Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how a6star ("a6star", "we", "us", or "our") collects, uses, stores, discloses, and protects the personal data of individuals who access or use the a6star online gaming platform at a6star.one (the "Platform"). This Policy applies to all registered account holders, visitors to the Platform, and any other person whose personal data is processed in connection with the Platform or its services.

By registering an a6star account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside the a6star Terms and Conditions, which govern your use of the Platform.

If you have any questions about how a6star handles your personal data, please contact us via the support channel before submitting any personal information to the Platform.

2. Data Controller

For the purposes of applicable data protection legislation, a6star is the data controller in respect of personal data processed through the Platform. As data controller, a6star determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

a6star's data protection enquiries may be directed to the support email address published on this page. We aim to respond to all data protection enquiries within 14 business days of receipt.

3. Data We Collect

3.1 Identity & Contact Data

When you register an a6star account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to create your account, verify your identity, and communicate with you about your account.

3.2 Identity Verification (KYC) Data

As required by our international gaming licence obligations, we collect copies of government-issued identity documents (such as a Malaysian MyKad or passport) and, where required, proof of residential address documents. These are used exclusively for identity and age verification and anti-money laundering compliance.

3.3 Financial Data

We collect records of your deposit and withdrawal transactions, including payment method identifiers (such as partial account numbers or e-wallet references associated with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong Connect), transaction amounts, timestamps, and transaction status. We do not store full bank account numbers or card numbers on our servers.

3.4 Gaming Activity Data

We record your gaming activity on the Platform, including games played, wagers placed, game outcomes, session durations, and bonus participation. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

3.5 Technical & Device Data

We automatically collect technical information when you access the Platform, including your IP address, device type, browser type and version, operating system, referring URLs, and session activity logs. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

3.6 Communications Data

We retain records of communications between you and the a6star support team, including live chat transcripts, email correspondence, and any other written communications submitted to a6star. These records are maintained for customer service quality purposes and dispute resolution.

4. How We Collect Data

a6star collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making transactions, or contacting support.
• Automated technical collection: Data collected automatically when you access the Platform, including cookies, log files, and device fingerprinting technologies.
• Third-party sources: Identity verification data obtained from KYC service providers engaged by a6star; fraud prevention data from third-party fraud detection services; and, where applicable, publicly available information used for enhanced due diligence purposes.

5. Purposes & Legal Basis for Processing

The table below summarises the primary purposes for which a6star processes your personal data and the legal basis relied upon in each case.

6. Third-Party Disclosure

a6star does not sell your personal data to third parties. We may disclose your personal data to the following categories of recipients where necessary for the purposes described in Section 5:

• Payment processors and e-wallet providers: To process deposit and withdrawal transactions (e.g., FPX facilitators, Touch 'n Go, GrabPay infrastructure providers).
• KYC and identity verification providers: Third-party services engaged by a6star to verify identity documents as required by our licensing obligations.
• Fraud prevention and security services: Third-party providers that assist a6star in detecting and preventing fraudulent account activity.
• Game content providers: Live casino and game studios that operate games on the Platform may receive anonymised session identifiers necessary to deliver their services.
• Regulatory and licensing authorities: Our licensing authority and any other applicable regulatory body may require access to certain records as part of their supervisory functions.
• Law enforcement and legal authorities: Where required by applicable law, court order, or government request, a6star may disclose personal data to relevant authorities.

All third-party service providers engaged by a6star who process personal data on our behalf are required by contract to process such data only for the specified purpose and to maintain appropriate security standards.

7. Cookies & Tracking Technologies

The a6star Platform uses cookies and similar tracking technologies to enhance your experience, maintain session state, and support security functions. Cookies used by a6star fall into the following categories:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens and security cookies. These cannot be disabled without affecting core Platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options.
• Analytics cookies: Used to collect aggregated statistical data about Platform usage patterns, helping a6star understand how the Platform is used and where improvements can be made. This data is processed in anonymised or pseudonymised form.
• Security and fraud prevention cookies: Used to detect and prevent suspicious activity, including abnormal login patterns.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect your ability to use some features of the Platform.

8. Data Retention

a6star retains personal data for as long as is necessary for the purposes for which it was collected and to comply with legal and regulatory obligations. The following general retention periods apply:

• Account registration and identity data: Retained for the duration of your account and for a minimum of five years following permanent account closure, as required by anti-money laundering regulations.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Gaming activity logs: Retained for a minimum of three years.
• Communications records: Retained for a minimum of two years from the date of the communication.
• Technical and device data: Typically retained for 12 months on a rolling basis, subject to active security investigations.

Upon expiry of the applicable retention period, a6star will securely delete or anonymise personal data in accordance with established data disposal procedures.

9. Data Security

a6star implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between you and the Platform.
• Encryption of personal data at rest on a6star's servers.
• Role-based access controls limiting data access to personnel with a documented operational need.
• Regular security assessments and penetration testing of Platform infrastructure.
• Multi-factor authentication for internal administrative systems.
• Incident response procedures for the timely detection and management of data security incidents.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, a6star will notify affected account holders and the relevant regulatory authority within the timeframes required by applicable law.

10. International Data Transfers

The a6star Platform serves Malaysian players and its primary data processing infrastructure is designed to serve this market. Where personal data is transferred to processors or sub-processors located outside Malaysia, a6star ensures that such transfers are made only to jurisdictions that provide an adequate level of data protection, or pursuant to contractual arrangements that impose equivalent data protection obligations on the recipient.

If you have questions about the safeguards applied to international transfers of your personal data, please contact a6star support.

11. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by a6star:

• Right of access: You may request a copy of the personal data a6star holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: In certain circumstances, you may request that a6star delete your personal data. Note that erasure requests may be declined where retention is required by law (e.g., AML record-keeping obligations).
• Right to restriction: You may request that a6star restrict the processing of your personal data in specific circumstances, such as while a dispute about accuracy is being resolved.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact a6star customer support. We will respond to verified requests within 30 days. We may request proof of identity before processing a data rights request.

12. Marketing Communications

a6star may send you promotional communications about bonuses, new games, and platform features where you have consented to receive such communications during or after account registration. Marketing communications are sent by email and/or SMS to your registered contact details.

You may opt out of marketing communications at any time by updating your notification preferences in your a6star account settings or by contacting support and requesting removal from marketing lists. Opting out of marketing communications does not affect transactional communications, such as deposit confirmations, withdrawal notifications, and security alerts, which will continue to be sent as they are operationally necessary.

13. Minors

The a6star Platform is strictly for adults aged 21 years and above. a6star does not knowingly collect personal data from persons under the age of 21. If a6star becomes aware that personal data has been collected from a minor, the relevant account will be immediately suspended, the data will be deleted, and any funds deposited will be returned to the source payment method. Parents or guardians who believe a minor has submitted personal data to a6star are requested to contact support immediately.

14. Changes to This Policy

a6star reserves the right to update this Privacy Policy at any time. Material changes to this Policy will be communicated to registered account holders by email to their registered address and/or by a prominent notice on the Platform, no less than 14 days before the change takes effect. The "Last Updated" date at the top of this Policy will be revised with each update. Continued use of the Platform following notification of an update constitutes acceptance of the revised Policy.

15. Contact

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by a6star, please contact the support team via live chat on the Platform. Written correspondence may be addressed to:

support@a6star.one

Please note: this email address is provided for correspondence purposes and is not a clickable link. The a6star live chat support service is available 24 hours a day, seven days a week. We aim to respond to all privacy-related enquiries within 14 business days of receipt.