Privacy Policy — How suka2 Collects, Uses, and Protects Your Personal Data

This Privacy Policy ("Policy") issued by suka2 ("suka2", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at suka2.cam ("the Platform"). It describes how we collect, use, store, share, and protect personal data belonging to users ("you", "your", "User") who access or use the Platform.

suka2 is committed to handling your personal data with transparency, integrity, and in a manner consistent with accepted data protection principles. We recognise that privacy is a fundamental right, and we take our obligations as a data controller seriously.

By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, suka2.
• "Data Processor" means any third party that processes personal data on behalf of suka2 under a formal data processing agreement.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "KYC Data" means identity verification documents and information collected as part of the Know Your Customer process.
• "Cookies" means small text files stored on your device by your browser when you access the Platform, used to retain session and preference information.
• "Device Data" means technical information about the hardware and software used to access the Platform, including IP address, browser type, and operating system.
• "Transaction Data" means records of all financial activity conducted through your Account, including deposits, withdrawals, wagers, and bonuses.

suka2 collects the following categories of personal data from users, depending on the nature of their interaction with the Platform:

We do not collect full payment card numbers, CV codes, or internet banking login credentials. Financial transactions are processed through secure third-party payment processors including DuitNow, FPX, and e-wallet providers such as Touch 'n Go and Boost, who maintain their own data security and privacy standards.

suka2 collects personal data through the following primary channels:

• Direct Submission: Information you provide directly when registering an account, completing KYC, updating your profile, or contacting our support team.
• Automated Technologies: Data collected automatically when you access the Platform, including cookies, server logs, session tokens, and analytics tools that record your browsing and gaming behaviour.
• Payment Processors: Confirmation data returned by Malaysian payment service providers (e.g., FPX, DuitNow, Touch 'n Go eWallet, Boost) following the completion of a deposit or withdrawal transaction.
• Third-Party Verification Services: Identity verification providers engaged for KYC purposes who may cross-reference your submitted documents against official records.
• Fraud Prevention Services: Risk management and fraud detection platforms that analyse Device Data and behavioural patterns to protect users and the Platform from fraudulent activity.

suka2 processes your personal data only for the following defined purposes:

1. Account Management: To create, maintain, and administer your suka2 Account, including login authentication, account settings, and profile management.
2. Identity Verification (KYC): To verify that you are who you say you are, to confirm your age eligibility (21+), and to meet our obligations under anti-money laundering and counter-terrorism financing principles.
3. Transaction Processing: To process deposits and withdrawals via your chosen Malaysian payment methods, and to maintain accurate transaction records for your account.
4. Customer Support: To investigate and respond to your enquiries, complaints, and support requests in a timely and effective manner.
5. Platform Security & Fraud Prevention: To detect and prevent fraudulent account activity, unauthorised access, bonus abuse, money laundering, and other prohibited conduct described in our Terms & Conditions.
6. Regulatory Compliance: To fulfil our legal obligations including record-keeping requirements, responding to lawful requests from authorities, and cooperating with investigations.
7. Responsible Gambling: To identify and respond to patterns of behaviour that may indicate problem gambling, and to administer self-exclusion or deposit limit requests. Please see our Responsible Gambling page for more information.
8. Platform Improvement: To analyse aggregated usage data, identify technical issues, and improve the design and functionality of the Platform for all users.
9. Communications: To send you account-related notifications, security alerts, and — where you have consented — promotional communications regarding suka2 offers.

suka2 processes your personal data on the following legal grounds, which vary depending on the specific purpose of processing:

• Contractual Necessity: Processing is necessary to perform our obligations under the agreement between you and suka2, including account management and transaction processing.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering obligations and KYC requirements.
• Legitimate Interests: Processing serves suka2's legitimate interests in preventing fraud, securing the Platform, and improving our services — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain non-essential processing activities — such as receiving promotional email communications — suka2 relies on your freely given, informed, and revocable consent. You may withdraw consent at any time by contacting our support team.

suka2 does not sell or commercially transfer your personal data to third parties. We may share your data in the following circumstances:

• Payment Service Providers: We share necessary transaction data with Malaysian payment processors including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank solely for the purpose of processing your financial transactions.
• Identity Verification Providers: We engage licensed KYC and identity verification service providers who process your identity documents on our behalf under strict data processing agreements.
• Fraud Prevention & Security Partners: We may share Device Data and behavioural indicators with fraud detection platforms to protect against account takeover, payment fraud, and bonus abuse.
• Game Studio Providers: Certain usage and session data may be shared with licensed game studios that supply games on our platform for the purpose of game performance monitoring and dispute resolution.
• Regulatory Authorities: We will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts when required to do so by applicable law, valid legal process, or a lawful order.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of suka2, your personal data may be transferred to the relevant successor entity, subject to equivalent data protection obligations.

suka2 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal regulatory, or operational obligations. Our general retention principles are as follows:

• Active Account Data: Retained for the duration of your account's active status plus a period of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Communications Data: Support correspondence retained for 2 years from the date of last contact.
• Usage and Analytics Data: Aggregated or anonymised usage data may be retained indefinitely as it no longer constitutes personal data. Raw usage logs are retained for up to 12 months.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

suka2 uses cookies and similar tracking technologies to ensure the Platform functions correctly and to improve your experience. We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the Platform to operate — these include session authentication cookies, security tokens, and load balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Retain your preferences such as language settings, preferred currency display, and last-accessed game category to provide a personalised experience.
• Analytics Cookies: Used to collect aggregated data on how users interact with the Platform — which pages are visited most frequently, session durations, and navigation paths. This information is used solely to improve platform design and performance.
• Security Cookies: Help detect fraudulent activity, prevent bot access, and protect your account from unauthorised login attempts.

suka2 does not use third-party advertising cookies or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform.

suka2 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• AES-256 encryption for personal data and KYC documents stored at rest;
• Two-factor authentication (2FA) available for all user accounts;
• Role-based access control limiting internal access to personal data to authorised personnel only;
• Regular penetration testing and vulnerability assessments conducted by independent security professionals;
• 24/7 infrastructure monitoring with automated alerts for anomalous access patterns;
• Formal incident response and data breach notification procedures.

No method of electronic transmission or storage is 100% secure. While we use commercially reasonable security practices, suka2 cannot guarantee the absolute security of your personal data against all possible threats.

suka2's primary data processing infrastructure is located in secure data centres within or accessible from the Asia-Pacific region. In the course of operating the Platform and engaging third-party service providers, your personal data may be transferred to and processed in jurisdictions outside Malaysia.

Where personal data is transferred internationally, suka2 ensures that appropriate safeguards are in place to protect the security and integrity of that data, including:

• Entering into standard contractual data protection clauses with recipient entities;
• Transfering data only to service providers in jurisdictions that provide an adequate level of data protection;
• Requiring all international recipients to comply with data protection standards equivalent to those applied by suka2.

By using the Platform, you acknowledge and consent to your personal data being processed in the manner and locations described in this section.

As a user of suka2, you have the following rights in respect of your personal data. You may exercise any of these rights by contacting our support team at any time:

The suka2 Platform is strictly for adults aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our registration and KYC process.

If suka2 becomes aware that personal data has been collected from a person under 21, we will immediately close the relevant account, delete all associated personal data, and refund any deposits made. Any winings generated by an underage user will be forfeited in accordance with our Terms & Conditions.

suka2 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable regulations. The date at the top of this page will be updated whenever a change is made.

Where changes are material — meaning they significantly affect your rights or how we process your personal data — we will provide prior notice via email to the address registered on your account, or via a prominent notice on the Platform, before the changes take effect.

Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically to stay informed.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by suka2, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the Platform — the fastest way to reach us.
• Email: [email protected] — please include "Privacy Request" in the subject line and a brief description of your query.

For matters specifically relating to responsible gambling, self-exclusion, or deposit limit requests, please visit our dedicatedResponsible Gambling page.

We aim to acknowledge all privacy-related enquiries within two (2) business days and to fully respond within thirty (30) days of receipt.