Privacy Policy

1 Introduction

Gasia88 is an online casino and sports betting platform operated under an internationally recognized gaming licence, serving players across Malaysia and other eligible jurisdictions. As a responsible operator, we are committed to protecting the personal data of every registered Player in accordance with applicable data protection legislation and internationally recognized privacy standards.

This Privacy Policy applies to all personal data collected through the gasia88 website, mobile interface, customer support channels, and any other touchpoints between you and the platform. It covers data collected from Players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions where gasia88 is accessible.

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. Any data sharing described in this policy is limited to what is strictly necessary for the operation of the platform, compliance with legal obligations, and the delivery of services you have requested.

2 Definitions

• "Personal Data" — any information that can be used to directly or indirectly identify a natural person, including name, email address, phone number, date of birth, identification documents, IP address, and payment details.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, and deletion.
• "Data Controller" — the Operator, being the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — a third-party service provider that processes personal data on behalf of the Operator under a binding data processing agreement.
• "Consent" — a freely given, specific, informed, and unambiguous indication by you of agreement to the processing of your personal data for a stated purpose.
• "KYC Data" — identity verification documents including government-issued ID, proof of address, and selfie photographs submitted during the Know Your Customer verification process.
• "Cookies" — small text files placed on your device by the platform to facilitate session management, analytics, and personalization functions.

3 Data We Collect

3.1 Registration Data

When you create a gasia88 account, we collect the following information: full legal name, date of birth, email address, phone number, residential address, chosen username, and account password (stored in encrypted form). This data is necessary to establish and maintain your account.

3.2 Identity Verification (KYC) Data

To fulfil our regulatory and anti-money laundering obligations, we collect copies of government-issued identification documents such as your Malaysian MyKad, Passport, or Driver's License; proof of residential address (utility bill or bank statement); and verification selfies. This data is processed solely for compliance purposes and is stored with strict access controls.

3.3 Financial Data

We collect records of all financial transactions conducted through your account, including deposit amounts, withdrawal requests, payment method identifiers (such as e-wallet account references for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank2u, CIMB Clicks, and FPX transfers), and transaction timestamps. Full payment card numbers are never stored on our servers — they are processed directly by our certified payment service providers.

3.4 Gameplay & Activity Data

We collect records of your gaming and betting activity, including game sessions, wager amounts, win/loss outcomes, bonus usage, sports betting selections (such as Liga Super Malaysia, EPL, UFC), and responsible gambling tool usage (deposit limits, session reminders, self-exclusion requests).

3.5 Technical & Device Data

We automatically collect technical data when you access the platform, including: IP address, device type and operating system, browser type and version, session duration, pages visited, clickstream data, and error logs. This data is used for platform security, fraud detection, and performance optimization.

3.6 Communications Data

Any communications you send to our support team — whether via live chat, email to [email protected], or other channels — are retained to facilitate your query, maintain a service record, and improve our support quality.

4 How We Process Your Data

We process the personal data we collect for the following purposes:

5 Legal Basis for Processing

Gasia88 processes personal data only where a valid legal basis exists. We rely on the following legal bases:

• Contract Performance: Processing necessary to deliver the services you have signed up for, including account management, payment processing, and gameplay.
• Legal Obligation: Processing required to comply with our licensing obligations, KYC regulations, AML requirements, and applicable laws — including the obligation to verify player identity before processing withdrawals.
• Legitimate Interest: Processing undertaken for our legitimate business interests where these interests are not overridden by your rights — including platform security, fraud prevention, analytics, and responsible gambling monitoring.
• Consent: Processing for which you have provided specific, informed consent — primarily marketing and promotional communications. You may withdraw consent at any time by contacting our support team.

6 Data Sharing & Disclosure

Gasia88 does not sell your personal data. We share your data only in the following limited circumstances:

6.1 Payment Service Providers

We share necessary financial data with our certified payment processing partners to facilitate deposits and withdrawals via Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, and Hong Leong Connect. These providers are contractually bound to process your data only for payment purposes.

6.2 Identity Verification Partners

KYC documents may be shared with third-party identity verification service providers engaged to assist with our compliance obligations. These providers operate under strict data processing agreements and do not retain your documents beyond the period necessary for verification.

6.3 Gaming Platform and Technology Providers

Certain technical data and anonymized activity data is shared with the studios and technology providers whose games and systems power the gasia88 platform. This is limited to what is necessary for gameplay session management and game integrity monitoring.

6.4 Regulatory and Law Enforcement Authorities

We may disclose personal data to our licensing authority, regulatory bodies, or law enforcement agencies where required by law, court order, or in connection with an investigation into fraud, money laundering, or other illegal activity.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of the Operator's business, your personal data may be transferred to the successor entity. We will notify registered Players via email prior to any such transfer and ensure the successor entity is bound by equivalent privacy obligations.

7 Cookies & Tracking Technologies

The gasia88 platform uses cookies and similar tracking technologies to maintain session integrity, remember your preferences, and gather analytics data. We use the following categories of cookies:

• Essential Cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing platform functionality.
• Analytics Cookies: Collect aggregated, anonymized data on how Players navigate and use the platform, enabling us to identify areas for improvement. No personally identifiable information is included in analytics reports.
• Preference Cookies: Remember your platform settings (such as language preference and display options) to provide a more personalized experience.
• Marketing Cookies: Used only with your consent to deliver relevant promotions and track campaign performance. You may opt out at any time.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from logging in or using certain platform features.

8 Data Retention

We retain your personal data for as long as your account remains active and for a period thereafter as required by our legal and regulatory obligations. Specific retention periods include:

• Account and KYC Data: Retained for a minimum of five (5) years following account closure, as required by applicable AML legislation.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Communications Records: Retained for up to two (2) years from the date of the last communication.
• Technical and Activity Logs: Retained for up to twelve (12) months for security and fraud investigation purposes.
• Marketing Consent Records: Retained for the duration of your account and for three (3) years after consent is withdrawn, to evidence our compliance.

Following the expiry of the applicable retention period, data is securely deleted or anonymized in accordance with our data disposal procedures.

9 International Data Transfers

As an internationally licensed platform, Gasia88 may store and process your personal data in jurisdictions outside Malaysia. Where data is transferred internationally, we ensure that appropriate safeguards are in place, including standard contractual clauses, binding corporate rules, or adequacy decisions recognized by relevant data protection authorities.

By registering on the gasia88 platform, you acknowledge that your personal data may be processed in countries other than Malaysia, and that those countries may have data protection standards that differ from those in your home jurisdiction.

10 Your Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by Gasia88:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances — subject to our legal obligation to retain certain data for AML and licensing compliance.
• Right to Restriction: You may request that we temporarily suspend the processing of your personal data in certain circumstances, for example while a rectification request is under review.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our support team at [email protected]. We will respond to verified requests within 30 days. We may need to verify your identity before processing a rights request.

11 Minors & Age Policy

Gasia88 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. All account registrations are subject to age verification, and accounts found to belong to individuals under 21 will be immediately closed with any deposited funds returned to the originating payment method.

12 Data Security

Gasia88 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for sensitive data including KYC documents, financial records, and authentication credentials.
• Role-based access controls ensuring that only authorized personnel with a legitimate need can access personal data.
• Regular third-party security audits and penetration testing of the platform infrastructure.
• Intrusion detection and anomaly monitoring systems operating around the clock.
• Documented incident response procedures to manage and report data breaches in accordance with applicable notification obligations.

While we take all reasonable precautions to safeguard your data, no internet-based platform can guarantee absolute security. We encourage Players to use strong, unique passwords and to enable two-factor authentication where available.

13 Third-Party Services

The gasia88 platform may contain links to our own internal pages and may integrate third-party payment processors and analytics tools. These third-party services have their own privacy policies, and gasia88 is not responsible for their data practices. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the platform.

All third-party providers engaged by Gasia88 are required to process personal data in accordance with applicable law and in a manner consistent with this Privacy Policy, under binding data processing agreements.

14 Policy Amendments

Gasia88 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, platform features, or our data practices. Material changes will be communicated to registered Players via email notification or through a prominent notice displayed on the platform prior to the changes taking effect.

Continued use of the gasia88 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically. The "Last Updated" date at the top of this policy reflects the most recent revision.

15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the Gasia88 Data Privacy team through the following channel:

For matters relating to responsible gambling or self-exclusion, please visit our dedicatedResponsible Gambling page.