Privacy Policy

This Privacy Policy ("Policy") is issued by afatogel ("Company", "we", "us", "our") and applies to all personal data collected in connection with your use of the afatogel online casino and sports betting platform, accessible at afatogel.cam ("Platform").

Afatogel is committed to processing your personal data lawfully, fairly, and transparently. This Policy describes how we collect, use, store, share, and protect personal information provided by registered players and visitors to our Platform, including Malaysian players accessing our services from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia.

By registering an account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions.

The following definitions apply throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person ("Data Subject") — in this context, you as a registered player or visitor.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" means afatogel, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on afatogel's behalf and under its instructions.
• "KYC" means Know Your Customer — our identity and age verification process.
• "Consent" means any freely given, specific, informed, and unambiguous indication of agreement to the processing of your Personal Data for a stated purpose.
• "Sensitive Data" means categories of Personal Data requiring heightened protection, such as identification documents, financial information, and health-related data relevant to responsible gambling assessments.

Afatogel collects the following categories of Personal Data, depending on how you interact with the Platform:

We do not knowingly collect or process any special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data) beyond what is strictly necessary for identity verification purposes in our KYC process.

Afatogel processes your Personal Data for the following specific purposes:

• Account management: Creating, maintaining, verifying, and operating your registered account on the Platform.
• Service delivery: Providing access to all games, betting markets, promotions, and platform features available to registered players.
• Identity & age verification (KYC): Confirming that you are aged 21 or above and are eligible to use the Platform in accordance with our Terms and applicable regulations.
• Payment processing: Processing deposits, withdrawals, and related financial transactions via supported Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect.
• Fraud prevention & security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and other security risks.
• Responsible gambling: Monitoring gameplay patterns to identify potential problem gambling behaviour, implementing player-requested limits, and administering self-exclusion requests.
• Customer support: Responding to your enquiries, resolving disputes, and managing support interactions.
• Legal compliance: Meeting our obligations under applicable law, including anti-money laundering regulations and any other mandatory regulatory requirements.
• Service improvement: Analysing aggregated and anonymised usage data to improve Platform performance, game selection, and user experience.
• Communications: Sending you account-related notifications (e.g., transaction confirmations, KYC status updates, security alerts) and, where you have opted in, promotional communications about relevant offers.

Afatogel processes your Personal Data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and afatogel (i.e., operating your account and delivering Platform services) — this covers the majority of data processing described in this Policy.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC, anti-money laundering requirements, and record-keeping mandates.
• Legitimate interests: Processing necessary for afatogel's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided such interests are not overridden by your rights and interests.
• Consent: Processing for optional purposes such as promotional communications, where we have obtained your explicit consent. You may withdraw consent at any time by contacting our support team.

Afatogel does not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes. We may share your data with the following categories of recipients only to the extent necessary and for the purposes described in this Policy:

• Payment service providers: Malaysian payment processors and financial institutions that handle your transactions — including the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking partners such as Maybank, CIMB, Public Bank, and Hong Leong. These parties process data strictly as required to execute your financial transactions.
• Identity verification providers: Third-party KYC and identity verification platforms engaged to assist in verifying your age and identity. These providers act as Data Processors under our instructions.
• Game and technology providers: Technology companies that power the games and betting markets available on the Platform. Only technical data necessary for game functionality is shared; these providers do not receive your personally identifiable information beyond what is required for security and fraud prevention.
• Legal and regulatory authorities: Where required by applicable law, court order, or legitimate request from a regulatory or law enforcement authority, afatogel may disclose Personal Data to the relevant body. We will notify you of such disclosures where legally permitted to do so.
• Professional advisers: Legal, accounting, and auditing firms engaged in connection with afatogel's operations, subject to confidentiality obligations.

When you make a deposit or withdrawal via any supported Malaysian payment method — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, or cryptocurrency — your payment transaction is processed by the relevant payment service provider.

Afatogel retains records of your deposit and withdrawal history (amounts in MYR/RM, dates, payment method type, and transaction status) for account management and legal compliance purposes. Complete payment card numbers or full bank account numbers are not stored on afatogel's systems; such sensitive financial identifiers are handled exclusively by certified payment processors.

All financial transaction data is encrypted in transit and at rest. Access to financial records is restricted to authorised afatogel personnel on a need-to-know basis and to auditors acting under confidentiality obligations.

Afatogel uses cookies and similar tracking technologies on the Platform to support core functionality and improve user experience. Cookies are small text files stored on your device when you access the Platform.

The following categories of cookies are used:

• Essential cookies: Required for the Platform to function correctly — including maintaining your logged-in session, remembering your language and display preferences, and supporting secure transactions. These cannot be disabled without impairing core Platform functionality.
• Functional cookies: Used to remember your preferences (e.g., preferred game categories, display settings) to personalise your experience on subsequent visits.
• Analytics cookies: Collect aggregated and anonymised data about how players use the Platform — pages visited, session duration, error occurrences — to help afatogel improve performance and user experience. This data does not identify individual users.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats.

Afatogel does not use third-party advertising or tracking cookies. You may manage cookie preferences through your browser settings; however, disabling essential cookies may affect your ability to use the Platform.

Afatogel retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active account data: Retained for the duration of your account and for a period following account closure as required by legal and regulatory obligations (typically a minimum of 5 years for financial records).
• KYC documentation: Retained for the period required by applicable anti-money laundering and identity verification regulations from the date of your last transaction or account closure.
• Transaction records: Deposit and withdrawal records denominated in MYR are retained for a minimum of 5 years from the date of the transaction in compliance with financial record-keeping requirements.
• Customer support records: Communications and support ticket records are retained for up to 3 years from the date of the interaction.
• Marketing consent records: Records of your consent to receive promotional communications are retained for as long as that consent remains in effect, and for a period thereafter to demonstrate compliance.

Upon expiry of applicable retention periods, Personal Data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

Afatogel implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Two-factor authentication (2FA) available to all registered players and enforced for platform administrative access;
• Regular security assessments and penetration testing of Platform infrastructure;
• Strict role-based access controls limiting Personal Data access to authorised personnel only;
• Continuous monitoring for unusual account activity and potential data security incidents;
• Staff training on data protection obligations and secure data handling procedures.

As a Data Subject, you hold the following rights in relation to your Personal Data held by afatogel. You may exercise any of these rights by contacting our support team via live chat or at [email protected]. We will respond to all valid requests within a reasonable timeframe, typically 30 days.

Please note that certain rights are subject to limitations where processing is required for legal compliance, fraud prevention, or the exercise or defence of legal claims. We will communicate any such limitations clearly in our response to your request.

The afatogel Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from any person under the age of 21. Age verification is a mandatory part of our KYC process for all registered players.

Where afatogel becomes aware that Personal Data has been collected from a person under the age of 21, we will take immediate steps to delete that data, suspend the associated account, and return any deposited funds to the payment source where technically feasible.

Afatogel may transfer your Personal Data to, or store and process it in, countries outside of Malaysia in connection with the operation of the Platform. This may occur where our technology infrastructure, Data Processors, or service providers are located in jurisdictions other than Malaysia.

Where such international transfers occur, afatogel ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to the protections described in this Policy. Safeguards may include contractual obligations on receiving parties requiring them to implement appropriate technical and organisational security measures consistent with applicable data protection standards.

We only transfer Personal Data internationally where we have a lawful basis for doing so and where the transfer is necessary for the provision of Platform services or compliance with legal obligations.

Afatogel reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform services. Material changes will be communicated to registered players via email or via a prominent notice on the Platform prior to the change taking effect.

The updated Policy will display a revised effective date at the top of the page. We encourage you to review this Policy periodically to stay informed about how we protect your data. Continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or your Personal Data, please contact the afatogel support team using the following details:

• Live Chat: Available 24/7 inside your account dashboard — the fastest route for all enquiries.
• Email: [email protected] — all emails responded to within 24 hours.

To exercise any of your data rights as described in Section 11, please contact us by email with the subject line "Data Rights Request" and provide sufficient information to allow us to verify your identity and locate your account. We will acknowledge your request promptly and provide a substantive response within 30 days.

For matters relating to responsible gambling, self-exclusion, or account closure for welfare reasons, please visit our dedicated Responsible Gambling page for specific guidance and contact options.