Privacy Policy

Introduction

AuraAsia8 ("we", "us", "our", "the Platform") operates the online casino and sports betting website located at https://auraasia8.cam. As a platform serving players across Malaysia — including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and beyond — we recognise our responsibility to handle personal data with care, transparency, and integrity.

This Privacy Policy ("Policy") describes how AuraAsia8 collects, uses, stores, shares, and protects personal data in connection with your use of the Platform and its services. It applies to all registered players, visitors to the website, and any individual whose personal data we process in the course of operating AuraAsia8.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. By creating an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"), including but not limited to a name, national identification number, location data, email address, financial details, or one or more factors specific to that person's identity.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means AuraAsia8, the entity that determines the purposes and means of the Processing of Personal Data.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of AuraAsia8, including payment processors, identity verification providers, and technology service providers.
• "Consent" means any freely given, specific, informed, and unambiguous indication by the data subject agreeing to the processing of their Personal Data.
• "Player" / "User" / "you" means any individual who registers an account on, or visits, the AuraAsia8 platform.
• "Cookies" means small data files placed on your device by the Platform for the purposes described in Section 9 of this Policy.

Data We Collect

AuraAsia8 collects the following categories of personal data from players and platform visitors:

3.1 Identity & Contact Data

3.2 Financial & Payment Data

3.3 Technical & Usage Data

How We Collect Your Data

AuraAsia8 collects personal data through the following channels:

• Direct collection: Information you voluntarily provide during account registration, KYC verification, deposit or withdrawal requests, customer support interactions, and when completing promotional claims or surveys.
• Automated collection: Technical data collected automatically when you access our Platform, including IP address, browser information, device type, and session activity data gathered via cookies and similar technologies.
• Payment processors: Transaction confirmation data received from our integrated Malaysian payment providers — including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect — when you initiate deposits or withdrawals.
• Identity verification providers: Supplementary verification data from our third-party KYC service providers when you submit identity documentation for account verification.
• Third-party fraud and AML screening: Data received from AML and fraud detection service providers used to screen transactions and account activity for suspicious patterns.

How We Use Your Data

AuraAsia8 processes personal data for the following purposes:

• Account operation: Creating, maintaining, and securing your player account; processing login authentication; and enabling access to all platform features.
• Payment processing: Facilitating MYR deposits and withdrawals via your chosen Malaysian payment method; reconciling transactions; and managing your account balance.
• Identity and age verification: Confirming that you meet the minimum age requirement of 21 years and that your identity matches the details provided during registration, in accordance with our KYC obligations.
• Legal and regulatory compliance: Fulfilling anti-money laundering (AML) obligations; responding to lawful requests from regulatory authorities; and maintaining records as required by applicable law.
• Responsible gambling: Monitoring betting patterns and session data to identify potential at-risk behaviour; enforcing self-exclusion periods and deposit limits; and delivering responsible gambling notifications where appropriate.
• Customer support: Responding to enquiries, resolving disputes, processing complaints, and communicating account-related information to you via live chat and email.
• Marketing communications: Sending promotional offers, bonus notifications, and information about new games or sports betting markets — subject to your marketing preferences. You may opt out of marketing communications at any time.
• Platform improvement: Analysing aggregated usage data to improve the performance, reliability, and user experience of the AuraAsia8 platform.
• Fraud prevention and security: Detecting and investigating suspicious account activity, unauthorised access, bonus abuse, and other potentially fraudulent conduct.

Legal Basis for Processing

AuraAsia8 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between AuraAsia8 and you as a registered player — including account operation, payment processing, and customer support.
• Legal obligation: Processing necessary to comply with applicable laws, including KYC identity verification requirements, AML transaction monitoring, age verification obligations, and responses to lawful regulatory requests.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and analytics — where our legitimate interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and certain non-essential cookies, where your explicit consent has been obtained and may be withdrawn at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

AuraAsia8 does not sell, rent, or trade personal data to third parties for commercial purposes. We share personal data only in the following limited circumstances:

• Payment service providers: We share transaction data with Malaysian payment processors — including providers operating the DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect networks — solely for the purpose of processing your requested transactions.
• Identity verification providers: We share identity documentation with our third-party KYC/AML service providers for the purpose of verifying your identity and age in accordance with regulatory obligations.
• Technology and infrastructure providers: We engage third-party service providers who assist with platform hosting, database management, security monitoring, and analytics. These providers act as Data Processors under contractual data processing agreements and are not permitted to use your data for their own purposes.
• Regulatory and law enforcement authorities: We may disclose personal data to competent authorities — including financial regulators, law enforcement agencies, and courts — where required to do so by applicable law, a lawful court order, or as necessary to protect the rights, property, or safety of AuraAsia8, our players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of AuraAsia8's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

Data Retention

AuraAsia8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites function properly, improve performance, and provide analytical information to site operators. AuraAsia8 uses cookies and similar technologies including web beacons and local storage to operate the platform effectively.

9.2 Types of Cookies We Use

• Essential / Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your login state, security cookies, and cookies that enable payment processing. These cannot be disabled without impairing core platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how players use the Platform — including which pages are visited most frequently and how long sessions last. This data helps us improve the platform experience.
• Functionality Cookies: Allow the Platform to remember your preferences — such as your preferred language (English), display settings, and last-visited game categories.
• Marketing Cookies: Used to deliver relevant promotional content related to AuraAsia8 offers. These are only placed with your consent and you may withdraw consent at any time via your account settings or browser settings.

9.3 Managing Your Cookie Preferences

You can manage non-essential cookie preferences through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or alert you when a cookie is set. Please note that disabling essential cookies may affect the functionality of the AuraAsia8 platform, including your ability to log in or complete transactions.

Data Security

AuraAsia8 implements a comprehensive range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive personal data and financial information at rest.
• Two-factor authentication (2FA) availability for all player accounts.
• Strict access controls limiting data access to authorised personnel with a demonstrated need to process that data.
• Regular security audits and penetration testing of our platform infrastructure.
• Staff training on data protection obligations and information security practices.
• Incident response procedures to address and notify relevant parties of data breaches where required by applicable law.

Notwithstanding these measures, no system of data transmission or storage can be guaranteed as completely secure. AuraAsia8 urges all players to maintain strong, unique passwords for their accounts and to enable two-factor authentication where available.

Your Rights

As an individual whose personal data is processed by AuraAsia8, you have the following rights in relation to your data, subject to applicable legal limitations:

To exercise any of the above rights, please contact AuraAsia8 via our 24/7 live chat or by email at [email protected]. We will respond to all data subject requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, and we will notify you accordingly.

Minors & Age Protection

AuraAsia8's services are strictly available to individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from an individual under 21 — including through a falsified registration — we will immediately close the associated account, delete the relevant data, and, where applicable, report the matter to relevant authorities.

As part of our commitment to age protection, AuraAsia8 requires all players to complete age verification as part of the KYC process before their account is fully activated or any withdrawal is processed. Age verification may involve submission of a Malaysian national identity card, passport, or other government-issued document confirming date of birth.

Changes to This Privacy Policy

AuraAsia8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or business operations. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify players via email or an in-platform notification.

We encourage you to review this Privacy Policy periodically to stay informed about how AuraAsia8 protects your personal data. Your continued use of the Platform following any update constitutes your acknowledgement of the revised Policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by AuraAsia8, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform. This is our fastest and preferred method for privacy enquiries from Malaysian players.
• Email: [email protected] — please include "Privacy Enquiry" in the subject line. We aim to acknowledge all emails within 24 hours and provide a substantive response within 30 days.
• Support Hours: All support operations run on Malaysia Standard Time (UTC+8).

For enquiries specifically related to responsible gambling tools, self-exclusion, or player safety, please visit our Responsible Gambling page for dedicated guidance and support resources.