Suga77 Privacy Policy – Malaysian User Data Protection

1. Introduction and Our Privacy Commitment

Suga77 is an online casino platform that operates with full priority given to the security and privacy of its members. We understand that your personal information is a trust placed in us, and we take this responsibility very seriously. This Privacy Policy is provided to ensure all Malaysian players can easily understand it without needing to rely on potentially confusing translations.

As a platform trusted by hundreds of thousands of players in Malaysia, Suga77 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We never compromise on the security of our users' data.

2. Types of Data We Collect

Suga77 only collects data that is genuinely necessary to provide a high-quality, secure platform experience. The following are the categories of data we collect and the purposes for their collection:

2.1 Data We Do Not Collect

Suga77 does not collect sensitive information unrelated to platform operations, such as biometric data, medical records, religious beliefs, or political views. We only collect what is strictly necessary to provide you with a safe and enjoyable gaming experience.

3. How We Use Your Data

Every piece of information we collect has a clear and legitimate purpose. Suga77 uses user data for the following purposes only:

• Account Management: Securely creating, verifying, and maintaining your user account.
• Transaction Processing: Processing all deposits and withdrawals accurately and swiftly through our integrated payment system.
• KYC Verification: Meeting anti-money laundering (AML) legal compliance requirements and verifying player identity.
• Platform Security: Detecting and preventing fraud, hacking, and suspicious activity that could compromise your account.
• Service Communications: Sending you important notifications related to your account, promotions, and platform updates.
• Service Improvement: Analyzing usage patterns to improve platform quality and the gaming experience.
• Responsible Gaming: Monitoring wagering habits to identify players who may need assistance.

4. Data Sharing with Third Parties

Suga77 understands that your trust depends on how we manage your data. We do not share, sell, or rent your personal information to third parties for commercial purposes. However, there are limited situations where data sharing is necessary for platform operations:

4.1 Trusted Service Providers

Suga77 works with carefully vetted service partners, including payment processors such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and Boost, as well as hosting and cybersecurity service providers. All these partners are bound by strict confidentiality agreements and are only permitted to use your data for specific, agreed-upon purposes.

4.2 Legal Requirements

Where Malaysian law or a valid court order requires us to disclose user information, Suga77 will comply with such requirements. We will endeavour to notify you in advance where the law permits.

5. Data Security and Encryption

Protecting your data from unauthorized access is the highest technical priority at suga77. Our platform is equipped with multiple security layers working simultaneously to keep your information safe at all times.

• 256-bit SSL Encryption: All data transmitted between your device and Suga77's servers is encrypted using SSL 256-bit technology, the highest security standard in the industry.
• Two-Factor Authentication (2FA): An additional security layer is available to protect your account login from unauthorized access.
• 24/7 Monitoring: The suga77 cybersecurity team monitors our systems around the clock to detect and respond to any threats.
• Regular Security Audits: Our platform undergoes periodic independent security audits conducted by certified cybersecurity experts.
• Secure Data Storage: All sensitive data is stored in encrypted databases at certified data centers with strict access controls.
• Data Segregation: Financial data and identity data are stored separately to minimise risk in the event of any security incident.

6. Cookies and Tracking Technologies

Suga77 uses cookies and similar technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website. We use several types of cookies for different purposes:

6.1 Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login and session security. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how users interact with the platform for continuous improvement.
• Functional Cookies: Saving your preferences such as language and display settings for your convenience.
• Analytics Cookies: Used anonymously to understand usage trends and improve our services.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect platform functionality.

7. Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have clearly defined rights regarding the personal data we hold. Suga77 fully respects and supports the exercise of these rights:

• Right of Access You have the right to request a copy of all personal data we hold about your account at any time.
• Right to Rectification If your data is inaccurate or outdated, you have the right to request immediate correction at no charge.
• Right to Erasure You may request the deletion of your personal data, subject to applicable legal retention requirements.
• Right to Object You may object to the processing of your data for specific purposes, including marketing communications.
• Right to Data Portability You have the right to receive your data in a machine-readable format for transfer to another platform if desired.

8. Data Retention Period

Suga77 does not retain your personal data longer than necessary. Retention periods are determined based on the purpose of data collection and applicable legal requirements:

• Active Account Data: Retained for as long as your account remains active on the Suga77 platform.
• Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysian financial legal requirements.
• KYC Data: Retained for 5 years after account closure in accordance with AML standards.
• Security Logs: Retained for 12 months for security investigation purposes.
• Marketing Data: Deleted within 30 days after you unsubscribe from marketing communications.

9. Children's Privacy

The suga77 platform is strictly for adults aged 18 and above only. We do not intentionally collect or store any personal information from minors. Should we discover that a child's data has been collected inadvertently, we will immediately delete that information and close the account in question.

If you are a parent or guardian who believes your child has registered on our platform, please contact our support team immediately so we can take prompt action.

10. Changes to This Privacy Policy

Suga77 reserves the right to update this Privacy Policy from time to time to reflect changes in our operations, legal requirements, or industry best practices. When significant changes occur, we will notify you via email or in-platform notification at least 14 days before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. The "Last Updated" date at the top of this document will always reflect the latest version.