Anastoto Privacy Policy – Our Commitment to Protecting Your Personal Data

This Privacy Policy is issued by anastoto ("we", "Platform") and applies to all users and members who access or use the anastoto platform via the official website, mobile app, or any related service channel.

Anastoto takes data protection responsibilities seriously. We understand that your trust is the foundation of our relationship – and that trust can only be maintained when we are open and honest about how we handle your personal information.

By using the anastoto platform, you agree to the collection and use of data as described in this policy. If you do not agree with any part of this policy, please stop using the platform and contact us to close your account.

This policy is written in compliance with Malaysia's Personal Data Protection Act 2010 and applicable international data protection standards. Any changes to this policy will be communicated to members via in-platform notifications or registered email.

Anastoto collects several categories of personal data depending on how you interact with our platform. Below is a detailed explanation:

A. Registration Data and Identity Verification (KYC)

• Full name: As per your official Malaysian identification document
• Identity card number (MyKad): For identity verification and KYC purposes
• Date of birth: To verify that you meet the minimum age requirement of 18 years
• Email address: For account communications, notifications, and password recovery
• Phone number: For two-factor authentication and service communications
• Residential address: Required for KYC verification and compliance requirements
• Identity document image: MyKad or passport copy for KYC verification

B. Financial and Transaction Data

• Bank account details: Bank name, account number (stored in encrypted format)
• Deposit and withdrawal history: Records of all financial transactions within your anastoto account
• Payment method: Payment method used (DuitNow, FPX, TNG, etc.)

C. Platform Usage Data

• Game history: Records of games played, total bets placed, and outcomes
• Login activity: Date, time, and approximate location of each login session
• Preference settings: Language, display mode, and notification preferences you have set

D. Technical Data (Collected Automatically)

• IP address: Used for security, location verification, and fraud prevention
• Device type and browser: To optimise the user experience
• Cookie and session data: To maintain login status and user preferences
• System logs: Technical information for troubleshooting and platform improvements

Anastoto uses the personal data collected solely for legitimate and necessary purposes in providing services to you. The specific purposes are as follows:

• Service delivery: To create and manage your account, process deposits and withdrawals, and ensure you can access all anastoto platform features without interruption.
• Identity verification (KYC): To comply with legal requirements related to anti-money laundering and counter-terrorism financing, and to ensure only eligible individuals access the platform.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised access, or any suspicious activity within your account.
• Customer support: To enable the anastoto support team to assist you more effectively whenever you need help.
• Service communications: To send important notifications related to your account, transactions, platform updates, and policy changes.
• Platform improvements: To analyse aggregated usage patterns for the purpose of improving the anastoto interface, performance, and overall user experience.
• Responsible gaming: To identify gaming patterns that may indicate unhealthy behaviour and provide appropriate assistance in line with anastoto's commitment to responsible gaming.
• Legal compliance: To fulfil any reporting or record-keeping obligations required under Malaysian law or by relevant regulatory authorities.

Anastoto takes a careful approach to data sharing. Our general policy is does not share your personal data with external parties except in the following circumstances:

• Payment service providers: Information required to process transactions is shared with approved payment processors (such as FPX and DuitNow gateways) bound by strict confidentiality agreements.
• Technology service providers: A limited portion of technical data may be processed by cloud infrastructure providers used by anastoto. All such providers are bound by data processing agreements that comply with international security standards.
• Legal authority: Anastoto will disclose personal data when required by law, court order, or a valid request from Malaysian government authorities.
• Third-party identity verification: Approved third-party KYC services may be used to verify your identity documents. Only the minimum necessary data is shared.

Anastoto uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential cookies (required): These cookies are required for the platform's basic functions – including maintaining your login status, storing language preferences, and ensuring session security. They cannot be disabled without affecting platform functionality.
• Performance cookies (analytics): Used to gather aggregate information on how users interact with anastoto – which pages are visited most frequently, time spent in each section, and so on. This data does not personally identify you.
• Functional cookies: Saves your preferences such as dark/light mode, language selection, and other interface settings so you do not have to reconfigure them every time you log in.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the anastoto platform.

Anastoto implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or unauthorised disclosure.

• Data encryption in transit: All data transmitted between your device and anastoto servers is encrypted using TLS 1.3 protocol with SSL 256-bit encryption.
• Data encryption at rest: Sensitive data such as financial information and KYC documents are encrypted at the database level using AES-256 encryption algorithms.
• Internal access controls: Access to users' personal data within the anastoto organisation is restricted on a "need-to-know" basis – only staff who require access to specific data to perform their duties are authorised to do so.
• 24/7 security monitoring: Continuous security monitoring systems are in place to detect any suspicious activity or intrusion attempts.
• Retention period: Personal data is retained for as long as necessary for the purpose it was collected, or as required by law – typically 7 years for financial records for AMLA compliance purposes. Data may be deleted earlier upon your request, subject to legal requirements.
• Secure backup: Data is regularly backed up to secure data centres with restricted access and strict physical controls.

Under Malaysia's Personal Data Protection Act 2010 and international privacy standards, you have the following rights regarding your personal data at anastoto:

The anastoto platform is strictly for individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.

If we find that we have inadvertently collected personal data from someone under the age of 18, we will take immediate steps to delete that data and close the associated account.

If you become aware that someone under the age of 18 has registered an anastoto account, please notify us immediately through our customer support channels.

In the course of its operations, anastoto may transfer personal data to countries outside Malaysia, particularly in relation to the cloud infrastructure and technology services used.

When transferring data outside Malaysia, anastoto ensures that a level of protection equivalent to or exceeding Malaysia's PDPA standards is applied. This is done through:

• Data processing agreement: All third-party providers that receive anastoto user data are bound by data processing agreements that set high security and privacy standards.
• Careful vendor selection: Anastoto only works with providers that have a strong security track record and are certified to recognised international standards.
• Malaysian user data is prioritised to remain within Malaysia: Where possible, Malaysian user data is stored and processed within infrastructure operating in Malaysia or the Southeast Asia region.

If you have any questions, concerns, or complaints about how anastoto handles your personal data, we encourage you to reach out to us directly. We are committed to resolving every concern promptly and professionally.

• Privacy email: [email protected]
• Live chat: Available 24/7 via the chat icon within the anastoto platform
• Target response time: We aim to respond to all privacy inquiries within 5 business days and resolve issues within 14 business days.

If you are not satisfied with how anastoto has handled your privacy complaint, you have the right to lodge a complaint with the Malaysian Personal Data Protection Department (PDPD).