asaa88 Privacy Policy

1.1 This Privacy Policy ("Policy") describes how asaa88 ("asaa88", "we", "us", "our") collects, uses, stores, discloses, and protects personal data obtained from individuals ("User", "Member", "you") who access or use the asaa88 website at asaa88.app and all associated services (collectively, the "Platform").

1.2 asaa88 is committed to handling personal data responsibly and in accordance with recognised data protection principles including purpose limitation, data minimisation, storage limitation, and security.

1.3 By registering an account with asaa88 or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should cease using the Platform immediately.

1.4 This Policy should be read alongside the asaa88 Terms & Conditions and Responsible Gaming Policy.

2.1 asaa88 collects the following categories of personal data:

• Registration Data: Full name, date of birth, gender, nationality, residential address, email address, and mobile phone number provided during account creation.
• Identity Verification (KYC) Data: Government-issued identification documents (e.g., Malaysian IC, passport), proof of address documents, and selfie or facial image verification where required for Know Your Customer compliance.
• Financial Data: Deposit and withdrawal transaction records, payment method identifiers (e.g., Touch n Go wallet ID, Boost account reference, bank account last four digits), and transaction amounts in MYR.
• Gameplay Data: Game history, wagering activity, session duration, bet amounts, win/loss records, and bonus usage across the asaa88 Casino, sportsbook, and slots sections.
• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and session timestamps collected automatically when you access the Platform.
• Communications Data: Records of your correspondence with asaa88 support, including live chat transcripts, emails, and any documents you submit.
• Preferences & Behavioural Data: Navigation patterns, page visit frequency, preferred game categories, and marketing communication preferences.

3.1 asaa88 uses personal data for the following purposes:

• To create, maintain, and manage your asaa88 member account;
• To verify your identity and age in compliance with KYC and responsible gaming obligations — including the strict 21+ age requirement; 21+
• To process deposits, withdrawals, and other financial transactions in MYR via Touch n Go eWallet, Boost, Maybank, CIMB, and other accepted payment methods;
• To detect, investigate, and prevent fraud, money laundering, and other illegal activities;
• To provide customer support through the asaa88 24/7 live chat, email, and other support channels;
• To personalise your gaming experience and deliver relevant promotional offers where you have consented to receive marketing communications;
• To improve the Platform's performance, security, and feature set through aggregated analytics;
• To comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations and gaming licence conditions.

3.2 asaa88 does not use personal data for automated decision-making that produces significant legal effects without human review, except where expressly required for fraud and AML screening purposes.

4.1 asaa88 processes personal data on the following legal bases:

• Contract Performance: Processing necessary to provide the gaming services you have requested and to manage your account;
• Legal Obligation: Processing required to comply with AML regulations, gaming licence conditions, and other applicable laws;
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement where our interests are not overridden by your rights;
• Consent: Marketing communications and non-essential cookies, where you have given explicit consent that can be withdrawn at any time.

5.1 asaa88 does not sell, rent, or trade personal data to third parties for their own marketing purposes.

5.2 asaa88 may share personal data with the following categories of recipients for the purposes described in Section 3:

• Payment Processors: Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, Visa/Mastercard processing networks, and other payment service providers involved in processing your transactions;
• KYC & Identity Verification Providers: Third-party identity verification services used to confirm your identity and age in compliance with regulatory requirements;
• Fraud Prevention & AML Services: Screening platforms used to detect and prevent fraudulent activity and money laundering;
• Game Content Providers: Licensed gaming studios (e.g., Evolution Gaming, Pragmatic Play, PG Soft) may receive session and bet data necessary for game operation and dispute resolution;
• Regulatory Authorities: Competent gaming regulators, law enforcement agencies, and other governmental bodies where disclosure is required by applicable law or valid legal process.

5.3 All third-party service providers engaged by asaa88 are required to process personal data only for specified purposes and in accordance with data protection standards comparable to those in this Policy.

6.1 asaa88 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the Platform to function, including session management, asaa88 login authentication, and security tokens. These cannot be disabled.
• Performance & Analytics Cookies: Collect anonymised data about how users navigate the Platform to help us improve page performance and user experience.
• Functional Cookies: Remember your preferences such as language settings, preferred game lobby view, and notification settings.
• Marketing Cookies: Used to deliver relevant promotional offers. These are only set with your consent and can be disabled through your browser settings.

6.2 You may control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of the Platform. Strictly necessary cookies cannot be disabled without disrupting your access to the asaa88 services.

7.1 asaa88 implements technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the asaa88 Platform;
• Encrypted storage of sensitive personal and financial data at rest;
• Role-based access controls restricting data access to authorised personnel on a need-to-know basis;
• Regular penetration testing and vulnerability assessments of Platform infrastructure;
• Multi-factor authentication for internal administrative access to systems containing personal data.

7.2 While asaa88 employs industry-standard security practices, no system is completely immune to security risks. In the event of a personal data breach that is likely to result in high risk to your rights, asaa88 will notify affected individuals without undue delay.

8.1 asaa88 retains personal data for as long as your account is active and for a minimum period of five (5) years following account closure, as required by applicable anti-money laundering legislation and gaming regulatory obligations.

8.2 Transaction records and KYC documentation may be retained for longer periods where required by applicable law or ongoing regulatory investigation.

8.3 Data held solely for marketing purposes will be deleted or anonymised if you withdraw consent or have not engaged with the Platform for a continuous period of twenty-four (24) months.

9.1 Subject to applicable law and regulatory retention obligations, you have the following rights in relation to your personal data held by asaa88:

• Right of Access: Request a copy of the personal data asaa88 holds about you;
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations;
• Right to Restriction: Request that processing of your data be restricted in certain circumstances;
• Right to Data Portability: Receive your personal data in a structured, machine-readable format where technically feasible;
• Right to Object: Object to processing based on legitimate interests, including direct marketing.

9.2 To exercise any of these rights, submit a written request to [email protected]. asaa88 will respond within thirty (30) calendar days. We may request identity verification before processing your request.

10.1 The asaa88 Platform is strictly intended for individuals aged 21 years and older. 21+

10.2 asaa88 does not knowingly collect personal data from persons under the age of 21. If we become aware that we have inadvertently collected data from an underage individual, we will immediately suspend the associated account and delete the data in question, subject to any legal obligation to retain records of the violation.

10.3 Parents or guardians who believe a minor has provided personal data to asaa88 should contact [email protected] immediately.

11.1 Your personal data may be transferred to, stored in, and processed in countries other than Malaysia where asaa88's service providers operate. asaa88 takes steps to ensure that any such transfers are conducted in accordance with applicable data protection requirements and that recipient parties maintain data protection standards at least equivalent to those described in this Policy.

11.2 By using the asaa88 Platform, you consent to the international transfer of your personal data as described in this section.

12.1 asaa88 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data practices. Material changes will be communicated via the email address registered to your account or through a prominent notice on the Platform.

12.2 The "Last updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

13.1 For any questions, concerns, or requests relating to this Privacy Policy or asaa88's data practices, please contact our data team at:

[email protected]

13.2 We aim to respond to all privacy-related enquiries within thirty (30) calendar days of receipt. For complex requests, we may require additional time and will notify you accordingly.