astar77 Privacy Policy

1. Introduction

Welcome to astar77. astar77 ("we," "our," or "us") operates the online casino and sports betting platform accessible at https://astar77.lat (the "Platform"). We are committed to protecting the privacy and personal data of all users, particularly those accessing the Platform from Malaysia. This Privacy Policy is prepared in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and describes our practices concerning the collection, use, processing, storage, and disclosure of personal information.

By registering an account or using any part of the astar77 Platform, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Platform immediately and contact our support team to close your account.

2. Information We Collect

To deliver our services, astar77 collects several categories of personal information. We are transparent about what we collect and why. The categories of personal data we may process include:

• Registration Data: Full name, date of birth, residential address, nationality, email address, and mobile phone number provided during account creation.
• Identity Verification Data: Copies of government-issued identification documents (e.g., MyKad, passport) and proof of address documents, collected as part of our Know Your Customer (KYC) process to comply with anti-money laundering (AML) obligations.
• Financial Data: Bank account details, e-wallet information (e.g., Touch 'n Go eWallet, Boost, GrabPay), transaction history, deposit records, and withdrawal requests. Note: We do not store complete card numbers or CVV codes on our servers.
• Usage Data: IP address, browser type, operating system, device identifiers, pages visited, session duration, clickstream data, and betting activity logs.
• Communications Data: Records of correspondence between you and our support team via live chat, email, or any other communication channel.
• Marketing Preferences: Your stated preferences regarding promotional communications, bonus offers, and marketing materials.
• Cookies and Tracking Technologies: Data collected via cookies, pixels, and similar technologies as further described in Section 8 below.

3. How We Use Your Information

astar77 uses your personal data for specific, lawful purposes only. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The primary uses include:

• Account Management: Creating and administering your astar77 account, verifying your identity, and maintaining the security of your account credentials.
• Service Delivery: Processing deposits, withdrawals, bets, and gameplay on the Platform, and ensuring transactions are executed correctly and securely.
• Legal and Regulatory Compliance: Meeting our obligations under applicable laws including the PDPA, AML requirements, and our international gaming licence conditions. This includes conducting KYC checks, fraud screening, and reporting to authorities where legally required.
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance around the clock.
• Platform Improvement: Analysing usage patterns and performance metrics to enhance the user experience, fix bugs, and develop new features on astar77.
• Personalisation: Tailoring content, game recommendations, and promotional offers to your preferences where you have consented to such personalisation.
• Responsible Gaming: Monitoring gaming behaviour to identify potential problem gambling patterns and to enforce self-exclusion, deposit limits, and cooling-off periods. We take our duty of care seriously at astar77.
• Marketing Communications: Sending you promotional materials, bonus updates, and event notifications — but only where you have explicitly opted in to receive such communications. You may withdraw consent at any time.

4. Legal Basis for Processing

Under applicable data protection principles, astar77 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required toperform our contract with you (the Terms & Conditions), including operating your account and processing transactions.
• Legal Obligation: Processing necessary to comply with Malaysian law, international AML/CFT regulations, and our gaming licence requirements.
• Legitimate Interests: Processing carried out for our legitimate business interests, such as fraud prevention, security monitoring, and improving our Platform — provided these interests are not overridden by your rights.
• Consent: Where we rely on your consent (e.g., for marketing emails or optional cookies), you may withdraw that consent at any time by contacting us or updating your account preferences.

5. Disclosure of Your Information

astar77 does not sell or rent your personal data to any third party. We may, however, share your information with carefully vetted third parties in the following limited circumstances:

• Payment Processors: To facilitate deposits and withdrawals via providers such as Maybank FPX, CIMB FPX, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency payment gateways. These processors are bound by their own strict data protection obligations.
• Identity Verification Services: Third-party KYC and AML compliance providers who assist us in verifying the identity of our users and screening for financial crime risk.
• Technology and Infrastructure Partners: Cloud hosting providers, cybersecurity vendors, and IT service partners who process data solely on our instructions and under binding confidentiality agreements.
• Regulatory and Law Enforcement Authorities: Government bodies, law enforcement agencies, or courts where we are required by law or a valid legal order to disclose your information.
• Professional Advisers: Lawyers, auditors, and compliance consultants who are subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of assets involving astar77, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

In all cases, astar77 takes contractual and technical steps to ensure that any third party receiving your data handles it in a manner consistent with this Privacy Policy and applicable law.

6. International Data Transfers

astar77 operates on an internationally licensed basis, which means your personal data may be transferred to, stored in, or processed in jurisdictions outside Malaysia. Where such transfers occur, we implement appropriate safeguards — including standard contractual clauses and data processing agreements — to ensure your personal information receives a level of protection consistent with Malaysian PDPA standards and applicable international norms. We do not transfer your data to jurisdictions that do not provide adequate data protection safeguards without first putting appropriate protections in place.

7. Data Retention

astar77 retains your personal data for as long as your account remains active and for a period thereafter as required by our legal and regulatory obligations. Specifically:

• Account and transaction records are retained for a minimum of five (5) years from the date of your last transaction, in line with AML regulatory requirements.
• Identity verification documents are retained for the period required under applicable KYC regulations, typically five (5) years from account closure.
• Customer support communications are retained for up to three (3) years from the date of the interaction.
• Marketing consent records are retained for the duration of our relationship and for a reasonable period thereafter to demonstrate compliance.

Once the applicable retention period has expired and there is no legitimate basis for continued retention, astar77 will securely delete or anonymise your personal data in accordance with our internal data disposal procedures.

8. Cookies and Tracking Technologies

astar77 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage, and support our security and fraud-prevention measures. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — for example, maintaining your session login state and remembering your security preferences. These cannot be disabled.
• Performance Cookies: Collect anonymised information about how users interact with the Platform, such as which pages are visited most frequently, to help us improve performance and usability.
• Functional Cookies: Remember your preferences (such as language and currency settings) to provide a more personalised experience on astar77.
• Targeting and Analytics Cookies: Used with your consent to analyse your behaviour and deliver relevant content. You may opt out of these via your account settings or browser controls.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the astar77 Platform. For a full list of cookies we use, please contact our support team.

9. Your Rights Under PDPA Malaysia

As a data subject under the Personal Data Protection Act 2010 (Malaysia), you are entitled to exercise the following rights in relation to your personal data held by astar77:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is used and with whom it is shared.
• Right of Correction: If any of the personal data we hold is inaccurate, incomplete, misleading, or not up to date, you have the right to request that we correct it.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Limit Processing: In certain circumstances, you may request that we restrict the processing of your personal data — for example, where you contest the accuracy of the data or object to our processing activities.
• Right to Request Deletion: Subject to our legal retention obligations, you may request that astar77 delete your personal data. Note that certain data must be retained to comply with AML, KYC, and regulatory requirements and cannot be deleted upon request in those cases.

To exercise any of the above rights, please contact our Data Protection team at the email address listed below. We will respond to all valid requests within 21 days, consistent with the PDPA's requirements. We may ask you to verify your identity before processing any request.

10. Security Measures

astar77 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• End-to-end TLS/SSL encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls limiting data access strictly to personnel with a legitimate business need.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent specialists.
• Multi-factor authentication requirements for all staff accessing personal data systems.
• Incident response procedures to detect, contain, and notify affected users in the event of a data breach, in line with regulatory requirements.

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. We encourage you to use a strong, unique password for your astar77 account and to enable any available two-factor authentication options.

11. Responsible Gaming and Data Use

astar77 is committed to promoting responsible gaming among our Malaysian player community. As part of this commitment, we may use your account activity data — including betting frequency, deposit patterns, and session duration — to identify signs of potential problem gambling behaviour. Where our systems flag a concern, our Responsible Gaming team may reach out to offer support tools such as deposit limits, cooling-off periods, or self-exclusion options.

This use of your data is carried out in your best interests and constitutes a legitimate interest processing activity under our data protection framework. For more information about the tools available to you, please visit our Responsible Gaming page. All players must be aged 21 or above to use the astar77 Platform.

12. Third-Party Links and Services

The astar77 Platform may contain references to third-party services, payment providers, and technology integrations. This Privacy Policy applies solely to personal data processed by astar77 directly. We are not responsible for the privacy practices of third-party providers, and we encourage you to review the privacy policies of any external service you interact with in connection with your use of our Platform.

13. Children and Minors

astar77 does not knowingly collect, process, or store personal data from individuals under the age of 21. Our Platform is strictly intended for adults aged 21 and above. If you have reason to believe that a minor has registered on astar77 or provided us with personal information, please contact us immediately at [email protected]. We will investigate and, where confirmed, delete any such data and close the account without delay.

14. Changes to This Privacy Policy

astar77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by posting a prominent notice on the Platform and, where appropriate, by sending a notification to your registered email address at least 14 days before the changes take effect.

Your continued use of the astar77 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your personal data.

15. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about how astar77 handles your personal data, please do not hesitate to get in touch with our Data Protection team. We are available 24 hours a day, 7 days a week via live chat on the Platform, and by email at:

[email protected]

We take all privacy enquiries seriously and will endeavour to respond promptly and thoroughly. If you are not satisfied with our response, you may also lodge a complaint with the relevant data protection authority in Malaysia.