Privacy Policy suka2 – Your Data Is Safe About Us

This Privacy Policy explains how suka2 ("we", "platform" or "suka2.click") collects, stores, uses and protects the personal information you ("Member" or "User") provide to us when registering for and using the suka2 online Sports Betting and casino platform.

Suka2 operates on a simple principle: your personal data belongs to you. We only request information that is genuinely necessary for you to use the suka2 platform safely and comfortably. We do not collect data excessively, sell it to anyone, or use it for any purpose outside the scope stated in this policy.

This Privacy Policy forms part of Terms & Conditions suka2 and should be read together with it. By registering an account or continuing to use the suka2 platform, you confirm that you have read and agree to how we handle your personal data as set out in this policy.

Suka2 collects two main categories of data — what you provide directly and what is collected automatically when you use our platform.

Data you provide directly:

• An active Malaysian phone number (used as your primary login ID and for OTP verification).
• Full name as shown on your MyKad or official Malaysian identity document — required for the KYC process and withdrawal verification.
• Date of birth to verify that you meet the minimum age requirement of 18 years.
• E-wallet account information (Touch 'n Go eWallet, GrabPay) or Malaysian bank account numbers for withdrawal of winnings — suka2 does not store your e-wallet password.
• Information you provide when contacting suka2 customer support via live chat or email.

Automatically collected data:

• IP address and network information for security monitoring and fraud prevention.
• Device type, web browser, operating system, and screen resolution, used to optimise your display experience on suka2.
• Login history, session duration, and platform usage patterns.
• A complete record of all betting activity — including selected sports (Malaysia Super League football, EPL, badminton, IPL cricket, MPL e-sports), bets placed, odds, and results — is retained for dispute resolution and platform analysis purposes.
• Cookie data and tracking technologies as described in Section 6.

Suka2 uses collected personal data solely for the following purposes. We will not use your data for any other purpose without first obtaining your consent:

• Account management: Creating and maintaining your suka2 account, processing registration, KYC identity verification, and password resets.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks), as well as withdrawals of winnings to your account.
• Service provision: Enables you to access and use all suka2 platform features, including Sports Betting, slots games, Live Casino and bonus facilities.
• Service communications: Sending account notifications, transaction confirmations, security alerts, and relevant policy updates to your registered phone number or email address.
• Fraud prevention: Detecting and preventing fraudulent activity, platform abuse, multi-account usage and any activity that violates Terms & Conditions suka2.
• Legal compliance: Meeting reporting, audit, and record-keeping requirements set out by Malaysian law and relevant regulatory bodies.
• Platform improvement: Analysing usage patterns in aggregate (not at an individual level) to develop new features and improve the overall suka2 user experience.

Should suka2 wish to use your data for a new purpose not listed above — such as market research or joint promotions — we will obtain your explicit consent in advance via an in-account notification or email.

Suka2 does not sell, does not rent and does not disclose members' personal data to any third party for marketing or commercial purposes. This is a non-negotiable principle in suka2's operations.

However, there are limited situations where suka2 may need to share certain information with specific third parties, namely:

• Payment service providers: suka2 shares the necessary transaction information with payment gateway providers (Touch 'n Go, GrabPay, DuitNow, and FPX bank providers) solely to process your deposits and withdrawals. These providers have their own privacy policies and are bound by confidentiality agreements with suka2.
• Game software providers: Minimal game session information is shared with slots and Live Casino software providers (such as Pragmatic Play and PG Soft) for technical purposes and game dispute resolution only.
• Legal authorities: suka2 will disclose personal data to the police, courts, or Malaysian regulatory authorities when required by a valid court order or legal provision. In such situations, suka2 will notify the affected member as far as possible, unless prohibited by law.
• Emergency security sharing: In cases involving serious security threats or criminal activity, suka2 may share information with cybersecurity teams or law enforcement.

Suka2 continuously invests in security infrastructure to ensure member data is always protected to the highest standard. The key security measures we have implemented are:

• 256-bit SSL Encryption: All communications between your browser and the suka2 server are encrypted using TLS 1.3 with a 256-bit SSL certificate. This means no one can intercept or read your data while it is in transit.
• Encrypted passwords: suka2 account passwords are never stored in plain text. We use the bcrypt algorithm with salting to ensure passwords cannot be recovered even in the event of a data breach.
• Two-factor authentication (OTP): Every new login from an unrecognised device requires OTP verification via SMS to your registered Malaysian phone number.
• 24/7 threat monitoring: suka2's IT team monitors all systems in real time to detect any suspicious activity, unauthorised access attempts, or potential cyber threats.
• Internal access controls: Only authorised suka2 staff who require access to specific data in order to carry out their job responsibilities may do so — this is the "least privilege" principle.
• Secure data backup: Member data is regularly backed up to separate, secure servers to ensure full recovery is possible in the event of a technical failure, with no data loss.

While suka2 takes all reasonable steps to protect your data, no system is completely immune to every threat. In the event of a data security breach affecting members, suka2 will notify those affected within 72 hours of confirming the incident and take immediate action to mitigate its impact.

Suka2 uses cookies and similar tracking technologies to enhance user experience and platform security. Cookies are small text files stored on your device when you visit the suka2 site.

Types of cookies suka2 uses:

• Essential cookies (Required): Required for the suka2 platform to function properly. This includes login session cookies, security tokens, and language preferences. These cookies cannot be disabled as they are essential for the platform to operate.
• Performance cookies: Collecting anonymised information about how you interact with the suka2 platform — which pages are visited most frequently, time spent, and any technical errors encountered. This data helps us improve the platform.
• Functional cookies: Saving your preferences such as display settings, favourite sports, and language so you do not have to reconfigure them each time you log in to suka2.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling essential cookies may affect certain features of the suka2 platform and your overall user experience.

Suka2 retains members' personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by Malaysian law. The following are retention guidelines for key data categories:

• Active account data: Retained for as long as your suka2 account is active and for 3 years after account closure, for the purpose of resolving any disputes that may arise.
• Financial transaction records: Retained for a minimum of 7 years in accordance with financial record-keeping requirements under Malaysian law, regardless of account status.
• Betting history: Records of all Sports Betting (Liga Super, EPL, badminton, cricket, e-sports MPL) and casino game activity are retained for 5 years for audit and dispute resolution purposes.
• Support communication logs: Live chat conversation records and emails are retained for 2 years.
• Technical data and access logs: Server logs and technical data are retained for 90 days before being automatically deleted.

Once data is no longer needed and its designated retention period has expired, suka2 will securely delete it using data disposal methods that meet industry information security standards.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and suka2's privacy policy, you have the following rights regarding your personal data:

• Right to access: You have the right to request a copy of all personal data suka2 holds about you. This request will be processed within 14 business days.
• Right to rectification: If the data we hold on you is inaccurate or outdated, you have the right to request a correction. Some details (such as your phone number) can be updated directly in your suka2 account settings.
• Right to erasure ("right to be forgotten"): You have the right to request that suka2 delete your personal data when it is no longer required. However, this right is subject to our record-keeping obligations under Malaysian law, which may prevent immediate deletion.
• Right to restrict processing: You have the right to request that we restrict how we use your data under certain circumstances — for example, while you are disputing the accuracy of that data.
• Right to withdraw consent: For data processing based on your consent (such as sending promotional notifications), you may withdraw that consent at any time without affecting the validity of any processing that took place prior to withdrawal.
• Right to complain: If you believe suka2 has processed your data incorrectly, you have the right to file a complaint with us or with the Department of Personal Data Protection Malaysia.

To exercise any of the above rights, please contact the suka2 privacy team by email at support@suka2.click with the subject line "Privacy Rights Request", or via live chat on the suka2 platform.

The suka2 platform is strictly restricted to individuals aged 18 and above. suka2 does not knowingly collect, store, or process any personal data from individuals under the age of 18.

If suka2 discovers that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate action to delete that data and close the account in question. Parents or guardians who believe their underage child has registered a suka2 account without authorisation may contact us at support@suka2.click for immediate action.

Suka2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. The "Updated" date at the top of this page will always reflect the most current version.

For material or significant changes to how we handle your data, suka2 will notify affected members via an in-platform notification or email to their registered address at least 7 days before the changes take effect. Continued use of the suka2 platform after the effective date of any changes will be considered acceptance of the updated policy.

We encourage you to review this Privacy Policy page periodically, especially when using suka2 services for the first time after an extended absence.

If you have any questions, concerns or requests regarding suka2's Privacy Policy or how we handle your personal data, please do not hesitate to reach us through:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the suka2 platform. This is the fastest way to get an immediate response.
• Privacy Email: support@suka2.click — Please include "Privacy Inquiry" in the email subject line to help expedite processing.

Suka2's Malay-speaking support team is here to assist you with all privacy and data protection matters. We are committed to responding to all written enquiries within 24 hours of receipt, and to formal privacy rights requests within 14 business days.