Privacy Policy

1 Introduction

This Privacy Policy ("Policy") sets out the data protection practices of AuraAsia ("we", "us", "our", "the Platform"), the operator of the online gaming and sports betting platform accessible at auraasia.cam. It governs how we collect, process, store, share, and protect personal data submitted to us by Members ("you", "your") in connection with your use of the AuraAsia website and any associated mobile interface.

By registering an account on AuraAsia, depositing funds, placing bets, or otherwise engaging with our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

AuraAsia respects your privacy and is committed to handling your personal information with transparency, integrity, and in accordance with applicable data protection legislation. We collect only the information necessary to deliver and improve our services, verify your identity, process your transactions, and comply with our legal obligations.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — i.e., information that can be used directly or indirectly to identify you.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" means AuraAsia, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of AuraAsia, such as payment service providers or identity verification partners.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity and age verification process mandated by AuraAsia's operational policies.
• "Cookies" means small text files placed on your device by our website to store session and preference information.

3 Data We Collect

AuraAsia collects personal data through several channels: your account registration, your use of the Platform, payment transactions, KYC submissions, customer support interactions, and, where applicable, marketing communications. The categories of personal data we may collect include the following:

We do not collect special categories of sensitive personal data (such as health information, racial or ethnic origin, or religious beliefs) unless you voluntarily provide such information in the context of a responsible gambling self-declaration or similar support request.

4 How We Use Your Data

AuraAsia processes your personal data for the following specific purposes. We use only the minimum data necessary for each stated purpose in line with the principle of data minimisation.

• Account Management: To create, maintain, and secure your AuraAsia Member account, including processing your registration details and authenticating your identity at login.
• Payment Processing: To facilitate deposits via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, and supported cryptocurrency networks (Bitcoin, Ethereum, USDT, BNB), and to process withdrawal requests to your verified payment method.
• KYC and Regulatory Compliance: To verify your identity and age (minimum 21 years), and to meet our anti-money-laundering (AML) and counter-terrorism-financing (CTF) obligations under applicable law.
• Customer Support: To respond to your enquiries, resolve disputes, and deliver assistance through our 24/7 multilingual Live Chat and email channels.
• Responsible Gambling: To monitor usage patterns that may indicate problem gambling behaviour, to apply self-imposed limits you set, and to facilitate self-exclusion requests where applicable.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorised access, and other prohibited activities on the Platform.
• Service Improvement: To analyse usage patterns, test new features, and improve the overall experience for Members across Malaysia — including players in Kuala Lumpur, Penang, Johor Bahru, Shah Alam, and Petaling Jaya.
• Marketing Communications: Where you have provided explicit consent, to send you information about promotions, bonuses, new games, and platform updates. You may withdraw this consent at any time.
• Legal Obligations: To comply with applicable laws, court orders, regulatory requirements, and requests from competent authorities.

5 Legal Basis for Processing

AuraAsia processes your personal data only where we have a valid legal basis to do so. The legal bases upon which we rely include the following:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions you accepted upon account registration — including account management, payment processing, and customer support.
• Legal Obligation: Processing necessary to comply with applicable legal requirements, including KYC verification, AML obligations, and regulatory reporting.
• Legitimate Interests: Processing that is in the legitimate interests of AuraAsia or a third party — such as fraud prevention, platform security, and service improvement — provided such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given and informed consent, specifically for marketing communications. You may withdraw this consent at any time by contacting our support team or updating your account preferences.

6 Data Sharing & Disclosure

AuraAsia does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We may share your data only in the following limited and controlled circumstances:

• Payment Service Providers: We share transaction-relevant data with payment processors and financial institutions that facilitate your deposits and withdrawals — including FPX operators, e-wallet providers (Touch 'n Go, Boost, GrabPay), DuitNow, Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency network facilitators. Each provider is bound by data processing agreements.
• Identity Verification Partners: We may share identity documents and personal details with licensed KYC verification service providers to fulfil our age verification and anti-fraud obligations.
• Game Content Providers: Our game studio partners may receive anonymised or pseudonymised usage data necessary to deliver their game content. They do not receive personally identifiable information for independent marketing purposes.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to competent authorities where required to do so by law, court order, or regulatory directive — including in connection with AML, CTF, or fraud investigations.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by AuraAsia may access personal data on a strictly need-to-know, confidential basis.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring, personal data may be transferred to a successor entity, subject to equivalent data protection obligations.

7 Cookies & Tracking Technologies

AuraAsia uses cookies and similar tracking technologies to operate and improve the Platform, maintain your session, and understand how Members engage with our services. The categories of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. They cannot be disabled without materially impairing your ability to use the Platform.
• Functional Cookies: Store your preferences such as language selection and layout settings to personalise your experience across sessions.
• Analytical Cookies: Collect anonymised data about how Members navigate and use the Platform — page visit frequency, session duration, and feature interactions — to help us improve service quality.
• Security Cookies: Assist in detecting and preventing fraudulent activity, unauthorised logins, and abuse of the Platform's systems.

You may configure your browser to reject or delete cookies at any time. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform. We do not use third-party advertising cookies or sell cookie data to external marketing networks.

8 Data Retention

AuraAsia retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, regulatory, accounting, or reporting requirements.

• Active Account Data: Retained for the duration of your active membership on the Platform.
• Post-Closure Data: Following account closure, we retain certain personal data — including KYC documents, transaction records, and correspondence — for a minimum of five (5) years to comply with applicable AML, financial, and regulatory obligations.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever is earlier, subject to legal hold requirements.
• Support Records: Live chat transcripts and email correspondence are retained for a minimum of two (2) years for quality assurance and dispute resolution purposes.

When personal data is no longer required, we securely delete or anonymise it so that it can no longer be used to identify you.

9 Data Security

AuraAsia implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the AuraAsia platform.
• Encrypted storage of sensitive personal and financial data on access-controlled servers.
• Role-based access controls restricting internal staff access to personal data on a strict need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments of our platform infrastructure.
• Two-factor authentication options for Member accounts to reduce the risk of unauthorised access.

10 Your Data Rights

Subject to applicable data protection laws and any overriding legal obligations, you have the following rights in relation to the personal data we hold about you:

• Right of Access: You may request a copy of the personal data we hold about you and information about how it is being processed.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data held in your account.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we limit the processing of your data in certain circumstances — for example, while we verify the accuracy of data you have contested.
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format where technically feasible.
• Right to Object: You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without prejudicing the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection team via Live Chat or at the email address listed in Section 15 of this Policy. We will respond to verified requests within a reasonable timeframe and in any event within thirty (30) days.

11 Minors & Age Policy

AuraAsia's services are strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory component of our account registration and KYC process.

If we become aware that personal data has been collected from a person under 21, we will immediately suspend the relevant account, void any associated bets or bonuses, and take steps to securely delete all data associated with that account as promptly as possible.

Parents and guardians who are concerned about underage access to the AuraAsia platform are encouraged to use reputable parental control software solutions to restrict access to online gambling platforms on shared or family devices.

12 International Data Transfers

The nature of AuraAsia's operations — including the use of internationally hosted game studio content, payment processing infrastructure, and cloud-based services — means that your personal data may be transferred to and processed in countries outside of Malaysia.

Where personal data is transferred internationally, AuraAsia ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection law. Such safeguards may include contractual clauses, data processing agreements, and adherence to internationally recognised security frameworks.

13 Third-Party Services

The AuraAsia platform may contain references or content from third-party game studios and service providers. These third parties operate their own privacy practices and are governed by their own privacy policies, which AuraAsia does not control.

AuraAsia is not responsible for the data handling practices of third-party providers whose services are integrated into our platform. We contractually require all data processors who handle personal data on our behalf to maintain appropriate security and confidentiality standards. We encourage you to review the privacy policies of any third-party service you interact with directly.

14 Policy Amendments

AuraAsia reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform operations. All updates will be published on this page with a revised "Last Updated" date.

Where changes are material — meaning they significantly affect your rights or how we use your data — we will endeavour to provide advance notice via a prominent notification on the Platform or by email to your registered address.

Your continued use of the AuraAsia platform following the publication of an amended Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree to any amendment, you should cease using the Platform and request account closure.

15 Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by AuraAsia, please contact us through the following channels:

• Live Chat: Available 24/7 on the Platform — the fastest channel for data access or correction requests, with average response times of 3–5 minutes.
• Email: [email protected] — for formal written data protection requests, complaints, or enquiries. We aim to acknowledge all written requests within one (1) business day and resolve them within thirty (30) days.

Our support team handles data protection enquiries in English, Bahasa Melayu, and Mandarin. All formal complaints will be investigated in accordance with our internal data protection procedures. If you are not satisfied with our response, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction.