Aseptogel Privacy Policy – Malaysia Player Data Protection

aseptogel collects several categories of personal data from users. Understanding what is collected helps you make more informed decisions about your use of our platform.

Registration & Identity Data:

• Full name as it appears on an official identification document (Malaysian MyKad or passport)
• An active Malaysian mobile phone number
• An accessible email address
• Date of birth (for age verification — must be 18 or above)
• Passwords stored in a hashed format that cannot be decrypted by anyone, including staff aseptogel

Financial and Transaction Data:

• Payment method details used — including partially masked account numbers for Touch 'n Go eWallet, GrabPay, DuitNow, FPX via Maybank2u and CIMB Clicks, Boost, and ShopeePay
• Deposit and withdrawal history, including amounts, dates, times, and methods used
• Current account balance and fund movement records
• Identity verification (KYC) details submitted during the withdrawal process

Gaming Activity Data:

• Betting history including game type, amount, time, and outcome
• Game preferences, favourite slots, and gameplay activity patterns
• Win and loss records by session and time period
• Responsible gaming features enabled, such as deposit limits and self-exclusion

Technical & Device Data:

• IP address and approximate location based on IP
• Device type, operating system, and web browser version
• Unique device identifier for the purpose of detecting multiple accounts
• Access logs including the date, time, and pages visited within the platform aseptogel

Your personal data is collected in a number of ways as you interact with the platform aseptogel. Understanding how this data is collected helps you manage your digital footprint more consciously.

• Directly from you: When you complete the registration form, update your account profile, contact the support team, submit KYC documents, or activate responsible gaming features, you are providing data directly to aseptogel.
• Automatically collected during platform use: When you browse, log in, play, or make a transaction at aseptogel, our systems automatically record technical data such as your IP address, device type, and activity history. This is standard operational practice to ensure the security and integrity of the platform.
• Through cookies and similar technologies: Platform aseptogel uses cookies to maintain your login session, remember your language and display preferences, and collect anonymous analytics data for platform improvement. Further details on cookies are explained in Section 6.
• From third-party service providers: In some cases, aseptogel may receive information from payment providers for transaction verification, or from licensed game providers for relevant game records.

All data collection takes place in an environment protected by 256-bit SSL encryption. Data transmitted between your device and the server aseptogel cannot be intercepted or read by any third party while in transit.

aseptogel uses collected personal data solely for legitimate and necessary purposes. Below is a full list of the purposes for which data is used, along with the legal justification for each category.

• Account Management: Creating and managing your account, processing registrations, and ensuring only one account per user exists in the system aseptogel. This is a basic contractual requirement.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay, and handling withdrawals to accounts registered in your name. Without this data, financial transactions cannot be carried out.
• Identity Verification (KYC): Comply with Know Your Customer (KYC) requirements mandated by applicable financial regulations, including age verification (18 and above) and anti-money laundering measures.
• Platform Security: Detecting and preventing fraud, duplicate accounts, bot usage, and activities that could compromise the integrity of the platform aseptogel and the well-being of other users.
• Platform Improvement: Analysing usage patterns in aggregate (not at the individual level) to improve platform performance, add features users want, and deliver a better gaming experience over time.
• Service Communications: Sending important account-related notifications such as transaction confirmations, security alerts, terms updates, and responses to customer support inquiries.
• Marketing Communications (with consent): Sending information about promotions, bonus offers, and platform updates to users who have given explicit consent to receive such communications. You may withdraw this consent at any time.
• Legal Compliance: Fulfilling legal obligations under Malaysia's PDPA and other regulations applicable to aseptogel as the platform operator.

aseptogel does not sell, rent, or share your personal data for third-party marketing purposes. However, there are specific situations where data sharing is operationally or legally necessary and permitted.

Service Providers Directly Involved in Platform Operations:

• Payment Providers: Payment gateways that handle deposit and withdrawal transactions (including Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay operators) receive only the information necessary to process each transaction. They are subject to their own privacy policies and strict data protection obligations.
• Licensed Game Providers: Providers such as Pragmatic Play, PG Soft, Spadegaming, and others may receive anonymised player identifiers for technical purposes only. No names or personally identifiable information are shared.
• Technical Infrastructure Providers: Companies providing cloud computing, security monitoring, or other technical infrastructure services may process data as sub-processors under strict data protection agreements with aseptogel.

Legally Mandated Disclosure:

• aseptogel may disclose data to qualified authorities in Malaysia if required by a court order, warrant, or valid legal directive. In such situations, we will endeavour to notify you where permitted by law.
• In the context of fraud investigations or anti-money laundering inquiries, relevant information may be shared with the appropriate law enforcement authorities.

In all data sharing situations, aseptogel ensuring that recipients have adequate data protection controls in place and use the data solely for the stated purposes. Cross-border data sharing is only carried out with appropriate safeguards.

Protecting your personal data from unauthorised access, disclosure, alteration, or destruction is our foremost technical priority aseptogel. We employ a combination of technical, physical, and procedural measures to maintain a level of security appropriate to the risks involved.

• Encryption in Transit: All communications between your browser and the platform aseptogel protected with TLS 1.3 (Transport Layer Security) protocol using 256-bit encryption. This means that even if someone were to intercept your network traffic, they would be unable to read its contents.
• Encryption of Stored Data: Sensitive data such as payment details and identity verification information is stored in encrypted form within the database aseptogel. Passwords are stored using a one-way hashing algorithm that cannot be decrypted.
• Internal Access Controls: Access to user data within internal systems aseptogel restricted on a need-to-know basis. Staff may only access data required to perform their duties, and all access is recorded in an audit log.
• Two-Factor Authentication (2FA): Internal systems aseptogel requires two-factor authentication for all staff access to sensitive data. Users are also encouraged to enable 2FA on their accounts for an additional layer of protection.
• Regular Security Testing: Penetration testing and security audits are conducted periodically by independent cybersecurity firms. Any vulnerabilities identified are addressed promptly in accordance with established incident response protocols.
• 24/7 Monitoring: Automated monitoring systems operate around the clock to detect unusual activity, suspicious login attempts, or other indicators that may signal a security threat to user data.

Platform aseptogel uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored in your web browser when you visit a website.

You can manage cookies through your web browser settings — most modern browsers such as Chrome, Safari, Firefox, and Edge allow you to view, delete, or block cookies from specific websites. However, disabling essential and security cookies will disrupt core platform functionality aseptogel and may prevent you from logging in properly.

aseptogel does not use third-party cookies for advertising or cross-site tracking purposes. Cookies used are limited strictly to the functions required for this platform.

aseptogel retains your personal data only for as long as necessary for the stated purposes or as required by law. Our retention policy is based on operational needs and applicable legal obligations.

• Active Account Data: For as long as your account remains active at aseptogel, all account and profile data is retained to ensure uninterrupted use of the platform.
• Financial Transaction Records: Deposit, withdrawal, and financial transaction records are retained for a minimum of 7 years from the transaction date to comply with financial reporting and audit requirements mandated under Malaysian law.
• Game Records: Betting and game history is retained for 2 years from the date of activity for dispute resolution and audit purposes. After this period, data is aggregated and anonymised.
• Security Logs: Access logs and security logs are retained for 12 months to facilitate security incident investigations when required.
• After Account Closure: When you close your account at aseptogel, your personal profile data will be deleted or anonymised within 90 days. However, financial and transaction records may be retained for longer due to legal obligations as stated above.

As a user aseptogel and as a data subject under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have specific rights regarding your personal data. aseptogel is committed to respecting and facilitating the exercise of these rights.

To exercise any of the rights above, contact us by email at support@aseptogel.best with the subject line "Privacy Rights Request". Please include your full name, registered phone number, and the type of request you are making. aseptogel will respond within 14 business days and resolve the request within 30 business days from the date a complete request is received.

No fee is charged for the first standard privacy rights request within any 12-month period. Repeated or excessive requests may be subject to a reasonable administrative fee.

Platform aseptogel is strictly restricted to users aged 18 and above. We do not knowingly collect, process, or store the personal data of any individual under the age of 18.

When we confirm or suspect that data from a minor has been collected inadvertently, we will take the following steps immediately:

• Suspend and then close the account in question immediately
• Delete all personal data associated with that minor from our systems aseptogel
• Refunding any deposits made, subject to an appropriate verification process
• Reviewing the age verification process to prevent similar incidents in the future

aseptogel reserves the right to amend, update, or revise this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational circumstances. The date of the most recent update is always displayed at the top of this page.

• For minor changes that do not materially affect your privacy rights, we may update this page without issuing a specific notification.
• For material changes — such as changes to the types of data collected, new purposes for use, or data sharing with new categories of third parties — aseptogel will send a notification via the registered email address or display a prominent notice on the platform at least 14 days before the changes take effect.
• Continued use of the platform aseptogel after the changes take effect will be considered acceptance of the amended policy. If you do not agree with the changes, you have the right to close your account before they come into effect.

We encourage you to review this page periodically to stay informed about how aseptogel protect your personal information.

If you have any questions, concerns, or requests regarding this Privacy Policy or how aseptogel handles your personal data, our team is here to help.

• Privacy Email: support@aseptogel.best (use the subject line "Privacy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 via the platform aseptogel — ideal for urgent questions
• Response Time: Privacy enquiries are expected to be addressed within 3 business days; formal data rights requests are resolved within 30 business days

We take every privacy enquiry seriously and are committed to providing clear, accurate, and helpful responses. If after contacting us you remain unsatisfied with how your request was handled, you have the right to refer the matter to the Malaysian Communications and Multimedia Commission (MCMC) or another relevant body under Malaysia's PDPA.