AsiaPlay Privacy Policy

§ 1 Introduction

This Privacy Policy ("Policy") describes how AsiaPlay ("we", "us", "our", "the Platform") — the operator of the online casino and sports betting platform accessible at https://asiaplay.cam ("the Website") — collects, uses, stores, and discloses personal data relating to users of the Website ("you", "Player", "User").

AsiaPlay is committed to handling your personal data with transparency, integrity, and in full compliance with applicable data protection legislation. This Policy is intended to give you clear and accessible information about your data rights and our data practices, in plain language that is easy to understand.

By accessing or using AsiaPlay — including browsing the Website, registering an account, making a deposit, placing a wager, or contacting our support team — you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the Website immediately.

§ 2 Definitions

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly — including name, email address, IP address, payment details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, AsiaPlay.
• "Data Processor" means any third party that processes Personal Data on behalf of AsiaPlay, including payment processors and analytics providers.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "KYC Data" means identity verification documents and information collected as part of our Know Your Customer compliance programme, including government-issued identification and proof of address.
• "Cookies" means small text files placed on your device by the Website to facilitate session management, preferences, and analytics.
• "Payment Data" means financial information associated with your deposits and withdrawals, including e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account details (Maybank, CIMB, Public Bank, RHB, Hong Leong, AmBank), DuitNow reference identifiers, and cryptocurrency wallet addresses.

§ 3 Data We Collect

AsiaPlay collects the following categories of personal data, depending on your interaction with the Platform:

3.1 Registration & Account Data

• Full legal name;
• Date of birth (for age verification — 21+ required);
• Residential address;
• Email address;
• Mobile telephone number;
• Username and encrypted password hash;
• Account preferences and communication settings.

3.2 Identity Verification (KYC) Data

• Copy of valid government-issued photo ID (Malaysian MyKad, Driver's Licence, or Passport);
• Proof of residential address (utility bill, bank statement, or official letter dated within 3 months);
• Selfie photograph holding identity document;
• Nationality and country of residence.

3.3 Financial & Transaction Data

• Deposit amounts, dates, and payment method identifiers;
• Withdrawal requests, amounts, and destination payment method identifiers;
• Transaction history and account balance records;
• Bonus and promotion redemption history;
• Cryptocurrency wallet addresses (where applicable).

3.4 Gameplay & Betting Data

• Bet history — games played, stakes, odds, outcomes;
• Session duration and gameplay patterns;
• Wagering requirement progress on active bonuses;
• Responsible gambling settings and limits you have set.

3.5 Technical & Device Data

• IP address and approximate geographic location;
• Browser type, version, and language settings;
• Device type, operating system, and screen resolution;
• Session timestamps and page interaction logs;
• Cookie identifiers and similar tracking technologies.

3.6 Communications Data

• Live chat transcripts and support ticket content;
• Email correspondence with AsiaPlay;
• Survey responses and feedback submissions.

§ 4 How We Collect Personal Data

We collect personal data through the following channels:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions;
• Automatically: through server logs, cookies, and analytics tools as you browse and interact with the Website;
• From payment processors: transaction confirmation data, payment method identifiers, and fraud-screening signals received from our certified payment partners;
• From identity verification services: results and signals from third-party KYC and anti-fraud screening providers used to verify your identity and age;
• From game providers: gameplay outcome data and session records from our licensed third-party game providers whose content is hosted on the Platform.

§ 5 Purposes of Processing

AsiaPlay processes your personal data for the following purposes:

We do not use your personal data for purposes that are incompatible with those listed above without first obtaining your explicit consent or establishing a separate lawful basis.

§ 6 Lawful Basis for Processing

Each instance of personal data processing by AsiaPlay is grounded in one or more of the following lawful bases:

• Contract Performance: Processing is necessary to perform the contract between you and AsiaPlay — including account management, game delivery, payment processing, and support services.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money-laundering (AML) regulations, age verification requirements, tax reporting obligations, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing is necessary for AsiaPlay's legitimate business interests — including fraud prevention, platform security, responsible gambling monitoring, and anonymised analytics — provided these interests are not overridden by your fundamental rights.
• Consent: Where we send you optional marketing communications or use non-essential cookies, we rely on your freely given consent. You may withdraw consent at any time without detriment to your account.

§ 7 Data Sharing & Disclosure

AsiaPlay does not sell, rent, or trade your personal data. We share data only in the following defined circumstances:

7.1 Payment Processors

We share transaction-relevant data with our certified payment processing partners to facilitate deposits and withdrawals. These partners include providers of Malaysian payment services such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX bank integration services. All payment processors are contractually bound to process data only for specified payment purposes and to maintain appropriate security standards.

7.2 Game Providers

Our licensed third-party game providers receive minimal session and account identifiers necessary to deliver game content and record outcomes. Game providers do not receive your financial or KYC data unless strictly required for game-specific regulatory compliance.

7.3 Identity Verification Services

We use certified third-party KYC and age-verification services to screen submitted identity documents. These services process your KYC data under strict data processing agreements and applicable data protection law.

7.4 Regulatory and Law Enforcement Authorities

AsiaPlay may be required by law to disclose personal data to regulatory bodies, law enforcement agencies, tax authorities, or courts. Such disclosures are made only where legally compelled and to the extent strictly required. Where legally permitted to do so, we will notify you of such disclosures.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of AsiaPlay's business, personal data held by AsiaPlay may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance where required by law.

7.6 Professional Advisers

We may share personal data with legal counsel, auditors, and compliance consultants on a strictly need-to-know basis, subject to professional confidentiality obligations.

§ 8 Data Retention

AsiaPlay retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention principles are as follows:

• Account and registration data: Retained for the duration of your account, and for a minimum of 5 years after account closure, to satisfy AML and regulatory record-keeping obligations.
• KYC verification data: Retained for a minimum of 5 years following the date of verification, in accordance with anti-money-laundering legislation.
• Transaction and financial data: Retained for a minimum of 7 years for tax and financial compliance purposes.
• Gameplay and betting records: Retained for a minimum of 3 years following the relevant game session or wager.
• Support communications: Retained for 3 years from the date of the communication, unless a longer period is required for dispute resolution.
• Technical and analytics data: Anonymised and aggregated after 12 months; identifiable technical logs are deleted after 90 days unless required for an ongoing security investigation.

Upon expiry of the relevant retention period, data is securely deleted or irreversibly anonymised. Where deletion is not technically feasible (for example, in backup archives), the data will be isolated and protected until deletion is possible.

§ 9 Security Measures

AsiaPlay implements a layered security framework to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in transit: All data transmitted between your browser and AsiaPlay is encrypted using TLS 1.2 or higher (256-bit SSL encryption);
• Encryption at rest: Sensitive stored data — including KYC documents and account credentials — is encrypted using industry-standard algorithms;
• Access controls: Personal data is accessible only to AsiaPlay personnel and authorised Data Processors who require it to perform their specific functions, on a strict need-to-know basis;
• Payment security: Full payment card numbers and banking credentials are never stored on AsiaPlay's servers; payment processing is delegated entirely to certified payment processors;
• Network security: Our infrastructure is protected by firewalls, intrusion detection systems, and regular security audits;
• Incident response: We maintain a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you and relevant regulatory authorities within the timeframes required by applicable law.

§ 10 Cookies & Tracking Technologies

AsiaPlay uses cookies and similar technologies on its Website to deliver core functionality, maintain your session, and understand how the platform is being used. The following categories of cookies are used:

AsiaPlay does not use third-party advertising or cross-site tracking cookies. Strictly necessary cookies cannot be disabled as they are essential to the operation of the Website. You may manage functional and analytics cookies through your browser settings; however, disabling functional cookies may impair your experience on the Platform.

§ 11 Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by AsiaPlay:

• Right of Access: You may request a copy of the personal data AsiaPlay holds about you, together with information about how it is processed (commonly called a "Subject Access Request" or SAR).
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held by AsiaPlay. You may also update certain account details directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer needed for the purposes for which it was collected, subject to our legal retention obligations under AML and financial regulations.
• Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or contract performance, you may request a structured, machine-readable copy of your personal data for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including profiling, where your particular situation warrants it.
• Right to Withdraw Consent: Where processing is based on consent (for example, optional marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our Data Protection contact using the details in Section 15 of this Policy. We will respond to all verified data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days with prior notice to you.

§ 12 Minors & Age Restriction

AsiaPlay is strictly intended for users aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our account registration and KYC process.

If AsiaPlay discovers or is made aware that a registered user is under 21 years of age, we will immediately suspend that account, investigate the circumstances, and process the deletion of any personal data collected from the minor, subject to any legal obligations requiring retention.

Parents and guardians are strongly encouraged to install parental control software to prevent minors from accessing online gambling platforms. If you believe a minor has registered or used an AsiaPlay account, please contact our support team immediately.

§ 13 International Data Transfers

AsiaPlay operates internationally and may transfer your personal data to servers or service providers located in jurisdictions outside your country of residence. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required by applicable data protection law. Safeguards may include:

• Data processing agreements incorporating standard contractual clauses approved by the relevant supervisory authority;
• Transfers to jurisdictions with an adequacy determination from the relevant regulatory body;
• Binding corporate rules where applicable.

If you would like further information about the international data transfers applicable to your personal data, please contact us using the details in Section 15.

§ 14 Policy Amendments

AsiaPlay reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, or our data processing practices. Material changes will be communicated to registered players via email notification or a prominent notice on the Website prior to the effective date of the change.

Your continued use of AsiaPlay following the effective date of any amended Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. We recommend that you review this Policy periodically to stay informed of how we handle your personal data.

The date at the top of this Policy indicates when it was last reviewed. Previous versions of this Policy are available upon request by contacting our support team.

§ 15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a data protection concern, please contact AsiaPlay using the following channels. All data-related correspondence should be clearly marked "Data Protection Enquiry" for prompt routing to the appropriate team.

• Support Email: [email protected] — plain text address, not a clickable link
• Live Chat: Available 24/7 on the AsiaPlay Website in English, Bahasa Melayu, and 中文. Average response time: 3–5 minutes.

We aim to acknowledge all data protection enquiries within 72 hours and to resolve them within 30 calendar days. In complex cases, we will notify you of any extension and the reason for it.