Aa6 Privacy Policy – Personal Data Protection Member

Aa6 collects various types of information to enable us to provide a safe, complete and relevant service to members in Malaysia. The following are the categories of information we collect:

We only collect information that is strictly necessary for the stated purposes. We do not collect sensitive data such as medical information, religious beliefs, or political views.

Every piece of information collected by aa6 is used responsibly and only for legitimate purposes. Here are the key ways we use your personal data:

• Account management — registering, verifying identity and securely managing your member account.
• Financial transaction processing — processing deposits, withdrawals and any other financial transactions related to your account.
• Service communications — sending important account-related notifications, security updates and necessary technical information.
• Platform improvement — analysing aggregated usage patterns to improve the performance, interface and user experience of the aa6 platform.
• Legal compliance — fulfilling legal obligations under PDPA 2010, Anti-Money Laundering (AML) procedures and KYC requirements.
• Fraud prevention — detecting and preventing fraudulent activity, money laundering and platform abuse.
• Relevant Marketing — sending relevant promotional information and offers, subject to the communication preferences you have set in your account settings.

The security of your personal data is aa6's highest priority. We implement multiple layers of technical and organisational safeguards to keep your data protected at all times:

• 256-bit SSL Encryption — all data transmitted between your device and aa6's servers is encrypted using the latest TLS protocol, making it unreadable to unauthorised parties.
• Encrypted password storage — account passwords are stored as one-way hashes that cannot be decrypted, even by aa6's internal staff.
• Layered access control — only authorised personnel have access to member data, and all access is logged and monitored.
• 24/7 Security Monitoring — an intrusion detection system (IDS) and real-time monitoring are active around the clock to detect any suspicious activity.
• Periodic data backups — data is automatically backed up to secure, geographically separate data centres to ensure service continuity.
• Two-Factor Authentication (2FA) — an additional layer of protection is available to all members to prevent unauthorized access to your account.

Aa6 does not sell, rent or trade members' personal data to any third party for marketing purposes. Data sharing only occurs in the following limited situations:

• Payment service providers — registered and trusted payment processors to facilitate secure processing of deposit and withdrawal transactions.
• KYC verification services — trusted third-party identity verification providers to assist with document verification for new members.
• Lawful authorities — law enforcement bodies, courts or government agencies that require the information under a lawful order in accordance with Malaysian law.
• Aggregate analytics services — anonymised and aggregated data may be shared with analytics providers for platform improvement purposes. This data contains no personal information that could identify any individual.

All third parties we work with are bound by strict data confidentiality agreements and are required to comply with data protection standards equivalent to or higher than those of aa6.

The aa6 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. The following are the types of cookies we use:

You can manage or delete cookies through your web browser settings at any time. Please note that disabling essential cookies may affect certain features of the aa6 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by aa6:

To exercise any of the rights above, please contact the aa6 support team via live chat or email at [email protected]. We will process your request within 14 business days.

The aa6 platform is intended exclusively for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data of an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered an account at aa6 without authorization are encouraged to contact us promptly for follow-up action.

In the course of global operations, your personal data may be processed or stored on servers located outside Malaysia. When such transfers occur, aa6 ensures that:

• The recipient country or region has an adequate level of data protection.
• Appropriate data processing agreements have been entered into with recipients, including internationally recognised standard data protection clauses.
• All data transfers are carried out through encrypted and secure channels.

Data belonging to Malaysian residents is generally stored in regional data centres in Southeast Asia to minimise latency and maximise compliance with local regulations.

Aa6 only retains your personal data for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law.

• Active account data — retained for as long as your account is active and for 5 years after account closure, in line with Malaysia's financial record-keeping requirements.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's AML and tax legal requirements.
• Security Log — retained for 12 months for security incident investigation purposes.
• Marketing data — deleted within 30 days after you withdraw consent for marketing communications.

Once the retention period expires, data will be securely deleted or anonymised using approved procedures.

Aa6 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or service improvements. Every amendment will be accompanied by a new update date at the top of this document.

For significant amendments that affect how we use your data, we will provide reasonable notice via email or in-platform notification before the changes take effect. Continued use of the aa6 platform after the effective date of such amendments constitutes your acceptance of the revised terms.

If you have any questions, concerns or complaints regarding how aa6 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your privacy rights have been violated. However, we encourage you to contact aa6 first so we can resolve any issues promptly.