Privacy Policy — as126 Online Casino

This Privacy Policy ("Policy") is issued by as126 ("as126", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at as126.cam ("Platform"). This Policy applies to all registered players and visitors who access or use the Platform, regardless of the device or location from which access occurs.

as126 is committed to protecting the privacy and personal data of its users. We recognise that the personal information you provide to us — including your identity documents, financial details, and usage activity — is sensitive, and we treat it with the care and rigour it deserves. This Policy sets out, in clear and accessible terms, exactly how that data is handled throughout your relationship with as126.

By registering an Account on the Platform or by continuing to use the Platform after this Policy has been published, you acknowledge that you have read and understood this Policy and that you consent to the collection, processing, storage and use of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact us to close your Account.

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a natural person, directly or in combination with other data. This includes, but is not limited to, name, date of birth, identity document number, email address, IP address and financial account details.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, erasure or destruction, whether by automated means or otherwise.
• "Data Controller" — as126, which determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" — A third party that Processes Personal Data on behalf of as126, pursuant to a data processing agreement that requires the third party to adhere to appropriate data protection standards.
• "Data Subject" — The individual to whom Personal Data relates; in the context of this Policy, primarily the registered Player.
• "Sensitive Personal Data" — A sub-category of Personal Data that warrants heightened protection, including but not limited to government-issued identity numbers, financial records and health information related to responsible gambling.
• "Consent" — A freely given, specific, informed and unambiguous indication of the Data Subject's agreement to the Processing of their Personal Data.

as126 collects the following categories of Personal Data in connection with the operation of the Platform:

as126 does not collect or Process Sensitive Personal Data beyond what is strictly necessary for identity verification, anti-money-laundering compliance and responsible gambling obligations. We do not request or store credit card numbers directly; payment card data is handled exclusively by our regulated payment service providers.

as126 collects Personal Data through the following means:

• Direct submission: Data you voluntarily provide during Account registration, KYC document upload, deposit or withdrawal requests, customer support interactions, or when completing any form on the Platform.
• Automated technical collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser fingerprint, session activity and cookie-based tracking. See Section 10 (Cookies & Tracking) for details.
• Payment providers: Transaction confirmation data from payment providers including FPX, DuitNow, Maybank2u, CIMB Clicks, Public Bank Online Banking, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay and cryptocurrency wallet addresses.
• Third-party identity verification services: Where as126 uses a third-party KYC or identity verification service to validate documents submitted by Players, that service may return verification results and risk scores to as126.
• Fraud detection and anti-money-laundering systems: Automated screening tools may collect and analyse behavioural and transactional signals as part of our regulatory compliance obligations.

as126 Processes your Personal Data for the following clearly defined purposes:

• Account management: Creation, maintenance, authentication and administration of your Player Account, including password resets and Account closure procedures.
• Identity and age verification (KYC): Verifying that you are who you claim to be, that you meet the minimum age requirement of 21 years, and that you are not a politically exposed person or subject to sanctions screening.
• Transaction processing: Facilitating deposits and withdrawals through your chosen payment method, reconciling payment records and handling disputes.
• Regulatory compliance: Meeting our obligations under applicable anti-money-laundering laws, licensing conditions and reporting requirements mandated by our regulatory authority.
• Responsible gambling: Monitoring account activity for indicators of problem gambling, processing self-exclusion requests, maintaining deposit limit records and communicating responsible gambling resources to players where appropriate.
• Customer support: Responding to your enquiries, resolving complaints and maintaining records of support interactions for quality assurance.
• Platform improvement and analytics: Analysing usage patterns to improve game selection, site performance, user interface design and promotional relevance — using aggregated or pseudonymised data where possible.
• Marketing communications: Sending promotional offers, bonus notifications and platform updates to players who have opted in to marketing communications. You may opt out at any time by contacting us.
• Security and fraud prevention: Detecting and preventing unauthorised access, cheating, money laundering, payment fraud and other prohibited conduct as defined in our Terms & Conditions.

as126 Processes your Personal Data on the following legal bases, which may apply individually or in combination depending on the specific Processing activity:

• Contractual necessity: Processing required to perform our obligations under the Account Agreement, including account administration, transaction processing and customer support.
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including anti-money-laundering requirements, KYC obligations and reporting requirements imposed by our licensing authority.
• Legitimate interests: Processing carried out in pursuit of as126's legitimate business interests, including fraud prevention, security monitoring, platform analytics and responsible gambling monitoring, provided these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, informed and specific consent, primarily in the context of marketing communications. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of Processing prior to withdrawal.

as126 does not sell, rent or trade your Personal Data to third parties for their own marketing or commercial purposes. Personal Data is shared only in the following limited and controlled circumstances:

• Payment service providers: We share transaction-relevant data with regulated payment processors (including FPX operators, DuitNow, e-wallet providers and cryptocurrency processors) to the extent required to complete deposit and withdrawal transactions.
• Identity verification services: We engage regulated third-party KYC providers to verify the identity and age of Players. These providers receive only the specific data required for verification and are contractually bound to data protection obligations.
• Game software providers: Game providers may receive anonymised or pseudonymised session data for game performance monitoring. They do not receive personally identifiable financial or identity data.
• Fraud and security service providers: We use third-party anti-fraud and security analytics services that may process Technical Data and transaction patterns to detect and prevent prohibited conduct.
• Regulatory and law enforcement authorities: We are required by law and our licensing conditions to disclose certain information to our licensing authority, financial intelligence units, or law enforcement agencies upon receipt of a lawful request or as part of mandatory reporting obligations.
• Professional advisers: Lawyers, auditors and other professional advisers who provide services to as126 may access limited Personal Data on a confidential, need-to-know basis and are bound by professional secrecy obligations.

as126 operates internationally and may Process or store Personal Data on servers or through service providers located outside of Malaysia. When Personal Data is transferred outside of Malaysia to jurisdictions that may not provide an equivalent level of data protection, as126 implements appropriate safeguards, which may include:

• Data processing agreements incorporating standard contractual clauses approved by relevant data protection authorities;
• Binding corporate rules where applicable within affiliated entities;
• Transfers to jurisdictions recognised as providing an adequate level of data protection.

By using the Platform, you acknowledge that your Personal Data may be transferred to and Processed in countries outside Malaysia. as126 takes commercially reasonable steps to ensure that any international transfers are conducted in compliance with applicable data protection standards.

as126 retains your Personal Data only for as long as is necessary for the purposes for which it was collected, and in accordance with applicable legal and regulatory requirements. The following general retention periods apply:

• Account data (identity, contact, financial records): Retained for the duration of the Account relationship and for a minimum of five (5) years following Account closure, in compliance with anti-money-laundering record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial record-keeping requirements.
• KYC and verification documents: Retained for the period required by our licensing authority, typically five (5) years from the date of submission or Account closure, whichever is later.
• Support and communications records: Retained for a period of three (3) years from the date of the interaction, unless a longer retention period is required in connection with an ongoing dispute or regulatory matter.
• Marketing preferences and consent records: Retained for the duration of the Account and for a reasonable period thereafter as evidence of consent or opt-out status.

After the applicable retention period expires, Personal Data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

as126 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device by a web browser. The categories of cookies used on the Platform are as follows:

Essential cookies are necessary for the Platform to function correctly and cannot be disabled without significantly impairing your experience. Functional and Analytics cookies are deployed where you have consented to their use or where as126 has a legitimate interest in doing so. You may adjust your browser settings to decline non-essential cookies, but doing so may affect the functionality of certain features.

Subject to applicable law and our legal obligations (including anti-money-laundering record-keeping requirements), you have the following rights in relation to your Personal Data held by as126:

To exercise any of the above rights, please contact our Data Protection team via email at [email protected] or through the 24/7 live chat on the Platform. We will respond to all verified requests within 30 days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

The as126 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, use or store Personal Data from any individual under the age of 21. As part of our KYC process, every registered Player is required to provide documentary proof of age before any betting activity or withdrawal is permitted.

If as126 becomes aware that it has inadvertently collected Personal Data from a person under the age of 21, we will promptly suspend the associated Account, delete all Personal Data collected from that individual (except insofar as required by law), and refund any deposits made. Winnings generated by the underage player shall be forfeited in accordance with our Terms & Conditions.

If you have reason to believe that a minor has registered an Account on the Platform, please contact us immediately at [email protected].

as126 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, alteration, disclosure or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers;
• Encryption of Personal Data and financial records at rest using industry-standard encryption protocols;
• Access controls limiting the processing of Personal Data to authorised personnel on a strict need-to-know basis;
• Regular third-party security assessments, penetration testing and vulnerability scanning of Platform infrastructure;
• Multi-factor authentication requirements for administrative access to production systems;
• Incident response procedures for the prompt detection, containment and reporting of any Personal Data breach.

Notwithstanding the foregoing, no data transmission over the internet or storage system can be guaranteed as completely secure. While as126 takes all commercially reasonable precautions to protect your Personal Data, we cannot guarantee absolute security. You are encouraged to use a strong, unique password for your Account and to notify us immediately if you suspect any unauthorised access.

as126 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data Processing practices, applicable law, or the services we offer. When changes are made, we will update the "Last Updated" date at the top of this page and, where the changes are material, provide reasonable notice to registered Players via email or a prominent notice on the Platform.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement and acceptance of the revised terms. If you do not agree with the updated Policy, you should discontinue use of the Platform and contact us to close your Account and request deletion of your data (subject to applicable retention obligations).

We encourage all Players to review this Policy periodically to remain informed about how we are protecting their information.

If you have any questions, concerns or requests regarding this Privacy Policy or the way in which as126 handles your Personal Data, please contact our Data Protection team using the following channels. We are committed to responding to all privacy-related enquiries promptly and transparently.

For subject access requests, please include your registered email address, Account username and a description of the specific data or right you wish to exercise. We may request additional identity verification before processing data subject requests to protect against unauthorised disclosures.