Anastoto Privacy Policy – Malaysia User Data Protection

Anastoto collects several types of information from users to ensure the platform operates smoothly and the services provided are safe and relevant. The information collected is divided into two main categories:

Information You Provide Directly:

• Full name as stated on your identification document.
• Active email address and mobile phone number.
• Date of birth for age verification.
• Payment method details such as bank account numbers or digital wallet information for deposit and withdrawal purposes.
• Identity verification documents submitted during the KYC process.
• Any information you share when communicating with the anastoto support team.

Automatically Collected Information:

Every piece of data collected by anastoto has a clear and lawful purpose. We do not use your data for any purpose not stated in this document without first obtaining your consent.

• Account Management — Creating, verifying, and managing your account on the anastoto platform, including the login process and two-factor authentication.
• Transaction Processing — Processing deposits and withdrawals securely, and maintaining accurate transaction records for your reference and ours.
• Fraud Prevention — Identifying and blocking suspicious activity, duplicate accounts, and unauthorised access attempts that could compromise your account security.
• Service Communications — Sending important account-related notifications, security updates, policy changes, and information relevant to your transactions.
• Customer Support — Managing enquiries, complaints, and support requests you submit to the anastoto support team.
• Platform Enhancement — Analysing usage patterns in aggregate to understand how users interact with the platform and make relevant improvements.
• Legal Compliance — Fulfilling reporting and record-keeping obligations required by law or relevant authorities.

Anastoto does not sell or rent users' personal data to any third party for commercial purposes. However, there are certain situations where we need to share information with other parties to enable the platform to function:

• Payment Service Providers — Required transaction information is shared with payment processors used to handle deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Game Providers — Minimum technical data required for game operation is shared with game software providers that partner with anastoto.
• Identity Verification Services — KYC information is shared with accredited third-party identity verification service providers to verify the authenticity of submitted documents.
• Authorities — anastoto will disclose required information if mandated by law, court order, or a legitimate request from a competent authority.

All third parties that receive anastoto user data are bound by confidentiality and data protection obligations equal to or stricter than those we apply ourselves.

Anastoto uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential Cookies — Required for core platform functions such as maintaining login sessions and remembering language preferences. These cookies cannot be disabled.
• Performance Cookies — Collecting information about how users use the platform (such as most frequently visited pages) in aggregate form without identifying individual users.
• Functional Cookies — Remembering preferences you have set, such as display settings and game preferences, to deliver a more personalised experience.

You can manage cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the anastoto platform. For more information on how to manage cookies, refer to the help guide of your browser.

Protecting your data is a core technical priority at anastoto. We implement multiple layers of security to ensure your information remains safe at all times:

• Data Transmission Encryption — TLS 1.3 is used for all communications between your device and anastoto servers, ensuring data in transit cannot be read by unauthorised parties.
• Encryption of Stored Data — Sensitive data such as passwords is stored in encrypted form using the latest encryption algorithms. Your password is never stored in plain text.
• Access Control — Only anastoto staff with legitimate job requirements may access user data. This access is strictly audited and monitored.
• Continuous Security Monitoring — An automated monitoring system operates 24 hours a day to detect any unauthorised access attempts or suspicious activity.
• Data Backup — User data is backed up regularly to separate server locations to ensure service continuity in the event of a technical failure.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% free from threats. You also play an important role in keeping your account secure by using a strong password and never sharing your login details with anyone.

Anastoto retains users' personal data for as long as necessary to fulfil the purposes stated in this policy, or to comply with applicable legal requirements.

In general, active account data is retained for the duration your account remains active. Once an account is closed, certain data such as transaction records may be kept for an additional period to fulfil compliance and legal obligations.

If you request account deletion, anastoto will delete or anonymise your personal data that is no longer needed for legitimate purposes within a reasonable period after the request is received. Please note that certain data may need to be retained for a specific period in accordance with legal requirements even after a deletion request is received.

As an anastoto user, you have several rights regarding your personal data that we fully respect. These rights can be exercised by contacting our support team:

The anastoto platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we determine that personal data belonging to someone under the age of 18 has been collected, we will take immediate steps to delete that information and terminate the associated account.

If a parent or guardian discovers that their underage child has registered an account at anastoto, please contact our support team immediately so that appropriate action can be taken.

Anastoto reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, technologies used, or applicable legal requirements.

When significant changes are made, we will notify users via in-app notifications or email to your registered address before those changes take effect. Continued use of the anastoto platform after changes are published is considered acceptance of the updated policy.

The "Last Updated" date at the top of this document indicates when this Privacy Policy was last reviewed. We encourage you to check this page regularly.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how anastoto handles your personal data, we are ready to assist through the following channels:

• Live Chat — Available 24 hours a day, 7 days a week directly within the anastoto platform or app. This is the fastest way to get a response.
• Email — Contact us at [email protected] for privacy-related enquiries that require a written response.

The anastoto data protection team will endeavour to respond to all privacy-related enquiries within a reasonable timeframe. For more complex issues, processing may take longer and we will keep you informed of the expected resolution time.

This document is read together with Terms and Conditions and Responsible Gaming Policy anastoto which together form the complete agreement between you and our platform.