a6star Privacy Policy

01 Introduction and Controller Identity

a6star operates the online gaming platform accessible at a6star.cam, providing sports betting, live casino, slots, lottery, and arcade services. For the purpose of this Privacy Policy, a6star acts as the data controller in respect of the personal information collected through player accounts and platform interactions.

Questions or requests relating to this Privacy Policy may be directed to the support team. The official contact email is displayed below as plain text: [email protected]. Please include your registered username and a clear description of your request.

02 Definitions

• Personal Data means any information that identifies or could reasonably be used to identify a living individual, whether directly or in combination with other information.
• Processing means any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, and deletion.
• Data Subject means the individual to whom personal data relates — in this context, the registered player or site visitor.
• Consent means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• Third Party means any natural or legal person other than a6star and the data subject who processes personal data under the authority of or as directed by a6star.
• Sensitive Data means categories of personal information that warrant heightened protection, such as financial account details, national identification numbers, and data relating to health or criminal records.

03 Data We Collect

3.1 Registration and Identity Information

When you create an a6star account, we collect the information you provide, which typically includes your full name, date of birth, gender, residential address, email address, and phone number. This information is required to verify your identity, confirm that you meet the minimum age requirement of 21 years, and operate your account securely.

3.2 Identity Verification Documents

For KYC compliance and responsible gambling enforcement, we may request a copy of a government-issued identity document (such as a Malaysian national identity card or passport), proof of address, or evidence of payment method ownership. These documents are used solely for verification and fraud prevention.

3.3 Financial and Transaction Data

We record deposit and withdrawal transactions, payment method details sufficient to process your request (such as bank account or eWallet reference), transaction amounts in MYR, and transaction timestamps. Full card numbers, PINs, and online banking passwords are never collected or stored by a6star.

3.4 Gameplay and Activity Data

We collect records of your wagers, game sessions, game outcomes, bonus usage, and login history. This data supports account management, dispute resolution, responsible gambling monitoring, fraud detection, and platform improvement.

3.5 Device and Technical Data

When you access a6star, we may automatically collect your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and page interaction logs. This information is used for security monitoring, fraud prevention, and improving platform performance on devices commonly used by Malaysian players.

3.6 Communications Data

When you contact a6star support via live chat, email, or WhatsApp, we record the content of those communications, timestamps, and reference numbers. This record supports quality assurance, dispute resolution, and regulatory compliance.

04 Legal Basis and Purposes for Processing

a6star processes personal data on one or more of the following legal bases:

• Contractual necessity — to operate your account, process deposits and withdrawals in MYR, settle wagers, and provide customer support.
• Legal obligation — to comply with anti-money-laundering (AML) requirements, identity verification obligations, responsible gambling standards, and lawful requests from regulators or law enforcement.
• Legitimate interests — to detect and prevent fraud, maintain platform security, monitor for prohibited activity, and improve services in ways that do not override your privacy rights.
• Consent — to send you promotional offers, bonus notifications, or marketing content, where you have opted in. Consent may be withdrawn at any time without affecting earlier lawful processing.

05 Cookies and Tracking Technologies

a6star uses cookies and similar technologies to maintain user sessions, remember preferences, detect suspicious activity, and collect aggregated analytics data. Session cookies are removed when your browser is closed. Persistent cookies remain on your device for a defined period unless deleted earlier.

Functional cookies are essential to platform operation and cannot be disabled without affecting core features. Analytics cookies help us understand how Malaysian players navigate the site so that we can improve the experience. You may adjust cookie preferences through your browser settings, though doing so may affect platform functionality.

06 Disclosure and Data Sharing

a6star does not sell your personal data. We may share information with the following categories of recipients where necessary and proportionate:

• Payment processors and banking partners — including FPX-connected banks, DuitNow infrastructure, eWallet providers such as Touch 'n Go and Boost, and card processors — to execute financial transactions.
• Identity verification providers — to confirm the identity and age of account holders in compliance with KYC obligations.
• Game and software providers — technical data may be shared with the studios and providers that power individual games on the platform, strictly as necessary to deliver gameplay.
• Fraud prevention and security services — aggregated or specific account signals may be shared with services that detect unusual patterns and protect the platform.
• Legal and regulatory authorities — where required by applicable law, court order, or a lawful regulatory request. a6star will challenge overly broad requests where legally permissible.
• Business transfers — in the event of a merger, acquisition, or restructuring, personal data may be transferred to the acquiring entity under equivalent data protection obligations.

All third parties with whom a6star shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the one for which it was shared.

07 Data Retention

a6star retains personal data for as long as is necessary to fulfil the purposes described in this policy, or as required by applicable law, whichever is longer. Account and transaction records are typically retained for a minimum of five years following account closure or the most recent transaction, to comply with AML and financial recordkeeping obligations.

Communications records, gameplay logs, and KYC documents are retained for a period consistent with legal requirements, responsible gambling obligations, and the resolution of any active or reasonably anticipated disputes. Anonymised or aggregated data, which can no longer identify you, may be retained for analytical purposes without time limitation.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

08 Data Security

a6star maintains technical and organisational security measures appropriate to the nature and sensitivity of the personal data processed. These measures include 256-bit SSL/TLS encryption for data in transit, access controls and role-based permissions for internal systems, regular security assessments and vulnerability reviews, segregated environments for sensitive data categories, and incident response procedures.

No system can be guaranteed completely secure. In the event of a data breach that poses a high risk to your rights and freedoms, a6star will take prompt steps to contain the breach and, where required, notify affected players without undue delay.

You are responsible for maintaining the security of your own account credentials. Using a strong, unique password, enabling two-factor authentication where available, and not sharing your login details significantly reduces the risk of unauthorised access.

09 User Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by a6star:

• Right of access — to request a copy of the personal data we hold about you and information about how it is processed.
• Right to rectification — to request correction of inaccurate or incomplete personal data.
• Right to erasure — to request deletion of your personal data where it is no longer necessary for the original purpose, where you withdraw consent, or where processing was unlawful, subject to our legal retention obligations.
• Right to restriction — to request that we limit processing of your data in certain circumstances, such as while accuracy is disputed.
• Right to object — to object to processing based on legitimate interests, including direct marketing. Marketing opt-out requests will be honoured promptly.
• Right to data portability — to receive a structured, machine-readable copy of personal data you have provided to a6star, where processing is based on consent or contract.
• Right to withdraw consent — where processing is based solely on consent, to withdraw that consent at any time without affecting the lawfulness of earlier processing.

To exercise any of these rights, contact a6star support with your registered username and the nature of your request. We will respond within a reasonable period and may request additional information to verify your identity before fulfilling certain requests.

10 International Transfers

a6star's platform and infrastructure may involve storage or processing of personal data in locations outside Malaysia. Where personal data is transferred internationally, a6star takes reasonable steps to ensure that an equivalent level of protection applies, including through contractual safeguards with service providers.

By using a6star, you acknowledge that your personal data may be processed in jurisdictions outside your country of residence, subject to the protections described in this policy.

11 Children and Age Verification

a6star's services are strictly for individuals aged 21 years and above. We do not knowingly collect or process personal data from anyone under 21. Age verification is performed during account registration and may be repeated through KYC checks before certain account actions are permitted.

If we have reason to believe that a person under 21 has submitted personal data in order to create or use an a6star account, we will deactivate the account and delete the associated data as promptly as practicable. If you believe a minor has provided personal data to a6star, please contact support immediately.

12 Responsible Gambling and Data Processing

a6star uses account activity data — including deposit patterns, session duration, wagering frequency, and self-reported information — to support responsible gambling monitoring. This may include flagging accounts that show patterns consistent with harmful gambling behaviour and proactively contacting affected players to offer support tools.

Processing for responsible gambling purposes is conducted under our legitimate interests and legal obligations related to player protection. Data used in this context is handled with the same security standards applied to all personal data. Players who use self-exclusion, deposit limits, or cooling-off features will have the relevant restrictions recorded and applied to their account.

For more information about the responsible gambling tools available, please visit our Responsible Gambling page.

13 Changes to This Privacy Policy

a6star may update this Privacy Policy from time to time to reflect legal developments, changes in how the platform operates, or enhancements to our data protection practices. Material changes will be communicated through the website or account interface before they take effect.

Continued use of a6star after an updated Privacy Policy takes effect constitutes acknowledgement of the revised terms. If you do not accept a material update, you should stop using the platform and contact support to request account closure.

The effective date displayed at the top of this page indicates when the current version was last updated. Prior versions may be requested through support.

14 Contact Us

For privacy-related enquiries, data subject requests, or complaints about how a6star handles your personal data, please contact our support team. Include your registered account username, a clear description of your request or concern, and any relevant reference numbers or dates.

Support email (plain text — not a clickable link): [email protected]

Live chat support is available 24 hours a day, seven days a week via the chat widget on the a6star website. Response times for written privacy requests may vary depending on complexity but will be addressed within a reasonable period.

If you are not satisfied with how a6star handles a data-related complaint, you may seek guidance from an independent data protection authority or legal adviser in your jurisdiction.