At aa66, your privacy is a fundamental commitment, not an afterthought. This Privacy Policy explains clearly and transparently what personal data we collect, why we collect it, how we use it, and the rights you hold over your own information.
Last Updated: 1 January 2026Six core principles that define how aa66 approaches your personal data. These cards summarise our approach — the full details follow in the policy below.
All personal data transmitted to and from aa66 is protected by industry-standard TLS/SSL encryption. Stored data is secured using AES-256 encryption at rest, with access restricted to authorised personnel only via role-based access controls.
aa66 does not sell, rent, or trade your personal data to any third-party marketing company, data broker, or advertiser. Your information is used solely to operate, secure, and improve your experience on our platform.
We collect only the data that is genuinely necessary for account operation, identity verification (KYC), regulatory compliance, and payment processing. We do not request data beyond what is needed for these defined purposes.
You have meaningful rights over your personal data, including the right to access it, correct inaccuracies, request deletion (subject to legal retention requirements), and object to certain processing activities. We honour all valid requests promptly.
As a platform serving Indonesian players, aa66 processes data in line with applicable data protection principles. Payment data involving BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay is handled in compliance with Indonesian financial regulation requirements.
In the unlikely event of a data breach that poses a material risk to your rights or interests, aa66 will notify affected users without undue delay and take immediate remedial action. We maintain an incident response plan reviewed annually.
1.1 aa66 is an internationally licensed online betting and gaming platform accessible at https://aa66.wtf. We provide sports betting, live casino, slot games, and togel (Indonesia's traditional numbers lottery) services to adult players in Indonesia and other eligible markets.
1.2 For the purposes of this Privacy Policy, aa66 is the data controller — meaning we determine the purposes and means by which your personal data is processed. References to "we", "us", or "our" throughout this document refer to aa66 and its operating entity.
1.3 Our designated data protection contact can be reached at [email protected] for all privacy-related enquiries. Please use the subject line "Privacy Enquiry" to ensure your message is routed to the appropriate team member promptly.
2.1 This Privacy Policy applies to all personal data collected by aa66 through:
2.2 This policy does not apply to third-party websites or services that may be referenced on the aa66 platform. Where a user navigates to a third-party service, that service's own privacy policy governs the handling of data provided to it.
2.3 This Privacy Policy should be read alongside aa66's Terms & Conditions and Responsible Gaming Policy, both of which inform how we use your data in those specific contexts.
3.1 aa66 collects personal data in two primary ways: data you provide directly, and data generated automatically through your use of the platform. The following table outlines the categories of data we collect and examples of each:
| Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, gender, Indonesian National ID (KTP) number and document image, selfie/liveness verification photograph |
| Contact Data | Email address, WhatsApp number, residential address (province, city, postal code) |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet account identifiers (OVO, DANA, GoPay), deposit and withdrawal history, transaction amounts in IDR |
| Account Data | Username, encrypted password hash, account creation date, account status, balance history, bonus redemption records |
| Usage Data | Pages visited, games played, bet history, session duration, login timestamps, device type, operating system, browser type and version |
| Technical Data | IP address, device fingerprint, cookie identifiers, referral URL, geolocation data (city/region level) |
| Communication Data | Live chat transcripts, email correspondence, WhatsApp support messages, feedback and survey responses |
| Responsible Gaming Data | Deposit limit settings, self-exclusion elections, cooling-off period requests, any voluntary disclosures related to problem gambling |
3.2 We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond liveness checks required for KYC), or health data, unless you voluntarily disclose such information in the context of a responsible gaming support interaction — in which case it is treated with the highest level of confidentiality.
3.3 Where you choose not to provide data that is required for a specific purpose (e.g., KYC documentation for withdrawals), we may be unable to provide the relevant service or function. We will inform you at the point of collection if providing data is mandatory or voluntary.
4.1 aa66 processes your personal data for the following defined purposes:
To create and maintain your aa66 account, authenticate your identity at login, process deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other supported payment channels, and ensure that bets, wagers, and game sessions are attributed correctly to your account.
To verify that you are who you claim to be, that you meet the minimum age requirement of 21 years, and that your account is not being used for money laundering, match-fixing, or any other fraudulent or unlawful activity. This involves cross-referencing the information you provide with third-party KYC verification services.
To comply with applicable anti-money laundering (AML) obligations, financial crime reporting requirements, and any orders or requests from competent legal or regulatory authorities. Transaction records and KYC documentation are retained for the legally required periods even after account closure.
To respond to your enquiries, resolve disputes, investigate complaints, and provide assistance through live chat, email, and WhatsApp. Support interactions may be recorded and retained for quality assurance and training purposes.
To analyse aggregated and anonymised usage data in order to improve platform performance, identify popular game categories, optimise the user interface, and develop new features. Where individual-level usage data is used, it is pseudonymised wherever possible.
To administer bonuses and promotions you have opted into, and to monitor betting patterns for indicators of problem gambling. Where responsible gaming indicators are detected, we may use your data to proactively offer support tools such as deposit limits or cooling-off periods, in line with our Responsible Gaming Policy.
To detect and prevent unauthorised account access, bot activity, multi-accounting, collusion, and any other threats to platform integrity. Technical data including IP addresses and device fingerprints are used for this purpose.
5.1 aa66 processes your personal data only where a valid legal basis exists. The primary legal bases we rely upon are:
5.2 If you wish to understand which legal basis applies to a specific processing activity, please contact us at [email protected] with the subject line "Legal Basis Enquiry".
6.1 aa66 does not sell or rent your personal data. We share data only with the categories of third parties described below, and only to the extent necessary for the defined purpose:
| Recipient Category | Purpose |
|---|---|
| Payment Processors | To facilitate deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) |
| KYC Verification Providers | To verify identity documents (KTP), perform liveness checks, and screen against sanctions and PEP (politically exposed persons) lists |
| Fraud Prevention Services | To detect and prevent fraudulent account activity, bot usage, and multi-accounting |
| Game Content Providers | To deliver third-party casino and slot game content (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft); these providers receive only the minimum technical data required to operate their games |
| Cloud Infrastructure Providers | To host platform data and services on secure, encrypted cloud infrastructure |
| Legal & Regulatory Authorities | To comply with court orders, regulatory investigations, AML reporting obligations, and other lawful requests from competent authorities |
| Professional Advisors | To obtain legal, accounting, or audit advice where necessary; all such advisors are bound by professional confidentiality obligations |
6.2 All third-party service providers engaged by aa66 are contractually required to process personal data only on our instructions, to maintain appropriate security measures, and to comply with applicable data protection law. We conduct due diligence on all new vendors prior to engagement.
6.3 In the event that aa66's business is acquired, merged with another entity, or undergoes a restructuring, your personal data may be transferred to the acquiring or successor entity. You will be notified of any such transfer and your rights under this policy will be maintained.
7.1 aa66 uses cookies and similar tracking technologies to operate the platform securely, remember your preferences, and understand how users interact with the site. The categories of cookies we use are as follows:
7.2 aa66 does not use third-party advertising or retargeting cookies. We do not participate in cross-site tracking for the purpose of serving targeted advertisements on other websites.
7.3 Most web browsers allow you to control cookies through their settings. Disabling strictly necessary cookies will impair your ability to log in and use the platform. Disabling other categories will not affect core functionality but may reduce your personalised experience.
7.4 Session cookies are deleted automatically when you close your browser. Persistent cookies have a maximum lifespan of 12 months, after which they are renewed only with your continued consent through continued platform use.
8.1 aa66 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | For the duration of the account relationship, plus 5 years after account closure |
| KYC Documentation | 5 years from the date of verification or from account closure, whichever is later, to satisfy AML record-keeping obligations |
| Financial Transaction Records | 5 years from the date of transaction, in line with financial record-keeping requirements |
| Customer Support Records | 3 years from the date of the interaction, for dispute resolution purposes |
| Usage & Technical Data | 13 months on an identifiable basis; anonymised aggregate data may be retained indefinitely for analytics purposes |
| Responsible Gaming Records | Duration of the account relationship plus 5 years; self-exclusion records are retained for the full exclusion period plus 5 years |
| Marketing Preferences | Until consent is withdrawn or the account is closed, whichever is earlier |
8.2 Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction methods. Anonymised data that no longer identifies any individual may be retained for statistical or research purposes without time limitation.
9.1 aa66 is an internationally operated platform. Some of the third-party service providers we work with — including cloud infrastructure hosts and game content providers — may process your personal data in countries outside Indonesia. We take steps to ensure that any such transfer is conducted with appropriate safeguards in place.
9.2 Where personal data is transferred internationally, aa66 ensures that:
9.3 Financial data related to Indonesian bank transfers processed through BCA, BRI, BNI, Mandiri, and CIMB Niaga is routed through payment infrastructure operating within Indonesia's domestic financial system in compliance with Bank Indonesia regulations.
9.4 If you would like more information about the specific safeguards applicable to a particular international transfer, please contact us at [email protected].
10.1 As a user of aa66, you have the following rights in relation to your personal data. You may exercise any of these rights by contacting us at [email protected] with the subject line "Data Rights Request".
Request a copy of the personal data we hold about you and information about how it is being used.
Request correction of any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations.
Request that we restrict processing of your data in certain circumstances, such as while a dispute about accuracy is being resolved.
Receive a copy of the data you provided to us in a structured, machine-readable format for transfer to another service, where technically feasible.
Object to processing based on legitimate interests, including profiling for responsible gaming monitoring, where your individual circumstances warrant it.
Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
Lodge a complaint with aa66's data protection contact or with the relevant supervisory authority if you believe your data rights have been infringed.
10.2 aa66 will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day period.
10.3 We may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised party. Identity verification for rights requests is conducted via your registered email address and, if necessary, additional KYC confirmation.
10.4 Data rights requests are free of charge. However, where requests are manifestly unfounded or excessive — particularly where they are repetitive — aa66 reserves the right to charge a reasonable administrative fee or decline to act on the request, with written justification provided.
11.1 aa66 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification steps, and KYC verification confirms date of birth against official identity documents (KTP).
11.2 If aa66 becomes aware that personal data has been collected from a user who is under 21 years of age, the account will be immediately suspended, all data associated with the minor will be securely deleted, and any funds held will be returned to their source payment account following investigation.
11.3 Parents and guardians are strongly encouraged to install parental control software and to discuss the risks of online gambling with young people. Resources for parental controls are available from reputable technology providers and child safety organisations.
12.1 aa66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
12.2 While aa66 takes all reasonable steps to protect your data, no system is completely impenetrable. You are responsible for maintaining the security of your own account credentials, including not sharing your password with any third party. If you suspect your account has been compromised, contact aa66 support immediately via live chat or email.
13.1 The aa66 platform integrates with third-party game content providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to deliver casino and slot game content. When you play a game powered by one of these providers, limited technical data (such as a session token and stake/win amounts) is transmitted to the game provider's servers to facilitate gameplay. These providers operate under their own privacy policies and data processing agreements with aa66.
13.2 aa66 does not control the privacy practices of third-party game providers beyond the contractual data processing agreements we maintain with them. We encourage you to review the privacy policies of major game providers if you have specific concerns about their data practices.
13.3 The aa66 website does not contain links to external third-party websites. If you encounter a link to an external site through any promotional communication from aa66, that site's own privacy policy governs the handling of any data you provide to it.
14.1 aa66 reviews this Privacy Policy at least annually and whenever there is a material change to our data processing practices, applicable law, or platform functionality. The "Last Updated" date at the top of this page always reflects the date of the most recent revision.
14.2 Where a change to this Privacy Policy is material — meaning it substantively affects how we process your personal data or the rights available to you — aa66 will notify registered users by email at least 14 days before the change takes effect. For minor or administrative changes (such as clarifications of existing practices or corrections of typographical errors), the policy will be updated without advance individual notification.
14.3 Your continued use of the aa66 platform following the effective date of any policy update constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with any update, you should cease using the platform and contact support to arrange account closure.
15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to aa66's data processing activities, please contact our data protection team through any of the following channels:
15.2 aa66 aims to respond to all privacy enquiries within 5 business days. Data rights requests (as described in Clause 10) are subject to the 30-day response window specified in that clause.
15.3 If you are dissatisfied with aa66's handling of your personal data or with our response to a data rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction applicable to your situation. aa66 will cooperate fully with any supervisory authority investigation.
15.4 All privacy complaints received by aa66 are logged, tracked, and reviewed as part of our ongoing data governance programme. We take every complaint seriously and use them to identify opportunities to improve our privacy practices.
Our support team is available around the clock to address any privacy-related concerns. You can also explore our Terms & Conditions, review our Responsible Gaming commitments, or check the FAQ for quick answers.