Privacy Policy — suka2

1. Who We Are

suka2 is the operator of the online casino and sports betting platform accessible at suka2.co ("Platform"). suka2 operates under international online gaming licensing and is the data controller in respect of personal data collected through the Platform. References to "suka2," "we," "us," or "our" in this Privacy Policy refer to the suka2 platform operator.

This Policy applies to all registered account holders, prospective registrants, and visitors of the suka2 Platform, regardless of their country of access. Malaysian users accessing the Platform from within Malaysia should note that their data is handled in accordance with the standards described in this Policy.

2. Personal Data We Collect

2.1 Registration Data

When you create a suka2 account, we collect the information you provide during the registration process, including your full legal name, date of birth, residential address, email address, and contact number. This data is required to create and maintain your account and is subject to identity verification requirements under our gaming licence obligations.

2.2 Identity Verification (KYC) Data

To comply with Know Your Customer ("KYC") and anti-money laundering ("AML") obligations under our international gaming licence, we may collect copies of government-issued identity documents (such as your Malaysian identity card or passport), proof of residential address, and in certain circumstances, source of funds documentation.

2.3 Financial Data

We collect data relating to your financial transactions on the Platform, including deposit and withdrawal amounts, payment method identifiers (such as e-wallet account references or bank account details used for transactions), transaction dates, and transaction reference numbers. We do not store full payment card numbers on our systems.

2.4 Gaming Activity Data

We record all gaming and betting activity associated with your account, including wagers placed, game outcomes, session durations, login timestamps, and responsible gaming tool settings such as deposit limits and self-exclusion status. This data is used for account management, dispute resolution, responsible gaming compliance, and fraud prevention.

2.5 Technical & Device Data

When you access the suka2 Platform, we automatically collect certain technical data including your IP address, browser type and version, operating system, device identifiers, referring URL, pages visited, and session duration. This data is collected via server logs and, where applicable, cookies and similar tracking technologies.

2.6 Communications Data

We retain records of communications between you and suka2, including live chat transcripts, support ticket exchanges, and email correspondence. These records are retained for customer service quality, dispute resolution, and fraud prevention purposes.

3. How We Collect Your Data

suka2 collects personal data through the following channels:

• Directly from you — when you register an account, submit KYC documents, make deposits or withdrawals, place wagers, contact support, or update your account settings.
• Automatically — through server logs, cookies, and tracking technologies when you access and interact with the Platform.
• From third-party payment providers — including Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and other payment processors, who may share transaction confirmation data with us as part of deposit and withdrawal processing.
• From identity verification services — third-party KYC and AML compliance service providers used to assist in verifying account holder identities in accordance with our licensing obligations.
• From fraud prevention and security services — third-party services that provide risk scoring and fraud detection data to protect the integrity of the Platform and its users.

4. Purposes of Processing

suka2 processes your personal data for the following purposes:

• Creating, maintaining, and administering your suka2 account;
• Verifying your identity and age in compliance with KYC and licensing requirements;
• Processing deposits, withdrawals, and other financial transactions;
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited activities;
• Providing and improving customer support services;
• Administering responsible gaming tools including deposit limits, session timers, and self-exclusion;
• Sending you service communications including transaction confirmations, account notifications, and security alerts;
• Complying with legal and regulatory obligations under our international gaming licence;
• Analysing Platform usage to improve functionality and user experience;
• Sending promotional communications where you have provided consent and not opted out.

5. Legal Basis for Processing

suka2 processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity — processing required to perform the contract between you and suka2 (i.e., providing gaming and betting services under the Terms and Conditions);
• Legal obligation — processing required for compliance with our gaming licence obligations, including KYC, AML, and responsible gaming requirements;
• Legitimate interests — processing for fraud prevention, Platform security, and service improvement, where such interests do not override your data protection rights;
• Consent — for processing that is not otherwise justified on the above bases, including sending promotional communications, where you have given specific and informed consent that you may withdraw at any time.

6. Data Sharing & Disclosure

suka2 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly to the extent necessary for the purposes described in this Policy:

• Payment processors — to facilitate deposit and withdrawal transactions;
• KYC and AML service providers — to assist in identity verification and anti-money laundering screening;
• Fraud prevention and security services — to protect the Platform and detect prohibited activity;
• Game software providers — limited technical data shared to enable game delivery and session management;
• Legal and regulatory authorities — where required by law, court order, or our gaming licensing regulator;
• Professional advisers — including legal counsel and auditors, subject to professional confidentiality obligations.

All third-party processors who receive your data are subject to data processing agreements requiring them to handle your data securely and only for the specified purpose.

7. International Data Transfers

As suka2 operates under an international gaming licence, some of your personal data may be processed or stored on servers located outside Malaysia. Where data is transferred internationally, suka2 takes reasonable steps to ensure that appropriate safeguards are in place, including contractual protections, to maintain the security and confidentiality of your data to a standard at least equivalent to that described in this Policy.

8. Data Retention

suka2 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in any event for the minimum periods required under our international gaming licensing obligations. Specifically:

• Account registration and KYC documentation is retained for a minimum of five years following account closure;
• Financial transaction records are retained for a minimum of five years to satisfy AML record-keeping requirements;
• Gaming activity logs are retained for three years following the relevant activity;
• Customer support communications are retained for two years following the relevant interaction;
• Technical and device data collected via server logs is retained for up to twelve months.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised.

9. Cookies & Tracking Technologies

The suka2 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, maintain your login session, and collect analytical data on Platform usage. The categories of cookies used are as follows:

• Strictly necessary cookies — essential for Platform operation including session authentication and security tokens. These cannot be disabled without disrupting Platform functionality.
• Functional cookies — used to remember your preferences such as language settings and responsible gaming limit configurations.
• Analytical cookies — used to collect aggregated data on how users interact with the Platform, for the purpose of improving functionality and user experience. These cookies collect data in a form that does not directly identify individual users.

You may configure your browser settings to refuse or delete cookies. Note that disabling strictly necessary cookies will affect Platform functionality, including your ability to log in and maintain a session.

10. Your Data Rights

Subject to applicable law and our legal obligations, you have the following rights in respect of your personal data held by suka2:

• Right of access — to request a copy of the personal data we hold about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data, subject to retention obligations under applicable law and our gaming licensing requirements;
• Right to restriction — to request that we restrict processing of your data in certain circumstances;
• Right to object — to object to processing based on legitimate interests, including profiling for marketing purposes;
• Right to withdraw consent — to withdraw consent for consent-based processing (including promotional communications) at any time via your account settings or by contacting support.

To exercise any of the above rights, please contact suka2 customer support. We will respond to verified requests within the timeframe required by applicable data protection law. Note that some requests may be subject to identity verification before they can be processed.

11. Children's Privacy

The suka2 Platform is strictly restricted to persons aged 21 years or older. suka2 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person below this age threshold, we will take immediate steps to delete such data and close the relevant account. If you have reason to believe a minor has registered on the Platform, please contact our support team immediately.

12. Security Measures

suka2 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and the suka2 Platform;
• Encrypted storage of account credentials using industry-standard hashing algorithms;
• Access controls restricting internal access to personal data to authorised personnel only, on a need-to-know basis;
• Monitoring systems for unusual login activity and potential security breaches;
• Regular security assessments of Platform infrastructure and data processing systems.

While suka2 takes robust measures to protect your data, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your account credentials. Please refer to the suka2 Terms and Conditions for your account security obligations.

13. Updates to This Policy

suka2 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered account holders via their registered email address no less than seven days before the revised Policy takes effect. The effective date at the top of this Policy will be updated to reflect any revision. Continued use of the Platform following the effective date of a revised Policy constitutes acceptance of the updated terms. We recommend reviewing this Policy periodically.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how suka2 handles your personal data, please contact our support team via the live chat function on the Platform, available 24/7, or by email at [email protected] (plain text — not a clickable link). Data rights requests will be acknowledged promptly and resolved within applicable legal timeframes.