Privacy Policy AstonBet Malaysia

This Privacy Policy is issued by AstonBet ("we", "our platform") and applies to all users who register, access, or use the services provided at https://astonbet.ml and our official mobile app. By continuing to use the AstonBet platform, you confirm that you have read, understood, and accepted the terms set out in this Privacy Policy.

We take user privacy very seriously. As an online entertainment platform operating in Malaysia, we fully comply with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in personal data management. This policy clearly explains what information we collect, how we use it, who we share it with, and your rights as the data owner.

If you disagree with any part of this Privacy Policy, we encourage you to contact our support team first before deciding to stop using our services. We are happy to address any concerns you may have.

AstonBet only collects information that is strictly necessary to deliver quality services, comply with legal requirements, and ensure the security and integrity of the platform. We do not collect excessive or irrelevant data.

Account Registration Information:

• Full name as shown on official identification documents
• Active email address used for account communications
• Mobile phone number for two-factor authentication (2FA)
• Date of birth for age verification (must be 18 years of age or older)
• Current residential address including postcode and state
• Passwords stored in secure hashed form

Identity Verification Information (KYC):

• A copy of your identity card (MyKad) or valid passport
• Recent proof of address such as a utility bill or bank statement dated within the last 3 months
• Verification documents for the payment method used
• A selfie or facial photo for digital identity verification

Financial Transaction Information:

• Deposit and withdrawal records including amounts, dates, and payment methods
• Bank account number or registered e-wallet number
• Complete transaction history for audit and compliance purposes

Platform Usage Data (Collected Automatically):

• IP address, device type, operating system, and web browser used
• Session activity logs including games played and session duration
• Cookie data and website tracking technologies (see Section 6)
• Interaction history with our customer support team

Every piece of data we collect is used purposefully and proportionately. Below is a summary of our data usage purposes and their corresponding lawful bases:

We do not use your data for any purpose not stated in this Privacy Policy without first obtaining your consent. All data processing is carried out only by authorised staff and in accordance with strict internal procedures.

The security of your data is our top priority. astonbet continuously invests in the latest security infrastructure to ensure your personal information is protected at every layer of our system.

• All data is encrypted using 256-bit SSL/TLS encryption during transmission between your device and our servers
• Data stored using AES-256 encryption on secure servers protected by multi-layered firewalls
• Passwords are stored in hashed form (bcrypt) that cannot be decrypted by anyone, including our own staff.
• Role-based access control (RBAC) ensures that only authorised staff can access data relevant to their responsibilities.
• Independent security audits are conducted periodically by certified third-party cybersecurity firms.
• An Intrusion Detection and Prevention System (IDS/IPS) operates 24/7 to detect and block cyber threats
• An incident response plan is in place to address any data breaches swiftly.

AstonBet does not sell, rent, or disclose your personal data to third parties for commercial marketing purposes. However, there are limited situations where we need to share your data with certain parties to keep our platform running smoothly:

• Payment Processors: FPX, DuitNow, Touch 'n Go eWallet, GrabPay, and credit/debit card networks receive only the minimum transaction information required to process your deposits and withdrawals
• Game Software Providers: Game development companies may receive anonymised game session data for technical purposes and fair play auditing
• KYC Verification Services: Third-party providers handling identity verification receive your KYC documents securely
• Legal Authorities: We are legally required to disclose certain information to law enforcement agencies or regulatory bodies upon receipt of a valid request.
• Analytics Services: Anonymized usage data is shared with analytics platforms to help us understand and improve the user experience

Every third party we work with is bound by a strict Data Processing Agreement (DPA) and is required to uphold the same security standards as our own internal policies. We only share data to the minimum extent necessary for the stated purpose.

The astonbet website uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyse usage patterns on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core platform functions such as login session management, security verification, and language preferences. These cookies cannot be disabled without affecting platform functionality
• Performance Cookies: Collecting anonymised data on how users interact with our platform to help us identify and improve areas that need enhancement
• Functional Cookies: Storing your personal preferences such as display settings, preferred language, and game configurations for a smoother return experience
• Analytics Cookies: Enabling us to understand website traffic, visitor sources, and user engagement patterns in aggregate and anonymised form

You can manage your cookie settings through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality or user experience of the AstonBet platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. AstonBet fully respects and facilitates the exercise of these rights:

The AstonBet platform is strictly for adults aged 18 and above. We do not knowingly collect, store, or process personal information from individuals under 18. Valid age verification is required for all account registration applications.

Our age verification process includes a date-of-birth check during registration, KYC document verification showing a valid date of birth, and continuous monitoring to detect any attempts to bypass age restrictions.

If we discover that an account has been opened by a minor, we will immediately close the account, void all transactions, and delete all associated data. If you believe your child has registered an account without authorisation, please contact us immediately at [email protected].

In the course of operating our platform, your personal data may be transferred to and stored on servers located outside Malaysia. This includes servers operated by international game software providers, cloud infrastructure providers, and our global operating partners.

AstonBet ensures that any cross-border data transfers are carried out with adequate safeguards, including:

• Standard Contractual Clauses apply to all data recipients outside Malaysia
• Ensuring that recipient countries maintain an equivalent or higher level of data protection
• A Data Protection Impact Assessment (DPIA) is conducted before any new data transfer is approved
• End-to-end encryption during data transfer to prevent unauthorised access

AstonBet retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by Malaysian law. Once the retention period expires, data will be securely deleted or anonymized.

Upon expiry of the designated retention period, data will be permanently deleted using secure erasure methods that prevent any possibility of recovery.

AstonBet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. The effective date and current version of this document are always shown at the top of this page.

For any material changes that significantly affect how we process your data, we will:

• Posting a prominent notice on our platform's home page at least 14 days before the changes take effect
• Sending email notifications to all registered users explaining the key changes
• In cases where changes require fresh consent, we will request your active confirmation before those changes apply to the processing of your data

Your continued use of the astonbet platform after any amendments take effect will be considered your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or wish to exercise your data protection rights, our Data Protection Officer (DPO) team is here to help. We are committed to responding to all privacy-related inquiries within 72 business hours.

• Submit a written request to our DPO team via support email
• Include your full name, account number, and a clear description of your request
• For requests involving data access or deletion rights, please provide a copy of your identification document for identity verification
• All requests will be processed within the timeframe prescribed by Malaysia's PDPA