Privacy Policy — Asia300

This Privacy Policy (the "Policy") describes how Asia300 (referred to herein as "Asia300", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at https://asia300.asia (the "Platform"), collects, uses, stores, shares, and protects the personal data of individuals who access or use our services.

This Policy applies to all personal data collected from players, registered account holders, visitors to the Platform, and any individuals who contact Asia300 for support or enquiry purposes. It forms part of our wider legal framework alongside our Terms & Conditions and Responsible Gambling Policy.

Asia300 operates under international online gaming licensing. This Policy was last reviewed and updated on 1 January 2026.

For the purposes of this Privacy Policy, the following definitions apply:

• "Data Controller" means Asia300 as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party engaged by Asia300 to process personal data on our behalf and under our documented instructions.
• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, email address, date of birth, identification documents, financial account details, IP address, and device identifiers.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, disclosure, or deletion.
• "Data Subject" means the individual to whom the personal data relates — in the context of this Policy, this is typically the registered player or Platform visitor.
• "KYC" (Know Your Customer) means the identity and age verification process required under our licensing obligations and anti-money laundering compliance framework.
• "Cookies" means small data files placed on your device by the Platform to facilitate functionality, analytics, and session management.

Asia300 collects personal data across several categories, each serving a defined and necessary purpose:

We do not intentionally collect sensitive categories of personal data (such as racial or ethnic origin, health data, or religious beliefs) unless specifically required for legal compliance purposes, in which case the lawful basis for such processing will be separately communicated to you.

Asia300 collects personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing KYC verification, submitting deposit or withdrawal requests, or contacting customer support.
• Automated Technical Collection: Data collected automatically during your use of the Platform, including through cookies, server logs, and web analytics tools — such as IP address, session duration, pages visited, and device identifiers.
• Payment Processors: Financial data received from integrated payment providers (including FPX, DuitNow, and supported e-wallet providers) necessary to process deposits and withdrawals in MYR or cryptocurrency.
• Identity Verification Providers: Data received from third-party KYC service providers engaged to verify the identity and age of account holders in accordance with our licensing obligations.
• Fraud & Security Systems: Data generated by internal fraud detection systems that monitor transactional and behavioural patterns on the Platform for security purposes.

Asia300 processes personal data for the following defined purposes:

1. Account Management: To create, maintain, and administer your Asia300 account, including processing deposits and withdrawals in MYR and supported cryptocurrencies.
2. Identity & Age Verification (KYC): To verify that all registered players are aged 21 or above and to comply with anti-money laundering (AML) obligations under our international licensing conditions.
3. Service Delivery: To provide access to casino games, Sic Bo, live dealer studios, and the sportsbook, including Liga Super Malaysia, EPL, UFC, and other markets.
4. Payments Processing: To facilitate secure deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, and cryptocurrency networks.
5. Customer Support: To respond to enquiries, resolve disputes, and provide technical assistance.
6. Responsible Gambling: To administer player protection tools including deposit limits, self-exclusion, and session reminders.
7. Legal & Regulatory Compliance: To fulfil obligations under our international gaming licence, anti-money laundering frameworks, and applicable law.
8. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, and unauthorised account access.
9. Platform Improvement: To analyse aggregated usage data to improve Platform performance, game offerings, and user experience.
10. Marketing Communications (Opt-In Only): To send promotional offers, bonus notifications, and platform updates to users who have specifically opted in to such communications. You may opt out at any time.

Asia300 processes personal data on the following legal grounds, each corresponding to specific processing activities:

• Contractual Necessity: Processing required to perform our contract with you — including account registration, game access, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and our international gaming licence, including KYC/AML obligations.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gambling monitoring, and service improvement, where such interests are not overridden by your data rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. Consent may be withdrawn at any time by contacting support or adjusting your account communication preferences.

Asia300 does not sell, rent, or commercially transfer your personal data to third parties. We may share personal data with the following categories of recipients solely to the extent necessary for the purposes described in Section 5:

• Payment Service Providers: Banks, e-wallet operators (including Touch 'n Go, Boost, GrabPay, DuitNow, FPX), and cryptocurrency network processors, solely for transaction facilitation.
• KYC / Identity Verification Providers: Third-party services engaged to verify your identity and age as required under our licensing obligations.
• Game Studio Partners: Licensed international game studios that supply game content to the Platform may receive limited session data necessary for game delivery; they do not receive your identity or financial data.
• Fraud Detection & Security Providers: Third-party services that assist in detecting and preventing fraudulent activity on the Platform.
• IT & Infrastructure Providers: Cloud hosting, server management, and cybersecurity service providers engaged under strict data processing agreements.
• Legal & Regulatory Authorities: Where required by law, court order, or under the conditions of our international gaming licence, we may be legally obligated to disclose personal data to regulatory or law enforcement authorities.

All third-party recipients are contractually required to process your data only for the specific purpose for which it is shared, and to maintain appropriate technical and organisational security measures.

Asia300 uses cookies and similar technologies to ensure the Platform functions correctly, to improve the user experience, and to gather aggregated analytics data. The following categories of cookies are used on the Platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without impacting your ability to use the Platform.
• Functional Cookies: Retain your preferences such as language settings, game lobby layout, and session-time reminder configurations between visits.
• Analytics Cookies: Aggregate and anonymise data about how visitors use the Platform — pages visited, session duration, error reports — to help us improve Platform performance and user experience.
• Security & Fraud-Prevention Cookies: Used to identify and flag unusual behaviour indicative of fraud, account takeover attempts, or automated bot activity.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling functional cookies may affect certain personalisation features of the Platform. Asia300 does not use third-party advertising or behavioural tracking cookies.

Asia300 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by our licensing obligations, applicable law, or legitimate business interests. The following general retention guidelines apply:

• Account Data & Transaction Records: Retained for a minimum of five (5) years following account closure, in accordance with standard anti-money laundering record-keeping requirements under our international licensing framework.
• KYC Documentation: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure.
• Customer Support Communications: Retained for a maximum of three (3) years following the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Technical & Log Data: Server logs and IP address records are retained for a maximum of twelve (12) months for security and fraud investigation purposes.
• Marketing Preferences: Retained until you withdraw consent for marketing communications, at which point your preference will be updated within 10 business days.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

Asia300 implements and maintains appropriate technical and organisational measures to protect personal data from unauthorised access, loss, destruction, alteration, or disclosure. Key security measures in place include:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data fields (including financial account identifiers) at rest in our database systems;
• Role-based access controls limiting internal data access to authorised personnel on a need-to-know basis;
• Two-factor authentication (2FA) options for player accounts;
• Regular security assessments and penetration testing of Platform infrastructure;
• Incident response procedures to detect, contain, and notify affected parties in the event of a data breach, where required by law.

Given the international nature of the Asia300 Platform and its licensing framework, your personal data may be transferred to and processed in jurisdictions outside of Malaysia. Such transfers may occur in connection with our hosting infrastructure, KYC service providers, or game studio partners located in various countries.

Where personal data is transferred internationally, Asia300 takes reasonable steps to ensure that an adequate level of protection is maintained, consistent with the standards applied within this Privacy Policy. This may include relying on contractual protections with data recipients or equivalent safeguard mechanisms appropriate to our licensing jurisdiction.

Subject to applicable law and our legal obligations (including AML retention requirements), you have the following rights in respect of your personal data held by Asia300. To exercise any of these rights, please contact us using the details in Section 15.

Asia300 will respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by an additional 30 days, with prior notification to you. We may request proof of identity before processing any data rights request.

The Asia300 Platform is strictly for adults aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. All account registrations are subject to KYC age verification procedures, and accounts found to belong to underage users will be immediately suspended and any deposits returned.

If you become aware that a minor has accessed the Asia300 Platform or provided us with personal data without proper authorisation, please contact our support team immediately at [email protected] so that we may take appropriate action, including data deletion.

Asia300 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. Where changes are material — that is, where they meaningfully affect how your personal data is used or the rights available to you — we will provide advance notice to registered players via the email address associated with their account, not less than fourteen (14) days prior to the effective date of the revised Policy.

We also recommend periodically reviewing this page to remain informed of the current version of our Privacy Policy. The date at the top of this page indicates when this Policy was last updated. Your continued use of the Asia300 Platform following the effective date of any changes constitutes your acceptance of the revised Policy.

If you have any questions, requests, or concerns relating to this Privacy Policy, the data Asia300 holds about you, or the exercise of any data rights described in Section 12, please contact us through the following channels:

• Live Chat: Available24 hours a day, 7 days a week, directly on the Asia300 Platform. This is the fastest way to reach our data and support team.
• Email: [email protected] — please include "Privacy Request" in the subject line and provide your registered account username to help us locate your records efficiently.

Asia300 aims to acknowledge all privacy-related enquiries within two (2) business days and to resolve them within 30 days. For complex or high-volume requests, we may require proof of identity before proceding.