Privacy Policy as128 — We Protect Your Data as if It Were Our Own

As128 ("we", "our platform") takes the privacy and security of your personal data extremely seriously. This Privacy Policy describes our practices regarding the information we collect when you use our website as128.win, the as128 mobile app, or any services related to our platform.

This document is prepared in accordance with internationally recognised data protection principles and is intended to give you a clear and honest overview of how your information is managed by as128 from start to finish.

By using the as128 platform, you agree to the terms set out in this Privacy Policy. This policy should be read together with Terms and Conditions as128, which forms part of the overall agreement between you and our platform.

As128 collects your personal information through various means as you interact with our platform. Below is a comprehensive overview of the types of data we collect and their purposes:

As128 never collects sensitive information such as biometric data, health information, or religious beliefs unless specifically required by applicable law.

The personal information we collect is used transparently for the following purposes only. as128 will not use your data for any other purpose without obtaining your consent first:

• Account management and verification — processing your registration, verifying your identity through the KYC process, and ensuring account security at all times.
• Financial transaction processing — handling your deposits, withdrawals, and all financial transactions on the as128 platform securely and efficiently.
• Gaming service provision — grants access to all as128 games including Live Casino, Slots, Bingo, and all other game categories.
• Fraud prevention and security — detecting and preventing suspicious activity, fraud, or any unauthorised use of the platform.
• Legal compliance — fulfilling anti-money laundering (AML) requirements, KYC obligations, and any related regulatory compliance requirements.
• Service improvement — analysing usage patterns in an aggregated and anonymous manner to improve the user experience on the as128 platform.
• Service communications — sending important account-related notifications, security updates, and promotional information that you have consented to receive.

As128 does not sell or transfer member personal data to third parties for commercial purposes. However, in the course of platform operations, as128 may share necessary information with the following parties within a strictly limited scope:

• Payment service providers — financial institutions and e-wallet providers that process your deposit and withdrawal transactions. They are bound by strict confidentiality agreements with as128.
• Platform technology providers — gaming software companies and technical infrastructure providers that enable as128 to operate. Their access to your data is strictly limited to what is necessary only.
• Regulatory bodies and law enforcement agencies — when required by law, court order, or a legitimate request from the relevant authorities. as128 will notify you where possible before disclosing such information.
• Identity verification services — third-party KYC service providers that assist as128 in verifying member identities in accordance with established compliance requirements.

All third parties working with as128 are required to comply with data protection standards equal to or stricter than our own, and are not permitted to use as128 member data for any purpose other than those specified.

Protecting your personal data from unauthorised access, loss, or misuse is a top priority at as128. Our platform employs multiple layers of technical and operational security to ensure your data remains protected at all times:

• 256-bit SSL encryption for all data transmitted between your device and as128's servers — no one can intercept or read your information while in transit.
• Encrypted password storage using modern hashing algorithms — your password is never stored in plain text on any of our servers.
• Role-based access control ensuring that only as128 staff with legitimate work requirements are permitted to access member personal data.
• 24/7 continuous security monitoring to detect any unusual activity or intrusion attempts on as128's infrastructure.
• Regular security audits by independent parties to ensure as128's data protection systems consistently meet the latest industry standards.
• Two-factor authentication (2FA) available to all member accounts as a strongly recommended additional layer of security.

As128 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website.

The types of cookies used by as128 are as follows:

• Essential cookies — required for core platform functions such as login sessions and security. These cookies cannot be disabled as the platform will not function properly without them.
• Performance cookies — collecting information on how you use the as128 platform to help us improve overall performance and user experience.
• Functional cookies — remembering your preferences and settings such as language and currency denomination so you do not need to reset them every time you log in.
• Analytics cookies — helps as128 understand platform usage patterns in an aggregated and anonymous manner for continuous improvement purposes.

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the as128 platform.

As128 respects your rights as the owner of your personal data. The following is a list of rights you hold regarding your personal information on our platform:

To exercise any of the above rights, please contact the as128 support team. We will process your request within 30 business days from the date it is received.

As128 is a platform exclusively for adults aged 18 years and above only. We do not intentionally collect or process any personal data from individuals under the age of 18.

If you are a parent or guardian and believe your minor child has registered or used the as128 platform, please contact our support team immediately. as128 will take action to deactivate the account and permanently delete all associated data upon verification.

As128 employs an age verification process during registration and through our KYC procedures to ensure all members meet the required minimum age.

In operating the as128 platform, your personal data may be processed or stored on servers located outside Malaysia. This occurs when we use cloud infrastructure providers or international technical services to ensure the platform runs fast and stably for users in Malaysia.

When cross-border data transfers occur, as128 ensures that:

• The recipient country or region maintains an equivalent or higher level of data protection than Malaysia.
• Valid and adequate data transfer agreements have been established with all parties involved.
• Equivalent technical security measures are applied to protect your data even during cross-border transfers.

As128 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law. Our general data retention guidelines are as follows:

• Active account data — retained for the duration your account is active and for a specified period after account closure to meet audit and compliance requirements.
• Financial transaction records — retained for a minimum of 7 years in accordance with anti-money laundering legislation in force in Malaysia.
• Support communication records — retained for 3 years from the date of the last interaction for reference and service improvement purposes.
• Technical and security logs — retained for 12 months for security analysis and investigation purposes if needed.

Once the designated retention period has elapsed, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

If you have any questions, concerns, or wish to exercise your privacy rights regarding the personal data we hold, please contact the as128 team through the following channels:

• Live Chat — available 24 hours a day, 7 days a week directly on the as128 platform. This is the fastest way to get a response.
• Email — send your enquiry to [email protected] and we will respond within 1–2 business days.

When contacting us regarding data privacy matters, please clearly state the nature of your request, your as128 account username (if applicable), and any relevant additional information so we can process your request quickly and accurately.

As128 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or relevant technological developments. The "Last updated" date at the top of this document will always reflect the latest version in effect.

For any material and significant changes to how we handle your personal data, as128 will notify you via your registered email or in-platform notification at least 14 days before the changes take effect.

Your continued use of the as128 platform after any updates to our Privacy Policy are published constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your information.