Privacy Policy

Asia200 ("we", "us", "our", "the Company") operates the online casino and sports betting platform accessible at asia200.cam (the "Platform"). In providing the Platform and associated services, we collect, process, and store certain personal data relating to our players and visitors ("you", "your", "Data Subject").

This Privacy Policy sets out in detail the categories of personal data we collect, the purposes and legal grounds for which we process that data, the conditions under which we may share it with third parties, the security measures we employ to protect it, and the rights available to you in relation to your personal data.

Asia200 operates in accordance with applicable data protection principles. We are committed to handling all personal data responsibly, transparently, and in accordance with the purposes for which it was collected. We do not sell personal data to third parties for marketing purposes under any circumstances.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, all of which collectively govern your relationship with the Asia200 Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Asia200 collects personal data through multiple channels in the ordinary course of operating the Platform. The categories of data we collect are as follows:

3.1 Identity Data

Full legal name, date of birth, nationality, Malaysian IC number (MyKad), Driver's Licence number, or Passport number as provided during registration or KYC verification.

3.2 Contact Data

Email address, Malaysian mobile phone number, and residential address, including city (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam) and postcode.

3.3 Financial Data

Bank account details, e-wallet identifiers (e.g., Touch 'n Go eWallet account reference, Boost ID, GrabPay reference), DuitNow or FPX transaction references, deposit and withdrawal history, account balance, and MYR transaction amounts.

3.4 Gaming & Betting Activity Data

Your game history, bet amounts, wagering totals, sports betting market selections, session duration, bonus participation records, and loyalty points balance.

3.5 Technical & Device Data

IP address, browser type and version, operating system, device type and identifiers, screen resolution, time zone, referring URL, and clickstream data recorded during your Platform sessions.

3.6 Communications Data

Records of your communications with our customer support team, including live chat transcripts, email correspondence, and any information you provide when raising a complaint or support request.

3.7 KYC Document Data

Copies of identity documents and proof of address documents submitted for verification purposes, and facial recognition or selfie images where required to confirm document ownership.

Asia200 processes your personal data for the following purposes:

Asia200 processes personal data only where a valid legal basis exists. The legal bases upon which we rely are:

• Contractual Necessity: Processing required to perform our contract with you — including account management, transaction processing, and delivery of gaming services — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable legal requirements — including KYC verification, AML reporting, age verification, and responses to lawful regulatory inquiries — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing conducted for fraud prevention, platform security, abuse detection, and internal analytics is carried out on the basis of Asia200's legitimate interests, balanced against your rights and interests.
• Consent: Where we rely on consent as the legal basis (including certain marketing communications and optional analytics cookies), you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Asia200 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of third parties solely to the extent necessary to provide the Platform services or to comply with applicable obligations:

• Payment Processors: Licensed payment service providers including those facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect transactions, for the sole purpose of processing deposits and withdrawals.
• KYC & Identity Verification Providers: Licensed third-party identity verification services that assist with age verification, document authentication, and anti-fraud screening.
• Game Studio Licensors: Licensed international game studios whose titles are hosted on the Platform, to the extent required for game functionality and dispute resolution.
• Regulatory and Law Enforcement Authorities: Where required by law, court order, or regulatory directive, we will disclose your data to competent authorities including financial regulators, anti-money laundering authorities, and law enforcement agencies.
• Professional Advisers: Legal counsel, accountants, and auditors under obligations of confidentiality, where access to your data is necessary in the course of their engagement.

All third-party data processors engaged by Asia200 are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with our written instructions.

Asia200 retains personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by applicable legal, regulatory, tax, or accounting obligations.

As a general principle, personal data relating to a player account — including identity documents, transaction records, and KYC materials — will be retained for a period of five (5) years following the closure of the account, in compliance with standard anti-money laundering record-keeping requirements.

Technical and device data, session logs, and platform analytics data are retained for shorter periods as determined by operational necessity, typically not exceeding 24 months.

Where data is retained for compliance purposes beyond the active account period, access to that data will be restricted to authorised compliance personnel only and will not be used for any commercial purpose.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

Asia200 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key measures include:

• Transport Encryption: All data transmitted between your device and the Asia200 Platform is encrypted using TLS 1.2 or higher, secured with 256-bit SSL certificates. Your browser should display a padlock indicator confirming the secure connection.
• Data at Rest Encryption: Sensitive personal data stored on our servers — including financial information and identity documents — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data is restricted to authorised Asia200 personnel on a strict need-to-know basis. Role-based access controls and multi-factor authentication are enforced for all internal system access.
• Intrusion Detection: Our infrastructure is monitored continuously for anomalous access patterns and potential security incidents. Automated alerts are configured for suspicious account or system activity.
• Regular Security Audits: Asia200 conducts periodic internal and external security assessments to identify and remediate vulnerabilities in our systems and processes.
• Incident Response: Asia200 maintains a documented security incident response procedure. In the event of a data breach that poses a significant risk to affected individuals, we will notify relevant parties in accordance with applicable legal requirements.

While Asia200 takes all reasonable precautions to protect your data, no system is entirely immune from risk. You play an important role in protecting your account by maintaining the confidentiality of your login credentials and notifying us immediately if you suspect any unauthorised access.

The Asia200 Platform uses cookies and similar tracking technologies to operate correctly, enhance your experience, and analyse Platform performance. The categories of cookies we use are as follows:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. Analytics cookies may be disabled without affecting core Platform functionality.

Subject to applicable law and certain exceptions, you hold the following rights in relation to your personal data held by Asia200. To exercise any of these rights, please contact us using the details in Section 15 of this Policy.

Asia200 will respond to verified data rights requests within a reasonable timeframe. We may need to verify your identity before processing your request. We will not charge a fee for handling standard data rights requests, but reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

The Asia200 Platform is strictly for use by individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of our account registration process.

Where Asia200 has reasonable grounds to suspect that a registered user is under the age of 21, the account will be suspended immediately pending age verification. If it is confirmed that the account holder is under 21, the account will be permanently closed, all deposits will be returned (net of any amounts already withdrawn), and all personal data associated with the account will be securely deleted, except where retention is required by law.

If you become aware that a minor has accessed or registered on the Asia200 Platform using your details or any other means, please notify our support team immediately so that appropriate action can be taken.

The Asia200 Platform may contain references to third-party payment services, game studios, and other service providers. These third parties operate under their own privacy policies, which are independent of this Privacy Policy. Asia200 is not responsible for the privacy practices of third-party services or platforms.

When you interact with a third-party payment provider (such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, or DuitNow) to complete a deposit or withdrawal transaction, the data you submit to that provider is governed by the privacy policy of that provider, not by this Privacy Policy. We encourage you to review the privacy policies of all third-party services you interact with.

In the course of operating the Asia200 Platform and fulfilling the purposes described in this Privacy Policy, your personal data may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, Asia200 ensures that appropriate safeguards are in place — including contractual protections, technical security measures, and, where required, applicable transfer mechanisms — to maintain an equivalent standard of data protection to that applied within Malaysia.

Transfers to third-party data processors outside Malaysia are conducted only with service providers who have contractually committed to implementing appropriate data protection standards consistent with applicable requirements.

Asia200 reserves the right to update or revise this Privacy Policy at any time. The most current version of this Privacy Policy will always be available at asia200.cam/privacy-policy. The "Last Updated" date at the top of this page reflects the date on which the most recent revision took effect.

Where amendments are material — for example, where we introduce a new category of data processing or a new category of third-party sharing — Asia200 will endeavour to provide advance notice to registered players via email or in-platform notification prior to the changes taking effect.

Your continued use of the Platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the changes and, where consent is the applicable legal basis for new or changed processing, your consent to such processing.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Asia200 handles your personal data, or if you wish to exercise any of your data subject rights as described in Section 10, please contact us through the following channels:

• 24/7 Live Chat: Available directly on the Asia200 Platform. This is the fastest channel for general support queries. Average first response: 3–5 minutes.
• Email: [email protected] — for formal data subject access requests or privacy complaints, please clearly indicate "Privacy Policy Request" or "Data Subject Rights Request" in your message subject line.

To protect your privacy and verify your identity before releasing any personal data, we may require you to provide proof of identity before processing a data access, rectification, or erasure request. We will handle all such requests in strict confidence and with the highest respect for your privacy.

Our primary support and data protection team operates on Malaysia Standard Time (MYT, UTC+8). We aim to respond to all formal data subject rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we will notify you of any extension to this period within the initial 30-day window.