SA969 Privacy Policy – Personal Data Protection for Malaysian Members

SA969 only collects personal data that is strictly necessary to deliver platform services safely and efficiently. We do not collect excessive or irrelevant data beyond what is required for our operations. Below are the categories of data we collect and the purpose of each:

Account Registration Data

• Full name as stated on your Malaysian identity card.
• An active Malaysian phone number for OTP verification and account-related communications.
• Passwords are stored in encrypted hash form — SA969 does not store passwords in plain text.
• Date of birth for age eligibility verification (18 years and above).

Identity Verification Data (KYC)

• A copy of your Malaysian identity card or passport for identity verification.
• Proof of address such as a recent utility bill or bank statement, where required.
• This information is collected during the KYC verification process, which may be required prior to withdrawal or to meet compliance obligations.

Financial & Payment Data

• Payment method details you use — e-wallet account numbers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) or FPX information required for transaction processing.
• Records of all deposits and withdrawals, including the date, time, amount in Malaysian Ringgit (MYR), and transaction status.
• SA969 does not store credit or debit card numbers — all payments are processed through third-party payment gateways that have been verified for security.

Platform Activity Data

• Gaming records — game titles played, bet amounts, winnings, and losses across all categories (Live Casino, slots, poker, Sports Betting, e-sports).
• Sports and e-sports betting records, including selected markets and odds at the time of the bet.
• History of interactions with customer support, including live chat conversation logs.

Technical & Usage Data

• IP address for security purposes and general geographic location detection.
• Device information — device type, operating system, browser type and version.
• Access log data — login dates and times, pages visited, and session duration.
• Cookie data and similar technologies — explained in further detail in Section 6.

SA969 uses collected personal data solely for legitimate, stated purposes. We do not use your data for purposes unrelated to the provision of platform services without first obtaining your consent. The purposes for which data is used are as follows:

Account Operations & Verification

Registration data is used to create and manage your SA969 account, verify your identity during login, and send OTP codes for account security. KYC data is used to meet identity verification requirements in accordance with relevant regulatory compliance obligations.

Payment Processing

Your financial data is used to process deposits made via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, CIMB Clicks, or FPX, and to process withdrawal of your winnings to your registered payment method. All payment processing is conducted in Malaysian Ringgit (MYR).

Security & Fraud Prevention

Technical data such as IP addresses and device information is used to detect and prevent unauthorised access, fraud, money laundering, multiple-account usage, and any activity that violates SA969's Terms & Conditions. This includes an anti-collusion system for poker games and detection of suspicious betting patterns.

Customer Support

Your account records and transaction history are accessed by SA969 support agents solely to assist in resolving enquiries and disputes that you raise. This access is restricted to authorised staff and applies only to relevant cases.

Platform Improvements

Aggregated and anonymised platform usage data is used to understand how members interact with SA969, identify areas for improvement, and develop new features suited to the needs of Malaysian players. Individual data is not used for this purpose without first going through an anonymisation process.

Account-Related Communications

Your phone number is used to send important account notifications — including transaction confirmations, security alerts, significant policy changes, and promotional information if you have opted in to receive it. You can manage your marketing communication preferences in your account settings at any time.

SA969 does not sell, rent, or trade members' personal data to any third party for commercial or marketing purposes. This is a commitment we uphold without exception. That said, there are limited circumstances in which data may be shared with other parties, and we explain each of these transparently:

Operational Service Providers

SA969 engages third-party service providers that are directly involved in platform operations — including payment processors that handle Touch 'n Go, GrabPay, DuitNow, and FPX transactions, as well as gaming service providers that power the slots, Live Casino, and Poker platforms. Data shared with these parties is limited to the minimum necessary for those purposes only, and all providers are bound by strict confidentiality agreements that prohibit them from using your data for any other purpose.

Legal Requirements & Authorities

SA969 may be required to disclose members' personal data if ordered by a court of competent jurisdiction, as required to comply with valid legal process, or in connection with an investigation into fraudulent activity or money laundering involving the account in question. SA969 will notify the affected member if such disclosure occurs, unless prohibited from doing so by a court order.

Business Transfer

In the event that SA969 undergoes a merger, acquisition, or asset transfer involving member data, we will notify members in advance and ensure your personal data continues to be protected to the same or higher standards as set out in this Privacy Policy.

SA969 invests seriously in data security infrastructure to ensure that members' personal and financial information is protected at every stage — in transit, in processing, and in storage. The key security measures we employ are as follows:

• 256-Bit SSL Encryption: All communications between your browser and SA969's servers are encrypted using TLS protocol with a 256-bit key — the same standard adopted by leading banking and financial institutions in Malaysia.
• Stored Data Encryption: Sensitive data such as passwords (stored as bcrypt hashes) and payment information is kept encrypted within protected databases. No SA969 staff member has access to passwords in their original form.
• Tiered Access Controls: Access to member data is restricted to staff with a legitimate business need and is allocated based on the principle of least privilege. All access to sensitive data is logged and monitored.
• Two-Factor Authentication: SA969 offers two-factor authentication (2FA) for all member accounts. We strongly encourage all members to enable 2FA for an added layer of security.
• 24/7 Security Monitoring: Our security monitoring system operates around the clock to detect and respond to any unauthorised access attempts, cyberattacks, or suspicious activity.
• Regular Security Audits: SA969 conducts regular internal security audits and adopts industry best practices to ensure member data protection remains current against the latest security threats.

While SA969 takes all reasonable steps to protect your data, no digital security system can guarantee absolute 100% protection. We encourage you to also play your part in securing your account by using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

SA969 retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal requirements. Our general principle is to keep data for as long as it is needed and no longer than that.

• Active Account Data: For as long as your SA969 account remains active, your registration data, game records, and transaction history will be retained to allow you to access the platform and review your activity history.
• After Account Closure: When an account is closed at your request, SA969 will retain financial transaction records and KYC data for the minimum period required by applicable legal and financial compliance regulations. These records are not used for any marketing purposes.
• Technical Log Data: Technical logs such as IP access records and session logs are retained for a limited period as required for security and technical troubleshooting purposes.
• Customer Support Data: Customer support interaction records are retained to assist in resolving future disputes and for staff training and service quality improvement purposes.

When your personal data is no longer needed and there is no legal obligation to retain it, SA969 will securely delete or anonymise that data in accordance with industry best practices.

SA969 uses cookies and similar tracking technologies to improve platform functionality and the user experience. Cookies are small text files stored by your web browser when you visit the SA969 platform. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for the platform's core functions — login session authentication, security, and language preferences. Without them, the SA969 platform will not function properly. Essential cookies cannot be disabled.
• Preference Cookies (Preferences): These cookies store your preferences — such as display settings, frequently used games, and other configurations — that allow SA969 to deliver a more personalised experience. You can disable these cookies without affecting the platform's core functionality.
• Analytics Cookies: SA969 uses analytics cookies to understand how members use the platform — which pages are most popular, common navigation paths, and areas that may need improvement. This data is aggregated and does not identify any individual specifically.

You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling certain cookies may affect the functionality or user experience of the SA969 platform.

As an SA969 member, you have the following rights regarding your personal data. We respect these rights and are committed to making it easy for you to exercise them. To exercise any of the rights below, contact the SA969 support team via live chat or email support@sa969.best with a clear statement of your request.

• Right of Access: You have the right to request a copy of the personal data SA969 holds about you. We will provide this information in a readable format within a reasonable timeframe upon receipt of your request.
• Right to Rectification: If you find that personal data held by SA969 is inaccurate or outdated, you have the right to request a correction. Certain details such as your name and date of birth can be updated directly in your account settings.
• Right to Erasure: Under certain circumstances, you have the right to request that SA969 delete your personal data — known as the "right to be forgotten." This right is subject to data retention requirements mandated by law and legitimate operational needs.
• Right to Restriction of Processing: You have the right to request that SA969 restrict the processing of your personal data in certain circumstances — for example, while you are disputing the accuracy of your data or while you are looking into how SA969 is using your data.
• Data Portability Right: You have the right to receive the personal data you have provided to SA969 in a structured, machine-readable format, for transfer to another service provider where applicable.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. You may withdraw your marketing consent at any time through the notification settings in your account.

SA969 will respond to all privacy rights requests within 30 business days. For complex cases or where a high volume of requests is received, this period may be extended and we will notify you if this applies.

The SA969 platform is intended for individuals aged 18 and above only. SA969 does not knowingly collect or process personal data from individuals under the age of 18. We apply an age verification process during registration to enforce this requirement.

If SA969 discovers that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect that their child or ward has registered an SA969 account should contact us immediately at support@sa969.best so that prompt action can be taken.

SA969 may use your phone number to send notifications relating to promotions, new bonuses, special offers for your VIP tier, and platform updates we believe are relevant to you. All marketing communications are subject to your preferences.

• You can manage your marketing notification preferences at any time in your SA969 account settings.
• Opting out of marketing communications will not affect your receipt of important account notifications, such as transaction confirmations or security alerts — these are mandatory notifications required for your account to operate.
• SA969 will not send spam or unsolicited communications to individuals who are not members of the platform.
• If you continue to receive marketing communications after withdrawing your consent, please contact SA969 support and we will ensure your request is actioned within 5 business days.

SA969 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, the technologies we use, or applicable legal requirements. Members will be notified of any significant changes via in-platform notifications or SMS at least 7 days before the changes take effect.

The "Last Updated" date at the top of this document will always reflect the most current version of SA969's Privacy Policy. We encourage you to review this page periodically to stay informed about how SA969 protects your personal data.

Continued use of the SA969 platform after any amendments to the Privacy Policy take effect will be considered acceptance of the updated terms. If you do not agree with the amendments, you have the right to close your account and withdraw any remaining balance.

If you have any questions, concerns, or requests regarding SA969's Privacy Policy or how we handle your personal data, please contact us through any of the following channels. Our Malay-speaking team is available 24 hours a day, 7 days a week:

• Privacy Email: support@sa969.best – include "Privacy Enquiry" in your email subject line.
• Live Chat: Available 24/7 within the SA969 platform after logging in.
• Response Time: SA969 is committed to responding to all privacy-related enquiries within 2 business days, and to formal data rights requests within 30 business days.

SA969 takes all privacy concerns seriously. If you are not satisfied with the response you receive, you have the right to lodge a complaint with the relevant data protection authority under applicable Malaysian law.