Privacy Policy a6str — How We Safeguard and Protect Your Personal Data as a Malaysian Player

1Information We Collect from a6str Members

1.1 Information You Provide Directly

When you register an account, use our services, or contact a6str support, we may collect the following personal information:

• Identity Information — Full name as stated on your MyKad or Malaysian passport, MyKad or passport number, date of birth, and gender.
• Contact Information — Malaysian mobile number, active email address and current residential address.
• Financial Information — E-wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) or bank account details (FPX / Maybank2u / CIMB Clicks) used for deposit and withdrawal transactions at a6str. Note: a6str does not store full credit or debit card numbers.
• Verification Documents — Copies of identity documents (MyKad, passport), proof of address (Tenaga Nasional Berhad, TNB, or Air Selangor utility bills) and any other supporting documents requested during the KYC (Know Your Customer) process.

1.2 Automatically Collected Information

When you access and use the a6str platform, our systems automatically record the following technical information for security and service improvement purposes:

• Device Information — Device type (Android or iOS smartphone, laptop), operating system, device model, and unique device identifier.
• Connection Information — IP address, internet service provider (ISP) name such as Unifi, Maxis Fibre, Celcom or Digi, network name, and connection data.
• Usage Data — Pages visited, games played, session duration, login and logout times, and general usage patterns within the a6str platform.
• Cookie Data — Information collected via cookies and similar tracking technologies. Further details are provided in Section 6.

2How a6str Uses Your Personal Data

2.1 Primary Purposes of Data Use

A6str uses the personal data collected for the following purposes, all of which are legitimate and necessary for the responsible operation of the platform:

2.2 Marketing and Communications

A6str may send you promotional information, bonus offers, and platform updates via email or text message. You may withdraw your consent to receive such marketing communications at any time by clicking the "unsubscribe" link in any promotional email you receive, or by contacting us at [email protected]. Withdrawing consent for marketing will not affect your use of your a6str account.

2.3 Analytics & Platform Improvement

Usage data collected automatically is used by the a6str technical team to understand platform usage patterns, identify areas for improvement, resolve technical issues and ensure optimal platform performance for all users in Malaysia. This data is processed in aggregated and anonymised form wherever possible for internal analytics purposes.

3Sharing Data with Third Parties

3.1 a6str's Core Data Sharing Principles

A6str has never sold, rented or traded members' personal data to any third party for commercial purposes. This is a core commitment that will never change. Your data is not a tradeable commodity at a6str.

3.2 Permitted and Required Data Sharing

However, there are situations where a6str may need to share certain personal data with specific parties for legitimate reasons:

• Payment Service Providers — Required transaction information is shared with Malaysian local payment service providers such as Touch 'n Go eWallet, GrabPay, DuitNow and banks supporting FPX solely for the purpose of processing your deposit and withdrawal transactions. These providers are subject to their own privacy policies.
• Game Providers — Gameplay session data required for game integrity and in-game fraud detection may be shared with game software providers that partner with a6str. These providers are bound by strict confidentiality agreements.
• Legal Authorities — a6str will disclose personal information when required by a valid court order, a Royal Malaysia Police investigation, the Malaysian Anti-Corruption Commission (MACC), or any authority with lawful jurisdiction in Malaysia. We have no legal discretion in such situations.
• Independent Audit — Independent audit bodies that verify a6str's RTP and game fairness may require limited access to certain data solely for audit purposes. These bodies are bound by strict professional confidentiality agreements.

4Data Security — How a6str Protects Your Information

4.1 Technical Security Infrastructure

A6str makes serious investments in technical security infrastructure to ensure every member's personal and financial data is protected to the highest standard:

• 256-bit SSL Encryption — All data transmitted between your device and a6str's servers is protected with 256-bit Secure Socket Layer (SSL) encryption, rendering it unreadable to unauthorised parties even if intercepted.
• Stored Data Encryption — Sensitive data stored in a6str's databases, including financial information and identity documents, is encrypted using the latest industry-standard encryption.
• Internal Access Controls — Only a6str staff with a legitimate business need may access members' personal data, and every access is recorded in an auditable log.
• Continuous Threat Monitoring — a6str's security monitoring system operates 24 hours a day to detect and respond to any unauthorised access attempts or suspicious activity.
• Regular Penetration Testing — a6str conducts regular security penetration testing carried out by independent cybersecurity experts to identify and patch any system vulnerabilities before they can be exploited.

4.2 Individual Account Security

Beyond the technical safeguards put in place by a6str, the security of your account also depends on your own actions. We recommend using a strong, unique password for your a6str account, enabling two-factor authentication (2FA) where available, never sharing your login credentials with anyone, and regularly reviewing your account activity. If you suspect any unauthorised access to your a6str account, contact us immediately at [email protected].

4.3 Data Breach Management

In the highly unlikely event of a data breach involving members' personal information, a6str is committed to notifying affected members within a reasonable timeframe in accordance with Malaysia's PDPA 2010 requirements, and to taking prompt remedial action to minimise any negative impact.

5Your Rights as a Data Subject under Malaysia PDPA 2010

As a registered Malaysian player at a6str, you have specific rights regarding your personal data under the Personal Data Protection Act (PDPA) 2010. a6str fully respects and facilitates the exercise of these rights:

5.1 Right of Access

You have the right to request a copy of the personal data we hold about you. A data access request can be made by emailing [email protected] with "Data Access Request" in the subject line, along with proof of identity. a6str will fulfil such requests within 21 business days in accordance with PDPA requirements.

5.2 Right to Rectification

If you find that the personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request a correction. Contact a6str customer support with the correct information and relevant supporting evidence. Corrections will be made within a reasonable timeframe.

5.3 Right to Withdraw Consent

Where the processing of your personal data is based on your consent (such as for marketing purposes), you have the right to withdraw that consent at any time. Withdrawal does not affect the validity of any processing that took place prior to the withdrawal.

5.4 How to Exercise Your Rights

To exercise any of the rights listed above or to raise a data privacy complaint, please contact the a6str Data Protection Officer by email at [email protected] with the subject line "Data Privacy Enquiry". Please include your full name and a6str account number with your request or complaint to help us process it promptly.

6Cookies & Tracking Technologies on the a6str Platform

6.1 What Are Cookies and Why Do We Use Them?

Cookies are small text files stored on your device by your web browser when you access the a6str platform. They help us recognise you when you return, save your preferences, and ensure the platform functions correctly. a6str uses several types of cookies for different purposes:

6.2 Managing Your Cookie Preferences

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect the core functionality of the a6str platform and your overall gaming experience. For instructions on managing cookies in popular browsers such as Chrome, Firefox, or Safari on Android and iOS, please refer to the respective browser's help documentation.

7Data Retention & Storage Periods

7.1 Where Your Data Is Stored

All a6str members' personal data is stored on secure servers optimised for Malaysian users. a6str's server infrastructure employs stringent physical and cybersecurity protections, including strict physical access controls, continuous surveillance cameras, and intrusion detection systems.

7.2 How Long We Retain Your Data

Personal data retention periods at a6str are determined by operational requirements, Malaysian law, and industry guidelines:

• Active Account Data — Retained for the duration your account remains active and for a period of 7 years following account closure, in accordance with Malaysian financial regulatory requirements.
• Transaction Records — Retained for a minimum of 7 years in accordance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Support Communication Logs — Retained for 2 years from the date of last communication, for reference and resolution of any future disputes.
• Analytics Data — Anonymised usage data is retained for as long as necessary for analytics and platform improvement. Personally identifiable data is deleted or anonymised within 2 years.

7.3 Data Deletion

Once the specified retention period expires, a6str will securely delete or destroy your personal data using methods that ensure the data cannot be recovered or accessed again. You may also request early deletion of specific data, subject to applicable legal requirements.

8Changes to This Privacy Policy

8.1 a6str's Right to Amend This Policy

A6str reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal or regulatory requirements in Malaysia, or changes in how we operate. Each new version of the Privacy Policy will fully supersede all previous versions.

8.2 Change Notification

When we make significant changes to this Privacy Policy, we will notify a6str members via their registered email address and/or a prominent notice within the platform at least 14 days before changes take effect. The "Last Updated" date shown at the top of this document will be revised each time a change is made.

8.3 Continued Use as Acceptance

Continued use of the a6str platform after an updated Privacy Policy takes effect constitutes your acceptance of the changes. If you do not agree with the changes made, please discontinue use of the platform and contact us to close your account.