Suga33 Privacy Policy – Member Data & Information Protection

Suga33 ("we", "Platform") takes your privacy seriously. This Privacy Policy is drafted to transparently explain how we manage the personal information you provide to us when using the suga33 platform, whether through our official website or the suga33 mobile app.

This document applies to all registered members of Suga33 in Malaysia, as well as any individual who visits our platform without registering an account. This Policy should be read together with Terms & Conditions and forms part of the overall agreement between you and suga33.

Suga33 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles. We are committed to ensuring that every piece of data you entrust to us is handled with full responsibility, transparency, and the highest level of security.

We only collect data that is strictly necessary to provide you with a high-quality service. The following are the categories of data we may collect:

Every piece of data we collect is used for clearly defined and legitimate purposes. We will not use your data for unrelated purposes without first obtaining your additional consent.

• Account Management: Creating, verifying, and managing your member account, including the KYC process and identity verification required before your first withdrawal.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions on the platform securely and in a timely manner.
• Platform Security: Detecting and preventing fraud, money laundering, multiple account usage, and any suspicious or unlawful activity.
• Customer Support: Providing technical assistance and responsive customer service whenever you contact us via live chat or email.
• Marketing Communications: Sending promotional information, bonus offers, and platform updates — only if you have consented to receive such communications.
• Legal Compliance: Fulfilling legal and regulatory obligations applicable in Malaysia, including required reporting to the relevant authorities.
• Service Improvement: Analyzing usage patterns in aggregate to improve platform performance, user interface, and the overall gaming experience.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and offering appropriate self-control tools.

Suga33 invests seriously in data security infrastructure to ensure your personal information is always protected. The technical and organisational security measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your device and suga33 servers is encrypted using 256-bit TLS/SSL protocol, ensuring no third party can intercept or read your data in transit.
• Data-at-Rest Encryption: Sensitive data stored in our databases, particularly financial information and KYC documents, is encrypted using the industry-standard AES-256 protocol.
• Strict Access Control: Access to members' personal data is restricted to authorized personnel on a strict need-to-know basis. All access is logged and continuously monitored.
• Two-Factor Authentication: Our internal systems require multi-factor authentication for access to sensitive member data.
• Regular Security Audits: Our platform undergoes regular independent security testing and audits to identify and address any potential vulnerabilities.
• 24/7 Monitoring: Our threat detection system operates around the clock to detect and respond to any unauthorised access attempts.

Your personal data will be retained for as long as necessary to fulfill the original purpose of collection, or as required by applicable law. Once the retention period expires, data will be securely deleted or anonymized.

Suga33 does not share your personal data with external parties except in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Service Providers: Required transaction details are shared with approved payment gateway providers to enable smooth processing of your deposits and withdrawals.
• Game Software Providers: Minimum technical data may be shared with our licensed game providers to ensure the integrity and proper functioning of games.
• KYC Service Providers: Identity verification documents are shared with approved KYC partners solely for identity verification purposes as required by law.
• Legal Authorities: We will disclose personal data to government authorities or law enforcement agencies where required by law, court order, or a legitimate official investigation.
• Analytics Providers: Anonymized usage data (with no personally identifiable information) may be shared with analytics platforms for service improvement purposes.

All suga33 third-party partners are required to uphold the same data protection standards that we apply ourselves. Every data-sharing arrangement is safeguarded through legally binding confidentiality and data processing agreements.

The suga33 platform uses cookies and similar tracking technologies to enhance your user experience. Cookies are small text files stored on your device when you visit our platform.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and basic navigation. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use our platform (pages visited, time spent, errors encountered) to help us improve platform performance.
• Functional Cookies: Saving your preferences such as language, display settings, and game choices so you do not need to reconfigure them every time you log in.
• Analytics Cookies: Enabling us to understand overall platform usage patterns. This data is collected in aggregate and is not linked to your personal identity.

You may manage or block cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality and user experience of the Suga33 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

To exercise any of the above rights, please contact the suga33 customer support team via the platform's live chat or our email. We will endeavour to process your request within 30 calendar days from the date of receipt.

The suga33 platform is strictly limited to individuals aged 18 and above. We do not intentionally collect or process personal data from any individual under the age of 18.

All account registrations require age verification through a strict KYC process. Should we discover that a child's personal data has been collected without our knowledge, we will immediately take the following actions:

• Immediately closing the account in question.
• Permanently deleting all related data from our systems.
• Returning any relevant funds via the appropriate method.
• Reporting the case to the relevant authorities where necessary.

If you know or suspect that someone under the age of 18 is using the suga33 platform, please contact our support team immediately so that appropriate action can be taken.

The suga33 platform may contain references or links to third-party websites or services in certain contexts, such as game providers or payment partners. Please be aware that:

• The Suga33 Privacy Policy applies only to platforms and services operated directly by Suga33.
• Suga33 is not responsible for the privacy practices or content of third-party websites that may be accessible through our platform.
• We encourage you to read the privacy policy of every website you visit outside the Suga33 platform.
• Any information you provide directly to third parties is subject to their own privacy policies, not ours.

Suga33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or service improvements. When material changes are made:

• The "Last Updated" date at the top of this document will be updated.
• Members will be notified via a prominent notice on the platform or through your registered email address.
• For amendments that involve material changes to how we handle your data, we will seek your renewed consent where required.

We encourage you to review this Privacy Policy page periodically. Continued use of the Suga33 platform after an amendment notice is published will be considered acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist. You may reach us via:

• Live Chat Platform: The fastest way — our support agents are available 24/7 and can address your privacy inquiries promptly.
• Email: Send your written inquiry to our platform's email address and we will respond within 1–2 business days.

For more information about your rights as a data subject in Malaysia, you may refer to the Department of Personal Data Protection (JPDP) Malaysia. For general questions regarding platform terms, please refer to our Terms & Conditions or FAQ ours.