Suka2 Privacy Policy – Member Data Protection in Malaysia

1. Information We Collect

In operating the suka2 platform, we collect several categories of information from our members. This collection is carried out transparently and only for legitimate purposes:

We only collect data that is strictly necessary for platform operations. No sensitive information such as passwords is stored in plain text — all passwords are hashed using strong encryption algorithms.

2. How We Collect Data

Suka2 collects information through various transparent channels. The following are the primary data collection methods:

• Account Registration: When you register a new account, we collect basic information such as your name, email, phone number, and date of birth as provided directly by you.
• KYC Process: To verify your identity before your first withdrawal, we require a copy of a valid government-issued ID such as your MyKad or passport.
• Financial Transactions: Every deposit and withdrawal generates a transaction record retained for financial compliance and audit purposes.
• Platform Activity: Usage data is collected automatically while you use the platform — this includes games played, session duration, and settings preferences.
• Cookies & Similar Technologies: Your web browser communicates with our servers through cookies and session tokens to maintain your login state and preferences.
• Customer Support: When you contact our support team via live chat or email, those conversations are recorded to assist with issue resolution and team training.

3. Use of Your Information

All data collected by suka2 is used for specific and legitimate purposes. We do not use your data for purposes beyond those stated here without obtaining your consent first:

• Account Management: Creating and maintaining your account, processing secure logins, and managing your personal settings within the platform.
• Transaction Processing: Processing deposits and withdrawals accurately, quickly, and securely to your bank account or e-wallet.
• Identity Verification: Conducting KYC processes required by law to prevent fraud, money laundering, and platform abuse.
• Platform Security: Detecting and blocking suspicious activity, unauthorised access attempts, and potential security threats in real time.
• Customer Support: Providing accurate and relevant assistance when you contact our support team, including reviewing account history and transactions.
• Responsible Gaming: Monitoring gaming patterns to identify early signs of problem gambling and recommend appropriate self-control tools.
• Legal Compliance: Complying with the reporting and record-keeping requirements set out under the Personal Data Protection Act 2010 and relevant Malaysian legislation.
• Service Improvement: Analysing aggregated (non-individual) usage data to improve platform performance, game selection, and the overall user experience.

4. Data Storage & Security

Suka2 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, modification, disclosure, or destruction:

• 256-bit SSL/TLS Encryption: All communications between your device and suka2 servers are encrypted using bank-grade encryption technology. No data is transmitted in plain text format.
• Encrypted Storage: Sensitive data such as financial information and KYC documents are stored in encrypted databases with separately managed keys.
• Internal Access Control: Only authorised staff with a legitimate operational need may access member personal data. All access is logged and regularly audited.
• Two-Factor Authentication (2FA): An additional security layer is available for all member accounts to prevent unauthorised access even if a password has been compromised.
• 24/7 Monitoring: Security monitoring systems operate around the clock to detect and respond to any threats or anomalies in real time.
• Secure Backup: Data is regularly backed up to a secure, separate location to ensure swift data recovery in the event of a technical disruption.

Your personal data is stored on servers located in data centres certified to international security standards. suka2 regularly reviews and updates our security protocols in line with the latest developments in cyber threats.

5. Data Sharing

Suka2 does not sell, rent, or trade your personal information. However, there are limited situations where data must be shared with carefully selected third parties:

• Payment Providers: Required financial information is shared with payment processors such as FPX, TNG eWallet, GrabPay, and the relevant banks solely to complete your transactions.
• Game Providers: Minimum required game data is shared with third-party game providers to enable smooth gameplay and accurate win records.
• KYC Services: Identity verification documents may be shared with approved third-party verification services to carry out required identity checks.
• Legal Compliance: Data will be disclosed to the relevant authorities when required by Malaysian law, court order, or a legitimate official investigation.
• Technical Partners: Trusted cloud infrastructure and technical service providers may have limited access to data in the course of delivering their services, subject to strict confidentiality agreements.

All third parties sharing data with suka2 are bound by data protection agreements requiring them to uphold security standards equal to or higher than our own. We are not responsible for the privacy policies of independent third-party platforms.

6. Cookies & Tracking Technologies

Suka2 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:

Essential cookies cannot be disabled as they are required for core platform functionality. For optional cookies, you can manage your preferences through your account settings. Please note that disabling certain cookies may affect your user experience.

7. Your Rights

As a suka2 member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal information:

To submit any requests related to the rights above, please contact the suka2 Privacy team through our official support channels. We will process your request within 14 working days from the date of receipt.

8. Data Retention Period

Suka2 retains your personal data only for as long as necessary for the identified purposes or as required by Malaysian law:

• Active Account Data: Retained for the duration your account is active, plus 7 years after account closure to meet financial compliance requirements.
• Transaction Records: Retained for a minimum of 7 years in line with Malaysia's financial reporting and anti-money laundering requirements.
• KYC Documents: Retained for 5 years after the business relationship ends, or longer if required by applicable law.
• Communication Logs: Customer support records and account-related communications are retained for 3 years.
• Technical Log Data: Access and security logs are retained for 90 days for diagnostic and security investigation purposes.
• Cookies & Session Data: Deleted in accordance with the retention period specified in the Cookies section above.

Once the retention period ends, data will be securely deleted using methods that ensure it cannot be recovered. You will be notified of any changes to the retention policy that affect your data.

9. Children's Privacy

Suka2 is an adult entertainment platform that only allows members aged 18 and above. We do not intentionally collect, process, or store any personal information from individuals under the age of 18.

All new account applicants go through an age verification process during registration. If we find that information has been inadvertently collected from a minor, we will take immediate steps to delete that information and close the account.

10. Amendments to the Privacy Policy

Suka2 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform improvements. We are committed to informing you of any material changes:

• An email notification will be sent to your registered address at least 14 days before material changes take effect.
• In-platform notices will be displayed on your home page and account page for a minimum period of 30 days.
• The "Updated" date at the top of this page will always reflect the latest version of the Privacy Policy.

Continued use of the suka2 platform after any changes take effect will be considered your acceptance of the amended Privacy Policy. If you do not agree with any changes, you have the right to close your account before those changes come into effect.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we manage your personal data, please contact the suka2 Data Privacy Officer through the following channels:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the suka2 platform
• Response Time: We aim to respond within 3 business days for all privacy-related inquiries.

For formal complaints related to personal data protection that cannot be resolved by suka2, you may contact Department of Personal Data Protection Malaysia (JPDP) directly. JPDP contact information is available on the official website of the Malaysian Ministry of Communications.