Privacy Policy Suga99 – Personal Data Protection for Malaysian Users

Suga99 takes seriously our responsibility to protect the privacy and security of users' personal data. This Privacy Policy is designed to ensure you clearly understand what we do with the information you share with us while using the platform.

We believe transparency is the foundation of trust. That is why we wrote this document in plain language — not legal jargon that leaves you more confused. We want you to know exactly what happens with your data, why we need it, and how we protect it.

Suga99 adheres to recognised data protection standards and is committed to safeguarding your personal information at the highest level of security. If you have any questions about how we handle your data after reading this document, our privacy team is ready to help.

Suga99 collects various types of information depending on how you interact with our platform. The main categories of data we collect are:

We only collect data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant data beyond the scope of the services we provide.

The personal data we collect is used for the following purposes:

• Account Management: Creating, verifying, and maintaining your suga99 account, including the required KYC process.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions on the platform securely and accurately.
• Platform Security: Detecting and preventing fraudulent activity, money laundering, and other security threats.
• Service Improvement: Analyzing usage patterns to continuously improve platform quality and user experience.
• Communications: Sending account notifications, security updates, and promotional information to users who have given their consent.
• Legal Compliance: Fulfilling legal obligations and reporting requirements to the relevant authorities when necessary.
• Customer Support: Helping you resolve issues related to your account, payments, or gaming experience.

We do not use your data to make automated decisions that materially affect your rights without appropriate human oversight.

Suga99 retains your personal data only for as long as necessary for the stated purposes or as required by applicable law. The general principles we follow are:

• Active account data: Retained for the duration your account is active, plus any additional period required for audit and compliance purposes.
• Financial transaction data: Retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements.
• Log and activity data: Retained for 2 years for security and investigation purposes if required.
• Inactive user data: Accounts inactive for more than 3 years will be archived and data is not required to be deleted under secure deletion procedures.

When data is no longer needed and there is no legal obligation to retain it, suga99 will securely delete or anonymize that data.

Suga99 does not sell your personal data to any third party. However, there are limited situations where we may need to share certain information:

• Payment Providers: Information required to process transactions is shared with approved payment providers (such as banks and digital wallet operators) — only the minimum necessary data is shared.
• Game Providers: Minimum technical data required is shared with game software providers for technical purposes only.
• Authorities: We will disclose information to the relevant authorities when required by law, court order, or valid legal process.
• Fraud Prevention Services: Technical data may be shared with recognized third-party fraud detection systems to protect the security of all users.

All third parties we work with are required to comply with data protection standards equal to or stricter than our own.

Suga99 continuously invests in security infrastructure to ensure your personal data is protected at every level:

• 128-bit SSL encryption for all data transmissions between your device and our servers.
• Data encryption at rest for all sensitive information stored in our databases.
• Layered firewall and an intrusion detection system that monitors network traffic in real time.
• Two-factor authentication (2FA) available to all user accounts for an additional layer of protection.
• 24/7 security monitoring by suga99's technical security team.
• Regular security audits by independent parties to identify and address potential vulnerabilities.
• Internal access controls strict controls ensure only authorised personnel can access user data.

While no system is entirely perfect, we are committed to continuously improving our security measures in line with evolving technology and emerging threats.

Suga99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Preference Cookies: Saving your settings such as preferred language and display preferences for your convenience.
• Analytics Cookies: Helping us understand how users interact with the platform so we can continue to improve it.
• Security Cookies: Used to detect suspicious activity and prevent fraud and account abuse.

You can manage cookie settings through your internet browser. However, disabling essential cookies may affect the functionality of the suga99 platform.

As a suga99 user, you have the following rights regarding your personal data:

To exercise any of the rights above, contact suga99's privacy team via live chat or email. We will respond within 30 days of receiving your request.

The suga99 platform is exclusively for users aged 18 and above. We do not knowingly collect or process personal data from minors.

If we discover that personal data of someone under 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

If you believe your child has registered for or used the suga99 platform, please contact us immediately through our support channels.

Suga99 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When material changes are made, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice on the suga99 platform regarding the relevant changes.
• In the case of highly material changes, a notification will be sent to users via their registered email.

We encourage you to review this page periodically. Continued use of the suga99 platform after changes are published will be considered acceptance of the updated policy.

If you have any questions, concerns, or wish to exercise your privacy rights, please contact the suga99 team through the following channels:

• Live Chat: Available 24/7 via the chat icon within the suga99 platform.
• Privacy Email: [email protected] (display only — not a clickable link).
• FAQ: Visit FAQ section us for answers to frequently asked questions about privacy.

We are committed to responding to all privacy-related inquiries within 5 business days. For urgent data security issues, use live chat for the fastest response from our team.