aqua365 Privacy Policy for Malaysian Adult Players

Introduction

This Privacy Policy governs the collection, use and protection of personal information by aqua365 in connection with the operation of the website available at aqua365.cam and all services associated with it. aqua365 provides online casino game information and sports betting content primarily for Malaysian adults. Users accessing the platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam or any other location are subject to this policy.

This document is intended to be transparent and straightforward. Where technical or legal language is necessary, we have added context to aid understanding. Users who have questions about any provision should contact support before proceeding with registration or account activity.

Definitions

Data We Collect

aqua365 collects personal data through registration, account activity, payment transactions, KYC submissions, customer support interactions and website usage. The categories of data and their sources are summarised below.

aqua365 does not intentionally collect sensitive personal data beyond what is necessary for mandatory identity and age verification required under responsible gambling and financial crime obligations.

How We Use Your Data

Personal data collected through aqua365 is used for the following defined purposes:

• Creating, verifying and administering your aqua365 account, including age confirmation and identity checks.
• Processing MYR deposits and withdrawals through supported methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank and Hong Leong.
• Applying and settling bonuses, promotions and wagering requirements in accordance with stated conditions.
• Providing responsive customer support, resolving disputes and responding to complaints.
• Meeting anti-money-laundering, fraud prevention and responsible gambling obligations.
• Maintaining and improving platform security, performance and reliability.
• Sending account-related communications including deposit confirmations, withdrawal updates and security alerts.
• Complying with applicable legal and regulatory requirements and cooperating with lawful investigations.

Legal Bases for Processing

aqua365 relies on the following legal bases when processing personal data:

• Contract performance — processing is necessary to fulfil your aqua365 account agreement, including payment processing and account administration.
• Legal obligation — processing is required to meet KYC, anti-money-laundering, fraud prevention and responsible gambling duties.
• Legitimate interests — processing supports fraud detection, platform security and product improvement where these interests are not overridden by user rights.
• Consent — where optional promotional communications are sent, consent is sought and may be withdrawn at any time.

Disclosure to Third Parties

aqua365 may share personal data with carefully selected third parties where sharing is necessary for defined operational purposes. aqua365 does not sell personal data for commercial gain.

• Payment processors — transaction data shared with providers such as bank networks, FPX gateway operators and e-wallet platforms to complete MYR transfers.
• Identity verification providers — document and biometric checks carried out through authorised KYC partners.
• Fraud and security services — technical and behavioural data reviewed to detect suspicious activity, chargebacks and unauthorised access.
• Platform infrastructure — hosting, content delivery and technical support providers operating under confidentiality agreements.
• Legal and regulatory authorities — information disclosed where required by a valid court order, statutory obligation or lawful regulatory request.

Third-party service providers engaged by aqua365 are contractually required to process shared data solely for the agreed purpose and to maintain appropriate security measures.

International Data Transfers

aqua365 operates using infrastructure and service providers that may be located outside Malaysia. Where personal data is transferred to a jurisdiction that does not maintain equivalent data protection standards, aqua365 seeks to ensure that appropriate contractual or technical safeguards are in place before the transfer occurs.

Users who have questions about the safeguards applied to a specific transfer may contact aqua365 support for further information. Provision of personal data through the platform constitutes acknowledgement that cross-border transfer may be necessary to deliver the services described in the Terms & Conditions.

Data Retention

aqua365 retains personal data for as long as the account remains active and for a further period following closure where retention is necessary to satisfy legal, regulatory, financial crime prevention or dispute resolution obligations. The minimum retention period for financial and identity records may be set by applicable law and operator licence conditions, which can extend to several years after the last account activity.

Data that is no longer required for any permissible purpose will be securely deleted or anonymised. Retention schedules are reviewed periodically and adjusted where requirements change. Where a user requests erasure, aqua365 will confirm whether the requested data falls within an overriding legal retention obligation before processing the request.

Cookies and Technical Tracking

aqua365 uses cookies and similar technologies to maintain session state, authenticate account access, detect fraud, analyse platform usage and improve navigation. Categories of cookies used may include:

• Strictly necessary — required for login authentication, session management and security controls. These cannot be disabled without preventing access to account functions.
• Functional — store preferences such as language and display settings to improve your aqua365 experience.
• Analytical — collect aggregated usage data to help identify performance issues and improve page content.

Browser settings can be adjusted to limit or block certain cookies, but doing so may affect the functionality of your aqua365 account. IP addresses and device identifiers collected through technical means are treated as personal data where they can reasonably identify an individual.

Your Rights as an aqua365 User

Subject to the legal bases applicable to each processing activity, registered aqua365 users may exercise the following rights in respect of their personal data:

• Right of access — request confirmation of whether aqua365 holds personal data about you and obtain a description of the categories and purposes involved.
• Right of rectification — request correction of inaccurate or incomplete personal data held by aqua365.
• Right of erasure — request deletion of personal data where no overriding legal or regulatory retention obligation applies.
• Right to restrict processing — ask aqua365 to limit how your data is used pending investigation of an accuracy or objection claim.
• Right to object — object to processing based on legitimate interests, including direct marketing communications.

Requests should be submitted to aqua365 support. Identity verification may be required before any data is disclosed or modified. aqua365 will respond to substantiated requests within a reasonable period consistent with applicable standards. Where a request cannot be fulfilled, aqua365 will provide a written explanation.

Children, Minors and Age Restrictions

aqua365 is restricted exclusively to adults aged 21 and above. aqua365 does not knowingly collect personal data from persons under 21 years old. If it is established that an account has been opened or used by a minor, the account will be suspended, data review will be conducted and any funds may be managed in accordance with the relevant terms and applicable law.

Parents and guardians are encouraged to use device controls, content filters and open conversations to prevent underage access to gambling platforms. aqua365 may use age verification checks at registration and at any point during the account relationship where a reasonable concern arises.

Security Measures

aqua365 applies technical and organisational measures to protect personal data from unauthorised access, loss, alteration and disclosure. Current measures include SSL encryption for data in transit, access controls restricting staff interaction with personal data to defined roles, periodic security reviews and incident response procedures.

Users also contribute to account security by choosing a strong, unique password and not sharing credentials. aqua365 support staff will never ask for your complete password, one-time banking code or online banking login credentials. Suspected unauthorised access should be reported to support promptly so that protective measures can be applied.

Changes to This Privacy Policy

aqua365 may update this Privacy Policy to reflect changes in operations, applicable laws, payment methods, responsible gambling obligations or security practices. The effective date at the top of this page will be updated when a revision is published. Where a change is material, aqua365 will seek to provide notice through an account communication or a prominent website notice before the change takes effect.

Continued use of aqua365 after a revised policy becomes effective constitutes acceptance of the updated terms. Users who do not agree with a change should stop using the platform and contact support to discuss account closure.

Contact Us

Questions, correction requests, data access requests and privacy-related complaints should be directed to the aqua365 support team. Please provide your registered account username, a clear description of your request and any relevant transaction or account reference. Do not include complete card numbers, banking passwords or one-time codes in any message.