Alibaba66 Privacy Policy — Our Commitment Protecting Your Personal Data

1 Introduction & Scope of Privacy Policy

This Privacy Policy is published by Alibaba66 ("We", "the Company"), which operates an online entertainment and betting platform at alibaba66.my. This document outlines our privacy practices regarding the collection, use, storage, and protection of personal data of all Alibaba66 platform users ("You", "Member", "User").

This Privacy Policy applies to all personal information you provide to Alibaba66 through any channel — including online account registration, financial transactions, communications with our customer support team, use of the mobile app, and all other interactions with our platform.

Alibaba66 is fully committed to protecting your privacy and operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We believe transparency is the foundation of trust — which is why we strive to explain our privacy practices in plain, straightforward language rather than confusing legal jargon.

2 Types of Personal Data We Collect

Alibaba66 collects various types of personal data depending on how you interact with our platform. Below is an overview of the categories of data we may collect:

2.1 Identity & Contact Data

• Full name as shown on your identity document;
• An active Malaysian phone number;
• Email address;
• Date of birth (for age verification);
• National identity card number (MyKad) or passport number, if required for identity verification;
• Residential address for specific KYC (Know Your Customer) processes.

2.2 Financial & Transaction Data

• Details of the payment method used (DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX);
• The bank account or e-wallet number used for deposits and withdrawals;
• Complete history of all deposit and withdrawal transactions on the platform;
• Records of all bets and gaming activity you carry out on Alibaba66.

2.3 Technical & Usage Data

• The IP address of your device when accessing the platform;
• Device type, operating system, and web browser version used;
• Timestamps of login and logout activity;
• Gaming session data including games played, total bets placed, and session duration;
• Cookie data and similar tracking technologies (see Section 9).

2.4 Communication Data

• Records of all your communications with the Alibaba66 customer support team via live chat or email;
• Feedback and complaints you submit to us;
• Your responses to any surveys or questionnaires we conduct.

3 How We Collect Personal Data

Alibaba66 collects personal data through several different methods. We are committed to collecting only the information that is genuinely necessary for the stated purposes.

3.1 Directly from You

Most of the personal data we collect comes directly from you when you:

• Registering a new account on the Alibaba66 platform;
• Completing your account profile;
• Making deposits via DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, or FPX;
• Submitting a withdrawal request to your bank account or e-wallet;
• Contacting our customer support team;
• Completing the identity verification (KYC) form when required.

3.2 Automatically Through the Platform

When you use the Alibaba66 platform, our systems automatically record certain technical information such as your IP address, device type, and usage patterns. This is done through cookies, tracking pixels, and standard server logging technologies used by virtually all online platforms. This information is used primarily for security, fraud detection, and improving the user experience.

3.3 From Authorised Third Parties

In certain circumstances, Alibaba66 may receive information about you from authorised third parties, such as identity verification service providers or financial institutions during transaction verification processes. This information is used solely for verification and security purposes.

4 Purpose of Personal Data Use

Alibaba66 uses your personal data solely for legitimate and transparent purposes. We do not use your data for anything unrelated to the provision of our platform services.

5 Sharing Data with Third Parties

Alibaba66 is careful about how your personal data is shared. We do not sell, rent, or disclose your personal information for third-party marketing purposes. However, there are limited situations where we need to share your data to enable the platform's services to function properly.

5.1 Authorised Service Providers

Alibaba66 may share your personal data with selected third-party service providers who are bound by strict confidentiality agreements, including:

• Payment Processing Providers — To process deposits and withdrawals via DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX;
• Identity Verification Service Providers — To conduct the required KYC checks and document verification;
• Cybersecurity Service Providers — To detect and prevent fraud, cyberattacks, and suspicious activity;
• Technology Infrastructure Providers — Including cloud computing services that store data to high security standards.

5.2 Legal Requirements

Alibaba66 may be required by law to disclose your personal data to competent authorities such as the Royal Malaysia Police, courts, or other Malaysian government agencies when directed to do so through valid legal process. In such situations, we will notify you of the disclosure unless we are prohibited from doing so by a court order or other legal requirement.

5.3 Business Transitions

In very limited circumstances such as a business merger or acquisition, your personal data may form part of the transferred assets. In such situations, Alibaba66 will ensure that any party receiving your data is bound by data protection obligations equivalent to or stricter than those set out in this Privacy Policy.

6 Data Security Measures

Alibaba66 continuously invests in security infrastructure to ensure your personal data is protected to the highest level reasonably achievable.

6.1 Technical Security

• 256-bit SSL/TLS Encryption — All data transmitted between you and the Alibaba66 platform is encrypted to the same standard used by Malaysia's major banks;
• Storage Data Encryption — Sensitive data stored in our databases, particularly financial information and passwords, is encrypted using modern encryption algorithms;
• Firewalls and Intrusion Detection Systems — Alibaba66's infrastructure is protected by multiple layers of security that monitor and block unauthorised access attempts;
• Regular Vulnerability Scanning — The Alibaba66 security team conducts regular penetration testing and vulnerability scans to identify and address any potential security risks.

6.2 Operational Security

• Strict role-based access control — only staff who require access to carry out their duties are permitted to view personal data;
• All internal access to personal data is logged and regularly audited;
• Mandatory security awareness training for all Alibaba66 staff who handle personal data;
• Security incident response procedures that are regularly tested and updated.

6.3 Security Limitations

While Alibaba66 takes all reasonable measures to protect your data, no security system can be guaranteed to be 100% impenetrable. You also play an important role in keeping your data secure by safeguarding the confidentiality of your Alibaba66 account password and login credentials.

7 Personal Data Retention Period

Alibaba66 does not retain your personal data for longer than is necessary for the purposes outlined in this Privacy Policy, or as required under applicable Malaysian law.

7.1 Active Account Data

For as long as your alibaba66 account remains active, we will retain all personal data associated with it — including your registration details, transaction records, and gaming activity history on the platform.

7.2 After Account Closure

When your account is closed, Alibaba66 will retain certain records for the period required by applicable legal and regulatory obligations:

• Financial transaction records are retained for 7 years in compliance with Malaysia's accounting and tax legal requirements;
• Identity verification (KYC) records are retained for 5 years following account closure;
• Customer support communication records are retained for 3 years;
• Security logs and fraud detection records are retained for 2 years.

Once the designated retention period expires, your personal data will be securely deleted or anonymised in accordance with our established data disposal procedures.

8 Your Rights as a Data Subject

In accordance with Malaysia's Personal Data Protection Act 2010, you have several important rights regarding the personal data that Alibaba66 holds about you.

9 Cookies & Tracking Technologies

The Alibaba66 platform uses cookies and similar tracking technologies to enhance the user experience, maintain security, and help us understand how our platform is being used.

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the Alibaba66 platform. They allow the platform to "remember" your preferences and session information to provide a smoother user experience.

9.2 Types of Cookies We Use

• Essential Cookies — Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality;
• Performance Cookies — Collecting information about how you use the platform to help us identify areas for improvement;
• Functional Cookies — Saves your preferences such as language and display settings to improve your browsing experience;
• Security Cookies — Used to detect suspicious activity and protect your account from unauthorised access.

9.3 Managing Cookies

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the Alibaba66 platform. For guidance on managing cookies across different browsers, please refer to your browser's help documentation.

10 Cross-Border Data Transfers

In the course of operating the Alibaba66 platform, your personal data may be transferred to, or processed in, countries other than Malaysia — for example, when we use international cloud computing services or share data with service providers based outside Malaysia.

Where such cross-border transfers occur, Alibaba66 ensures that adequate safeguards are in place for your personal data. This includes ensuring that the receiving party is bound by data protection standards equivalent to or stricter than Malaysia's PDPA requirements, or that the transfer is made to a country recognised as having an adequate level of data protection.

11 Children's Privacy

The Alibaba66 platform is entirely unsuitable for individuals under the age of 18. We do not knowingly collect or process personal data from anyone under 18 years of age.

If Alibaba66 discovers that we have collected personal data from someone under 18 years of age without appropriate parental or guardian consent verification, we will take immediate steps to delete that data and close the account in question. If you believe a minor has registered an account on our platform, please contact us immediately at support@alibaba66.my so we can take the necessary action.

12 Changes to This Privacy Policy

Alibaba66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes in how we handle personal data. All changes will take effect once the updated version is published on this platform.

For material or significant changes to how we process your personal data, Alibaba66 will provide you with reasonable notice — whether via your registered email, an in-platform notification, or a prominent notice displayed on the main page of this Privacy Policy. The "Updated" date at the top of this document will always reflect the date of the latest version.

We encourage you to review this Privacy Policy periodically so you remain informed about how Alibaba66 protects your personal information. Your continued use of the Alibaba66 platform after any changes take effect will be considered acceptance of the updated policy.