Privacy Policy

This Privacy Policy (hereinafter "the Policy") is published by asaa88 (hereinafter "asaa88", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at https://asaa88.cam (hereinafter "the Platform" or "the Site").

This Policy applies to all personal data collected, processed, stored, or transmitted by asaa88 in connection with the registration, operation, and use of an account on the Platform by any individual (hereinafter "the Player", "the User", or "you"). It applies equally to data collected via desktop browsers, mobile browsers, and any other means by which you access the Platform.

By accessing the Platform, creating an account, making a deposit, or otherwise using asaa88's services, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. This Policy is to be read in conjunction with the asaa88 Terms & Conditions, which are incorporated herein by reference.

For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:

The Data Controller for all Personal Data collected through the asaa88 Platform is asaa88, the operator of the Site at https://asaa88.cam. All data protection enquiries, subject access requests, and complaints relating to the processing of your Personal Data should be directed to the asaa88 Data Protection contact, reachable via the contact details set out in Section 17 of this Policy.

Where asaa88 engages third-party Data Processors — such as payment processing partners, identity verification services, or cloud infrastructure providers — these parties process your Personal Data only on asaa88's instructions and subject to contractual data processing agreements that impose obligations consistent with applicable data protection law.

asaa88 collects Personal Data across several categories, depending on the nature of your interaction with the Platform. The categories of data we may collect are as follows:

asaa88 collects Personal Data through the following means:

• Direct collection: Data you voluntarily provide when you register an account, complete KYC verification, make a deposit, request a withdrawal, contact our support team, or submit any form on the Platform.
• Automated collection: Technical and Usage Data collected automatically when you access the Platform, via server logs, session cookies, analytics scripts, and similar tracking technologies.
• Third-party sources: Identity and fraud risk information provided by KYC verification partners, fraud detection services, and payment processing intermediaries such as FPX and DuitNow operators. Such data is received only to the extent necessary to fulfil our KYC and AML obligations.
• Publicly available sources: In limited circumstances, data may be sourced from publicly available databases where required for AML screening, sanctions checking, or fraud prevention purposes.

asaa88 processes Personal Data for the following defined purposes:

• Account operation: To create, maintain, and manage your player account, including processing logins, account settings changes, and VIP tier assignments.
• Transaction processing: To facilitate deposits via Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency channels, and to process withdrawal requests to your nominated payment method.
• KYC and identity verification: To verify your identity, age (minimum 21 years), and the ownership of your nominated payment methods in compliance with our internal compliance policies.
• AML and fraud prevention: To monitor transaction patterns, detect suspicious activity, screen against sanctions lists, and fulfil our obligations under applicable anti-money laundering legislation.
• Customer support: To respond to your queries, resolve disputes, process complaints, and provide technical assistance through our multilingual support team.
• Platform improvement: To analyse usage patterns, test new features, troubleshoot technical issues, and enhance the overall player experience on the asaa88 Platform.
• Responsible gambling: To monitor gaming behaviour for indicators of problem gambling, implement self-exclusion and deposit limit requests, and fulfil our duty of care to players under our Responsible Gambling policy.
• Marketing communications (consent-based): To send promotional emails, bonus notifications, and platform updates to players who have provided explicit consent to receive such communications. You may opt out at any time via your account settings or by contacting support.
• Legal compliance: To comply with applicable laws, regulations, and court orders, and to establish, exercise, or defend legal claims.

asaa88 processes Personal Data only where a lawful basis for doing so exists. The legal bases we rely upon for different categories of processing are as follows:

• Contractual necessity: Processing required to perform our obligations under the contract formed between asaa88 and the Player when an account is registered — including processing deposits, withdrawals, and bets.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC and AML obligations imposed on operators of online gambling platforms.
• Legitimate interests: Processing carried out in pursuit of asaa88's legitimate business interests — including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where such interests are not overridden by the data subject's rights and freedoms.
• Consent: Processing for marketing and promotional communications, where you have provided explicit, informed consent at the time of registration or subsequently via account settings.

asaa88 does not sell, rent, or commercially trade your Personal Data. We may, however, share your Personal Data with the following categories of recipient where necessary and lawful:

• Payment service providers: Banks and e-wallet operators (including Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX) receive the minimum data necessary to process your requested transaction.
• KYC and identity verification partners: Third-party identity verification services that assist in confirming your identity and age as part of the KYC process.
• Fraud prevention and AML screening services: Automated screening platforms that cross-reference your data against sanctions lists, politically exposed persons (PEP) databases, and fraud risk registries.
• Cloud infrastructure and IT service providers: Providers of server hosting, database management, and platform infrastructure services who process data solely on asaa88's instructions.
• Customer support platforms: Third-party live chat and communication tools used to deliver multilingual support in English, Bahasa Melayu, and 中文.
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory direction, asaa88 may be required to disclose Personal Data to competent authorities. We will notify you of such disclosures where legally permitted to do so.
• Professional advisers: Lawyers, auditors, and compliance consultants under strict confidentiality obligations, where necessary to obtain professional advice or to establish, exercise, or defend legal claims.

All third-party recipients of Personal Data are bound by contractual obligations to process data only as instructed by asaa88, to maintain appropriate technical and organisational security measures, and not to use your data for any purpose outside the scope of the service they are providing.

In the course of operating the asaa88 Platform and engaging third-party service providers, your Personal Data may be transferred to, stored in, or processed by systems located outside of Malaysia. Such transfers may occur in connection with cloud hosting services, payment processing infrastructure, or KYC verification systems operated in other jurisdictions.

Where Personal Data is transferred internationally, asaa88 ensures that appropriate safeguards are in place to protect the data and to ensure that the level of protection is not materially lower than that provided under Malaysian data protection law. Safeguards may include contractual data processing agreements incorporating standard data protection clauses, or the recipient jurisdiction's adoption of equivalent data protection standards.

asaa88 does not retain Personal Data for longer than is necessary to fulfil the purpose for which it was collected, or to meet applicable legal, regulatory, or contractual retention obligations. The principal retention periods applied to different categories of data are as follows:

• Account and identity data: Retained for the duration of the active account relationship and for a minimum period of five (5) years following permanent account closure, to satisfy AML and regulatory record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of the transaction, consistent with standard financial record-keeping obligations.
• KYC verification documents: Retained for the duration of the account and for at least five (5) years from the date of verification, or longer if required by applicable law.
• Customer support communications: Retained for two (2) years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Technical and usage data: Typically anonymised or aggregated within thirteen (13) months of collection and retained in anonymised form for analytical purposes thereafter.
• Marketing consent records: Retained for the duration of your marketing preference and for a period of three (3) years following withdrawal of consent, to demonstrate compliance.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised in accordance with asaa88's data destruction procedures.

asaa88 uses cookies and similar tracking technologies to operate certain essential platform functions, analyse usage patterns, and deliver a more relevant experience to returning players. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for the Platform to function correctly — including session management, account authentication, and security features. These cannot be disabled without impairing core Platform functionality.
• Functional cookies: Used to remember your preferences, such as language selection, preferred game categories, and betting layout settings. These improve your experience but are not essential to Platform operation.
• Analytics cookies: Used to collect aggregated, anonymised data about how players interact with the Platform — including pages visited, session duration, and navigation paths. This data is used to identify usability issues and improve the Platform.
• Security cookies: Used to detect and prevent fraudulent or abusive access attempts, including bot detection and session integrity checks.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may impair the functionality of the asaa88 Platform. Strictly necessary cookies cannot be disabled via browser settings without preventing access to core features.

The asaa88 Platform is intended exclusively for use by individuals who are at least twenty-one (21) years of age. asaa88 does not knowingly collect, process, or retain Personal Data belonging to any person under 21 years of age.

Age verification is conducted during the account registration process. Where asaa88 has reasonable grounds to believe that a registered user may be under the minimum age, the relevant account will be suspended pending verification and all associated data will be deleted if the age restriction is found to have been violated.

If you become aware that a minor has accessed the asaa88 Platform or provided Personal Data to us, please notify us immediately at [email protected] and we will take prompt action to remove the relevant data and close the account.

Subject to applicable data protection law and certain conditions and limitations, you hold the following rights in respect of your Personal Data processed by asaa88:

To exercise any of the above rights, please contact asaa88 using the details provided in Section 17. We will respond to all valid data subject requests within thirty (30) calendar days, or notify you of any extension to that period where the complexity of the request requires additional time.

asaa88 may be required to verify your identity before processing a data subject request. This is to ensure that data is not disclosed to, or processed at the request of, an unauthorised third party.

asaa88 implements a comprehensive set of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS): All data transmitted between your browser and the asaa88 Platform is encrypted using TLS 1.2 or higher, preventing interception of data in transit.
• Encryption at rest: Sensitive Personal Data — including identity documents, financial data, and KYC records — is encrypted at rest on asaa88's servers using industry-standard encryption algorithms.
• Access controls: Access to Personal Data is restricted on a strictly need-to-know basis, with role-based access controls applied to all internal systems. All staff access to sensitive data is logged and auditable.
• Penetration testing and security audits: asaa88's systems are subject to regular security assessments, including penetration testing, to identify and remediate vulnerabilities.
• Incident response: asaa88 maintains a documented data breach response procedure. In the event of a Personal Data breach that is likely to result in risk to your rights and freedoms, we will notify you without undue delay and in accordance with applicable legal requirements.
• Staff training: All asaa88 personnel who have access to Personal Data receive regular training on data protection obligations and security practices.

Notwithstanding these measures, no method of transmission over the internet or electronic storage is entirely secure. We encourage players to use strong, unique passwords for their asaa88 accounts and to notify us immediately of any suspected unauthorised access.

The asaa88 Platform may contain references to or integrations with third-party services, such as payment gateways (including Maybank2u, CIMB Clicks, DuitNow, and FPX portals). When you navigate to or interact with a third-party service, you leave the asaa88 Platform and enter an environment that is governed by that third party's own privacy policy and terms of use.

asaa88 does not control, and is not responsible for, the privacy practices or content of any third-party service. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of asaa88.

asaa88 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. The date of the most recent revision is displayed at the top of this page.

Where a material change is made to this Policy — that is, a change that could significantly affect your rights or the way your data is processed — asaa88 will notify active account holders by email or via a prominent notice on the Platform in advance of the change taking effect. Your continued use of the Platform following such notification constitutes acceptance of the revised Policy.

We encourage all Players to review this Policy periodically to remain informed of how asaa88 protects their Personal Data.

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data subject rights, please contact the asaa88 Data Protection contact through the following channels:

• Email: [email protected] — For formal privacy enquiries, data subject access requests, erasure requests, and rectification requests. Please include "Privacy Request" in your subject line to ensure prompt routing.
• Live Chat: Available 24 hours a day, 7 days a week via the asaa88 Platform. For general privacy queries and to initiate a formal data request through a support agent.
• Response Time: asaa88 is committed to responding to all privacy-related queries within five (5) business days for general enquiries and within thirty (30) calendar days for formal data subject access requests.

We are fully committed to resolving privacy concerns directly. Players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia can reach our support team at any time through Live Chat or email.