aiplay Privacy Policy

1 Who We Are

aiplay ("we", "our", "us") operates the online gaming platform accessible at aiplay.bio, offering casino games, live dealer tables, slots, and sports betting services primarily to players based in Malaysia. In the context of this Privacy Policy, aiplay acts as the data controller in respect of personal data collected from users of the Platform.

We take our obligations as a data controller seriously. This Policy is designed to provide you with clear and transparent information about our data handling practices so that you can make informed decisions about sharing your personal information with us.

2 Personal Data We Collect

2.1 Identity & Registration Data. When you create an aiplay account, we collect: your full legal name, date of birth, nationality, MyKad number or passport number, residential address, email address, and Malaysian mobile phone number. This information is required to establish and verify your account identity.

2.2 Financial Data. To facilitate deposits, withdrawals, and transaction processing, we collect payment instrument details including bank account numbers associated with FPX transfers, and transaction reference data from Touch 'n Go eWallet, DuitNow, Boost, GrabPay, and other accepted payment methods. We do not store full debit or credit card numbers.

2.3 KYC Verification Documents. As part of our Know Your Customer (KYC) obligations under applicable anti-money laundering regulations, we collect copies of identity documents (MyKad, passport) and proof of address documents (utility bills, bank statements) where required.

2.4 Account Activity Data. We record data generated through your use of the Platform, including login history, game session data, betting history, deposit and withdrawal records, bonus activity, and customer support interaction records.

2.5 Technical & Device Data. We automatically collect certain technical information when you access the Platform, including your IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL. This data is collected via server logs and analytics tools.

2.6 Responsible Gaming Data. Where you use our responsible gaming tools (deposit limits, self-exclusion, cooling-off periods), we record the settings and preferences you establish in order to enforce them effectively and consistently.

3 How We Collect Your Data

aiplay collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, contact support, or update your account settings;
• Automatically — through server logs, session tracking, and analytics tools when you browse or interact with the Platform;
• From third-party payment providers — transaction confirmation data and payment status updates from processors such as FPX, Touch 'n Go eWallet, DuitNow, and Boost;
• From identity verification services — where we use third-party KYC services to verify identity documents, those services may return verification results and associated data to aiplay;
• From cookies and similar technologies — as described in Section 7 of this Policy.

4 Legal Bases for Processing

aiplay processes your personal data on the following legal bases:

4.1 Contractual Necessity. Processing necessary for the performance of our contract with you — including account creation, payment processing, game access, and customer support — is carried out on the basis of contractual necessity.

4.2 Legal Obligation. Processing necessary to comply with our legal obligations under applicable anti-money laundering legislation, gaming regulations, and tax reporting requirements is carried out on the basis of legal obligation.

4.3 Legitimate Interests. Processing necessary for the purposes of our legitimate interests — including fraud prevention, platform security, responsible gaming enforcement, and service improvement — where those interests are not overridden by your data protection rights.

4.4 Consent. Where we send you marketing communications by email or other channels, we do so on the basis of your consent. You may withdraw consent to marketing communications at any time by contacting support or using the unsubscribe mechanism in any marketing email.

5 How We Use Your Personal Data

aiplay uses the personal data we collect for the following purposes:

• To create, verify, and manage your aiplay account;
• To process deposits, withdrawals, and in-Platform transactions in Malaysian Ringgit (MYR);
• To verify your identity and age in accordance with our 21+ age requirement and KYC obligations;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities on the Platform;
• To enforce our responsible gaming policies, including deposit limits, self-exclusion, and session controls;
• To provide customer support and respond to your enquiries;
• To personalise your experience on the Platform, including game recommendations and promotional offers;
• To send you transactional communications such as payment confirmations, security alerts, and account notifications;
• To send you promotional communications and marketing materials where you have consented to receive them;
• To analyse Platform usage, improve our services, and develop new features;
• To comply with applicable laws, regulations, and requests from competent authorities.

6 Sharing Your Personal Data

6.1 aiplay does not sell your personal data to third parties for their own marketing or commercial purposes under any circumstances.

6.2 Service Providers. We share personal data with carefully selected third-party service providers who assist us in operating the Platform, including: payment processing providers (FPX, Touch 'n Go, DuitNow, Boost, GrabPay); identity verification and KYC service providers; game software providers who require session data for game delivery; cloud infrastructure and hosting providers; and customer support platform providers. All service providers are contractually bound to process data only for the purposes for which it is shared and to maintain appropriate security standards.

6.3 Regulatory & Legal Disclosures. aiplay may disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or other competent authorities where required by applicable law, court order, or regulatory direction. We will, where permitted to do so, notify you of any such disclosure.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of aiplay's assets, personal data held by us may be transferred to the acquiring entity, subject to the acquiring entity agreeing to be bound by privacy obligations no less protective than those set out in this Policy.

7 Cookies & Tracking Technologies

aiplay uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device when you visit aiplay.bio.

7.1 Essential Cookies. Required for core Platform functionality including session management, authentication, and security features. These cookies cannot be disabled without materially impairing Platform functionality.

7.2 Performance & Analytics Cookies. Used to collect aggregate data about how visitors interact with the Platform, which pages are most visited, and how users navigate between sections. This data is used to improve Platform design and performance.

7.3 Functional Cookies. Used to remember your preferences and settings, such as language preference and responsible gaming controls, to provide a more personalised experience.

7.4 Managing Cookies. You can control or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the aiplay Platform. Your browser's help documentation provides instructions for managing cookie preferences.

8 Data Security

aiplay implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the aiplay Platform;
• Encrypted storage of sensitive data fields including identity document data and financial information;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Regular security assessments and vulnerability testing of Platform infrastructure;
• Incident response procedures for detecting, containing, and notifying relevant parties of any personal data breach.

While aiplay employs robust security measures, no system is completely impenetrable. We encourage you to use a strong, unique password for your aiplay account and to enable two-factor authentication. You are responsible for maintaining the security of your own login credentials.

9 Data Retention

aiplay retains personal data for the following periods:

• Active account data — retained for the duration of your account and for a period of five (5) years following permanent account closure, in accordance with applicable anti-money laundering and gaming regulatory requirements;
• KYC and identity verification documents — retained for a minimum of five (5) years following account closure, or longer if required by applicable law;
• Transaction records — retained for a minimum of seven (7) years following the date of the transaction, in compliance with financial record-keeping obligations;
• Customer support records — retained for three (3) years following the last interaction, unless a longer period is required to resolve an outstanding dispute;
• Marketing consent records — retained for three (3) years following withdrawal of consent or last engagement with marketing communications.

At the expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our data destruction procedures.

10 Your Data Protection Rights

Subject to applicable law, you have the following rights in respect of your personal data held by aiplay:

• Right of Access — you may request a copy of the personal data aiplay holds about you;
• Right to Rectification — you may request correction of any inaccurate or incomplete personal data held about you;
• Right to Erasure — you may request deletion of your personal data in certain circumstances, subject to our retention obligations under applicable law;
• Right to Restrict Processing — you may request that we restrict the processing of your personal data in certain circumstances;
• Right to Data Portability — where processing is based on consent or contractual necessity, you may request a machine-readable copy of certain personal data you have provided to us;
• Right to Object — you may object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing;
• Right to Withdraw Consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact aiplay support via live chat or at [email protected] (plain text — not a clickable link). We will respond to verified requests within 30 days. We may require identity verification before processing requests relating to personal data.

11 Children & Minors

The aiplay Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the aiplay account registration and KYC process.

If we become aware that personal data has been collected from a person under the age of 21, we will immediately close the relevant account, delete the associated personal data, and — where required by applicable law — report the matter to relevant regulatory or child protection authorities.

If you are a parent or guardian and believe your child may have accessed or registered on the aiplay Platform, please contact us immediately at [email protected] so that we can take appropriate action.

12 Updates to This Privacy Policy

aiplay reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing activities, applicable law, or regulatory guidance. The effective date at the top of this Policy will be updated whenever material changes are made.

Where changes are material, we will provide notice to registered players via the email address on file at least 14 days before the revised Policy takes effect. Continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how aiplay protects your personal data.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or aiplay's data handling practices, please contact us through the following channels:

aiplay endeavours to respond to all privacy-related enquiries within 72 hours. Complex requests — such as subject access requests requiring data compilation — may take up to 30 days to fulfil. We will acknowledge receipt of your request and keep you informed of progress.