atas88 Privacy Policy

1. Introduction

atas88 ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with the atas88 platform at atas88.win ("Platform"). This Privacy Policy describes how atas88 collects, processes, stores, uses, and protects personal information in the course of providing its online casino, sportsbook, and related services.

By registering an account, making a deposit, or otherwise using the atas88 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform.

atas88 operates under international gaming authority (IGA) licensing, which imposes specific obligations regarding player data handling, anti-money laundering (AML) compliance, and Know Your Customer (KYC) verification. These regulatory requirements necessitate some of the data collection and retention practices described in this Policy.

2. Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal information is the atas88 operating entity, licensed under international gaming authority oversight. For all data protection enquiries, please contact us at [email protected].

3. Personal Data We Collect

atas88 collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (for age verification — minimum age 21)
• Email address
• Mobile phone number
• Residential address
• Username and account credentials (passwords are stored in hashed form only)

3.2 KYC & Verification Documents

• Government-issued photo identification (e.g., Malaysian MyKad, passport)
• Proof of address (e.g., utility bill, bank statement)
• Proof of payment method (where required for withdrawal verification)

3.3 Financial Data

• Deposit and withdrawal transaction records
• Payment method identifiers (e-wallet account numbers, bank account details, USDT wallet addresses where applicable)
• Account balance history

3.4 Gaming & Behavioural Data

• Game play history, bet amounts, wins and losses
• Session duration and login timestamps
• Responsible gaming tool settings (deposit limits, self-exclusion status)

3.5 Technical & Usage Data

• IP address and geolocation data
• Device type, operating system, and browser information
• Pages visited, features used, and interaction patterns on the Platform
• Cookies and similar tracking data (see Section 8)

3.6 Communication Data

• Records of customer support interactions (live chat transcripts, email correspondence)
• Feedback and survey responses where voluntarily provided

4. How We Collect Personal Data

atas88 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion;
• Automatically — through cookies, server logs, and analytics tools when you visit or interact with the Platform;
• From third parties — including payment processors (e.g., Touch n Go, Boost, GrabPay, Maybank, CIMB), identity verification service providers, fraud prevention agencies, and regulatory bodies where required by law.

5. Legal Basis for Processing

atas88 processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform our obligations under the account agreement, including account management, deposits, withdrawals, and game provision;
• Legal obligation — processing required to comply with IGA licensing conditions, AML/KYC regulations, and applicable law;
• Legitimate interests — fraud detection, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your data protection rights;
• Consent — for marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time.

6. How We Use Your Personal Data

atas88 uses the personal data we collect for the following purposes:

• To create and manage your atas88 account;
• To process deposits, withdrawals, and related financial transactions;
• To verify your identity and age (minimum 21 years) as required by IGA licensing;
• To detect and prevent fraud, money laundering, and prohibited conduct;
• To deliver and improve the Platform's games, sportsbook, and features;
• To provide customer support and respond to your enquiries;
• To administer promotions, bonuses, and loyalty programmes;
• To operate responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion;
• To send you transactional communications (account activity, security alerts, withdrawal confirmations);
• To send you marketing communications, if you have opted in to receive them;
• To comply with our legal and regulatory obligations under IGA licensing and applicable law.

7. Data Sharing & Disclosure

atas88 does not sell your personal data to third parties. We may share your personal data in the following circumstances:

7.1 Service Providers

We share data with trusted third-party service providers who process data on our behalf, including payment processors, KYC verification providers, cloud infrastructure providers, fraud detection services, and customer support platform operators. All service providers are contractually bound to handle data in accordance with applicable data protection law and our instructions.

7.2 Regulatory & Legal Disclosure

atas88 may disclose personal data to our IGA licensing authority, financial intelligence units, law enforcement agencies, or courts where required by applicable law, regulatory obligation, or valid legal process. We will notify you of such disclosure where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of atas88's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights under this Policy will be maintained.

7.4 With Your Consent

We may share data with third parties where you have given explicit consent for a specific purpose not otherwise covered by this Policy.

8. Cookies & Tracking Technologies

atas88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies — required for the Platform to function, including session authentication and security features. These cannot be disabled.
• Functional cookies — store your preferences (e.g., language, responsible gaming settings) to improve your experience.
• Analytics cookies — collect aggregated, anonymised usage data to help us understand how players interact with the Platform and identify areas for improvement.
• Marketing cookies — used to deliver relevant promotional content and measure campaign effectiveness, where you have consented to marketing communications.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing the Platform, but may affect certain functionality. Note that essential cookies cannot be disabled without impacting core Platform function.

9. Data Retention

atas88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following specific retention periods:

• Account data — retained for the duration of your account's existence and for a minimum of 5 years following account closure, in compliance with IGA licensing and AML regulatory requirements.
• KYC documents — retained for a minimum of 5 years from the date of submission, as required by applicable AML regulations.
• Transaction records — retained for a minimum of 5 years from the date of each transaction.
• Marketing data — retained until you withdraw consent or for 2 years from your last interaction with marketing content, whichever is earlier.
• Support records — retained for 2 years from the date of the interaction.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised.

10. Data Security

atas88 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Password hashing — atas88 never stores passwords in plaintext;
• Restricted internal access controls — employee access to personal data is limited to those with a legitimate operational need;
• Regular security audits and penetration testing;
• Two-factor authentication (2FA) available for all player accounts.

While atas88 takes all reasonable steps to protect your data, no system is entirely immune from security risks. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately of any suspected unauthorised account access.

11. Your Data Rights

Subject to applicable law, you have the following rights regarding your personal data held by atas88:

• Right of access — you may request a copy of the personal data atas88 holds about you;
• Right to rectification — you may request correction of inaccurate or incomplete personal data;
• Right to erasure — you may request deletion of your personal data, subject to our legal retention obligations under IGA licensing and AML regulations;
• Right to restriction — you may request that we limit processing of your data in certain circumstances;
• Right to data portability — where technically feasible, you may request a structured, machine-readable copy of personal data you have provided to us;
• Right to object — you may object to processing based on legitimate interests, including profiling for marketing purposes;
• Right to withdraw consent — where processing is based on consent (e.g., marketing), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected] or via 24/7 live chat in your atas88 account dashboard. We will respond within 30 days. Note that some rights are subject to exemptions under applicable law, particularly where data must be retained for regulatory compliance.

12. International Data Transfers

atas88 may transfer your personal data to countries outside your country of residence, including to countries where the atas88 operating entity, its service providers, or infrastructure providers are located. Where such transfers occur, atas88 ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent data protection frameworks — to protect your data to a standard equivalent to applicable data protection law.

13. Children & Minors

The atas88 Platform is strictly restricted to individuals aged 21 years and over. atas88 does not knowingly collect personal data from individuals under 21. If we become aware that personal data has been collected from a person under 21 without appropriate verification, we will immediately suspend the relevant account, void all associated activity, and delete the data as required by applicable law.

Parents and guardians who believe a minor may have accessed the Platform using their credentials are encouraged to contact atas88 support immediately.

14. Changes to This Privacy Policy

atas88 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via the email address on file or via a prominent notice on the Platform. The updated Policy will take effect upon publication, identified by the revised "Last updated" date at the top of this page. Continued use of the Platform following publication constitutes acceptance of the revised Policy.

15. Contact Us

For all privacy-related queries, data subject requests, or concerns regarding this Privacy Policy, please contact the atas88 data protection team through the following channels:

• Live Chat: Available 24/7 inside your atas88 account dashboard
• Email: [email protected]

Our support team can assist in English, Malay, and Mandarin, and will respond to data-related enquiries within 30 calendar days.