Privacy Policy ASA88 — Your Information, Our Responsibility

ASA88 is committed to protecting the privacy and personal data security of all members and visitors to our platform. This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards.

This document clearly explains the types of personal information we collect from you, the purposes of that collection, how we protect your information, who may have access to it, and what your rights are as a data owner.

This policy applies to all individuals who interact with the asa88 platform in any capacity — whether as a registered member, a prospective member in the process of registering, or simply a casual visitor browsing our website. If you are under 18 years of age, you are not permitted to register for or use any asa88 services, and any data collected from underage individuals will be deleted immediately upon discovery.

ASA88 only collects data that is genuinely necessary to provide you with a safe, legitimate, and quality service. Below are the categories of data we collect:

Every piece of data we collect is used for legitimate, clearly stated purposes. Below are the primary purposes for which your data is used on the asa88 platform:

• Account management: Create, verify and maintain your member account, including the KYC process required by law.
• Transaction processing: Process deposits, withdrawals and all other financial transactions securely and accurately.
• Platform security: Detect and prevent fraud, money laundering, unauthorised access and other suspicious activities that could harm members or the platform.
• Service communications: Send important notifications about your account, security updates, terms changes and transaction details.
• Customer support: Handle your enquiries, complaints and assistance requests more efficiently.
• Service improvement: Analyse usage patterns to improve user experience, platform performance and the games portfolio.
• Legal compliance: Fulfil reporting obligations and compliance requirements with relevant regulatory authorities.
• Marketing communications: Send promotional information and special offers — only if you have given explicit consent to receive them.

ASA88 will not use your data for any purpose other than those stated above without first obtaining your additional consent.

ASA88 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. However, there are limited situations where we may need to share some of your information:

• Payment service providers: Required financial information is shared with licensed payment processors such as FPX, Touch 'n Go, GrabPay and card networks to complete your transactions.
• Game software providers: Minimum technical information required is shared with licensed game providers to enable you to access games smoothly.
• Legal authority: ASA88 will disclose required information to law enforcement authorities or regulatory bodies when mandated by law or court order.
• Fraud prevention: Limited information may be shared with recognised fraud prevention agencies to protect all platform members from fraudulent activity.

ASA88 continuously invests in the latest security infrastructure to ensure your personal data remains protected at all times. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS Encryption: All data communications between your device and the asa88 servers are encrypted using the highest-level SSL/TLS protocols, making your data unreadable to unauthorised parties.
• PCI DSS compliance: All financial data processing complies with the strictest Payment Card Industry Data Security Standard (PCI DSS) requirements.
• Two-Factor Authentication (2FA): Multi-layer verification is available to protect your account from unauthorised access.
• Internal access controls: Access to members' personal data at ASA88 is restricted to staff who genuinely require that access to carry out their responsibilities.
• Continuous monitoring: A 24/7 security monitoring system detects and responds to any suspicious activity in real time.
• Regular security audits: Penetration testing and security audits are conducted regularly by independent security experts.

The asa88 platform uses cookies and other tracking technologies to enhance user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: These cookies are essential for the platform to function and cannot be disabled. They are used to maintain your login session, store language preferences and ensure transaction security.
• Performance Cookies: Helps us understand how members use the platform, which pages are visited most and where errors occur, for continuous improvement purposes.
• Functional Cookies: Remember your preferences and settings such as preferred currency, display settings and game preferences to deliver a more personalised experience.

You can manage your cookie settings through your web browser at any time. However, disabling required cookies may affect certain functions of the asa88 platform.

ASA88 retains your personal data only for as long as necessary for the stated purposes or as required by applicable law. Our data retention policy is as follows:

• Active account data: Retained for the duration your account remains active plus the minimum period required by anti-money laundering laws.
• Financial transaction records: Retained for a minimum of 7 years in line with financial reporting and regulatory requirements in Malaysia.
• KYC records and identity verification: Retained for the duration of the active account and 5 years after account closure in accordance with PDPA and relevant legal requirements.
• Customer support communication logs: Retained for 2 years for reference and service improvement purposes.
• Technical data and system logs: Retained for 12 months for security and fraud detection purposes.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the data protection principles we adhere to, you have the following rights regarding your personal data:

In some situations, your personal data may be transferred to or processed in countries outside Malaysia for distributed data storage and service continuity purposes. Such transfers are only made to countries or providers with a level of data protection equivalent to or higher than Malaysia's.

All international data transfers are protected by legally binding data protection agreements between asa88 and the respective data recipients, ensuring your data remains protected regardless of its physical location.

If you have any questions, concerns or complaints regarding how asa88 handles your personal data, we encourage you to contact us directly first:

• Privacy email: [email protected] (response time: within 2 hours during office hours)
• Live Chat: Available 24/7 via the chat icon on the asa88 platform
• FAQ: Visit FAQ page for quick answers to frequently asked privacy questions

If you are not satisfied with our response, you have the right to file a complaint with the Personal Data Protection Department (JPDP) Malaysia, the official regulatory body for data protection matters in Malaysia.