A6star Privacy Policy – Malaysian User Data Protection

A6star is an online entertainment platform operating under the domain a6star.run, providing online casino services, Sports Betting on football including the Malaysia Super League and EPL, e-sports betting, and Table Games to users in Malaysia. In the course of our operations, we collect and process certain personal data necessary to deliver a high-quality service to every member.

A6star acts as the data controller for all personal data collected through this platform. We take this responsibility seriously and are committed to ensuring every aspect of our data handling complies with internationally recognised data protection principles, including the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy is written in plain language because we believe every member deserves to clearly understand how their data is used — not wade through a lengthy document full of legal jargon. If any section is unclear, a6star's customer support team is available to help via live chat 24×7 or by email at support@a6star.run.

A6star collects your personal data through several methods — directly when you register or use the platform, and automatically through the technologies we employ. The following are the categories of data we may collect:

A6star uses collected personal data solely for the purposes stated below. We do not use your data for any other purpose without notifying you in advance:

• Account Management: To register, verify, and manage your a6star member account, including processing requests for information updates, password resets, and KYC verification.
• Payment Processing: To process all MYR deposits and withdrawals via your preferred local payment methods, and to verify that all transactions are legitimate and secure.
• Service Provision: To provide access to all a6star games and services — including slots, live baccarat, football betting, e-sports, and table games — and to personalise your experience on the platform.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, or any use of the platform that violates a6star's terms of service.
• Legal Compliance: To comply with applicable legal requirements, including anti-money laundering (AML) policies, KYC requirements, and any reporting obligations to relevant authorities.
• Service Communications: To send you important notifications relating to your account, terms updates, security information, and promotions relevant to a6star services.
• Customer Support: To process and respond to any enquiries, complaints, or requests for assistance submitted to the a6star customer support team.
• Platform Improvement: To analyse aggregated usage patterns (without identifying individuals) for the purpose of improving the user experience and developing new features on the a6star platform.

In accordance with recognised data protection principles, a6star processes your personal data on one or more of the following valid legal bases:

• Contract Performance: Processing is necessary to fulfil the agreement between you and a6star – that is, to provide the online entertainment platform services you registered for.
• Legitimate Interests: Processing based on a6star's legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these do not override your fundamental rights.
• Legal Obligation Compliance: Processing necessary to comply with legal obligations applicable to a6star, including AML, KYC, and tax compliance requirements.
• Consent: For certain purposes, such as opt-in marketing communications, we will obtain your explicit consent beforehand. You may withdraw this consent at any time through your account settings or by contacting us.

A6star does not sell, rent, or transfer your personal data to any third party for their own marketing purposes. However, in the course of our operations, we may share necessary data with the following categories of third parties, and only to the extent required for the stated purposes:

• Payment Service Providers: Payment gateways processing Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX transactions receive only the minimum information required to process your transaction.
• Game Service Providers: Game content providers that supply slots, live baccarat, and other games to the a6star platform may receive gameplay data necessary for game functionality, but do not receive your personally identifiable information.
• KYC Service Providers: Licensed third-party identity verification services may be used to process identity verification documents during the KYC process, in strict compliance with data protection standards.
• Legal Authorities: a6star may share personal data with law enforcement authorities, regulators, or government bodies when required by law or a valid court order.

A6star invests seriously in security technology and procedures to protect your personal data from unauthorised access, disclosure, modification, or destruction. The key security measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your browser and a6star's servers is encrypted using TLS protocol with 256-bit encryption keys – the same standard used by Malaysian banking institutions.
• Password Encryption: Your account password is never stored in plain text. We use a strong one-way hashing algorithm (bcrypt) to keep your password secure even in a hypothetical data breach scenario.
• Fund Segregation: Member funds are held in a separate bank account, kept entirely apart from a6star's operational accounts. This ensures your funds are protected under all circumstances.
• Internal Access Controls: Access to members' personal data within a6star's internal systems is restricted to staff who require it to perform their duties, and all access is logged for audit purposes.
• 24×7 Monitoring: A continuous security monitoring system watches the a6star platform for any unusual activity or security threats and will take immediate action upon detection.
• Two-Factor Authentication (2FA): We encourage all members to enable two-factor authentication for an additional layer of protection on their a6star account.

Despite the security measures we have in place, no security system can be guaranteed 100% foolproof. We therefore also encourage you to take your own precautions, such as using a strong and unique password for your a6star account and never sharing your login credentials with anyone.

A6star retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by law. The following are our general data retention guidelines:

• Active Account Data: For as long as your account remains active and you continue using the a6star platform.
• Data After Account Closure: Following account closure, a6star retains financial data and transaction records for a minimum of 7 years, in accordance with Malaysian financial and tax regulations.
• KYC Data: Identity verification documents are retained for a minimum of 5 years after the business relationship ends, in accordance with AMLA (Anti-Money Laundering Act 2001) requirements.
• Security Logs: Technical and security logs are retained for 12 months for security investigation and fraud prevention purposes.
• Communication Records: Customer support conversation records are retained for 24 months for quality assurance and dispute resolution purposes.

Once the relevant retention period has expired, your personal data will be securely deleted or anonymised in accordance with a6star's established procedures.

The a6star platform uses cookies and similar technologies to enhance user experience, ensure the platform functions properly, and analyse usage patterns. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled, as the platform will not function properly without them.
• Preference Cookies: Saves your personal settings such as language, game preferences, and display settings to provide a more comfortable experience on your next visit.
• Analytics Cookies: Helps us understand how members interact with the a6star platform in aggregate for improvement purposes. This data does not identify individuals.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

As an a6star member, you hold rights over your personal data that we fully respect. Below are your key rights and how to exercise them:

A6star takes the security of your financial data extremely seriously. Here is how we ensure every financial transaction in MYR is fully protected:

• All deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX (Maybank2u, CIMB Clicks) are processed through payment gateways licensed and approved by Bank Negara Malaysia.
• A6star does not store sensitive payment information such as your full bank account number or e-wallet login credentials. We only receive payment status confirmations from payment gateways.
• Every financial transaction on the a6star platform is fully recorded and auditable, providing a clear audit trail for every movement of funds.
• Our fraud monitoring system operates 24×7 to detect suspicious transaction activity and will take immediate action, including suspending transactions until security verification is completed.
• Member funds are held in a separate bank account, segregated from a6star's operational accounts, ensuring your money is protected under all circumstances.

The a6star platform is an exclusive adult entertainment service that is not intended for, and does not accept registrations from, individuals under the age of 18. We do not knowingly collect personal data from minors.

Should a6star discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who suspect their child has registered an account on a6star without authorisation are encouraged to contact us immediately at support@a6star.run.

A6star reserves the right to amend this Privacy Policy from time to time to reflect changes in our data management practices, new legal requirements, or changes to the services we offer. Here is how we manage such amendments:

• Members will be notified of any material amendments to this Privacy Policy by email to their registered address at least 14 days before the changes take effect.
• In-platform notifications on a6star will also be displayed to ensure you are aware of any significant changes.
• The effective date of the latest version of this Privacy Policy will always be stated at the bottom of this document.
• Continued use of the a6star platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically. The effective date of the current version: January 2026.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by a6star, please do not hesitate to reach out to us through the following channels:

• Privacy Email: support@a6star.run – Please include "Privacy Inquiry" in your email subject line for faster processing.
• Live Chat: Available 24 hours a day, 7 days a week directly within the a6star platform – for general privacy enquiries.
• VIP Account Manager: Gold and Platinum members may contact their dedicated account manager directly for privacy matters requiring priority attention.

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex data rights requests, such as full data access or data deletion applications, the response period is up to 30 days from the date of receipt of a complete request.

A6star takes every privacy enquiry seriously. Your trust is the foundation of our relationship, and we are always committed to ensuring your personal data is handled in a transparent, responsible, and secure manner.