This Privacy Policy sets out how Aurabet collects, uses, stores, shares, and protects the personal data of individuals who access or use our Platform. We are committed to handling your data responsibly and in accordance with applicable international data protection standards.
Aurabet ("we", "us", "our", "the Company") operates the online betting and casino platform accessible at https://aurabet.cam (the "Platform"). We take the privacy and security of your personal data seriously. This Privacy Policy explains what personal information we collect from you when you use the Platform, how we use and protect it, the circumstances under which we may share it, and the rights you have in relation to your data.
This Policy applies to all current and former Account holders, as well as to visitors who browse the Platform without registering. It should be read in conjunction with our Terms and Conditions and Responsible Gambling Policy, which together govern your use of the Aurabet Platform.
By registering for an Account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices, you should discontinue use of the Platform and contact us to close your Account.
If you have questions about any aspect of this Policy, or if you wish to exercise any of your data rights, please contact our support team at [email protected]. We are committed to providing a timely and helpful response to all data-related enquiries.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
Aurabet collects personal data that you provide to us directly, data generated through your use of the Platform, and data obtained from third-party sources in limited circumstances. The categories of data we collect include the following:
Aurabet does not collect or process special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) unless expressly required for regulatory compliance in specific circumstances, in which case your explicit consent will be sought.
We collect personal data through the following channels and methods:
Aurabet processes your personal data for the following specific, explicit, and legitimate purposes:
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Identity, contact, account data |
| Identity verification and KYC compliance | Identity, KYC documents |
| Processing deposits and withdrawals | Financial, payment data |
| Providing betting and gaming services | Account, usage, financial data |
| Customer support and dispute resolution | Identity, communications data |
| Anti-money laundering (AML) monitoring | Identity, financial, usage data |
| Fraud detection and prevention | Technical, financial, identity data |
| Responsible gambling monitoring and enforcement | Usage, financial, account data |
| Platform analytics and service improvement | Technical, usage data (anonymised) |
| Marketing communications (with consent) | Contact, usage, preference data |
| Legal compliance and regulatory reporting | Identity, financial, communications data |
Aurabet processes your personal data only where we have a valid legal basis to do so. Our primary legal bases are as follows:
Aurabet does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data in the following limited circumstances, and only to the extent necessary for each purpose:
We engage trusted third-party service providers who process data on our behalf under strict contractual data processing agreements. These include payment service providers (DuitNow, FPX gateways, Touch 'n Go eWallet and Boost operators, GrabPay), KYC and identity verification platforms, cloud hosting and infrastructure providers, customer support technology vendors, and fraud prevention services.
We may be required to disclose personal data to competent regulatory authorities, law enforcement agencies, courts, or government bodies where required by applicable law, a valid court order, or our international gaming licence obligations. In such cases, we will disclose only the minimum data necessary to comply with the legal requirement.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of Aurabet's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to your data being subject to a materially different privacy policy.
Aurabet will never share your personal data with advertisers, data brokers, or marketing companies without your explicit prior consent. Any marketing communications from Aurabet will relate to Aurabet's own products and services only.
As an internationally operated platform, Aurabet may transfer and store personal data on servers and infrastructure located outside of Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data, including the use of standard contractual clauses, data processing agreements with equivalent protections, or reliance on recognised adequacy determinations where applicable.
Malaysian users should be aware that data protection laws in the countries to which data is transferred may differ from those applicable in Malaysia. However, we contractually require all third-party processors to maintain security and data protection standards equivalent to those described in this Policy, regardless of the jurisdiction in which processing occurs.
Aurabet retains personal data only for as long as is necessary for the purposes for which it was collected, or for the duration required by applicable law or our licensing obligations. Our general retention schedule is as follows:
Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Where anonymised data is retained beyond these periods (for statistical or research purposes), it can no longer be linked to any individual.
The Aurabet Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. Cookies are small text files placed on your device when you access the Platform. We use the following categories of cookies:
You may manage non-essential cookie preferences through your browser settings. Note that disabling functional or analytics cookies may affect the quality of your experience on the Platform. We do not use third-party advertising cookies or cross-site behavioural tracking technologies.
Subject to applicable law and certain limited exceptions, you have the following rights in relation to your personal data held by Aurabet. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within 30 calendar days of receipt.
You have the right to request a copy of the personal data we hold about you, along with information about how it is used and with whom it is shared.
You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Some corrections may require updated KYC documentation.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that we are unable to delete data that we are legally required to retain (e.g., AML records).
You may ask us to restrict certain types of processing of your data while we resolve a dispute about its accuracy or the legitimacy of our processing activities.
Where processing is based on your consent or a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
You may object to processing of your personal data based on our legitimate interests, or to direct marketing communications at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
The Aurabet Platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. All Account registrations are subject to mandatory age verification through our KYC process, and any Account found to belong to an individual under 21 years of age will be immediately suspended.
If you have reason to believe that a minor has submitted personal data to Aurabet or has registered an Account, please notify us immediately at [email protected]. Upon verification, we will promptly delete the relevant data and close the Account in accordance with our responsible gambling obligations.
21+ Only: Aurabet enforces a strict minimum age policy of 21 years for all Account holders. This is enforced through mandatory KYC identity verification and is non-negotiable. Any attempt to circumvent this requirement constitutes a breach of our Terms & Conditions.
Aurabet employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:
Notwithstanding these measures, no method of data transmission or storage over the internet is entirely secure. While we take all reasonable precautions, Aurabet cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your Account login credentials and for promptly reporting any suspected security incidents to our support team.
The Aurabet Platform may reference or integrate with third-party services (such as payment processors) in the course of delivering our services. These third parties operate under their own privacy policies, which govern their collection and use of your data when you interact with their services directly.
Aurabet is not responsible for the privacy practices of third-party services and does not endorse or make any representations about their data handling. We encourage you to review the privacy policies of any third-party service with which you interact, particularly payment service providers such as Touch 'n Go eWallet, Boost, GrabPay, and your banking institution when using FPX transfers.
Aurabet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Where changes are material, we will notify registered Account holders by email or through an in-Platform notification before the changes take effect.
The effective date at the top of this page reflects the date on which the most recent version of this Policy came into force. We encourage you to review this Policy periodically. Continued use of the Platform following publication of a revised Policy constitutes your acceptance of the updated terms.
If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, or if you wish to exercise any of your data rights as described in Section 11, please reach out to us through any of the following channels:
We serve players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all regions of Malaysia. All data rights requests are handled with equal care and urgency regardless of the player's location.
Privacy at Aurabet isn't just a policy document — it's reflected in every design decision we make about how your data is collected, stored, and used.
Every data transmission between your device and Aurabet's servers is protected with 256-bit SSL encryption — the same standard used by major banking institutions globally.
Aurabet never sells, rents, or trades your personal data to advertisers, data brokers, or third-party marketing companies. Your data is used only to deliver and improve our services.
Access, correct, or request deletion of your personal data at any time. Our support team processes data rights requests within 30 days in accordance with international data protection standards.
Financial data related to DuitNow, FPX, Touch 'n Go eWallet, and other Malaysian payment methods is handled under strict contractual obligations with each payment service provider.
We don't hold your data indefinitely. Each category of personal data has a clearly defined retention period, after which it is securely deleted or irreversibly anonymised.
Our data practices align with internationally recognised data protection frameworks. All third-party processors are bound by equivalent data security obligations regardless of their jurisdiction.
If you have questions about how Aurabet handles your personal data, or if you'd like to exercise your data rights, our support team is available around the clock in English, Bahasa Melayu, and Chinese.
21+ For players aged 21 and above only. Gambling involves risk — please play responsibly. Responsible Gambling →