Privacy Policy sng88 — Member Personal Data Protection

When you register and use the sng88 platform, we collect several categories of information to ensure our services run smoothly, securely, and in line with your needs as a member. This data collection is necessary for us to fulfil our contractual and legal obligations to you.

Personal Information You Provide Directly:

• Full name, date of birth, and identity card number (for age verification and KYC).
• Email address and mobile number used during registration.
• Current residential address, including city, state, and postcode.
• Bank account or e-wallet information registered for deposit and withdrawal transactions.
• Identity verification documents such as a copy of your MyKad, passport, or other statutory documents requested during the KYC process.
• Any communications you send to the sng88 support team, including complaints, requests, and feedback.

Information Collected Automatically:

• IP address, device type, operating system, and browser version used to access the platform.
• Activity log data including dates, times, pages visited, and session duration.
• Financial transaction records including deposits, withdrawals, and wagering history.
• Geolocation data at the country or state level for legal compliance purposes.
• Cookie and tracking technology data as further described in Section 4.

We only collect data that is strictly necessary for the stated purposes. We do not collect information beyond the required scope, and you are always welcome to contact us if you would like to know more about the data we hold on you.

The data we collect is used solely for legitimate and necessary purposes in the operation of the sng88 platform. Below is a summary of data usage purposes:

For marketing purposes, we will only contact you if you have given explicit consent during registration or subsequently through your account settings. You may withdraw this consent at any time by updating your communication preferences in your account or by contacting our support team.

SNG88 does not sell, rent, or disclose your personal data to any third party without your explicit consent, except in the following legally permitted circumstances:

• Service Providers: We share necessary data with payment providers (such as FPX, Touch 'n Go, GrabPay, and Boost), licensed game providers, and third-party identity verification services. All these providers are bound by strict data protection agreements and are only permitted to use your data for specified purposes.
• Legal Requirements: We will disclose your personal data when required by a court order, regulatory authority directive, or any applicable legal requirement in Malaysia.
• Financial Crime Prevention: In the context of anti-money laundering compliance, sng88 may be required to report suspicious transactions to the relevant authorities without prior notice to you.
• Legitimate Interest Protection: Where necessary to protect the security of the platform, prevent fraud, or safeguard the legitimate rights of other members and ourselves.

In all of the above situations, we ensure that only the minimum necessary data is shared, and such sharing is conducted in a secure environment in accordance with industry standards. sng88 does not engage data brokers or third-party marketing platforms that could exploit your personal data for commercial purposes.

The sng88 platform uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and analyze platform usage. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and account security. These cookies cannot be disabled as they are critical to platform operations.
• Performance Cookies: Used to collect anonymised data on how members use the platform, helping us identify technical issues and improve overall performance.
• Functional Cookies: Allows the platform to remember your preferences such as language, display settings, and game choices to deliver a more personalized experience.
• Analytics Cookies: Helps us understand aggregate platform usage patterns for product and service improvement.

You can manage cookie settings through your browser preferences. Please note, however, that disabling certain cookies may affect the functionality of the sng88 platform. Essential cookies cannot be disabled via browser settings as they are part of our platform's security infrastructure.

We do not use third-party cookies for advertising or cross-site tracking purposes.

SNG88 implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All communications between your device and sng88 servers are encrypted using the latest TLS 1.3 protocol.
• Tiered Access Control: Access to member personal data is restricted to staff who require it for their job duties only, with detailed audit logs maintained.
• 24/7 Monitoring: Our systems are continuously monitored by a cybersecurity team to detect and respond to any threats promptly.
• Penetration Testing: SNG88 conducts regular security testing and independent audits to identify and address any system vulnerabilities.
• Two-Factor Authentication (2FA): We support and encourage the use of 2FA on all member accounts for an added layer of protection.
• Data Backup: Your data is regularly backed up to a separate secure storage location to ensure service continuity.

While we take all reasonable steps to protect your data, no security system can guarantee absolute protection. We therefore also encourage you to play your part in keeping your account secure by using a strong password, not sharing your login details, and notifying us immediately if you suspect any suspicious activity on your account.

SNG88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or for the minimum period required by applicable Malaysian law.

• Active Account Data: Retained for the duration that your account remains active on the sng88 platform.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with tax and anti-money laundering legal requirements.
• KYC Documents: Retained for a minimum of 5 years after the last bet or account closure, whichever is longer.
• Support Communication Logs: Retained for 3 years from the date of last communication.
• Access & Security Log Data: Retained for 12 months for audit and security investigation purposes.

Upon expiry of the retention period, your personal data will be securely deleted or permanently anonymised so it can no longer be linked to you. The deletion process uses methods that ensure data cannot be recovered.

If you close your sng88 account, we will initiate the data deletion process within 30 days, except for data still required for legal compliance as stated above.

As a data subject under the Malaysia Personal Data Protection Act 2010 (PDPA), you have the following rights, which you may exercise at any time:

• Right to Access: You have the right to obtain a copy of the personal data we hold about you. Access requests will be processed within 21 working days.
• Right to Rectification: If your personal data is inaccurate, incomplete, or out of date, you have the right to request a correction. Updates will be carried out within 14 business days.
• Right to Withdraw Consent: For data processed based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the validity of processing that took place prior to withdrawal.
• Right to Object: You may object to the processing of your personal data for specific purposes, subject to our legal obligations.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data, subject to the legal retention requirements set out in Section 6.

To exercise any of the above rights, please contact the sng88 support team via live chat or email at [email protected]. We may need to verify your identity before processing any personal data requests to ensure the security of your information.

The sng88 platform is intended exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

If we become aware that personal data belonging to someone under the age of 18 has been collected unintentionally, we will take immediate action to delete that data and close the account in question without prior notice.

We apply an age verification process during registration and throughout the KYC process to ensure all members meet the minimum age requirement. If you believe someone under the age of 18 may have registered or is using the sng88 platform, please notify us immediately via email [email protected].

SNG88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we handle your personal data.

You will be notified of any material amendments via:

• In-app or sng88 platform notifications.
• Email to the address registered in your account (for significant amendments).
• A clear notice on the platform's home page for at least 14 days before the amendments take effect.

The "Last Updated" date at the top of this document indicates the date of the most recent amendment. Your continued use of the sng88 platform after the amendment takes effect will be deemed as your acceptance of the updated Privacy Policy. If you do not agree with the amendments, you have the right to close your account before they take effect.

We encourage you to review this page periodically to stay informed about how we protect your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our team is ready to assist you at any time.