Malaysia PDPA 2010 Compliance

Privacy Policy a6star – Data Protection Malaysian Members

At a6star, your privacy is more than a legal obligation — it is a responsibility we take seriously every day. This Privacy Policy clearly explains how we collect, use, store, and protect your personal information as a member of our platform.

Last updated: 1 January 2026 · Version 3.1

A6star's Six Privacy Guarantees to Every Member

Before reading the full document, here are the six core principles that shape how a6star handles your personal data as a valued member.

Malaysia PDPA Compliance

All of a6star's data collection and processing practices are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). You have clear legal rights over your data, and we respect each of them.

256-bit SSL Encryption

All data transmitted between your device and a6star's servers is protected by 256-bit SSL encryption — the same highest-level security standard used by leading banking institutions in Malaysia.

No Sale of Personal Data

A6star has never and will never sell, rent, or trade members' personal information to any third party. Your data belongs to you — it is not a business commodity of ours.

Full Control in Your Hands

You may request access to, correction of, or deletion of your personal data at any time. a6star provides a simple, efficient process for managing your privacy rights — no complicated procedures required.

Minimum Data Collection

A6star only collects data that is genuinely necessary to provide our services to you. We do not collect excessive information, and every piece of data collected has a clear and legitimate purpose.

Clear Data Retention Periods

Your personal data is not kept indefinitely. a6star has a clear data retention policy — data is only held for as long as necessary for its original purpose or as required by law, after which it is securely deleted.

Important Note: By registering and using the a6star platform, you agree to the data collection and usage practices described in this Privacy Policy. Please read this document carefully. If you have any questions, the a6star support team is available in Bahasa Malaysia 24 hours a day.

1

Introduction and Scope of This Privacy Policy

This Privacy Policy ("Policy") is published by a6star ("we", "Platform") and applies to all users who register, browse, or use any a6star service through our official website or any other channel operating under the a6star brand.

This document transparently sets out: the types of personal data we collect from you; why we collect it and how it is used; the parties that may receive or access your data; how we protect your data; your rights regarding your personal data; and how you can contact us on privacy matters.

Legal Basis: This Privacy Policy is governed by the Personal Data Protection Act 2010 of Malaysia (Act 709), which regulates the processing of personal data in commercial transactions in Malaysia. a6star complies with all seven PDPA principles: the General Principle, the Notice and Choice Principle, the Disclosure Principle, the Security Principle, the Retention Principle, the Data Integrity Principle, and the Access Principle.

2

Personal Data We Collect

2.1 Data You Provide Directly

When you register and use a6star, you provide us directly with the following data:

Data Category Example Information Requirement
Identity Information Full name, date of birth, MyKad number Required for KYC
Contact Information Malaysian phone number, email address Required for account
Financial Information E-wallet details (TNG, GrabPay, DuitNow), FPX account For transactions
Account Information Username, password (encrypted), security questions For security
Verification Documents MyKad copy, bank statement (if requested for KYC) For identity verification

2.2 Automatically Collected Data

When you use the a6star platform, our systems automatically collect technical data for operational and security purposes:

  • IP address and approximate location data (city/state level)
  • Device type, operating system, and browser version
  • Session data: pages visited, time of visit, navigation flow
  • Transaction logs: deposit, withdrawal, and betting history
  • Gaming data: game history, account balance, bonus activity
  • Cookie and similar technology data (see Section 6)

2.3 Data from Third-Party Sources

In certain circumstances, a6star may receive your personal data from legitimate sources such as identity verification service providers, payment service providers (to verify transactions), and regulatory authorities where required by law.

3

How a6star Uses Your Personal Data

A6star uses your personal data only for legitimate purposes directly related to providing our services to you. Below is a detailed explanation of each purpose for which your data is used:

3.1 Core Service Provision

  • Creating and managing your member account at a6star
  • Processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other supported methods
  • Enabling you to access all casino games, Sports Betting, and a6star platform features
  • Managing the VIP Rewards programme and bonus allocations for eligible members
  • Providing 24/7 customer support in Bahasa Malaysia

3.2 Security & Fraud Protection

  • Verify your identity and prevent unauthorised access to your account
  • Detect and investigate fraudulent activity, money laundering, or platform abuse
  • Monitoring transactions to ensure compliance with anti-money laundering (AML) laws
  • Protect the integrity of the a6star platform and all other members from dishonest activity

3.3 Member Communications

  • Sending important notifications about your account, transactions, and policy changes
  • Contacting you regarding support queries you have submitted
  • Sending promotional information and bonus offers — only where you have given your consent
  • Sending important updates regarding changes to our Privacy Policy or Terms & Conditions

3.4 Platform Improvements

  • Analysing usage data in aggregate (non-personally identifiable) to improve the user experience
  • Understanding usage patterns to develop new features that are more relevant to Malaysian players
  • Resolving technical issues and improving platform performance

3.5 Legal Compliance

  • Fulfilling reporting obligations to authorities as required under Malaysian law
  • Meeting a6star's operational licensing requirements
  • Complying with court orders or directives from lawful authorities

A6star does not use your personal data to make automated decisions that significantly affect you without human oversight. If you have concerns about any decision made regarding your account, you may request a review by the a6star support team.

4

Data Sharing & Disclosure

A6star does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. This is our absolute commitment. However, there are limited situations in which we may share your data:

4.1 Trusted Service Providers

A6star works with trusted third-party service providers to help deliver our services to you. These include:

  • Payment providers: Transaction processors for Touch 'n Go, GrabPay, DuitNow, FPX, and other e-wallets required to process your deposits and withdrawals
  • KYC Provider: Identity verification companies that help us verify members' identities securely and in compliance with the law
  • IT infrastructure providers: Cloud computing and cybersecurity companies that host and protect the a6star platform
  • Game software provider: Casino game and Sports Betting providers that supply gaming software to a6star

All third-party service providers are bound by strict confidentiality agreements and may only use your data for purposes we specify — not for their own.

4.2 Legal Obligations

A6star may be required to disclose your personal data to the authorities in the following circumstances:

  • When required by a valid Malaysian court order
  • To comply with anti-money laundering (AML) and counter-terrorism financing (CFT) obligations
  • When requested by a regulatory authority with lawful jurisdiction over a6star
  • To investigate and report suspected criminal activity to the relevant authorities

In all of the above cases, a6star discloses only the minimum data necessary to meet the relevant requirement. We do not share more than is needed, and where permitted by law, we will notify you if your data has been shared with the authorities.

5

Data Security Measures at a6star

The security of your personal data is a6star's highest technical and operational priority. We continuously invest in security infrastructure to ensure your data remains protected at all times.

5.1 Data Encryption

All data transmitted between your device and a6star's servers is protected by 256-bit SSL/TLS encryption — the same standard used by major Malaysian banks such as Maybank and CIMB. Sensitive data such as passwords is stored in a hashed format that cannot be reversed, even by a6star staff.

5.2 Internal Access Controls

Access to members' personal data within a6star is restricted on a need-to-know basis. Only employees who genuinely require access to carry out their duties are permitted to view such data. All access is logged and audited on a regular basis.

5.3 Continuous Security Monitoring

A6star's cybersecurity team monitors the platform 24 hours a day, 7 days a week to detect any unauthorised access attempts, cyberattacks, or data breaches. Automated alert systems trigger an immediate response if any anomaly is detected.

5.4 Two-Factor Authentication

A6star encourages all members to enable two-factor authentication (2FA) on their accounts. This extra layer of security ensures that even if someone else knows your password, they still cannot access your account without the verification code sent to your phone.

5.5 Data Breach Response

In the event of a data breach affecting your personal information, a6star is committed to:

  • Notifying the relevant authorities within the timeframe required by law
  • Notify affected members within a reasonable timeframe via their registered email
  • Take immediate action to stop the breach and reduce its impact on members
  • Provide clear guidance to affected members on the steps they need to take
6

Cookies and Tracking Technologies

A6star uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use:

Cookie Type Purpose Retention Period
Essential Cookies Required for core platform functions — login, user sessions, security. Cannot be disabled. Session / 30 days
Performance Cookies Collecting information on how you use the platform to help us improve performance and the overall user experience. 90 days
Preference Cookies Storing your preferences such as language, display settings, and favourite sports for a more personalised experience. 1 year
Analytics Cookies Aggregated data on platform usage patterns to help us understand how to improve our services. 180 days

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the a6star platform. Continuing to browse the a6star platform is considered your consent to the use of cookies as described above.

7

Your Personal Data Rights

As a data subject under Malaysia's PDPA, you have the following rights concerning your personal data held by a6star:

7.1 Right to Access

You have the right to request a copy of the personal data a6star holds about you. Data access requests will be processed within 21 business days. A reasonable administrative fee may apply for repeated or extensive requests.

7.2 Right to Rectification

If you find that the personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request a correction. You can update much of your basic profile information directly within your a6star account, or contact our support team for more complex corrections.

7.3 Right to Withdraw Consent

Where data processing is based on your consent (for example, receiving marketing communications), you may withdraw that consent at any time. Withdrawing consent does not affect the validity of any processing that took place prior to the withdrawal.

7.4 Right to Complaint

If you are not satisfied with how a6star handles your personal data, you have the right to lodge a complaint with the a6star data protection team or with the Malaysian Personal Data Protection Commissioner.

7.5 How to Submit a Data Rights Request

To submit any request relating to your data rights, contact the a6star support team via:

Live Chat 24/7 support@a6star.bid Bahasa Melayu
8

Children's Data Protection

The a6star platform is strictly restricted to individuals aged 18 and above. a6star does not knowingly collect, process, or store personal data from anyone under the age of 18.

If we discover that a child's data has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect their minor child has registered or used the a6star platform are encouraged to contact our support team immediately at support@a6star.bid.

A6star has an active age verification process in place during registration and throughout the KYC process. If you suspect any user on our platform is under 18, please report it to the a6star support team for immediate action.

9

Cross-Border Data Transfers

As a digital platform, a6star's servers and infrastructure may be located across multiple countries in the Asia region. This means your personal data may be transferred to or stored in countries outside Malaysia in the course of normal operations.

A6star ensures that any cross-border data transfers are carried out with adequate protections in place:

  • Our cloud server providers maintain internationally recognised security standards (ISO 27001 or equivalent)
  • All agreements with overseas providers include data protection clauses aligned with Malaysia's PDPA
  • Data is encrypted in transit using TLS 1.3 or higher
  • Access to transferred data is restricted and fully logged for audit purposes

By using the a6star platform, you consent to data transfers as described above, subject to all the protections stated.

10

Data Retention Period

A6star does not retain your personal data indefinitely. Below is a general guide to our data retention periods by data category:

  • Active account data: Retained for as long as your account is active and for 7 years after account closure (for financial record-keeping and audit purposes)
  • Transaction history: Retained for 7 years in accordance with Malaysia's accounting and anti-money laundering requirements
  • KYC documents: Retained for the duration of the active account period and 5 years after account closure
  • Support communication logs: Retained for 2 years for quality control and dispute resolution purposes
  • Cookie and session data: Retained for the period specified in Section 6
  • Marketing data (where applicable): Retained until you withdraw consent or close your account

Upon expiry of the relevant retention period, data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

11

Amendments to This Privacy Policy

A6star reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or how we deliver our services. Each version of the Privacy Policy will be marked with a "last updated" date at the top of the document.

For material changes — that is, changes that significantly alter how we use your data — a6star will notify registered members by email at least 14 days before the changes take effect. This gives you time to review the changes and make an informed decision about your continued use of our platform.

We encourage you to review this Privacy Policy periodically. Your continued use of the a6star platform after any amendments take effect will be considered your acceptance of the updated policy. If you do not agree with the changes, please contact our support team.

Contact the a6star Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or how a6star handles your personal data, please reach out to us through the following channels:

24/7 Live Chat in BM support@a6star.bid Response < 24 hours Data Privacy Officer

Requests relating to data access, correction, or deletion will be processed within 21 business days from the date a complete request is received.

Control of Your Personal Data at a6star

Malaysia's PDPA grants you clear rights over your personal data. At a6star, we make it straightforward to exercise these rights — no complicated procedures, no unnecessary hassle.

01
Right to Know

You have the right to know what data we collect about you, why we collect it, and how it is used. This Privacy Policy is our complete answer to that right.

02
Right to Access

Request a copy of all personal data we hold about you. Contact a6star support and we will process your request within 21 working days.

03
Right to Rectification

If any data we hold about you is incorrect or outdated, you may request a correction at any time through your account or via a6star support.

04
Right to Withdraw

For consent-based processing such as marketing, you may withdraw your consent at any time through your account settings or by contacting support.

Privacy Is Not Just a Form — a6star's Genuine Commitment to Malaysian Members

Every time you sign up for a new digital platform, there's an unavoidable moment — a small checkbox labelled "I agree to the Privacy Policy" that most people click without reading a single word. a6star understands why this happens. A lengthy privacy policy, packed with legal jargon in a foreign language, is not designed to be read — it is designed to be blindly accepted. We want to change that experience.

A6star's Privacy Policy is written in clear, plain language because we believe every member deserves to know exactly what happens to their personal information. This is more than a legal document — it is our commitment to you about how we will handle the trust you place in a6star when you register.

Why a6star Needs to Collect Your Personal Data

The most fundamental question worth asking is: why does a6star need my data at all? The answer is practical and straightforward. To enable you to deposit and withdraw funds in MYR via Touch 'n Go eWallet, GrabPay, or DuitNow, we need to verify that those payment accounts belong to you — a requirement set by the payment service providers themselves and by Malaysia's anti-money laundering laws. Without this verification, the payment systems will not process your transactions.

To allow you to play baccarat, bet on Malaysia Super League matches, or follow MLBB on the a6star platform, we need to know who you are — to protect your account from unauthorised access, to verify that you meet the legally required minimum age of 18, and to ensure only you can access your winnings and account balance. All of this is for your own protection.

Malaysia's PDPA and What It Means for You as an a6star Member

The Personal Data Protection Act 2010 (PDPA) is the law that safeguards your personal data across all commercial transactions in Malaysia. a6star fully complies with all seven PDPA principles — this is not a choice for us but a legal obligation. That said, we aim to go beyond mere compliance.

Minimum PDPA compliance may simply mean notifying you that data is collected and obtaining general consent. At a6star, we go further — explaining not just "what" but also "why" and "how" for every category of data we collect. We also proactively inform you of the rights you hold under the PDPA, because a right you don't know about is a right you cannot exercise.

Financial Data Security — Protecting Your Deposits and Withdrawals

For most a6star members, the most sensitive data is financial — e-wallet details and banking information required to process deposits and withdrawals in MYR. This is our highest-value data from a security standpoint, and we handle it with the level of protection it deserves.

It is important to understand that a6star does not store your full e-wallet account number or banking login credentials. When you make a deposit via Touch 'n Go eWallet, GrabPay, or FPX Maybank2u, the transaction is processed directly by the respective provider's security systems — a6star only receives confirmation that the payment was successful, not your full financial account details. This is an important additional layer of protection for your financial security.

Your Data Is Never Sold — No Exceptions

This is something a6star will not compromise on under any circumstances. We do not sell, rent, exchange, or trade members' personal data to any third party for their marketing purposes. This is not simply because the law prohibits it — it is because doing so would betray the trust you placed in a6star when you registered and shared your personal information.

A6star's business model is built on providing a quality gaming and betting platform for our members — not on selling member data. The two cannot coexist on a platform that respects its users. The choice we made from day one has always been clear: member privacy is not for sale at any price.

Practical Steps to Protect Your Privacy at a6star

While a6star takes all necessary technical measures to protect your data, there are steps you can take yourself to strengthen your account security. Use a strong, unique password for your a6star account — do not reuse passwords from other accounts. Enable two-factor authentication (2FA), available in your account settings. Never share your a6star login credentials with anyone, including family members.

Always log out of your a6star account when you are done, especially on a shared device. Check your account activity regularly and contact a6star support immediately if you notice any transactions or activity you do not recognise. Our support team is available 24 hours a day in Bahasa Malaysia and ready to assist with any security concerns.

A6star's Ongoing Commitment to Member Privacy

The digital world keeps evolving, and privacy challenges continue to grow. a6star is committed to continuously updating our privacy practices in line with technological developments, changes in law, and the evolving needs of our members. We do not treat this Privacy Policy as a static document written once and forgotten — it is a living document that reflects how we operate at all times.

If you have any questions about this Privacy Policy, how we handle your data, or wish to exercise any of your privacy rights under Malaysia's PDPA, please don't hesitate to reach out. The a6star support team is available to assist you in Bahasa Malaysia, 24 hours a day, 365 days a year. Your privacy is our priority — and that's not just a marketing phrase, it's an operating principle that shapes every decision we make at a6star.

Responsible Gaming: All games and betting on a6star are strictly for users aged 18 and above. Your personal data is used in part to support our responsible gaming programme — including to enforce limits you set yourself and to identify members who may need assistance. For more information, visit the Responsible Gaming us.

Join a6star with Confidence – Your Data Is Fully Protected

Over 500,000 Malaysian members trust a6star with their data. Register for free today and enjoy a safe, transparent sports betting and casino platform that fully complies with Malaysia's PDPA — with easy deposits via Touch 'n Go, GrabPay, and DuitNow.

Touch 'n Go GrabPay DuitNow FPX ShopeePay Boost

Malaysia PDPA Compliant · 256-bit SSL · No Data Selling · For Users Aged 18 and Above Only

Bahasa Melayu