Privacy Policy suka2 – Malaysia Player Data Protection

Suka2 is an online casino platform operating exclusively for the Malaysian market. We understand that the trust of our players is our most valuable asset — and that trust begins with transparent, responsible, and secure management of personal data.

This Privacy Policy explains in detail how suka2 handles your personal information — from data collection at account registration, its use in platform operations, through to retention periods and deletion procedures when required. We have written this document in clear terms so that our Malaysian players can easily understand it.

This policy applies to all information you provide to suka2 through any channel — website, mobile platform, live chat, email, or any other communication method we make available. It also applies to data we collect automatically when you use suka2's services.

Suka2 collects the personal information necessary to provide our platform services safely and efficiently. The data we collect falls into two main categories:

2.1 Data You Provide Directly

When you register, use, or interact with the suka2 platform, you may provide the following information:

• Registration Information: Full name, email address, mobile number, date of birth, gender, and the password you created.
• Identity Verification (KYC) Information: National identification number (MyKad), copies of identity documents, and proof of address submitted during the identity verification process.
• Financial Information: Payment method details you use — including digital wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow account numbers, or bank account details for FPX (Maybank2u, CIMB Clicks). We do not store credit or debit card details directly — transactions are processed through certified payment processors.
• Communication: Records of correspondence between you and the suka2 support team, including live chat transcripts and emails.
• Responsible Gambling Information: Deposit limits, session time limits or self-exclusion requests that you have set on your account.

2.2 Automatically Collected Data

While you use the suka2 platform, our systems automatically record certain technical information for security, performance and user experience improvement purposes:

The personal information we collect is used solely for legitimate, clearly stated purposes. The following are the primary ways your data is used at suka2:

3.1 Account Management & Services

• Creating and managing your suka2 account, including identity verification and password management.
• Processing deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and FPX securely and efficiently.
• Giving you access to all games available on the suka2 platform — slots, jackpots, baccarat, roulette, blackjack, Live Casino, e-sports, and Sports Betting.
• Managing your VIP Rewards programme, including points calculation, tier upgrades, and weekly cashback crediting.

3.2 Security and Protection

• Detecting and preventing fraud, money laundering, unauthorised access, and any suspicious activity on your account.
• Verifying your identity and age in accordance with legal requirements and suka2's Terms & Conditions.
• Protecting the security of the platform and all its users against cyber threats and system abuse.

3.3 Service Improvements

• Analysing platform usage patterns to improve user experience, platform speed, and interface design.
• Understanding player preferences to add new games and features relevant to the needs of Malaysian players.
• Running A/B testing and platform analytics to ensure optimal performance across all device types and internet connections.

3.4 Communications & Support

• Sending important account-related notifications — such as deposit confirmations, security alerts, and policy updates.
• Providing effective customer support via live chat and email, including follow-up to resolve account or transaction issues.
• Sending you information about relevant promotions, bonuses, and VIP offers — provided you have not withdrawn consent for marketing communications.

Suka2 does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. This is our absolute commitment to Malaysian players.

However, there are limited situations where suka2 is required to share data with certain parties for legitimate operational purposes:

4.1 Trusted Service Providers

Suka2 works with technical service providers that help us operate the platform. These include:

• Payment Processors: Entities that process your deposit and withdrawal transactions via Touch 'n Go, GrabPay, DuitNow, FPX, and other methods. They receive only the information necessary to process each transaction.
• Game Providers: Companies such as Pragmatic Play, NetEnt, Microgaming, and PG Soft may receive game session data necessary to run games properly. These providers are subject to strict confidentiality agreements.
• Infrastructure Services: Server hosting providers, cybersecurity services, and technical analytics tools that help us maintain platform performance and security.

4.2 Legal Requirements

Suka2 may be required to disclose your personal information when mandated by law or upon a valid request from the following authorities:

• Malaysian law enforcement agencies in possession of a valid warrant or court order.
• The Financial Intelligence Unit or the relevant anti-money laundering authority.
• Regulatory authorities with valid jurisdiction over the platform's operations.

Protecting your personal data is the highest technical priority for the suka2 team. We continuously invest in security infrastructure to ensure your information remains protected against external threats.

5.1 Technical Security Measures

• 256-bit SSL Encryption: All communications between your browser or app and suka2 servers are encrypted using 256-bit SSL/TLS — the same encryption technology used by leading banking institutions in Malaysia.
• Hashed Password Storage: Your account password is never stored in plain text. We use strong cryptographic hashing algorithms to ensure passwords cannot be recovered — not even by suka2 staff.
• Two-Factor Authentication (2FA): This additional security feature is available to all accounts and is strongly recommended for enhanced account protection.
• 24/7 Security Monitoring: Our automated monitoring system continuously watches for unusual activity, suspicious login attempts, and any signs of unauthorised access.
• Regular Security Audits: suka2 conducts regular penetration testing and security audits carried out by independent cybersecurity experts to identify and address any potential vulnerabilities.

5.2 Financial Data Security

Sensitive financial details such as bank account numbers and digital wallet information are handled with additional layers of protection. suka2 does not store complete payment card details — all transactions involving card data are processed entirely by payment processors that comply with the PCI DSS (Payment Card Industry Data Security Standard).

6.1 Data Retention Period

Suka2 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by applicable law. Retention periods vary depending on the type of data:

• Active Account Data: Retained for the duration your suka2 account remains active, plus a mandatory period following account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of seven (7) years in compliance with Malaysian legal requirements relating to financial records and anti-money laundering.
• Support Communication Logs: Retained for three (3) years for reference, dispute resolution, and service improvement purposes.
• Technical Log Data: Access and security log data is retained for ninety (90) days in an active searchable format, and may be archived for a longer period.
• Responsible Gaming Records: Records of set limits and self-exclusion are retained for five (5) years to ensure ongoing protection.

6.2 Data Deletion

Once the mandatory retention period has expired, or upon receipt of a valid deletion request with no legal impediment, suka2 will delete or anonymise your personal data using secure, irreversible procedures.

Under Malaysia's Personal Data Protection Act 2010 and suka2's commitment to user privacy, you hold several important rights regarding your personal data. We fully respect and support the exercise of these rights.

Suka2 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you on subsequent visits and remember your preferences.

Types of Cookies We Use

You can manage and delete cookies through your browser settings. Most modern browsers allow you to block or remove cookies from specific sites. Please note that blocking all cookies may affect your experience on the suka2 platform, particularly for login and session security functions.

The suka2 platform integrates third-party services to deliver a complete gaming experience. These include game providers such as Pragmatic Play, NetEnt, Microgaming, Playtech, PG Soft, Habanero, and Spadegaming, as well as payment processors that enable deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, and FPX.

Each of these third-party service providers has its own privacy policy governing how they handle data received in the context of services they provide to suka2. suka2 selects third-party providers carefully and only works with entities that maintain reasonable data protection standards.

The suka2 platform is intended solely for individuals aged 18 and above. We do not knowingly collect personal information from anyone under the age of 18.

If suka2 discovers that personal information belonging to a minor has been collected without proper age verification, we will immediately take the following steps:

• Suspend the associated account pending age verification.
• Delete all personal information relating to the minor from our systems.
• Returning any funds remaining in the account to their original source through an appropriate method.

Parents and guardians who suspect that a child or dependent may have registered a suka2 account without authorisation should contact our support team immediately at support@suka2.best for prompt action.

Suka2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in platform operations, new legal requirements, or improvements to our data protection practices. All amendments take effect upon publication on the suka2 website.

When significant amendments are made, we will notify you via:

• A notification email sent to the registered address on your suka2 account.
• A prominent notice on the platform's main page upon your next login.
• Updating the "Last Updated" date shown at the top of this page.

Continued use of the suka2 platform after any amendments take effect constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we handle your personal data.

If you have any questions, concerns, or complaints regarding how suka2 handles your personal data, we encourage you to reach out to us directly. Our team is committed to addressing every enquiry seriously and within a reasonable timeframe.

You may contact suka2's Privacy Officer through the following methods:

• Email: support@suka2.best — for privacy enquiries requiring a formal written response. We aim to respond within 14 business days.
• Live Chat: Via the live chat button within the suka2 platform, available 24/7 — for general enquiries that require an immediate response.

If you are not satisfied with how suka2 has handled your privacy complaint, you have the right to lodge a formal complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.