Privacy Policy — asia95

1 Introduction & Scope

asia95 ("we", "us", "our") operates the online gaming and sportsbook platform accessible at asia95.app (the "Platform"). This Privacy Policy describes how asia95 collects, processes, stores, shares, and protects personal data in connection with your use of the Platform, as well as the rights available to you as a data subject.

This Privacy Policy applies to all users of the asia95 Platform, including registered account holders, visitors browsing the Platform without an account, and any individual whose personal data asia95 processes in connection with the operation of its services. It applies to data collected through the Platform, through our customer support channels, and through any interaction you have with asia95 in connection with your account.

asia95 processes personal data in compliance with applicable international data protection standards and the data obligations imposed under the international gaming authority regulatory framework under which the Platform operates. By creating an asia95 account and using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2 Data We Collect

asia95 collects personal data in the following categories, depending on your level of interaction with the Platform:

2.1 Data You Provide Directly. The majority of personal data asia95 processes is provided directly by you — through the registration form, KYC document upload, deposit and withdrawal requests, and communications with customer support.

2.2 Data Collected Automatically. When you access the Platform, our systems automatically collect certain technical data, including your IP address, device identifiers, browser information, and session activity logs. This data is used for security monitoring, fraud prevention, and platform optimisation. It does not identify you personally in isolation but may be combined with other data to do so.

2.3 Data from Third Parties. asia95 may receive data about you from third-party identity verification providers, payment processing partners, and fraud prevention services. This data is used exclusively for KYC verification, AML compliance, and account security purposes and is handled with the same level of protection as data you provide directly.

3 How We Use Your Data

asia95 processes personal data for the following defined purposes:

• Account registration and management — creating and maintaining your asia95 account, verifying your identity, and administering your VIP tier and account settings;
• Platform operation — enabling you to place bets, play casino games, access the sportsbook, and use all other Platform features;
• Transaction processing — processing MYR deposits and withdrawals through your chosen payment methods (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and others);
• Regulatory compliance — fulfilling KYC, AML, and responsible gaming obligations imposed by international gaming authority requirements, including age verification (21+) and source-of-funds checks;
• Security and fraud prevention — monitoring for unauthorised account access, unusual transaction patterns, multi-accounting, and other prohibited conduct described in the Terms & Conditions;
• Customer support — responding to your enquiries, resolving disputes, and administering the internal complaints process;
• Responsible gaming monitoring — tracking gaming patterns to identify signs of problem gambling behaviour and administering self-exclusion and deposit limit tools;
• Marketing communications — sending you information about promotions, bonuses, and new features on the Platform, where you have consented to receive such communications or where we have a legitimate interest in doing so. You may opt out of marketing emails at any time.

4 Legal Basis for Processing

asia95 processes your personal data on the following legal bases:

• Contract performance — processing necessary to provide the Platform services under the asia95 Terms & Conditions, including account management and transaction processing;
• Legal obligation — processing required to comply with KYC, AML, and responsible gaming regulations imposed by the international gaming authority under whose framework asia95 operates;
• Legitimate interests — processing for fraud prevention, security monitoring, platform improvement, and direct marketing to existing customers where these interests are not overridden by your rights and freedoms;
• Consent — processing for optional marketing communications, analytics cookies, and any other processing for which asia95 specifically requests your consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing & Disclosure

asia95 does not sell your personal data. We may share your data with the following categories of recipients in the circumstances described:

5.1 Service Providers. asia95 engages third-party service providers to assist in operating the Platform, including payment processing partners (eWallet operators, banks), identity verification providers, IT infrastructure and hosting providers, customer support platform operators, and email delivery services. These providers are contractually bound to process your data only on asia95's instructions and in compliance with applicable data protection requirements.

5.2 Regulatory Authorities. asia95 is obligated to share personal data and transaction records with the international gaming authority and other regulatory bodies upon lawful request, and in connection with AML and fraud reporting obligations. Such disclosures are made in compliance with regulatory requirements and are not subject to player consent.

5.3 Law Enforcement. asia95 may disclose personal data to law enforcement agencies or government authorities where required by applicable law, court order, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of asia95, its players, or the public.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of all or a material portion of asia95's business assets, personal data held by asia95 may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and any change in data controller identity via the registered email address on your account.

6 International Data Transfers

asia95 may process or store your personal data on servers located outside of Malaysia. Where your data is transferred outside your country of residence, asia95 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applicable in Malaysia, including through contractual data transfer agreements with receiving parties.

asia95's core infrastructure and data processing operations are conducted within secure, internationally compliant data centre environments. Details of the specific countries to which your data may be transferred, and the safeguards applicable, are available upon written request to our data protection contact.

7 Data Retention

asia95 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law and regulatory requirements. The following indicative retention periods apply:

• Account and identity data — retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with international gaming authority AML record-keeping requirements;
• Transaction and gaming records — retained for a minimum of five (5) years following the transaction date, for audit, dispute resolution, and AML compliance purposes;
• Customer support communications — retained for three (3) years following the resolution of the relevant enquiry or complaint;
• Technical and session data — retained for up to thirteen (13) months for security monitoring and platform analytics purposes, after which it is anonymised or deleted;
• Marketing consent records — retained for the duration of your account or until consent is withdrawn, plus an additional one (1) year for compliance audit purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to you.

8 Cookies & Tracking Technologies

The asia95 Platform uses cookies, web beacons, and similar tracking technologies. The following categories of cookies are used:

• Strictly necessary cookies — essential to the operation of the Platform, including session authentication, security token management, and preference storage. These cannot be disabled as they are required for the Platform to function;
• Analytical and performance cookies — used to collect aggregated, anonymised data about how the Platform is used, which pages are visited most, and how long sessions last. This data helps asia95 improve the Platform experience for Malaysian players;
• Functional cookies — used to remember your preferences, such as language settings, and to personalise your experience on return visits;
• Marketing cookies — used to track referral sources and measure the effectiveness of our promotions. These are only set with your consent.

You can manage your cookie preferences from the Platform's cookie settings panel. Disabling non-essential cookies will not affect your ability to use the core gaming and betting features of the Platform.

9 Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by asia95:

• Right of access — you may request a copy of the personal data asia95 holds about you;
• Right to rectification — you may request correction of inaccurate or incomplete personal data held about you;
• Right to erasure — you may request deletion of your personal data, subject to asia95's regulatory retention obligations (for example, AML record-keeping requirements mean certain data cannot be deleted on request);
• Right to restrict processing — you may request that asia95 restrict processing of your data in certain circumstances, for example while a rectification request is being assessed;
• Right to data portability — you may request that asia95 provide your data in a structured, machine-readable format for transfer to another service provider, where this is technically feasible;
• Right to object — you may object to processing carried out on the basis of legitimate interests, including direct marketing. Upon receipt of a valid objection to marketing, asia95 will cease marketing communications immediately;
• Right to withdraw consent — where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact asia95 customer support with sufficient information to identify your account. asia95 will respond to verified data rights requests within thirty (30) days of receipt.

10 Security Measures

asia95 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure, including:

• TLS 1.3 encryption for all data in transit between your device and the Platform;
• AES-256 encryption for personal data stored in asia95's systems;
• Role-based access controls limiting internal access to personal data to personnel with a legitimate business need;
• Multi-factor authentication requirements for internal staff with administrative access to player data systems;
• Regular security assessments, penetration testing, and vulnerability scanning by qualified information security professionals;
• Incident response procedures for detecting, reporting, and responding to personal data breaches, including notification to affected players and relevant authorities as required by applicable law.

While asia95 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials and for enabling available security features such as two-factor authentication.

11 Minors & Age Verification

The asia95 Platform is strictly for individuals aged 21 and above. asia95 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the registration and KYC process. If asia95 discovers that a minor has registered an account, that account will be immediately suspended, all data associated with the account will be handled in accordance with applicable law, and any deposits made will be returned to the deposit source.

12 Changes to This Privacy Policy

asia95 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes — defined as changes that materially affect how we process your personal data or the rights available to you — will be communicated to your registered email address at least seven (7) days before they take effect.

Non-material changes (including corrections of typographical errors or minor clarifications) may be made without advance notice. The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how asia95 protects your data.

13 Contact & Data Rights Requests

For any questions about this Privacy Policy, to exercise your data rights, or to raise a complaint about asia95's data practices, please contact our data protection team via customer support. Our support team is available 24/7 via live chat on the Platform.

You may also contact us by email at: [email protected] (plain text only — not a clickable link). Please include your registered username and a description of your request so we can process it efficiently.

If you are not satisfied with asia95's response to a data rights request or privacy complaint, you have the right to escalate the matter to the relevant data protection authority or the international gaming authority that oversees asia95's regulatory compliance.