atas66 Privacy Policy

atas66 ("we", "us", "our") is the operator of the online gaming platform accessible at atas66.net and is the data controller in respect of the personal data collected and processed through the Platform.

atas66 operates under an internationally recognised gaming licence and is subject to the data protection and privacy requirements imposed by that licensing framework. For any queries relating to this Privacy Policy or the processing of your personal data, you may contact us at [email protected].

This Privacy Policy applies to all personal data collected from Members (registered account holders), prospective Members (visitors who have not yet registered), and any other individual whose personal data is processed in connection with the atas66 Platform. By accessing the Platform or registering an Account, you confirm that you have read and understood this Privacy Policy.

atas66 collects and processes the following categories of personal data:

atas66 does not intentionally collect special categories of personal data (such as health, racial, political, or religious data) unless you voluntarily provide such information in the context of a responsible gaming request or support query.

atas66 collects personal data through the following means:

• Direct interactions: Data you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting support, or submitting responsible gaming requests.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, via server logs, cookies, and similar tracking technologies (see Section 8).
• Third-party service providers: Identity and fraud verification data from licensed KYC and AML service providers; payment transaction confirmation data from payment processors including Touch 'n Go eWallet, Boost, and FPX-connected Malaysian banks.
• Publicly available sources: Where necessary for fraud prevention or AML compliance, atas66 may supplement Member records with information from publicly available databases or regulatory watchlists.

atas66 processes personal data only for specified, explicit, and legitimate purposes. The table below sets out the primary processing activities and their corresponding legal bases:

atas66 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following circumstances and only to the extent necessary:

• Game and technology providers: Third-party game studios and platform technology providers who deliver live casino, RNG, slots, and sportsbook products on the atas66 Platform. These providers act as data processors under contractual data processing agreements.
• Payment processors: Malaysian payment infrastructure providers — including Touch 'n Go eWallet, Boost, and FPX-connected banks such as Maybank, CIMB, and Public Bank — receive financial data necessary to process deposit and withdrawal transactions.
• KYC and fraud prevention services: Licensed identity verification and fraud screening providers who process identity documents and biometric selfies for age and identity verification purposes.
• Regulatory authorities: atas66's licensing authority and relevant financial intelligence units, where disclosure is required by law or regulation — including AML reporting obligations.
• Legal process: Courts, law enforcement agencies, or other governmental authorities, where atas66 is compelled to disclose personal data by valid legal process.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of atas66's assets, personal data held by atas66 may form part of the transferred assets. Affected Members will be notified prior to any such transfer.

All third-party service providers who process personal data on atas66's behalf are required to implement appropriate technical and organisational security measures and are prohibited from using Member data for any purpose other than delivering the contracted service.

atas66 operates in the online gaming sector and uses technology infrastructure and service providers that may be located in jurisdictions outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, atas66 implements appropriate safeguards to ensure that the transfer is lawful and that your data remains adequately protected.

Applicable safeguards for international transfers include:

• Standard contractual clauses approved by relevant data protection authorities;
• Transfer to jurisdictions covered by an adequacy decision from the relevant supervisory authority;
• Binding corporate rules where the transfer is within a corporate group.

You may request information regarding the specific safeguards applied to any international transfer of your personal data by contacting us at [email protected].

atas66 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. The following general retention principles apply:

• Active account data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with AML and gaming licence record-keeping requirements.
• KYC and identity verification records: Retained for a minimum of five (5) years following the end of the business relationship, as required by AML legislation.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with financial record-keeping requirements.
• Support and complaint records: Retained for three (3) years following resolution, or longer where a dispute remains unresolved.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of consent.
• Technical and usage logs: Retained for up to twelve (12) months for security and performance analysis purposes, unless retention is required for longer in connection with a specific investigation.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with atas66's data destruction procedures.

The atas66 Platform uses cookies and similar tracking technologies to operate core Platform functions, maintain authenticated sessions, and improve the Member experience. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function — including session authentication, security tokens, and load-balancing cookies. These cannot be disabled without impairing core functionality.
• Functional cookies: Store preferences such as language, display settings, and remembered login state (where the "Remember me" option is selected at login).
• Analytics cookies: Aggregate, anonymised data on how Members use the Platform — page views, session duration, navigation paths. Used exclusively to improve Platform performance and user experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts.

atas66 does not use third-party advertising or behavioural targeting cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to access and use the Platform.

Subject to applicable law and regulatory obligations, Members have the following rights in respect of their personal data held by atas66:

• Right of access: You may request a copy of the personal data atas66 holds about you, together with information on how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you. Where possible, corrections can be made directly via your Account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal and regulatory retention obligations.
• Right to restriction: You may request that atas66 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of disputed data is being verified.
• Right to data portability: You may request a copy of personal data you have provided to atas66 in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for fraud prevention. Where you object to processing for direct marketing purposes, atas66 will cease such processing immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". atas66 will respond within 30 days. Identity verification may be required before processing your request.

The atas66 Platform is strictly for individuals aged 21 years and above. atas66 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as a mandatory step in the account activation and withdrawal process.

If atas66 discovers or has reasonable grounds to believe that an Account has been registered by or on behalf of an individual under 21, the Account will be immediately suspended, all associated personal data will be reviewed, and any Funds held will be handled in accordance with atas66's minor protection procedures and regulatory obligations.

If you believe that an individual under 21 has registered an Account on the atas66 Platform, please notify us immediately at [email protected].

atas66 implements a layered security architecture to protect Member personal data:

• Encryption in transit: All communications between your browser or device and the atas66 Platform are encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms an active secure connection.
• Encryption at rest: Sensitive personal data — including identity documents and payment details — is encrypted at rest using AES-256.
• Access controls: Access to personal data is restricted to authorised atas66 personnel on a strict need-to-know basis. All access is logged and audited.
• Two-Factor Authentication: atas66 strongly recommends that all Members enable 2FA on their accounts. 2FA provides an additional layer of protection against unauthorised account access.
• Penetration testing: The atas66 Platform undergoes regular third-party security assessments, including penetration testing, to identify and remediate vulnerabilities.
• Incident response: atas66 maintains a documented security incident response plan. In the event of a breach affecting Member data, atas66 will notify affected Members and relevant authorities in accordance with applicable legal obligations.

While atas66 takes all reasonable steps to protect your data, no data transmission over the internet or storage system can be guaranteed to be 100% secure. Members are advised to use strong, unique passwords and to enable 2FA as additional precautions.

atas66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The current version of the Privacy Policy is always accessible on the Platform, with the "Last Updated" date revised accordingly.

Where changes to the Privacy Policy are material — meaning they affect your rights or the way we process your data in a significant way — atas66 will provide advance notice via the email address registered to your Account prior to the changes taking effect, where practicable.

Continued use of the atas66 Platform following publication of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not accept the amended Privacy Policy, you should cease using the Platform and request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by atas66, please contact us:

If you are not satisfied with atas66's response to your privacy concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

This Privacy Policy was last updated in June 2026. Previous versions are available on request.