Privacy Policy – asia95 Online Gaming Platform

asia95 ("we", "us", "our") operates the online gaming and sports betting platform accessible at asia95.net. The asia95 Platform is designed for and primarily serves adult users in Malaysia, including players in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, and other regions across the country. asia95 acts as the data controller in respect of personal data collected from Members of the Platform.

For the purposes of this Privacy Policy, "Member" or "you" refers to any individual who has registered an account on the asia95 Platform. "Personal Data" refers to any information relating to an identified or identifiable natural person.

asia95 collects the following categories of personal data from Members:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification number (e.g., MyKad number or passport number).
• Contact Data: Registered email address, mobile phone number, and residential address.
• Financial Data: Bank account details, e-wallet identifiers (such as Touch 'n Go eWallet or DuitNow), and transaction history within the asia95 Platform.
• Account Data: Username, encrypted password, account preferences, bonus status, and verification history.
• Activity Data: Betting and gaming history, login timestamps, session durations, responsible gaming settings, and in-platform communications.
• Technical Data: IP address, browser type and version, device type, operating system, and referring URL.
• KYC Documentation: Copies of identity documents submitted for account verification, including photographs where required.

asia95 collects personal data through the following means:

• Direct Submission: Information you provide during account registration, identity verification, payment processing, or when contacting our support team.
• Automated Collection: Technical and activity data collected automatically through your use of the Platform, including server logs, session tracking, and cookie-based analytics.
• Third-Party Verification: Where necessary, asia95 may receive identity verification data from licensed KYC providers engaged to confirm the accuracy of your submitted documents.
• Payment Providers: Transaction confirmation data received from payment processing partners including FPX, Boost, and other integrated payment gateways.

asia95 processes your personal data for the following purposes:

• To create, maintain, and manage your Member account on the asia95 Platform;
• To verify your identity and confirm eligibility to use the Platform (including age verification — 21+ requirement);
• To process deposits, withdrawals, and other financial transactions in MYR;
• To detect and prevent fraud, money laundering, and other prohibited activities in compliance with applicable AML/CFT regulations;
• To personalise your Platform experience, including displaying relevant promotions and game recommendations;
• To communicate with you regarding your account, including transactional notifications, security alerts, and support responses;
• To send marketing communications where you have provided consent or where a legitimate interest applies;
• To comply with legal and regulatory obligations imposed by the gaming licensing authority under which asia95 operates;
• To improve Platform functionality, performance, and user experience through aggregated analytics.

asia95 processes your personal data under the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Member Account Agreement, including account management and payment processing.
• Legal Obligation: Processing required to comply with regulatory requirements, including AML/CFT obligations, KYC verification, and gaming licensing conditions.
• Legitimate Interests: Processing carried out in pursuit of asia95's legitimate business interests, including fraud prevention, platform security, and analytics, where such interests are not overridden by your rights and freedoms.
• Consent: Processing of data for marketing communications, where your explicit consent has been obtained and recorded.

asia95 does not sell your personal data. We may share your personal data with the following categories of third parties in the circumstances described:

• Payment Service Providers: To process deposits and withdrawals. These include FPX gateway operators, Touch 'n Go, Boost, and bank transfer processors. Each is bound by their own privacy policy and applicable financial regulations.
• KYC & Identity Verification Providers: Licensed third-party verification services engaged to assist with age and identity verification.
• Game Content Providers: Game studios and live casino operators integrated with the asia95 Platform may receive anonymised or session-level data necessary to operate game functionality.
• Regulatory Authorities: asia95 may be required to disclose Member data to gaming regulatory bodies, law enforcement agencies, or financial intelligence units in response to lawful requests or regulatory requirements.
• IT & Infrastructure Service Providers: Cloud hosting, data storage, and cybersecurity vendors engaged by asia95 under data processing agreements that require them to protect your data to the same standard as asia95.

The asia95 Platform is operated with infrastructure hosted in jurisdictions outside Malaysia. Personal data transferred outside Malaysia is subject to appropriate safeguards, including data processing agreements incorporating standard contractual clauses or equivalent protections, to ensure your data receives a comparable level of protection to that afforded within Malaysia.

asia95 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and licensing obligations. Specifically:

• Account and transaction data is retained for a minimum of seven (7) years following account closure, in accordance with AML and gaming licensing requirements;
• KYC documentation is retained for the period required by applicable regulations, typically five (5) years following account closure or the completion of a relevant transaction;
• Marketing consent records are retained for as long as consent remains active, plus a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with asia95's data lifecycle management procedures.

The asia95 Platform uses cookies and similar tracking technologies for the following purposes:

• Essential Cookies: Necessary for the operation of the Platform, including session authentication and security functions. These cannot be disabled.
• Analytics Cookies: Used to understand how Members interact with the Platform, including page views, session durations, and feature usage. Data is aggregated and anonymised.
• Preference Cookies: Used to remember your language preferences and display settings.

asia95 does not deploy third-party advertising cookies, behavioural retargeting pixels, or social media tracking widgets. You may configure your browser to block or delete cookies; however, disabling essential cookies may impair Platform functionality, including the asia95 login process.

asia95 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and the asia95 Platform;
• AES-256 encryption for sensitive data stored in asia95 databases;
• Role-based access controls limiting employee access to Member data on a need-to-know basis;
• Regular security audits and penetration testing conducted by independent third parties;
• Incident response procedures to detect, investigate, and notify affected Members of any confirmed personal data breach.

Notwithstanding these measures, no data transmission over the internet can be guaranteed to be completely secure. Members are responsible for maintaining the confidentiality of their account credentials and should contact support immediately if they suspect any unauthorised account access.

Subject to applicable law and regulatory retention requirements, you have the following rights in respect of your personal data held by asia95:

• Right of Access: You may request a copy of the personal data asia95 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held in your account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to regulatory retention obligations.
• Right to Restrict Processing: You may request that asia95 restrict the processing of your personal data in certain circumstances.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact asia95 at [email protected]. We will respond to all valid requests within 30 calendar days.

With your consent, asia95 may send you marketing communications regarding promotions, new games, and festive campaigns relevant to your account. You may opt out of all marketing communications at any time by:

• Updating your communication preferences in the asia95 account settings;
• Clicking the unsubscribe link in any marketing email; or
• Contacting our support team via live chat or email at [email protected].

Opting out of marketing communications will not affect the delivery of transactional or account-related notifications, which are necessary for the operation of your asia95 account.

The asia95 Platform is strictly for use by individuals aged 21 and above. asia95 does not knowingly collect or process personal data of individuals under the age of 21. If asia95 becomes aware that personal data has been collected from an underage individual, the account will be immediately closed, all data will be deleted, and any funds forfeited in accordance with the Terms & Conditions. If you believe an underage individual has registered an account, please notify us immediately at [email protected].

asia95 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to Members via registered email or a prominent notice on the Platform prior to the change taking effect. The effective date at the top of this Policy will be updated accordingly. Continued use of the Platform following notification of changes constitutes acceptance of the revised Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by asia95, please contact our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 through the asia95 Platform
• Response time: Within 30 calendar days for formal data rights requests; within 24 hours for general queries via live chat.