Privacy Policy —
How AuraAsia88 Protects Your Data

Introduction

This Privacy Policy (hereinafter "the Policy") is issued by AuraAsia88 (hereinafter "AuraAsia88", "we", "us", or "our") and describes how we collect, use, store, protect, and disclose personal data provided by users (hereinafter "Players", "Users", or "you") who access or register an account on the AuraAsia88 online gaming platform, accessible at auraasia88.cam.

AuraAsia88 recognises that personal data is sensitive and that Players are entitled to understand precisely how their information is handled. This Policy is written to be direct and specific — not to satisfy a legal checkbox, but to give every player across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond a clear picture of their privacy position when using the AuraAsia88 platform.

By registering an account on AuraAsia88, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any aspect of this Policy, you must cease using the Platform and request account closure as described in our Terms & Conditions.

Definitions

The following definitions apply throughout this Privacy Policy:

Data We Collect

AuraAsia88 collects personal data through multiple channels and at various stages of the player journey. The categories of data we collect are as follows:

3.1 Registration Data

When you register an account on AuraAsia88, we collect the information you provide directly, including your full legal name, date of birth, nationality, email address, and contact telephone number. This information is required to create and verify your account.

3.2 Identity Verification (KYC) Data

Before processing withdrawals or upon reasonable suspicion of account irregularities, we conduct Know Your Customer (KYC) verification. This requires submission of one or more of the following: Malaysian identity card (MyKad), passport, proof of address (utility bill, bank statement), and in some cases a selfie photograph for facial matching purposes.

3.3 Financial & Transaction Data

We collect data relating to all deposits and withdrawals made on your account, including transaction amounts, timestamps, and the payment methods used. Supported methods include Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency (BTC/USDT). We do not store full card numbers or complete banking credentials.

3.4 Technical & Device Data

When you access the Platform, we automatically collect technical information including your IP address, browser type and version, operating system, device identifiers, screen resolution, and session timestamps. This data is used for security monitoring, fraud prevention, and platform optimisation.

3.5 Behavioural & Usage Data

We collect data on how you interact with the Platform, including pages visited, games played, bet history, session duration, clickstream data, and feature usage patterns. This data is analysed in aggregate to improve the platform and, in some cases, to personalise your experience.

3.6 Communications Data

We retain records of communications between you and the AuraAsia88 customer support team, including live chat transcripts, email correspondence, and support ticket histories. These records are used to resolve disputes, improve support quality, and satisfy regulatory record-keeping obligations.

How We Process Your Data

AuraAsia88 processes your personal data for the following specific purposes:

AuraAsia88 does not use your personal data for automated decision-making or profiling in ways that produce legal or similarly significant effects on you without your knowledge. Where automated processes are used for fraud screening or responsible gambling monitoring, a human review process is available upon request.

Legal Basis for Processing

AuraAsia88 processes personal data on the following legal bases, applied according to the nature and purpose of each processing activity:

• Contractual Necessity: Processing required to fulfil the obligations set out in our Terms & Conditions — including account management, payment processing, and customer support — is carried out on the basis that it is necessary to perform the contract between AuraAsia88 and the Player.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gambling monitoring is carried out on the basis of AuraAsia88's legitimate interest in operating a safe and fair platform, where those interests do not override the Player's fundamental rights.
• Consent: Processing for direct marketing communications is carried out only where you have explicitly provided your consent. You may withdraw consent for marketing communications at any time by contacting customer support or using the unsubscribe mechanism in any marketing email.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, identity verification obligations, and responses to lawful authority requests is carried out on the basis of legal obligation.

Data Sharing & Disclosure

AuraAsia88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data sharing is limited to the following categories of recipients and circumstances:

• Payment Service Providers: We share necessary transaction data with payment processors and e-wallet providers — including those facilitating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong transactions — solely to the extent required to process your deposits and withdrawals.
• KYC & Identity Verification Partners: We engage reputable third-party KYC service providers to assist with identity and age verification. These providers receive only the documents and data necessary to complete the verification process and are contractually bound to handle such data securely.
• Technology & Infrastructure Providers: Our platform relies on trusted technology partners for hosting, content delivery, customer support tooling, and analytics. These providers act as data processors on our behalf and are bound by data processing agreements restricting their use of your data.
• Regulatory Authorities & Law Enforcement: We may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required by applicable law, a valid legal order, or where disclosure is necessary to protect the legal rights of AuraAsia88 or its players.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of AuraAsia88's business, personal data held by AuraAsia88 may be transferred to the acquiring entity, subject to equivalent data protection obligations.

Data Retention

AuraAsia88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention principles apply:

• Active Accounts: Personal data associated with an active player account is retained for the duration of the account relationship and for a period of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later, in accordance with AML obligations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years to satisfy financial record-keeping obligations.
• Support Communications: Customer support records are retained for three (3) years from the date of the last communication, to support dispute resolution and quality assurance.
• Technical & Log Data: Server logs and technical access records are typically retained for ninety (90) days for security and debugging purposes, unless a longer period is required in connection with an active investigation.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual.

Cookies & Tracking Technologies

AuraAsia88 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and gather analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function correctly — including session management, login authentication, and security features. These cookies cannot be disabled without disrupting Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data on how Players use the Platform — including pages visited, session duration, and error occurrence. This data is used solely to improve the Platform.
• Functionality Cookies: Used to remember your preferences and settings, such as display language, to provide a more personalised experience across sessions.
• Session Cookies: Temporary cookies that expire when you close your browser, used to maintain the continuity of your gaming session.

You may configure your browser to block or delete cookies. Please note that disabling certain cookies may affect the functionality of the Platform. AuraAsia88 does not use cookies to serve third-party advertising.

Data Security

AuraAsia88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the AuraAsia88 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Data Encryption at Rest: Sensitive personal data — including KYC documents and financial records — is stored in encrypted form within secure, access-controlled environments.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts to provide an additional layer of protection beyond password credentials.
• Access Controls: Access to personal data within AuraAsia88's systems is strictly limited to authorised personnel on a need-to-know basis, with access logs maintained and reviewed regularly.
• Security Monitoring: Our security team monitors platform infrastructure continuously for anomalies, intrusion attempts, and suspicious activity patterns.
• Third-Party Security Audits: AuraAsia88 conducts periodic third-party security assessments of its platform infrastructure and data handling processes.

Your Rights

Subject to applicable law and reasonable verification of your identity, you have the following rights in relation to your personal data held by AuraAsia88. To exercise any of these rights, please contact our Data Privacy team at [email protected].

AuraAsia88 will respond to all data rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reason for it.

Third-Party Services

The AuraAsia88 platform may incorporate features or services provided by third parties, including game content providers, payment processors, identity verification services, and customer support tools. These third-party services operate under their own privacy policies, which AuraAsia88 does not control.

Where third-party processors handle personal data on behalf of AuraAsia88, they do so under contractual obligations that require them to maintain appropriate data security standards and to use personal data only for the purposes specified by AuraAsia88.

AuraAsia88 is not responsible for the privacy practices of third-party operators of game content or any other services that Players may access independently outside of the AuraAsia88 platform.

Minors & Age Restrictions

The AuraAsia88 platform is strictly intended for individuals aged 21 years and above. AuraAsia88 does not knowingly collect personal data from any person under the age of 21.

During the registration process, AuraAsia88 collects date of birth and conducts age verification to enforce this requirement. Players found to be under the minimum age will have their accounts immediately suspended and all data associated with the account securely deleted in accordance with applicable data protection obligations, subject to any overriding legal retention requirements.

If you have reason to believe that a person under the age of 21 has registered an account on AuraAsia88, please contact our support team immediately at [email protected].

International Data Transfers

As an internationally operating platform, AuraAsia88 may transfer personal data to servers or service providers located in jurisdictions outside of Malaysia. Where such transfers occur, AuraAsia88 ensures that appropriate safeguards are in place to protect the transferred data, including:

• Contractual data protection clauses between AuraAsia88 and the receiving party that impose obligations equivalent to those required under applicable data protection law.
• Transfer only to jurisdictions or organisations that maintain data protection standards judged to be adequate for the purposes of the transfer.
• Use of technical safeguards such as encryption for data in transit across international networks.

By registering an account on AuraAsia88, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia where necessary for the operation of the Platform and the fulfilment of our services to you.

Policy Amendments

AuraAsia88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. The "Last Updated" date at the top of this page indicates the date of the most recent revision.

Where a material change is made to this Policy — particularly any change that expands the categories of data collected, introduces new purposes for processing, or alters your rights — we will provide advance notice to registered Players via the email address associated with their account, no less than fourteen (14) days before the change takes effect.

Continued use of the AuraAsia88 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and may request account closure as set out in our Terms & Conditions.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by AuraAsia88, please contact our Data Privacy team through the following channel:

AuraAsia88 is committed to addressing all privacy-related enquiries promptly and transparently. If you are not satisfied with the outcome of your enquiry, you retain the right to escalate your complaint to an appropriate supervisory authority in your jurisdiction.