a6star Privacy Policy

1. Introduction

1.1 a6star respects your right to privacy and is committed to protecting your personal data in accordance with applicable data protection laws and the requirements of our international gaming authority licensing framework.

1.2 This Policy applies to all personal data collected through the a6star website, mobile-optimised platform, customer support channels, and any other interaction you have with a6star in connection with your account or use of our services.

1.3 This Policy should be read alongside the a6star Terms & Conditions and Responsible Gaming Policy, both of which are available on this website. In the event of a conflict between this Policy and those documents on a privacy matter, this Policy prevails.

2. Data Controller

2.1 For the purposes of applicable data protection legislation, a6star is the data controller in respect of personal data collected through the a6star platform. Questions regarding this Policy or our data practices may be directed to the a6star support team via live chat or the contact email displayed on this website.

2.2 a6star operates under an international gaming authority licensing framework and is subject to the data protection requirements imposed by that framework as a condition of its licence.

3. Data We Collect

3.1 a6star collects the following categories of personal data in connection with your account and use of our platform:

Identity Data:

• Full legal name as appearing on your government-issued identity document
• Date of birth
• Gender (where provided)
• Nationality
• Government-issued identity document details (e.g., Malaysian MyKad number, passport number)

Contact Data:

• Email address
• Malaysian mobile phone number
• Residential address (for KYC and correspondence purposes)

Financial Data:

• Payment method details (bank account numbers, e-wallet identifiers) used for deposits and withdrawals
• Transaction history including deposit amounts, withdrawal requests, and gaming activity records
• Source of funds documentation where requested for AML compliance

Technical Data:

• IP address and geolocation data at the time of login and gameplay
• Device type, browser type, and operating system
• Session duration and activity logs
• Cookies and similar tracking technology data (see Section 10)

Communications Data:

• Records of communications with a6star support, including live chat transcripts and email correspondence
• Marketing preference data (opt-in and opt-out records)

4. How We Collect Data

4.1 a6star collects personal data through the following means:

• Direct provision: Information you provide during account registration, KYC verification, deposit and withdrawal requests, and support interactions.
• Automated collection: Technical data collected automatically when you access the a6star platform, including through cookies, server logs, and analytics tools.
• Third parties: Information received from payment processors, identity verification service providers, fraud prevention services, and regulatory data sources in connection with our KYC and AML obligations.

5. How We Use Your Data

5.1 a6star uses personal data collected for the following purposes:

• To create, manage, and maintain your a6star account, including processing your login and authenticating your identity.
• To process deposits and withdrawals and maintain accurate financial records.
• To fulfil our KYC, AML, and responsible gaming obligations under our international gaming authority licensing framework.
• To verify your eligibility to use the a6star platform, including age verification (21 and above).
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities.
• To provide customer support and respond to your queries, complaints, and feedback.
• To send you account-related communications including transactional notifications, security alerts, and responsible gaming messages.
• To send you promotional and marketing communications where you have provided your consent, and to manage your marketing preferences.
• To improve the a6star platform through analytics, user behaviour analysis, and A/B testing.
• To comply with applicable legal and regulatory obligations.

6. Legal Basis for Processing

6.1 a6star processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the a6star Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with KYC, AML, responsible gaming, and regulatory reporting obligations under our licensing framework.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and internal analytics where our legitimate interests are not overridden by your rights and interests.
• Consent: Processing for direct marketing communications where you have provided explicit consent. You may withdraw consent at any time by updating your marketing preferences or contacting support.

7. Disclosure to Third Parties

7.1 a6star does not sell, trade, or rent your personal data to third parties for commercial marketing purposes.

7.2 a6star may disclose your personal data to the following categories of third parties, strictly as required for the stated purposes:

• Payment processors and e-wallet providers: Including Touch 'n Go eWallet, Boost, DuitNow, FPX, and banking institutions, for the purpose of processing deposits and withdrawals.
• KYC and identity verification service providers: For the purpose of verifying your identity and age in compliance with our licensing obligations.
• Fraud prevention and AML services: For the purpose of detecting and preventing fraudulent activity, money laundering, and other prohibited conduct.
• Regulatory authorities and licensing bodies: Where required by our international gaming authority licensing framework or applicable law.
• Law enforcement agencies: Where a6star is legally required to disclose data in connection with a criminal investigation or court order.
• IT infrastructure and hosting providers: Subject to binding data processing agreements that require equivalent data protection standards to those applied by a6star.

7.3 All third parties with whom a6star shares personal data are contractually bound to maintain the confidentiality and security of that data and to use it only for the specified purpose.

8. International Transfers

8.1 Given that a6star operates under an international gaming authority licensing framework, some of the third-party service providers used by a6star may process personal data in jurisdictions outside Malaysia.

8.2 Where personal data is transferred internationally, a6star ensures that appropriate safeguards are in place, including contractual data processing agreements that impose data protection standards equivalent to those applicable under our licensing framework.

9. Data Retention

9.1 a6star retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. In particular:

• KYC documentation and identity verification records are retained for a minimum period as required by our licensing authority's AML requirements — typically a minimum of five (5) years from the date of account closure.
• Financial transaction records are retained for a minimum of five (5) years to comply with AML and financial reporting obligations.
• Account activity logs and gameplay records are retained for three (3) years following account closure, or longer where required by regulatory obligation.
• Marketing consent records are retained for a period sufficient to demonstrate compliance with applicable consent requirements.

9.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents identification of the data subject.

10. Cookies & Tracking Technologies

10.1 a6star uses cookies and similar tracking technologies on the a6star platform for the following purposes:

• Essential cookies: Required for the basic functionality of the platform, including session management, login authentication, and security. These cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how Members use the a6star platform, enabling us to improve the user experience and platform performance.
• Preference cookies: Used to remember your platform settings and preferences, such as language selection and display preferences.

10.2 You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect your ability to use certain features of the a6star platform, including the login function.

11. Security Measures

11.1 a6star implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL encryption for all data transmitted between your device and the a6star platform
• Encrypted storage of personal data and financial records on access-controlled, firewalled servers
• Hashed and salted storage of account passwords — no plaintext password storage
• Regular third-party penetration testing and vulnerability assessments
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need
• Staff training on data protection obligations and incident response procedures

11.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, a6star will notify the relevant regulatory authority and, where required, affected Members, in accordance with applicable breach notification obligations.

12. Your Rights

12.1 Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by a6star:

• Right of access: You may request a copy of the personal data a6star holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. For certain types of data (e.g., name, address), you can update information directly from your account dashboard.
• Right to erasure: You may request deletion of your personal data where a6star no longer has a legitimate legal basis for retaining it. This right is subject to our statutory retention obligations, which may require us to retain certain data notwithstanding your request.
• Right to restriction: You may request that a6star restrict the processing of your personal data in certain circumstances.
• Right to portability: Where processing is based on consent or contractual necessity, you may request a copy of your personal data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests. You have an unconditional right to object to processing for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

12.2 To exercise any of the above rights, please contact the a6star support team via live chat. a6star aims to respond to all data subject requests within thirty (30) days of receipt. Where requests are complex or numerous, a6star may extend the response period by a further sixty (60) days with notification to you.

13. Children & Minors

13.1 The a6star platform is strictly for adults aged 21 years and above. a6star does not knowingly collect personal data from individuals under the age of 21.

13.2 Where a6star discovers or has reason to believe that personal data has been collected from a person under the age of 21, it will suspend the relevant account, delete or anonymise the data collected, and take appropriate action in accordance with its responsible gaming obligations and licensing requirements.

13.3 If you are a parent or guardian and believe that a person under 21 in your care has registered an account with a6star, please contact our support team immediately so that appropriate action can be taken.

14. Changes to This Policy

14.1 a6star reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or licensing requirements. The date of the most recent revision is displayed at the top of this Policy.

14.2 Where material changes are made to this Policy, a6star will notify registered Members via email or prominent notice on the platform. Continued use of the a6star platform following such notification constitutes acceptance of the revised Policy.

15. Contact Us

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or a6star's data processing practices, please contact our support team via the live chat function on the a6star platform, available 24 hours a day, 7 days a week. You may also contact us by email at the address displayed in the footer of the a6star website.

15.2 a6star takes all privacy queries seriously and aims to respond to all formal privacy enquiries within five (5) business days.