1. PURPOSE OF THIS PRIVACY POLICY

This Privacy Policy (hereinafter — the "Policy") describes how GO ASIA LTD (hereinafter — the "Platform", "Operator") collects, stores, uses, discloses and protects the personal data of players. The Policy has been developed in accordance with GLI-19 (Interactive Gaming System certification standard) and applicable personal data protection legislation.

By using the Platform, the Player confirms that they have read this Policy and agree to its terms. During registration, and upon each material update of this Policy, the Player must confirm their agreement with the current version. This Policy is a mandatory condition for using the Platform.

2. OPERATOR AND CONTACT DETAILS

The operator collecting and processing players' personal data (hereinafter — "PD") is GO ASIA LTD. For all questions related to personal data processing, the Player may contact:

E-mail: support@aziabet.com
Legal address: 9 Barrack Road, Belize City, Belize

The list of specific third parties (partners, subcontractors, service providers) to whom PD may be transferred is available to the Player upon request.

3. WHAT PERSONAL DATA WE COLLECT

GO ASIA LTD collects the following categories of Player PD:

3.1. Identification Data

• Legal first and last name;
• Date of birth (for age verification — at least the minimum required by the regulator);
• Residential address;
• Identity document data: passport, identification/tax number, other government identifiers (stored in encrypted form).

3.2. Contact Information

• Email address;
• Phone number.

3.3. Financial Data

• Bank card details, debit instrument details, account numbers, payment data;
• All financial data is stored exclusively in encrypted form.

3.4. Authentication Data

• Password, PIN code and other credentials (stored only in hashed/encrypted form, never in plain text);
• Account number and other Player identifiers.

3.5. Technical and Behavioural Data

• Device IP address upon each connection;
• Geolocation data (to verify the Player is within a permitted jurisdiction);
• Game session and transaction history, device data;
• Analytics data: pages visited, time on site, gaming actions performed (for service improvement and security).

3.6. Identity Verification Data

• Date and method of identity verification, including description of the document provided and its expiry date;
• All verification data is stored securely.

4. PURPOSES AND LEGAL BASES FOR PROCESSING PERSONAL DATA

GO ASIA LTD processes Players' PD solely for the following purposes and on the following legal bases:

Performance of a contract. Creating and managing the Player's account; providing gaming and financial services; processing bets, deposits and withdrawals; responding to support requests.

Compliance with legal and regulatory requirements. Age verification (only persons of legal gaming age may register); identity verification prior to gameplay; checking against exclusion lists of the operator and regulator; compliance with GLI-19; combating fraud, money laundering and other unlawful activities; maintaining mandatory audit logs.

Legitimate interest of the operator. Ensuring Platform security and fraud prevention; detecting and blocking unauthorised access; statistical analysis and reporting; geolocation monitoring to prevent access from prohibited jurisdictions; recording support calls for training and quality control.

Player consent. Sending personalised marketing and promotional materials from GO ASIA LTD (only with the Player's explicit consent); using the username for advertising purposes.

5. PERSONAL DATA RETENTION PERIODS

Players' PD is retained for the entire duration of the contractual relationship (while the account is active). After account closure, data is retained for the period established by applicable law and regulatory requirements — generally no less than 5 years from the date of the last transaction or account closure, whichever is later.

Where a specific retention period cannot be determined in advance, the criterion for establishing it is the duration of the legal, contractual or regulatory obligations under which the relevant data was processed.

The date on which the Player accepted the terms of this Policy and the User Agreement is recorded and stored in the system.

6. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

GO ASIA LTD may disclose Players' PD to third parties only under one of the following conditions:

Partners and subcontractors: persons processing data on behalf of GO ASIA LTD for strictly defined contractual purposes (payment providers, identity and age verification services, technical providers). Such parties are required to maintain data protection standards no lower than those set out in this Policy.

Financial institutions and credit organisations: for payment processing, financial information verification and fraud prevention.

Regulatory and law enforcement authorities: in cases provided for by law, by court order or other mandatory requirement of a competent authority.

Sports organisations and other competent bodies: for purposes established by applicable GLI-19 regulatory requirements.

In the event of business reorganisation or sale: GO ASIA LTD may transfer Players' PD as part of a transfer or sale of the business or any part thereof, including in the event of insolvency.

GO ASIA LTD does not sell or transfer Players' PD for commercial purposes without the Player's explicit consent. Unsolicited advertising and commercial offers from third parties are not sent to Players.

7. PERSONAL DATA SECURITY

General protection measures. GO ASIA LTD takes all necessary technical and organisational measures to protect Players' PD against unauthorised access, alteration, disclosure or destruction. Personal data and Player funds are treated as critical assets.

Confidentiality. The following data is strictly confidential and may not be disclosed to third parties (except as provided by law or this Policy):

• The amount of funds credited to, debited from, or present in the Player's account;
• The amount wagered by the Player in any game;
• The Player's credentials (login, password, account number, PIN code);
• The Player's name, address and other data that could identify the Player — to anyone other than the operator and regulatory authority.

Encryption. All PD, authentication data, financial information, wagers, game results and transaction data are always encrypted when transmitted over the internet/public networks using current cryptographic standards. Data is protected against interception, unauthorised modification, duplication, substitution and replay attacks.

Procedures and responsible officer. GO ASIA LTD designates one or more employees responsible for designing, implementing and regularly evaluating PD protection procedures. The Operator determines: the nature and scope of data collected, the locations and media on which it is stored; and measures to protect against unauthorised access.

Data breach response procedure. In the event of a PD security breach, GO ASIA LTD immediately activates its internal response procedures and notifies the regulatory authority within the timeframes required by law.

8. MONITORING AND RECORDING OF PLAYER ACTIVITY

By registering on and using the Platform, the Player confirms their consent to the Operator and the regulatory authority monitoring and recording the Player's account activity for security purposes, regulatory compliance and fraud prevention.

The Player confirms that they are the sole authorised user of their account and may not grant access to it to third parties.

Telephone calls to and from the support service are recorded for staff training and security purposes.

9. OBLIGATION TO PROVIDE PERSONAL DATA

Providing certain PD is a mandatory condition for registering and using the Platform. Mandatory fields in the registration form are marked accordingly. Without providing the following data, GO ASIA LTD will be unable to create an account, verify identity and provide services:

• Legal first and last name;
• Date of birth;
• Residential address;
• Contact details (email / phone).

Optional fields in the registration form are marked accordingly. By providing PD during registration, the Player confirms its accuracy, authenticity and currency. In the event of inaccurate data being detected, GO ASIA LTD reserves the right to suspend or close the Player's account.

10. PLAYER RIGHTS REGARDING PERSONAL DATA

The Player has the following rights with respect to their PD:

Right of access. The Player may request confirmation that their PD is being processed, obtain a copy of the data held, and receive information on how it is processed (including purposes, data categories, recipients, retention periods).

Right to rectification. The Player may request correction of inaccurate, outdated or incomplete PD. Data updates are available through GO ASIA LTD support.

Right to erasure ("right to be forgotten"). The Player may request deletion of their PD in the following cases: the data is no longer needed for the stated purposes; the Player has withdrawn consent (where consent was the legal basis); the data was processed unlawfully; deletion is required by law; the Player has objected to processing and there are no other legal grounds to continue.

Right to restriction of processing. The Player may request restriction of processing of their PD while an objection or rectification request is being considered, or in other cases provided by law.

Right to object. The Player may object to processing of PD: based on the operator's legitimate interest or in the public interest; for direct marketing purposes (including profiling for marketing) — in which case processing ceases immediately; for scientific, historical or statistical purposes.

Right to data portability. The Player may request transfer of their PD in a structured, commonly used and machine-readable format (e.g. CSV/JSON), and may request its transfer to another operator where technically feasible. This right applies to PD provided by the Player themselves, processed on the basis of consent or contract, using automated means. Paper records are not within the scope of this right.

Right to withdraw consent. Where processing of PD is based on the Player's consent, the Player may withdraw such consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Right to lodge a complaint. The Player may lodge a complaint with the relevant regulatory authority if they believe their PD is being processed in violation of applicable law.

To exercise any of the above rights, the Player submits a request to GO ASIA LTD support. The Operator reviews requests within a reasonable timeframe, and provides a response or a reasoned refusal indicating the right to appeal to the regulatory authority. A log of all PD-related requests is maintained and retained by the Operator.

11. AUTOMATED DECISION-MAKING AND PROFILING

Where GO ASIA LTD uses automated processes (including profiling) in making decisions that materially affect the Player (e.g. identity verification, access restrictions, detection of suspicious activity), the Player has the right to:

• Receive a clear explanation of the logic of such a decision;
• Receive information about the envisaged consequences of the automated decision for them;
• Request review of the decision with the involvement of an authorised GO ASIA LTD employee (right to human review).

GO ASIA LTD does not apply solely automated decisions that produce legal effects for the Player without providing the right to contest such a decision and request the involvement of an authorised person.

GO ASIA LTD does not apply automated decisions capable of: producing legal effects (e.g. automatic referral to authorities); significantly affecting the Player's circumstances, behaviour or choices without the ability to contest such a decision.

12. COOKIES

The Platform uses cookies (small text files stored on the Player's device). The Player is informed about cookie use during installation of the Platform software or during registration.

All cookies used contain no malicious code and store only data generated by the Player during use of the site.

Where cookies are required for the Platform's gaming functions to operate, use of the Platform and gameplay will not be possible if these cookies are not accepted on the Player's device.

13. UPDATING PLAYER INFORMATION

The Player may update or delete their information at any time by contacting GO ASIA LTD support. To change sensitive data (authentication credentials, financial details), a multi-factor authentication (MFA) procedure applies.

14. CHANGES TO THE PRIVACY POLICY

GO ASIA LTD reserves the right to make changes to this Policy. Upon material changes, the Player will be notified and must confirm agreement with the new version of the Policy before continuing to use the Platform.

Minor editorial or grammatical corrections do not require renewed consent from the Player.

CONFIRMATION OF DATA AUTHENTICITY

By registering on the website and providing personal data, the Player confirms that all information provided is genuine, accurate, and up to date. The Player bears full responsibility for the accuracy of the information provided. In the event that inaccurate data is discovered, GO ASIA LTD reserves the right to block or close the Player's account.