Auraasia Privacy Policy – Malaysia Player Data Protection

1 Introduction

Welcome to the Privacy Policy page auraasia. This document details how the AuraAsia platform under the domain auraasia.onl collect, use, store, and protect your personal information as a registered player or visitor to our website.

At auraasia, we understand that trust is the foundation of our relationship with every player. That is why we take a transparent and responsible approach to every aspect of personal data handling. Your privacy is not merely a legal obligation for us — it is a core value that guides every operational decision on our platform.

By registering an account or continuing to use the auraasia platform, you acknowledge that you have read and agreed to this Privacy Policy. This Policy should be read together with the Terms and Conditions and Responsible Gaming Policy auraasia.

2 Personal Data We Collect

Auraasia collects various categories of personal data depending on your level of interaction with our platform. Below is a detailed description of each category of data collected:

We only collect data that is strictly necessary for defined purposes. Additional data such as facial images, proof of residence, or bank statements may be requested during the KYC verification process to meet anti-money laundering compliance requirements.

3 Purpose of Personal Data Use

Auraasia uses collected personal data solely for legitimate and defined purposes. Every use of data is grounded in a solid legal basis, whether based on your consent, contractual necessity, or applicable legal obligations.

The primary purposes for which your personal data is used are as follows:

• Player account management — account registration, identity verification, maintenance, and closure upon player request.
• Financial transaction processing — processing deposits, withdrawals, and account balance management accurately and securely.
• Legal compliance and KYC — fulfilling the requirements of the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA) and related regulations.
• Platform Security — detecting and preventing fraud, unauthorised access, system exploitation, and other unlawful activities.
• Service improvement — analysing usage patterns to improve platform performance, player experience, and the range of gaming products offered.
• Service communications — sending important notifications related to your account, transactions, security updates, and policy changes.
• Targeted marketing — sending promotional offers and gaming updates that may be of interest (only to players who have agreed to receive marketing communications).
• Responsible gaming — monitoring gaming patterns to identify players who may need support and to ensure player-set limits are observed.

4 Data Sharing with Third Parties

Auraasia does not sell, rent, or disclose players' personal data to third parties for commercial purposes. However, in operating a secure and legally compliant platform, there are limited situations where necessary data sharing occurs:

• Payment service providers — financial institutions, payment processors, and digital wallet providers used to process your transactions. Data sharing is limited strictly to the information needed to complete the relevant transaction.
• Game software providers — licensed gaming platform providers that supply gaming technology to auraasia. Data sharing is minimal and governed by strict confidentiality agreements.
• Technology service providers — companies providing cloud computing, cybersecurity, platform analytics, and other technical infrastructure services required for auraasia's operations.
• Legal authorities — law enforcement agencies, financial regulatory bodies, courts, or competent government authorities, where required by law or a valid court order.
• Business partners — in certain situations such as a merger, acquisition, or sale of business assets, player data may be transferred to the receiving entity subject to appropriate notice being given to players.

All third parties that receive personal data from auraasia players are bound by data protection agreements requiring them to handle that data to a security standard equal to or higher than auraasia's own.

5 Cookies & Tracking Technologies

Auraasia uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

The types of cookies used by auraasia are:

• Essential Cookies — required for core platform functions such as login session authentication, security, and platform integrity. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies — collecting anonymised information about how players use the platform to help us identify areas for improvement and optimise overall performance.
• Functional Cookies — remembering your preferences and settings such as preferred language, time zone, and display configuration to deliver a more personalised experience.
• Analytics Cookies — helping us understand platform usage patterns in aggregate for product and service improvement purposes.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality and user experience of the auraasia platform.

6 Data Security Measures

Auraasia invests seriously in cybersecurity infrastructure to ensure that players' personal and financial data is always protected. The following are the key security measures we implement:

• Encryption of data in transit — all communications between your device and auraasia servers are encrypted using TLS 1.3 protocol with 256-bit SSL encryption.
• Encryption of data at rest — sensitive data stored in our databases, including financial information and identification details, is encrypted using AES-256 encryption algorithms.
• Two-factor authentication (2FA) — an additional security layer available to all player accounts to prevent unauthorised access.
• 24/7 security monitoring — intrusion detection systems (IDS) and security monitoring operate around the clock to identify and respond to any threats in real time.
• Role-based access control — only auraasia staff with a legitimate business need and who have undergone background checks may access player data, and only to the extent required for their duties.
• Regular security audits — security assessments and penetration testing are conducted periodically by accredited independent parties to identify and remediate any system vulnerabilities.

7 Player Rights Regarding Personal Data

As a registered auraasia player, you have certain rights regarding your personal data that we fully respect. These rights are as follows:

To exercise any of the rights above, please contact the auraasia customer support team through the available channels on the platform. We will process your request within the timeframe required by applicable law.

8 Data Retention & Deletion

Auraasia retains players' personal data only for as long as necessary to fulfil the original purpose of collection or to meet ongoing legal obligations. Retention periods vary by data type and operational and compliance requirements:

• Active account data — retained for the duration of the active account and for the prescribed period after account closure, to meet AMLA and financial regulatory requirements.
• Financial transaction records — retained for a minimum of seven (7) years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• Support communication logs — retained for three (3) years for dispute reference and service quality improvement purposes.
• Technical data and system logs — retained for twelve (12) months for security and technical troubleshooting purposes.
• Marketing and communication preference data — retained until you withdraw consent or request deletion.

When data is no longer needed and the mandatory retention period has expired, auraasia will securely delete or destroy it using methods that ensure the data cannot be recovered or accessed again.

9 Third-Party Links & Services

The auraasia platform may contain links to third-party websites or services in certain contexts, such as payment providers or identity verification services. Please note that the auraasia Privacy Policy does not apply to any websites or services outside the auraasia.onl domain.

Every third-party provider working with auraasia is required to:

• Comply with their own privacy and data security policies that meet at least the same standards as ours.
• Sign a data processing agreement (DPA) detailing their responsibilities regarding auraasia player data.
• Notify auraasia immediately in the event of any security incident involving our players' data.

Auraasia is not responsible for the privacy practices or content of any third-party websites. We encourage you to read the privacy policy of any third-party service before disclosing your personal information to them.

10 Changes to This Privacy Policy

Auraasia reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or developments in the digital security landscape. All changes take effect immediately upon publication on our platform.

For changes that are material and affect players' rights, auraasia will:

• Send notifications to all registered players via their registered email address.
• Display a clear notice on the platform's home page for at least 14 days before the changes take effect.
• Update the "Last Updated" date displayed at the top of this document.

Continued use of the auraasia platform after policy changes take effect will be considered your acceptance of those changes. If you disagree with any changes, you have the right to close your account and stop using the platform.

11 Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how auraasia handles your personal data, our team is ready to assist you.

You can reach the auraasia customer support team via:

• Live Chat — available 24 hours a day, 7 days a week through the auraasia platform.
• Support Email — [email protected] (displayed as plain text only, not an active link).
• Help Centre — visit the FAQ us for answers to frequently asked questions about privacy and account security.

We are committed to responding to all privacy-related enquiries within three (3) business days. For more complex matters involving data access or deletion requests, the processing period is up to fourteen (14) business days.