We take your privacy seriously. This policy explains exactly what data asa36 collects, how it is used, who may access it, and the rights you hold over your personal information.
Six principles that underpin how asa36 handles your personal data
All data transmitted between your browser and asa36 servers is protected by 256-bit SSL/TLS encryption. Your personal information and financial details are never sent in plain text.
asa36 never sells, rents, or trades your personal information to third parties for their own marketing purposes. Your data is yours — we are custodians, not owners.
You can access, correct, export, or request deletion of your personal data at any time by contacting our support team. We honor data subject requests within 30 days.
We collect only the data we genuinely need to provide, secure, and improve asa36 services. We do not harvest data for purposes unrelated to your gaming and account experience.
Personal data is stored in access-controlled, encrypted databases hosted in secure data centers. Strict internal access policies ensure only authorized personnel can view sensitive records.
This Privacy Policy is written in plain, accessible English — not impenetrable legal jargon. We believe you deserve to understand how your data is used without needing a lawyer.
Effective Date: January 15, 2026 | Last Reviewed: January 15, 2026 — This Privacy Policy applies to all users of the asa36 platform (https://asa36.cam). We may update this policy periodically. Where changes are material, we will notify you by email to your registered address or by a prominent notice on the platform at least 14 days before the changes take effect. Continued use of the platform after that date constitutes acceptance of the revised policy.
This Privacy Policy governs the collection, processing, storage, and sharing of personal data by asa36 in connection with your use of the platform at https://asa36.cam and any related services. The following definitions apply throughout this policy:
This policy applies to all personal data asa36 processes in connection with users primarily located in Indonesia, and is intended to meet or exceed internationally recognized data protection standards including the General Data Protection Regulation (GDPR) principles, where applicable, and relevant Indonesian data protection laws.
When you create an asa36 account, we collect the following information:
To comply with anti-money laundering (AML) obligations and to verify your age, we collect:
All deposit and withdrawal activity on asa36 generates transaction records, including:
Note: asa36 does not store full bank account numbers or e-wallet credentials. Only masked references and transaction IDs necessary for reconciliation are retained.
To provide and improve our services, asa36 records:
When you access the asa36 platform, our systems automatically collect:
If you contact our support team via live chat, email, or messaging platforms, we retain:
| Data Category | Examples | Sensitivity Level | Retention Period |
|---|---|---|---|
| Registration Data | Name, email, phone, address | Standard | Duration of account + 5 years |
| KYC / ID Documents | KTP scan, selfie, address proof | High | Duration of account + 7 years |
| Financial Records | Deposits, withdrawals, wager history | High | Duration of account + 7 years |
| Gaming Activity | Session logs, game outcomes | Standard | Duration of account + 3 years |
| Technical / Device Data | IP address, browser, device ID | Low–Standard | 13 months (rolling) |
| Support Communications | Chat logs, email threads | Standard | 3 years from last interaction |
Most of the personal data asa36 holds was provided by you directly during:
When you browse or use asa36, certain data is collected automatically through:
In limited circumstances, asa36 receives data from trusted third-party sources, including:
Data received from third parties is handled under the same protective standards as data collected directly from you.
asa36 processes your personal data only when a valid legal basis exists. The applicable legal bases for each processing activity are as follows:
Processing necessary to create and maintain your account, process deposits and withdrawals, settle bets, and deliver the services you registered for. Without this processing, asa36 cannot provide its services to you.
Processing required to meet our obligations under applicable laws and regulations, including:
Processing that serves asa36's legitimate operational interests, where those interests are not overridden by your rights and interests:
For processing activities not covered by the above bases — primarily marketing communications and non-essential cookies — we rely on your explicit, freely given consent. You may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
asa36 uses your personal data for the following purposes:
With your prior consent, asa36 may use your email address and/or mobile number to send you information about promotions, bonuses, new game launches, and seasonal offers relevant to your interests. You may opt out of marketing communications at any time by following the unsubscribe link in any email, or by contacting our support team.
Important: asa36 does not use your personal data for automated decision-making (including profiling) that produces legal or similarly significant effects on you, except where required for fraud prevention or age verification, in which case you have the right to request human review of such decisions.
asa36 does not sell your personal data. We share data only in the limited circumstances described below, and always subject to appropriate contractual and technical protections.
We engage trusted third-party companies to process data on our behalf. These processors are contractually bound to:
Categories of third-party processors we use include: payment processing gateways (Indonesian bank connections and e-wallet providers), KYC and identity verification services, cloud hosting and database infrastructure providers, fraud detection and security monitoring services, and customer support platform providers.
asa36 may disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by:
Where legally permitted, we will notify you before complying with such a request. In all cases, we provide only the minimum data necessary to satisfy the legal obligation.
In the event that asa36 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify you in advance of any such transfer and ensure that your data remains protected under equivalent privacy standards. You will retain your right to request deletion of your data in connection with such a transfer.
asa36 does not sell, rent, or trade your personal data. We do not share your data with advertisers for behavioral targeting or retargeting. We do not allow third parties to use your data for their own independent marketing purposes without your explicit opt-in consent.
asa36 retains personal data only as long as necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention periods are set out in the table in Section 2. The following principles govern retention decisions:
While your asa36 account remains active, we retain all data categories needed to operate and secure your account, comply with our legal obligations, and provide customer support.
After your account is closed (whether by you or by asa36), we retain:
If you request permanent self-exclusion, asa36 retains your identification data (name, email, and relevant device/IP information) on its exclusion registry for the duration of the exclusion period, even after the formal account closure. This is necessary to prevent you from creating a new account while under exclusion, which is a responsible gaming and regulatory obligation.
Once the applicable retention period expires, asa36 securely deletes or anonymizes personal data so it can no longer be linked to any individual. Deletion requests submitted by users (see Section 10) will be honored within 30 days, except where retention is required by law or legitimate business interest as described above.
asa36 implements a multi-layered security framework to protect your personal data against unauthorized access, loss, destruction, alteration, or disclosure. Key measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, asa36 will notify affected users within 72 hours of becoming aware of the breach, where feasible. Notifications will describe the nature of the breach, the categories and approximate number of individuals affected, the likely consequences, and the measures taken or planned to address the breach and mitigate its effects.
Security is a shared responsibility. We encourage you to protect your account by choosing a strong, unique password, enabling two-factor authentication if available, never sharing your login credentials, and contacting us immediately at [email protected] if you suspect unauthorized access.
asa36 uses cookies and similar tracking technologies on the platform. A cookie is a small text file placed on your device by a website. Cookies help us provide essential functionality, remember your preferences, analyze platform usage, and maintain session security.
You can manage cookie settings through your browser's privacy controls. Most modern browsers allow you to view, delete, and block cookies. Note that disabling strictly necessary cookies will impair or prevent access to the platform. You can also manage consent for optional cookies through your asa36 account privacy settings once logged in.
Some browsers transmit "Do Not Track" (DNT) signals to websites. asa36 currently does not alter its data collection practices in response to DNT signals, as there is no universally accepted standard for interpreting these signals. We rely on the granular cookie consent framework described above to honor individual privacy preferences.
asa36 respects your rights over your personal data. The following rights are available to you and can be exercised by contacting our support team at [email protected]:
Request a copy of the personal data asa36 holds about you. We will respond within 30 days and provide a structured, machine-readable export where possible.
Request correction of inaccurate or incomplete personal data. You can update most profile information directly in your account settings.
Request deletion of your personal data where there is no compelling legal reason to continue processing it. Note that AML and licensing obligations require us to retain certain records.
Request that we restrict processing of your data in certain circumstances — for example, while you contest the accuracy of data or object to its processing.
Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another service provider of your choice.
Object to processing of your data based on our legitimate interests, including profiling for marketing purposes. We will cease processing unless compelling legitimate grounds override your interests.
Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect prior lawful processing.
Request human review of any significant automated decision made about you. You may contest the outcome and provide your own input for reconsideration.
To exercise any of the above rights, submit a written request to [email protected] with the subject line "Privacy Rights Request," your registered username and email address, a description of the right you wish to exercise, and (for verification purposes) a confirmation of your identity. We will respond within 30 days. If your request is complex or numerous, we may extend this period by an additional 60 days with prior notice.
Note on Exercising Rights: Exercise of privacy rights is free of charge. We may decline requests that are manifestly unfounded, excessive, or repetitive. In such cases, we will explain our reasoning in writing. If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
The asa36 platform is strictly intended for adults who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.
At registration, we require all users to confirm that they are 21 or older. During the KYC verification process, we verify date of birth against government-issued identification documents. Any account found to belong to a person under 21 will be immediately suspended, all funds will be returned to the depositing payment method after deducting any processing costs, and all associated personal data will be deleted from our systems within 30 days, except where retention is required to demonstrate compliance with age verification obligations.
Parent or Guardian Notice: If you believe that a minor under the age of 21 has registered an account on asa36 without authorization, please contact us immediately at [email protected]. We will investigate and take appropriate action within 48 hours of receiving a credible report.
We also encourage parents and guardians to use parental control software to restrict access to online gambling platforms. asa36 does not circumvent or disable third-party parental controls.
If you have questions about this Privacy Policy, wish to exercise your data rights, or want to report a potential privacy violation, please reach out to us through the channels below. Our privacy team reviews all inquiries personally — you will not receive an automated reply with no follow-up.
24/7 via platform
Indonesian-speaking agents available
Within 30 days
For all formal data subject requests
This Privacy Policy was last updated on January 15, 2026. For prior versions of this policy or to understand what changes were made in the most recent revision, contact us at the email address above.
asa36 reserves the right to update this Privacy Policy at any time. When we make material changes, we will provide at least 14 days' advance notice to all registered users via their registered email address before the updated policy takes effect. Your continued use of the platform after the effective date constitutes your acceptance of the revised policy.
Have questions about how asa36 handles your data? Review our full Terms, explore our Responsible Gaming tools, or visit the FAQ for quick answers.