Atas3 Privacy Policy – Personal Data Protection for Malaysian Players

This Privacy Policy is published by atas3 (hereinafter referred to as "we", "atas3", or "the Platform") and applies to all users and members who use the platform on the website atas3.best and all related services provided by atas3.

Atas3 understands that member trust is the most valuable asset we hold. A significant part of that trust rests on your confidence that the personal information you share with us — during registration, during transactions and while playing — is handled responsibly, securely and transparently.

This Privacy Policy is written in plain, easy-to-understand English by design, so that every Malaysian member can read and understand their rights clearly without needing to interpret complex legal language. If any section is still unclear, the atas3 support team is available to help via live chat 24/7.

This Privacy Policy should be read together with atas3 Terms & Conditions and Responsible Gaming Policy which forms part of the overall agreement between you and atas3.

Atas3 collects various types of personal data when you use our platform. Below is a full list of the data categories we collect and how they are sourced:

Atas3 does not collect sensitive data such as full credit card details (card number, CVV) — all payments are processed directly by licensed payment providers such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX. atas3 only receives confirmation that a payment was successful, not full card or account details.

Atas3 uses the personal data it collects solely for legitimate, clearly stated purposes. The following are the primary purposes for which your data is used:

• Account management: To process registrations, verify identities, manage logins, and give you access to all features on the atas3 platform.
• Transaction processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u / CIMB Clicks), and to process withdrawals to your e-wallet or Malaysian bank account.
• Gaming service delivery: To manage game sessions, store game history, calculate and credit winnings, and administer VIP and bonus programs.
• Fraud prevention and security: To identify and prevent fraud, money laundering, account abuse, and other unlawful activities that could compromise the security of the platform and its members.
• Customer support: To respond to enquiries, resolve complaints, and provide technical assistance to members via live chat and email.
• Platform improvement: To analyze aggregated usage patterns (without identifying individuals) for the purpose of improving the performance, interface, and user experience of the atas3 platform.
• Legal compliance: To comply with applicable Malaysian legal and regulatory requirements, including reporting and record-keeping obligations.
• Marketing communications: To send you information about atas3 promotions, bonuses, and the latest offers — only if you have agreed to receive such communications. You may unsubscribe at any time.

Atas3 does not sell, rent, or disclose members' personal data to third parties for marketing purposes. However, there are specific circumstances in which atas3 may need to share your personal data with carefully selected parties, namely:

• Payment service providers: Transaction information that must be shared with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and FPX providers (Maybank2u, CIMB Clicks) solely for the purpose of processing deposits and withdrawals.
• Gaming software providers: Technical data required to deliver games from providers such as Evolution Gaming, Pragmatic Play, and PG Soft — limited strictly to the session information and balance data needed for game operation.
• Cloud and infrastructure service providers: Server and cloud service providers that store and process atas3 data — bound by strict confidentiality agreements and security standards equal to or higher than those atas3 itself adheres to.
• Law enforcement authorities: If atas3 is required under Malaysian law or a valid court order to disclose member information — atas3 will comply with that legal obligation and will endeavour to notify the affected member where permitted by law.
• Regulatory authorities: Information required for compliance and audit purposes by the relevant regulatory authorities.

All third parties that receive atas3 member data are bound by strict data processing agreements requiring them to protect that data to a standard equal to or higher than atas3's own data protection standards. atas3 is not responsible for the privacy practices of third parties that have a direct, independent relationship with you outside of atas3.

Atas3 implements comprehensive technical and organisational security measures to protect members' personal data from unauthorised access, disclosure, alteration, or destruction. Among the security measures in place:

• Data encryption in transit: All data is encrypted using TLS (Transport Layer Security) protocol with 256-bit encryption during transmission between your device and atas3 servers.
• Data encryption at rest: Sensitive data stored in the atas3 database is encrypted using industry-standard encryption algorithms.
• Strict access controls: Access to member data is restricted to atas3 staff with a legitimate job-based need, and multi-factor authentication (MFA) is mandatory for all internal system access.
• Continuous monitoring: An automated monitoring system operates 24/7 to detect and alert on any suspicious or unauthorized access attempts to atas3 data servers.
• Regular security audits: atas3 conducts regular internal and external security audits to identify and address any vulnerabilities in our security infrastructure.
• Staff training: All atas3 staff with access to member data receive regular data protection and information security training.

The atas3 platform uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage, and maintain the security of your login session. Below are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login session authentication, security, and language preferences. These cookies cannot be disabled as they are a fundamental technical requirement of the atas3 platform.
• Preference Cookies: Saves your preferences such as display language, theme, and other interface settings to provide a more personalised experience each time you return to the atas3 platform.
• Analytical Cookies: Helps atas3 understand how members use the platform — the most visited pages, the most-used features, and time spent in each section. This data is collected in aggregate and does not identify individuals.
• Security Cookies: Used to identify the device you use to log in, detect suspicious login attempts, and protect your account from unauthorised access.

You can manage cookie settings in your web browser to accept, reject, or delete cookies. However, disabling essential cookies may affect your ability to use the atas3 platform fully. For more information on managing cookies, refer to the Help section of your web browser.

As an atas3 member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

The atas3 platform is intended exclusively for individuals aged 18 years of age and above only. atas3 does not knowingly collect or process the personal data of individuals under the age of 18.

If atas3 determines that personal data belonging to a minor has been collected without proper age verification, we will take the following steps immediately:

• Immediately closing the account in question.
• Delete all related personal data from atas3 systems as promptly as possible.
• Returning any funds remaining in the account in accordance with established procedures.
• Taking additional preventive measures to avoid similar incidents in the future.

If you become aware that someone under the age of 18 has registered and is using the atas3 platform, please notify us immediately by email at support@atas3.best or via live chat so that appropriate action can be taken.

In the course of its operations, atas3 may need to transfer members' personal data to servers or service providers operating outside Malaysia — in particular for internationally recognized game software providers and cloud infrastructure providers.

Any such data transfers are carried out in compliance with the requirements of Malaysia's Personal Data Protection Act 2010 and are subject to contractual safeguards ensuring:

• Data recipients outside Malaysia provide a level of data protection equivalent to or greater than that required under Malaysian law.
• Data transfer agreements incorporating standard protection clauses are signed before any data transfer takes place.
• Data transferred is limited to the minimum necessary for the specified purpose only.

Atas3 prioritizes providers with a local or regional presence in Southeast Asia to minimize unnecessary cross-border data transfers.

Atas3 retains members' personal data only for as long as necessary for the stated purposes, or as required by Malaysian law. The following are data retention guidelines by category:

• Active account data: Retained for as long as your account is active and for a reasonable period following account closure, to address any complaints or disputes that may arise.
• Financial transaction records: Retained for a minimum of 7 years as required under Malaysian financial and anti-money laundering laws.
• Identity verification records (KYC): Retained for a minimum of 5 years following account closure, in accordance with regulatory requirements.
• Support communication logs: Retained for 3 years for service improvement and dispute resolution purposes.
• Cookie and analytics data: Retained for 13 months from the date of collection, after which it is deleted or anonymised.
• Inactive accounts: Account data that has been inactive for more than 3 years with no transactions will be deleted in accordance with secure deletion procedures, unless a longer retention period is required by law.

When personal data is no longer needed and there is no legal obligation to retain it, atas3 will delete that data using secure erasure methods that ensure it cannot be recovered.

Atas3 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, applicable legal requirements, or other relevant circumstances. The "Updated" date at the top of this page will always reflect the date of the most recent revision.

For any material changes to this Privacy Policy — particularly those affecting your rights or how we use your data — atas3 will provide appropriate notice via:

• In-platform notifications on atas3 when you log in.
• Email to the address registered to your account.
• A notice displayed prominently on this Privacy Policy page.

We encourage you to review this Privacy Policy from time to time to stay informed about how atas3 protects your information. Your continued use of the atas3 platform after any changes take effect will be considered acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding the atas3 Privacy Policy or the handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly within the atas3 platform — the fastest way to get a response on privacy issues that require immediate attention.
• Privacy Email: support@atas3.best — for detailed privacy enquiries or formal data rights requests. Please include "Privacy Enquiry" or "Data Rights Request" in the subject line of your email.

For formal privacy complaints, please include your atas3 account number, a clear and detailed description of your complaint, and any relevant supporting evidence or information. atas3 is committed to handling all privacy complaints seriously, fairly, and within a reasonable timeframe.

If you are not satisfied with how atas3 has handled your privacy complaint, you have the right to refer it to the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital.