Privacy Policy

1 Introduction

Asustogel ("the Company", "we", "us", "our") operates the online gaming and sports betting platform accessible at asustogel.cam ("the Platform"). We are committed to protecting the privacy and personal data of all individuals who use our Platform, access our services, or interact with us in any capacity ("you", "your", "the User").

This Privacy Policy describes the types of personal information we collect, the purposes for which it is collected and processed, how it is stored and protected, the circumstances under which it may be shared, and your rights in relation to that data. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, you should not access or use the Platform.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, Asustogel.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of the Data Controller under a contractual obligation.
• "KYC Data" means identity and verification documents collected as part of Know Your Customer procedures required by our licensing authority.
• "Cookies" means small text files placed on your device by the Platform for functionality, analytics, and personalisation purposes.
• "Sensitive Personal Data" means data categories that carry a higher level of protection, including financial account information, identification documents, and data relating to responsible gambling self-assessments.

3 Data Controller

The Data Controller responsible for your Personal Data is Asustogel, the operator of the Platform at asustogel.cam. The Company holds an international gaming licence and processes personal data in accordance with the data protection requirements of that regulatory framework.

For all data-related enquiries, access requests, or complaints, please contact our Data Protection point of contact via the details set out in Section 17 of this Policy.

4 Personal Data We Collect

We collect the following categories of Personal Data in connection with your use of the Platform:

4.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify the 21+ age requirement).
• Malaysian NRIC number or passport number (for KYC verification).
• Residential address, including city and postcode (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam).
• Nationality and country of residence.

4.2 Contact Data

• Email address (used for account communications and support).
• Mobile phone number (used for two-factor authentication and account security notifications).

4.3 Financial Data

• Payment method details necessary to process deposits and withdrawals, including e-wallet identifiers (Touch 'n Go eWallet account reference, Boost account reference), bank account numbers (Maybank, CIMB, Public Bank, Hong Leong, RHB), and card details where applicable.
• Transaction history, including deposit amounts, withdrawal amounts, dates, and methods.
• Cryptocurrency wallet addresses used for crypto deposits or withdrawals (BTC, ETH, USDT, BNB).

4.4 KYC Documentation

• Scanned or photographed copies of government-issued identity documents.
• Proof-of-address documents (utility bills, bank statements).
• Source-of-funds documentation where required by compliance procedures.

4.5 Technical & Usage Data

• IP address, device type, operating system, and browser type.
• Login timestamps, session durations, and access logs.
• Geolocation data (country/region level, derived from IP address).
• Pages visited, games played, betting patterns, and in-platform behaviour.

4.6 Responsible Gambling Data

• Self-declared responsible gambling assessments or preferences.
• Deposit limits, session limits, and self-exclusion settings configured by the User.
• Flags raised by our automated responsible gambling monitoring systems.

5 How We Collect Personal Data

We collect Personal Data through the following means:

• Direct submission: Data you provide when registering, completing KYC, making deposits, contacting support, or updating your account profile.
• Automated collection: Data collected automatically when you use the Platform, including via cookies, server logs, and analytics tools.
• Third-party verification services: Identity and age verification data obtained from licensed KYC providers used to validate your documentation.
• Payment processors: Confirmation data received from payment processors, including Touch 'n Go eWallet, DuitNow, FPX, and bank networks, relating to the completion of transactions.
• Fraud and compliance screening: Data returned by third-party AML screening services and fraud detection tools used to protect the integrity of the Platform.

6 Legal Basis for Processing

We process your Personal Data on the following legal grounds:

7 How We Use Your Personal Data

Asustogel uses the Personal Data we collect for the following purposes:

• To create, verify, and manage your Account on the Platform.
• To process deposits received via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Malaysian bank transfers, and cryptocurrency, and to facilitate the withdrawal of your winnings.
• To complete KYC verification as required by our international licensing authority and AML obligations.
• To communicate with you regarding your account, transactions, security alerts, and platform updates.
• To provide and improve customer support services, including via our 24/7 live chat function.
• To operate our responsible gambling programme, including monitoring for signs of problem gambling behaviour and enforcing self-imposed limits.
• To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• To comply with legal and regulatory obligations under our international gaming licence.
• To personalise your experience on the Platform based on your gaming preferences and history.
• To send you marketing communications about promotions, new games, and special offers, where you have opted in to receive such communications.

8 Data Sharing & Disclosure

We do not sell your Personal Data to third parties. We may share your Personal Data with the following categories of recipients, in each case only to the extent necessary for the stated purpose:

8.1 Service Providers and Data Processors

We engage third-party service providers who process Personal Data on our behalf under binding data processing agreements. These include:

• KYC and identity verification providers.
• Payment processors and gateway operators (including providers supporting Touch 'n Go eWallet, Boost, DuitNow, FPX, and Maybank integrations).
• IT infrastructure, hosting, and cloud service providers.
• AML and fraud detection screening services.
• Customer support platform providers.
• Analytics and platform optimisation service providers.

8.2 Regulatory and Legal Authorities

We may disclose your Personal Data to our licensing authority, regulatory bodies, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of the Company, its users, or third parties.

8.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of the Company's assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. You will be notified of any such transfer via email or a prominent Platform notification.

9 International Data Transfers

As an internationally operated Platform, your Personal Data may be transferred to and processed in countries outside Malaysia, including countries in which our licensing authority is based, and countries in which our data processors operate. Where such transfers occur, we ensure that appropriate safeguards are in place, including contractual protections consistent with international data protection standards.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to countries outside your country of residence, including outside Malaysia, on the basis described in this Policy.

10 Data Retention

We retain your Personal Data for as long as your Account remains active and for a period thereafter as required by applicable regulatory, legal, and licensing obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised.

11 Cookies & Tracking Technologies

The Platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and provide us with analytics data to improve Platform performance. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These enable secure login, session management, and fraud prevention. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, game history, and display preferences, to provide a more personalised experience.
• Analytics Cookies: Collect aggregated, anonymised data about how users navigate the Platform. This information helps us identify areas for improvement and optimise the user experience. No personally identifiable data is shared with analytics providers.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and other security threats by identifying anomalous behaviour patterns.

12 Children's Privacy

The Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. If we become aware that an Account has been registered by or on behalf of a person under the age of 21, we will immediately close the Account, delete all associated Personal Data, and — where applicable — return any deposited real-money funds.

If you believe that a person under the age of 21 has registered an Account on the Platform, please contact us immediately at [email protected] so that we may take appropriate action.

13 Security Measures

Asustogel implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption at rest for sensitive stored data, including KYC documents and financial records.
• Role-based access controls limiting employee access to Personal Data on a need-to-know basis.
• Two-factor authentication (2FA) available for all registered user accounts.
• Continuous security monitoring and intrusion detection systems.
• Regular third-party security audits and penetration testing of Platform infrastructure.
• Staff training on data protection and information security obligations.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay and take all reasonable steps to contain and remediate the breach.

14 Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in respect of your Personal Data held by Asustogel:

• Right of Access: Request confirmation of whether we process your Personal Data and, if so, a copy of that data.
• Right to Rectification: Request correction of inaccurate or incomplete Personal Data without undue delay.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our regulatory retention obligations.
• Right to Restriction of Processing: Request that we restrict processing of your data in specific circumstances, including where you contest the accuracy of the data or object to our processing.
• Right to Data Portability: Receive your Personal Data in a structured, commonly used, machine-readable format and transmit it to another data controller.
• Right to Object: Object to processing of your Personal Data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our overriding legal and contractual grounds.
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

15 Third-Party Links

The Platform may contain references to third-party payment processors or services (such as Touch 'n Go eWallet, Boost, Maybank, or CIMB) in the context of deposit and withdrawal instructions. Where you navigate to third-party services, their own privacy policies will apply and Asustogel accepts no responsibility for the data practices of third-party operators. We encourage you to review the privacy policies of any third-party services you use in connection with your Account.

16 Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform functionality. Where changes are material, we will provide reasonable advance notice to registered users via the email address associated with their Account and/or a prominent notification on the Platform.

The "Last Updated" date at the top of this Policy indicates when the current version took effect. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

17 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us through the following channels:

• Email: [email protected] — please include "Privacy Request" in your subject line.
• Live Chat: Available 24/7 via the live chat widget on the Platform.

If you believe that Asustogel has failed to handle your Personal Data in accordance with this Policy or applicable data protection standards, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. Malaysian users may refer to the Department of Personal Data Protection (JPDP) for guidance on complaint procedures under the Personal Data Protection Act 2010.