive Accounts

If your account is inactive (no login) for more than 12 consecutive months, aa6666 may close the account and begin the data retention procedures for closed accounts. You will receive an email notification before closure.

7.4 Legal Holds

If your data is subject to a legal investigation, dispute, or regulatory inquiry, we may retain relevant data beyond standard retention periods until the matter is resolved.

8. Your Privacy Rights

Under data protection laws, you have several rights regarding your personal data. aa6666 respects these rights and provides mechanisms to exercise them:

8.1 Right to Access

You have the right to request a copy of the personal data we hold about you. To request your data, email [email protected] with your full name, username, and registered email address. We will provide your data in a portable format (e.g., PDF or CSV) within 30 days.

8.2 Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings, or contact support to correct data you cannot edit yourself (e.g., date of birth after initial registration).

8.3 Right to Erasure (Right to Be Forgotten)

You may request deletion of your personal data in certain circumstances, such as:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds

However, we may need to retain certain data for legal compliance (e.g., transaction records for AML purposes) even after a deletion request. We will inform you of any data we cannot delete and the reason why.

8.4 Right to Restrict Processing

You may request that we limit how we use your data in certain situations, such as while we verify data accuracy following your correction request, or if you contest the lawfulness of processing.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g., CSV file) and to transmit that data to another service provider. This applies to data you provided to aa6666 based on consent or contract.

8.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. You can opt out of marketing emails via the unsubscribe link or by adjusting your notification preferences in account settings.

8.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

8.8 How to Exercise Your Rights

To exercise any of these rights, contact our Data Protection Officer:

• Email: [email protected]
• Include your full name, username, registered email, and a clear description of your request
• We may ask for additional identification to verify your identity before processing requests
• We will respond to requests within 30 days (or inform you if we need additional time)

9. Cookies and Tracking Technologies

aa6666 uses cookies and similar tracking technologies to enhance your experience, improve Website functionality, and analyze usage patterns.

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, keep you logged in, and understand how you use the site.

9.2 Types of Cookies We Use

• Essential Cookies: Required for Website functionality (e.g., keeping you logged in, processing transactions). These cannot be disabled without breaking core functionality.
• Performance Cookies: Collect anonymized data about how you use aa6666 (e.g., which pages you visit, how long you stay). Used to improve Website performance and user experience.
• Functional Cookies: Remember your preferences (e.g., language selection, favorite games) to provide personalized experiences.
• Targeting/Advertising Cookies: Track your browsing to show relevant promotions and measure campaign effectiveness. Used only with your consent.

9.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking essential cookies may prevent you from using certain aa6666 features. Refer to your browser's help section for cookie management instructions.

9.4 Other Tracking Technologies

In addition to cookies, aa6666 may use:

• Local Storage: Similar to cookies but with larger storage capacity, used for session management
• Device Fingerprinting: Collects device characteristics (screen resolution, browser version, plugins) to identify devices and prevent fraud
• Web Beacons: Tiny transparent images in emails to track whether you opened promotional messages

10. Children's Privacy

aa6666 services are intended exclusively for individuals 21 years of age or older. We do not knowingly collect personal data from anyone under 21.

If we discover that we have inadvertently collected information from someone under 21, we will delete that data immediately and permanently ban the associated account. If you believe a minor has accessed aa6666 or provided us with personal data, please contact [email protected] immediately.

Parents and guardians should monitor children's internet usage and ensure minors do not access online gambling sites. aa6666 implements age verification measures, but we rely on users to provide truthful information about their age.

11. Changes to This Privacy Policy

aa6666 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make changes:

• The "Last Updated" date at the top of this page will be revised
• Significant changes will be communicated via email or a prominent notice on the Website
• Your continued use of aa6666 after changes are posted constitutes acceptance of the updated Privacy Policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. If you do not agree with any changes, you may close your account by contacting support.

12. Contact Us About Privacy

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

• Data Protection Inquiries: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the chat icon on our Website
• WhatsApp: +62 812-3456-7890 (08:00 - 24:00 WIB)

We take privacy concerns seriously and will investigate all complaints promptly. You also have the right to lodge a complaint with your local data protection authority if you believe your data protection rights have been violated.