Privacy Policy Contents
Introduction
Welcome to the suga22 Privacy Policy. At suga22, we deeply value the trust you place in us when you register and use our platform. This policy is written clearly and transparently to ensure you fully understand how your personal information is managed from start to finish.
Suga22 is an online casino and sports betting platform operating to serve users in Malaysia. We are bound by the Personal Data Protection Act 2010 (PDPA) Malaysia and take this responsibility seriously. This Privacy Policy applies to all users who access the suga22.app website as well as our mobile application.
By registering an account or using any suga22 service, you give your informed consent to the collection and use of your personal data as described in this policy. If you do not agree, please discontinue use of the platform and contact us to delete your account.
This document is written in Bahasa Melayu as the primary language. Translations in other languages are provided for reference purposes only, and the Bahasa Melayu version is the legally binding version.
Information Collected
Suga22 collects various types of information depending on how you interact with our platform. We only collect information that is strictly necessary for the stated purposes.
| Data Category | Information Type | Collection Method |
|---|---|---|
| Identity | Full name, date of birth, MyKad/passport number | Registration & KYC |
| Contact | Email address, phone number, postal address | Registration form |
| Financial | Bank account number, bank name, transaction history | Deposits & withdrawals |
| Technical | IP address, device type, web browser, access logs | Automatically during use |
| Behaviour | Game history, wagering, play time | In-platform activity |
| Communication | Support chat records, emails, feedback | Interactions with customer support |
We may also receive additional information from third-party identity verification providers during the KYC process, as well as information you voluntarily share through our surveys or customer feedback programs.
Suga22 never request your account password via email, SMS, or live chat. If you receive any such request, it may be a fraud attempt — please report it to our support team immediately.
How Your Information Is Used
The personal data we collect is used responsibly for legitimate and transparent purposes. Below is the full list of purposes for which your data is used:
- Account management: Creating, verifying, and maintaining your user account, including the KYC process and identity verification.
- Transaction processing: Processing deposits, withdrawals, and all financial activities related to your account.
- Service delivery: Enabling you to access all games, sports betting, and features on the suga22 platform.
- Important communications: Sending notifications related to your account, transactions, security updates, and policy changes.
- Fraud prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, or any misuse of the platform.
- Responsible wagering: Monitoring gaming patterns to identify users who may need assistance related to problem gambling.
- Marketing (with consent): Sending promotional information, exclusive offers, and bonus updates to users who have consented to receive marketing communications.
- Platform improvement: Analyzing usage patterns to improve performance, interface, and overall user experience.
- Legal compliance: Fulfilling applicable legal and regulatory obligations, including reporting to authorities when required.
You may withdraw consent to receive marketing communications at any time by updating your notification preferences in your account settings or by contacting our support team.
Information Sharing
Suga22 does not sell your personal data to any third party. However, under certain limited circumstances, we may share your information with the following parties:
- Payment service provider: Required financial information is shared with accredited payment providers (such as FPX, Touch 'n Go, GrabPay, DuitNow) solely for the purpose of processing your transactions.
- Game software providers: Minimum technical data is shared with our gaming platform providers to ensure smooth and fair gameplay.
- Identity verification (KYC) provider: Your identity information is shared with accredited KYC services for the verification process required by law.
- Statutory authority: suga22 will disclose user information to authorities when required by court order, law, or a valid official investigation.
- Legal and accounting professionals: In the event of a dispute or legitimate audit, required information may be shared with our legal advisors or certified auditors.
All third parties that receive user data from suga22 are bound by strict data protection agreements and are only permitted to use that data for the stated purpose. They are not allowed to use your data for their own marketing purposes.
In the event of any data breach involving your personal information, suga22 is committed to notifying you within 72 hours after the breach is detected, in accordance with Malaysia's PDPA requirements.
Data Security
We continuously invest in security infrastructure to ensure your personal data is protected at all times. Our technical and organizational measures include:
- 256-bit SSL/TLS Encryption: All communications between your device and our servers are encrypted using the latest industry-standard security protocols.
- Static data encryption: Sensitive data stored in our database, including financial information, is encrypted using AES-256.
- Two-factor authentication (2FA): Two-factor authentication is available for all accounts to add an extra layer of protection.
- 24/7 security monitoring: Our systems are continuously monitored to detect any suspicious activity or unauthorised access attempts.
- Regular security audits: We conduct regular penetration testing and security audits by independent experts.
- Role-based access control: Staff may only access data required for their job duties, and all access is logged and monitored.
- Secure data backup: Your data is regularly backed up to a separate secure location to ensure service continuity.
While we take all reasonable precautions, no system can guarantee 100% absolute security. You also play an important role in protecting your account by choosing a strong password and never sharing your login credentials with anyone.
Cookies & Tracking Technologies
Suga22 uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. Cookies are small text files stored on your device when you visit our website.
Types of cookies we use:
- Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled.
- Performance Cookies: Collecting information on how users interact with our platform to help us identify technical issues and improve performance.
- Functional Cookies: Storing user preferences such as display settings, preferred language, and saved login information for your convenience.
- Analytics Cookies: Used to understand aggregated, anonymised usage patterns for the purposes of product improvement and user experience enhancement.
You can manage cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some areas of our platform. For more information on managing cookies, refer to your web browser's help guide.
On your first visit to suga22, you will be shown a cookie notice requesting your consent for the use of non-essential cookies. You are free to accept or decline specific cookie categories.
Your Rights
As a suga22 user subject to Malaysia's PDPA, you have the following rights regarding your personal data. We are committed to ensuring these rights are easy for you to exercise:
Right to Access
Requesting a copy of the personal data we hold about you.
Right to Rectification
Requesting correction of inaccurate or incomplete data.
Right to Erasure
Requesting deletion of your data under certain permitted circumstances.
Right to Object
Objecting to the processing of your data for direct marketing purposes.
Right to Restriction
Requesting restriction of your data processing while a dispute is being resolved.
Right to Portability
Requesting your data in an easily portable format.
To exercise any of the above rights, please contact our support team via 24/7 live chat. We will process your request within 30 calendar days from the date of receipt. In complex cases, this period may be extended by up to 60 days with notification to you.
Please note that these rights are not absolute and may be subject to certain exceptions — for example, we are required to retain certain transaction records to comply with financial and anti-fraud laws even after account closure.
Data Retention Period
Suga22 does not retain your personal data longer than necessary for the purposes stated in this policy. Retention periods vary by data type:
| Data Type | Retention Period | Justification |
|---|---|---|
| Active account data | Throughout the active account period | Service management |
| Financial transaction records | 7 years after transaction | Legal obligation (AMLA) |
| KYC Documents | 5 years after account closure | Regulatory compliance |
| Support communication logs | 3 years | Dispute Resolution |
| Analytics cookie data | 13 months | Platform performance analytics |
| Closed account data | 5 years after closure | Fraud prevention & legal |
Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be personally linked to you. The deletion process is carried out using methods that comply with industry standards.
Third-Party Links
The suga22 platform may contain links to third-party websites or services in certain contexts, such as payment providers or verification services. It is important that you understand the following:
- Suga22 is not responsible for the privacy policies or data security practices of any third-party websites you may visit.
- When you navigate to a third-party website, that website's privacy policy will apply instead of this one.
- We encourage you to read the privacy policy of every website you visit before providing any personal information.
- The presence of third-party links on our platform does not imply that we endorse or are responsible for their content or privacy practices.
If you have any concerns about the security of a third-party site linked from our platform, please contact our support team before providing any personal information to them.
Policy Amendments
Suga22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. All amendments will take effect immediately upon publication on this website.
For significant amendments, we will endeavour to notify you via:
- In-app or on-site notification upon your next login
- Notification email to the address registered in your account
- Banners or notification pop-ups on the suga22 homepage
It is your responsibility to review this page periodically to stay informed of the latest version of our Privacy Policy. Continued use of the suga22 platform after any amendments constitutes your acceptance of the updated policy.
The current version of this Privacy Policy is effective from 1 January 2026. For any inquiries, disputes, or requests related to your data privacy, please contact our Data Protection Officer via the 24/7 live chat support on the suga22 platform.