Asustogel Privacy Policy – Malaysian Player Data Protection

Asustogel collects various types of information from Malaysian players for the purposes stated in this privacy policy. The information collected falls into two main categories:

Information you provide directly:

• Full name as stated in a valid identity document;
• An active Malaysian phone number;
• A valid and active email address;
• Date of birth for age verification;
• Payment method information used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX) — asustogel does not store full credit/debit card details;
• A copy of your identity document (Malaysian IC or passport) when requested as part of the KYC verification process;
• Any other information you voluntarily provide when communicating with our customer support team.

Automatically collected information:

• IP address and general location information;
• The type of device, operating system, and web browser version used;
• Session log data including login time, logout time, and session duration;
• Game history records, bets placed, deposits, and withdrawals;
• Cookie data and tracking technologies as described in Section 5.

Personal information collected by asustogel is used solely for the following purposes:

• Account management: To create, verify, manage, and maintain your player account on asustogel;
• Identity verification (KYC): To verify that you meet the age eligibility requirements and identity verification obligations prescribed by law and platform policy;
• Financial transaction processing: To securely and accurately process deposits and withdrawals via your chosen Malaysian payment method;
• Fraud prevention and AML: To detect, investigate, and prevent fraudulent activity, money laundering, and platform abuse;
• Customer support: To provide relevant assistance and responses whenever you contact the asustogel support team;
• Service communications: To send important notifications regarding your account, transactions, changes to our terms, and security information — not for marketing emails without your consent;
• Platform improvement: To analyse usage patterns on an aggregated, anonymised basis in order to improve the user experience on asustogel;
• Legal compliance: To comply with applicable legal and regulatory obligations in connection with the operation of the platform.

Asustogel does not sell, rent, or transfer players' personal data to third parties for marketing purposes. However, to enable us to deliver a complete service, we may share necessary data with the following categories of third parties within strictly defined limits:

• Payment service providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and Malaysia's FPX processors receive only the information necessary to process your financial transactions. All of these payment providers are bound by strict confidentiality agreements;
• Game providers: Licensed game providers such as Evolution Gaming, Pragmatic Play, and PG Soft may receive session data necessary to operate the games. This data is limited to required technical information and does not include personal financial details;
• Technology service providers: Companies that provide the technical infrastructure, cybersecurity, and IT support services required for the platform to operate;
• Legal authorities: asustogel may be required to disclose information to government authorities or law enforcement agencies when mandated by Malaysian law or a valid court order. In such cases, we will disclose only the minimum information necessary.

Asustogel implements multiple layers of technical and organisational safeguards to ensure that Malaysian players' personal data is protected against unauthorised access, loss, misuse, or disclosure:

• Data encryption in transit: All communications between your device and the asustogel servers are encrypted using TLS 1.3 protocol with a 256-bit SSL certificate;
• Stored data encryption: Sensitive data, including passwords and financial information, is encrypted at rest in our database using the latest encryption algorithms;
• Role-based access control: Access to player data is strictly limited based on each asustogel staff member's role and operational need;
• Continuous security monitoring: Our systems are monitored 24 hours a day to detect any suspicious activity or intrusion attempts;
• Regular security testing: asustogel conducts regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited;
• Two-factor authentication: Players are encouraged to enable two-factor authentication to add an extra layer of security to their accounts.

While we take all reasonable steps to protect your data, no security system is completely impenetrable. Players are also responsible for keeping their own login credentials secure and for reporting any suspicious activity to the asustogel support team promptly.

Asustogel uses cookies and similar tracking technologies to enhance the user experience and gather analytical data that helps us improve the platform. The types of cookies used are as follows:

• Essential cookies: Required for the basic operation of the platform, including login session authentication and security. These cookies cannot be disabled without affecting core platform functionality;
• Performance cookies: Collects anonymised information on how players use the platform to help us identify technical issues and improve performance;
• Preference cookies: Stores your personal settings such as language preference and display options to provide a more personalised experience;
• Analytical cookies: Used to understand aggregated usage patterns for product improvement purposes. Analytics data is processed anonymously and is not linked to your personal identity.

You can manage and delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality or user experience of the asustogel platform.

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices, every asustogel player holds the following rights with respect to their personal data:

• Right to access: You have the right to request a copy of all personal data we hold about you. Such requests will be processed within 14 business days;
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request a correction or update;
• Right to erasure: Under certain circumstances, you may request the deletion of your personal data. However, we may be required to retain specific data for periods mandated by law or audit obligations;
• Right to object to processing: You may opt out of having your data processed for direct marketing purposes at any time by contacting our support team;
• Right to data portability: You may request a copy of your data in a machine-readable format for the purpose of transferring it to another service;
• Right to lodge a complaint: If you believe asustogel has violated your privacy rights, you may lodge a complaint with us or with the Department of Personal Data Protection Malaysia.

To exercise any of the rights above, contact the asustogel support team by email at support@asustogel.best, clearly stating the right you wish to exercise along with your account information for identity verification purposes.

Asustogel retains players' personal data for as long as necessary to fulfil the original purpose of collection and any related legal obligations:

• Active account data: Retained for the duration of the active account period plus the minimum period required by law following account closure;
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysia's financial legislation and anti-money laundering requirements;
• Customer support communication records: Retained for 2 years from the date of the last communication;
• Log and security data: Retained for 12 months for fraud detection and security investigation purposes;
• Marketing data (where consent has been given): Retained until you withdraw your consent.

Once the retention period expires or the data is no longer needed, personal data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

Asustogel is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data belonging to someone under the age of 18 has been collected without our knowledge — whether due to inaccurate information provided during registration or any other reason — we will take immediate action to delete that data and close the account in question.

If you are a parent or guardian who believes your child has registered an account on asustogel while underage, please contact us immediately at support@asustogel.best so we can take the appropriate action.

Asustogel reserves the right to amend this privacy policy from time to time to reflect changes in our data processing practices, new legal requirements, or service improvements. Any material amendments will take effect as soon as the updated version is published on the asustogel website.

For amendments that materially affect how we handle your personal data, we will notify you by email or in-platform notification at least 7 days before the changes take effect. The "Updated" date at the top of this document will reflect the date of the most recent amendment.

You are encouraged to review this privacy policy periodically. Your continued use of the asustogel platform after any amendments are published will be taken as your acceptance of the revised policy.

For any enquiries, requests, or complaints regarding your privacy or the handling of your personal data by asustogel, please contact us through the following channels:

• Privacy email: support@asustogel.best — please mark your email subject as "Privacy Enquiry" to ensure it is handled by the appropriate team;
• Live chat: Available 24 hours a day, 7 days a week on the asustogel website — please indicate that your enquiry relates to data privacy;
• Response time: We are committed to responding to all privacy-related enquiries within 5 business days.

For requests relating to personal data rights (access, correction, or deletion), please include your account number and a copy of your identity document for identity verification purposes, to protect the security of your data.