Privacy Policy

This Privacy Policy (hereinafter referred to as the "Policy") is issued by aman69 (hereinafter referred to as "the Company", "we", "us", or "our"), the operator of the online gaming platform accessible at aman69.click (hereinafter referred to as "the Platform"). This Policy applies to all individuals who access, browse, register on, or otherwise interact with the Platform, including registered account holders and visitors who have not created an account (collectively, "Users" or "you").

The Company is committed to protecting the privacy and personal data of all Users in accordance with applicable data protection legislation and international best practices. This Policy sets out in clear and accessible terms what personal data we collect, the purposes for which we process it, the legal bases on which processing is carried out, the parties with whom we share data, and the rights available to you in respect of your personal data.

By registering an account on the Platform, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

For the purposes of this Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to that person's identity.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" means the Company, which determines the purposes and means of the processing of Personal Data collected through the Platform.
• "Data Processor" means a natural or legal person that processes Personal Data on behalf of the Company, including third-party service providers engaged to deliver specific platform functions.
• "Consent" means any freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their Personal Data for a stated purpose.
• "Cookie" means a small text file placed on your device by the Platform that enables the Company or a third-party provider to recognise your browser, remember preferences, and collect usage analytics.
• "KYC Data" means identity and age verification documentation collected as part of the Company's Know Your Customer obligations, including government-issued identification such as a Malaysian national identity card (MyKad) or passport.
• "Sensitive Data" means a special category of Personal Data that warrants heightened protection under applicable law, including but not limited to financial account details, government identification numbers, and health-related information.

The Company collects the following categories of personal data from Users of the Platform:

• Full legal name
• Date of birth (for age verification purposes)
• Email address
• Mobile phone number
• Residential address (including city, postcode, and country)
• Username and encrypted password
• Preferred currency (Malaysian Ringgit / MYR by default)

• Copy of government-issued photo identification (Malaysian MyKad, passport, or equivalent)
• Proof of residential address (utility bill, bank statement, or equivalent)
• Source of funds documentation where required under anti-money laundering procedures

• Deposit and withdrawal transaction history
• Payment method identifiers (e.g., masked bank account numbers, e-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX)
• Transaction amounts denominated in MYR
• Cryptocurrency wallet addresses where applicable (USDT TRC20)

• Game session records including game titles played, bet amounts, win/loss outcomes, and session durations
• Sports betting history including markets wagered, odds accepted, and settlement outcomes
• Bonus activation, wagering progression, and redemption records
• Responsible gambling tool usage (deposit limits set, self-exclusion periods)

• IP address and approximate geolocation derived therefrom
• Device type, operating system, and browser version
• Session timestamps, page views, and navigation paths on the Platform
• Cookies and similar tracking technology data (see Section 8)

• Records of Live Chat sessions with our support team
• Email correspondence with [email protected]
• Responses to surveys or feedback requests where voluntarily submitted

We collect personal data through the following means:

The majority of personal data we hold is provided directly by you when you: complete the account registration form; submit KYC documents for identity verification; make a deposit or withdrawal; contact our support team via Live Chat or email; or respond to surveys or promotional communications.

When you access the Platform, certain technical data is collected automatically through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser type and version, session activity, and navigation data. This data is collected for platform security, fraud prevention, performance optimisation, and responsible gambling monitoring purposes.

We may receive personal data about you from our third-party partners in the following circumstances: payment processors (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX banking partners) confirm transaction completion and provide associated payment reference data; identity verification service providers confirm the outcome of KYC document checks; fraud detection and AML screening providers flag or clear account activity against sanctions lists and risk databases.

The Company processes your personal data for the following purposes:

• Account Administration: Creating and maintaining your account, verifying your identity and age, managing your account settings and preferences, and processing your deposits and withdrawals via Malaysian payment methods including Touch 'n Go eWallet, DuitNow, and FPX.
• Service Delivery: Providing access to casino games, sports betting markets, live dealer tables, bonus programmes, and all other Platform features and functions.
• KYC and Regulatory Compliance: Meeting our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gambling regulations, including age verification of all players to confirm the 21+ requirement is met.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, collusion, and other prohibited conduct on the Platform.
• Responsible Gambling: Monitoring gaming patterns to identify players who may be at risk, enforcing deposit and loss limits, processing self-exclusion requests, and providing appropriate support or intervention where necessary.
• Customer Support: Responding to your queries, resolving disputes, and handling complaints submitted through our Live Chat or email support channels.
• Marketing and Promotions: Where you have given your consent, sending you information about promotions, bonuses, new game launches, and other platform updates. You may withdraw marketing consent at any time.
• Platform Improvement: Analysing usage data, session statistics, and player feedback to improve Platform performance, game offerings, and user experience.
• Legal Obligations: Complying with court orders, regulatory requests, and other legal obligations applicable to the Company's operations.

The Company processes personal data only where a valid legal basis for doing so exists. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing is necessary for the performance of the agreement between you and the Company, as set out in our Terms & Conditions. This basis applies to account administration, payment processing, service delivery, and customer support functions.
• Legal Obligation: Processing is required to comply with applicable law, including AML/CTF legislation, age verification requirements, tax reporting obligations, and responses to lawful requests by competent authorities.
• Legitimate Interests: Processing is necessary for the Company's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and general business analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where no other legal basis applies, we rely on your freely given, specific, and informed consent — for example, for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The Company does not sell or rent your personal data to third parties. We share personal data only in the following circumstances and only to the extent strictly necessary for the stated purpose:

We engage third-party service providers who process personal data on our behalf and under our instruction as Data Processors. These include: payment processing partners (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX banking partners, and cryptocurrency processing services); identity verification and KYC service providers; fraud detection and AML screening providers; IT infrastructure and hosting providers; customer support platform operators; and email communication service providers.

All third-party service providers are contractually bound to process personal data only for the purposes specified by the Company and in accordance with this Policy. They may not use your data for their own independent purposes.

The Company may disclose personal data to competent regulatory authorities, law enforcement bodies, financial intelligence units, or courts of law where required to do so by applicable law or a valid legal order. In such cases, we will disclose only the minimum information required to satisfy the legal obligation.

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the Company's assets, personal data held by the Company may be transferred to the acquiring entity. Any such transfer will be subject to the same privacy protections described in this Policy, and affected Users will be notified in advance where legally permissible.

The Platform uses cookies and similar technologies — including web beacons, pixel tags, and local storage objects — to enhance your experience, maintain session security, and collect analytics data. Below is a summary of the cookie categories we use:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core functions such as user authentication, session management, security token validation, and navigation. These cookies cannot be disabled without materially impairing your ability to use the Platform.
• Functional Cookies: These cookies remember your preferences — such as preferred language, display settings, and last visited game categories — to provide a more personalised experience on return visits.
• Analytics Cookies: These cookies collect anonymised or pseudonymised information about how users interact with the Platform, including pages visited, session duration, and navigation paths. This data is used to improve Platform performance and user experience. We do not use this data to identify individual users.
• Security and Fraud Prevention Cookies: These cookies assist our security systems in detecting unusual activity, flagging potential fraud, and preventing unauthorised access to accounts. They are essential to our responsible gambling and AML monitoring functions.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

The Company retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, accounting, or reporting requirements.

As a general principle, personal data associated with an active Account is retained for the duration of the Account's existence plus a minimum retention period following closure. Specific retention periods are as follows:

• Account and Identity Data: Retained for a minimum of 5 years following Account closure, in accordance with applicable AML/CTF record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 7 years following each transaction, in accordance with applicable financial regulation and tax record-keeping requirements.
• Gaming Activity Data: Retained for a minimum of 5 years, to support dispute resolution, responsible gambling monitoring, and regulatory compliance.
• KYC Documentation: Retained for a minimum of 5 years following Account closure or the date of the last business transaction, whichever is later.
• Communication Records: Live Chat and email records are retained for up to 3 years following the interaction, for quality assurance and dispute resolution purposes.
• Technical and Analytics Data: Retained for up to 2 years in aggregate or pseudonymised form.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised. Where data cannot be immediately deleted due to technical constraints, it is placed in restricted storage and isolated from active processing until deletion is possible.

Subject to applicable data protection law and any overriding legal obligations of the Company, you hold the following rights in respect of your personal data:

• Right of Access: You may request a copy of all personal data we hold about you (commonly known as a "Subject Access Request"). We will provide a structured response within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Many account details can be updated directly within your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Please note that this right may be limited where retention is required by applicable law (e.g., AML record-keeping obligations).
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to our processing on grounds of legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity, and processing is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling. You also have an unconditional right to object to processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

To exercise any of these rights, please contact our support team via Live Chat or email at [email protected] with the subject line "Data Subject Request". We will verify your identity before processing any request. There is no charge for exercising these rights under normal circumstances.

The Company implements a comprehensive set of technical and organisational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including financial details and identity documents.
• Role-based access controls ensuring that personal data is accessible only to authorised personnel who require it for their specific role.
• Multi-factor authentication requirements for all internal staff systems accessing personal data.
• Regular penetration testing, vulnerability assessments, and security audits conducted by qualified independent security professionals.
• Automated intrusion detection and real-time monitoring of system access logs.
• Formal data breach response procedures, including notification protocols for regulatory authorities and affected individuals where required.

Notwithstanding these measures, no internet transmission or electronic storage system can be guaranteed to be 100% secure. We encourage you to use a strong, unique password for your aman69 Account, to enable two-factor authentication where offered, and to notify us immediately if you suspect any unauthorised activity on your Account.

The Platform is strictly intended for individuals aged 21 years and above. The Company does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. Age verification is required at registration and before any withdrawal is processed.

If we become aware that personal data has been collected from an individual under the age of 21 — whether through a fraudulent age declaration or otherwise — we will immediately close the associated Account, void any transactions, return any qualifying deposits to the originating payment method, and securely delete all associated personal data.

If you are a parent or guardian and have reason to believe that a minor has registered on the Platform, please contact us immediately via Live Chat or at [email protected]. We will investigate and act promptly.

The Platform may contain references to third-party services — for example, payment processors such as Touch 'n Go eWallet, Boost, GrabPay, and FPX banking partners — whose privacy practices are governed by their own independent privacy policies. The Company has no control over, and accepts no responsibility for, the privacy practices or content of third-party services.

When you interact with a third-party payment provider to process a deposit or withdrawal, you are subject to that provider's terms and privacy policy in addition to this Policy. We recommend that you review the privacy policies of any third-party services you use in connection with the Platform.

The Company does not embed third-party social media plugins, tracking pixels from external advertising networks, or affiliate tracking codes that would enable third parties to collect your personal data through the Platform without your knowledge.

The Company reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. All amendments will be published on this page with a revised "Last Updated" date.

Where amendments are material — meaning they significantly affect the way we collect, use, or share your personal data, or materially alter your rights — we will provide reasonable advance notice via the Platform or via the email address registered to your Account. Where required by applicable law, we will seek your explicit consent to material changes before they take effect.

Your continued use of the Platform following publication of a revised Policy constitutes your acceptance of the updated provisions. If you do not accept the revised Policy, you must cease using the Platform and request Account closure by contacting our support team.

We recommend that you review this Policy periodically to stay informed about how we protect your personal data. Previous versions of this Policy are available upon request by contacting our support team.

If you have any questions, concerns, or requests in connection with this Privacy Policy or the way the Company processes your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the Platform. Recommended for urgent data or account security matters.
• Email: [email protected] — please allow up to 24 hours for a response. For data subject requests (Subject Access Requests, deletion requests, objections), use the subject line "Data Subject Request".

When submitting a data request, please provide your registered username and the email address associated with your Account to help us verify your identity and process your request efficiently.