aseptoto Privacy Policy

Introduction

aseptoto respects the importance of privacy and recognises that gambling-related information may be sensitive. This Privacy Policy describes the general practices applying when a person visits aseptoto, communicates with support, uses account functionality or participates in identity and payment procedures.

This policy should be read together with the aseptoto Terms & Conditions and Responsible Gambling information. By using aseptoto, a visitor acknowledges the practices described here. Where consent is legally required for a particular activity, aseptoto will seek that consent separately rather than treating general website use as consent for every purpose.

Scope and Definitions

This policy applies to personal information processed through the aseptoto website and associated support or account services. “Personal information” means information relating to an identified or reasonably identifiable individual. “Processing” includes collecting, recording, organising, using, disclosing, storing, correcting and deleting that information.

References to “you” and “user” include website visitors and account holders. References to “we”, “our” and “platform” mean aseptoto. Aggregated or irreversibly anonymised statistics that cannot reasonably identify a person are not treated as personal information under this policy.

Information We May Collect

The categories collected depend on how a person interacts with aseptoto. Merely reading public information generally requires less data than maintaining an account, completing KYC verification or reviewing an MYR transaction.

How Information Is Collected

Information may be collected directly when a user supplies details, requests support, completes verification or enters payment information. aseptoto may also collect technical information automatically through server logs, necessary cookies and similar technologies used to maintain security and website functionality.

Where lawful and necessary, information may be received from identity verification, fraud prevention, payment or technical service providers. Transaction records may refer to familiar Malaysian channels such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank or Hong Leong. The appearance of a payment name in this policy does not guarantee that the method is currently available.

Purposes of Data Processing

aseptoto may process personal information to provide requested services, maintain an account, respond to enquiries and present content suited to language, device or general regional settings. Information may also be used to verify identity and age, process or reconcile eligible transactions, prevent fraud and protect platform integrity.

Additional purposes include complying with lawful obligations, resolving disputes, enforcing aseptoto terms, maintaining audit records and applying responsible gambling safeguards. Where promotional communication is offered, preferences should be respected and an available withdrawal of consent should not affect processing already completed lawfully.

Legal Grounds for Processing

Depending on the relevant activity and applicable law, aseptoto may rely on the performance of an agreement, compliance with a legal obligation, legitimate interests in operating and securing the service, protection of vital interests or a user's consent.

A legitimate-interest assessment should consider the purpose, necessity and potential effect on the individual. Consent may be withdrawn for future processing where consent is the legal basis, but withdrawal does not invalidate earlier lawful use or override information that aseptoto must retain for legal, fraud prevention or dispute purposes.

KYC Documents and Payment Information

Identity verification may require a valid MyKad, Malaysian driving licence or passport, a recent proof of address and, in some cases, a selfie holding the submitted document. aseptoto uses this information to confirm adult eligibility, reduce impersonation, examine payment ownership and meet applicable compliance expectations.

Users should upload documents only through a trusted aseptoto page protected by HTTPS. Identity documents must not be sent through an unsecured public chat. Where permitted by verification requirements, users may cover non-essential sensitive identification digits while ensuring that necessary names, photographs and validity details remain visible.

Payment information may include the method, amount, currency, time, status and limited account references. aseptoto should not request a complete online banking password, eWallet password or one-time authorisation code through ordinary support messages.

Cookies, Device Data and Analytics

Cookies are small files stored on a browser or device. Strictly necessary cookies may support navigation, session continuity, security and preference storage. Other technologies may help aseptoto understand page performance, common device types and broad usage trends.

Users can generally manage cookies through browser controls, although disabling necessary storage may cause parts of aseptoto to operate incorrectly. Analytics should be configured to collect no more information than reasonably needed and should not be used to make unsupported assumptions about a user's financial position.

Disclosure to Service Providers and Authorities

aseptoto may disclose limited information to service providers that support hosting, security, identity verification, payment processing, customer assistance, professional advice or technical operations. Such providers should receive only data relevant to their task and remain subject to appropriate confidentiality and security obligations.

Information may also be disclosed where required by a valid legal process, to establish or defend legal rights, to investigate suspected fraud or to protect a person from serious harm. aseptoto does not claim to be regulated by the Malaysian government and will not use the name or logo of a Malaysian authority to create a false endorsement.

International Data Transfers

Internet services may use infrastructure or providers located outside Malaysia. Consequently, aseptoto information may be processed in a country with privacy rules different from those applying in Malaysia. Where required, reasonable contractual, organisational or technical safeguards should support an international transfer.

International processing does not remove the aseptoto obligation to handle information consistently with this policy. The level of protection, provider role and sensitivity of the information should be considered before a transfer is approved.

Data Retention and Deletion

aseptoto retains personal information only for as long as reasonably necessary for the stated purpose or an applicable legal, accounting, fraud prevention, dispute or responsible gambling requirement. Retention periods may differ between routine website logs, support correspondence, KYC records and transaction information.

Closing an account or stopping use does not always permit immediate deletion. Certain records may need to remain restricted for a defined period to demonstrate compliance, resolve a chargeback, prevent duplicate accounts or maintain self-exclusion. When retention is no longer justified, aseptoto should securely delete or anonymise the data.

Information Security

aseptoto uses proportionate safeguards intended to protect confidentiality, integrity and availability. Controls may include encrypted transmission, restricted access, logging, system monitoring, document handling procedures, staff awareness and incident response measures.

No online system can guarantee absolute security. Users must also protect their aseptoto credentials, use a unique password, secure their devices and avoid sharing verification codes. Suspected unauthorised access should be reported promptly so that protective action can be considered.

User Rights and Requests

Subject to applicable law and identity confirmation, a user may request access to personal information held by aseptoto, correction of inaccurate details, deletion, restriction, objection or a portable copy where such a right applies. Users may also withdraw consent for future processing based solely on consent.

A request should clearly identify the relevant account or interaction without sending unnecessary documents. aseptoto may ask for proportionate evidence to prevent disclosure to an impersonator. A request may be limited or refused where an exemption, competing legal obligation, fraud concern or another person's rights apply, and the reason should be explained where appropriate.

Age Restriction and Children’s Information

aseptoto casino and gambling information is intended for adults aged 21 and above. aseptoto does not knowingly seek personal information from children or permit underage gambling participation. Age verification may be used to enforce this restriction.

A parent or guardian who reasonably believes that an underage person has provided information should contact aseptoto. Relevant data will be reviewed and appropriate restriction or deletion steps will be considered, subject to legal and safeguarding requirements.

Policy Changes and Contact Us

aseptoto may update this Privacy Policy to reflect changes in technology, security, services, legal requirements or data practices. Material revisions will be identified by changing the effective date and may be communicated through an appropriate website notice.

Questions, concerns and privacy requests may be directed to the plain-text website email shown below. Users should explain the request clearly and should not include passwords, one-time security codes or unnecessary identity documents in an initial message.