Privacy Policy super22 — Malaysian Member Data Security Is Our Priority

1 Information We Collect

When you register or use the super22 platform, we collect several categories of information to ensure our services run smoothly, securely, and in compliance with applicable laws in Malaysia.

Information you provide directly:

• Full name as stated on your identity card or passport.
• Date of birth and identification card number for age verification purposes.
• Active email address and Malaysian mobile number.
• Bank account or e-wallet details for withdrawal processing.
• KYC documents such as a copy of your ID and proof of residential address.

Information collected automatically:

• IP address and device type used to access the platform.
• Your device's browser and operating system information.
• Login session data including time, date, and duration of use.
• Records of gaming activity and financial transactions in your account.
• Cookie data and related website tracking technologies.

Data Category	Primary Purpose	Legal Basis
Identity & KYC	Member verification, fraud prevention	Legal requirements
Financial Information	Deposit & Withdrawal Processing	Contract fulfilment
Technical Data	Account Security & Fraud Prevention	Legitimate interests
Activity Data	User experience improvement	Legitimate interests
Communication Data	Customer Support & Notifications	Consent / Contract

---

2 How We Use Your Data

The data we collect is used responsibly and solely for clearly stated purposes. super22 uses member information for the following:

• Identity and age verification — ensuring only eligible members (18 years and above) can use the platform.
• Financial transaction processing — securely managing your deposits, withdrawals, and account transaction history.
• Account security — detecting and preventing unauthorised access, fraud, or suspicious activity.
• Legal compliance — fulfilling anti-money laundering (AML) requirements and other regulatory reporting obligations.
• Service communications — sending important notifications related to your account, promotions, and platform updates.
• Service improvement — analysing usage patterns to improve overall platform quality and user experience.
• Customer Support — enabling our support team to provide accurate and effective assistance whenever you need it.

We do not use your data for automated decision-making that materially affects your rights or interests without appropriate human oversight.

---

3 Data Encryption and Security

Member data security is super22's absolute priority. We continuously invest in cutting-edge security infrastructure to ensure your information is always protected against cyber threats.

The security measures we implement include:

• 256-bit SSL Encryption on all communications between your device and our servers — no data is transmitted in plain text.
• Encryption of data at rest — sensitive information is stored in encrypted format in our databases.
• Two-factor authentication (2FA) available for an additional layer of security on member accounts.
• 24/7 account activity monitoring — our system automatically detects and flags suspicious login activity.
• Regular security audits by independent cybersecurity experts to identify and address any vulnerabilities.
• Strict internal access controls — only staff who require access to specific data to perform their duties are authorised to do so.

---

4 Data Sharing with Third Parties

Super22 does not sell, rent, or disclose members' personal information to third parties for marketing purposes. However, in certain situations, we may need to share the necessary information with the following parties:

• Payment service providers — to process your deposits and withdrawals securely and efficiently.
• Game software providers — to operate games and ensure fairness of game outcomes.
• Cloud computing service providers — bound by strict confidentiality agreements and processing data solely in accordance with super22's instructions.
• Regulatory bodies and authorities — when required by law, court order, or to fulfil our legal obligations.
• Identity verification specialists — for KYC and fraud prevention purposes during new member onboarding.

All third parties we work with are bound by strict data protection agreements and must comply with the security standards we set. They are prohibited from using your data for any purpose other than those specified.

---

5 Cookies and Tracking Technologies

The super22 website and app use cookies and similar tracking technologies to enhance your user experience. Cookies are small data files stored on your device when you visit our platform.

We use several types of cookies for different purposes:

• Essential Cookies — required for the platform to function properly, including login session management and account security. These cookies cannot be disabled.
• Functional Cookies — saving your preferences such as language and display settings to make your platform experience more convenient.
• Analytics Cookies — helping us understand how members use the platform so we can make meaningful improvements.
• Performance Cookies — used to monitor platform performance and ensure optimal speed and stability.

You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect certain features on the super22 platform.

---

6 Your Rights as a super22 Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the privacy principles we uphold, you have the following rights regarding your personal data:

• Right of Access — you may request a copy of all personal data we hold about you at any time.
• Right to Rectification — if any information we hold about you is inaccurate or outdated, you have the right to request a correction.
• Right to Erasure — you may request the deletion of your personal data, subject to applicable legal retention requirements.
• Right to Restriction of Processing — in certain circumstances, you may request that we restrict how we process your data.
• Right to Object — you may object to the processing of your data for specific purposes such as direct marketing.
• Right to Data Portability — you may request your data in a machine-readable format for transfer to another service provider.

To exercise any of the above rights, please contact our customer support team via Live Chat on the super22 platform. We will process your request within 30 business days.

---

7 Data Retention Period

Super22 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by Malaysian law. Our data retention guidelines are as follows:

• Active account data — retained for as long as your account is active and for a period after account closure to meet legal requirements.
• Financial transaction records — retained for a minimum of seven (7) years in accordance with financial and anti-money laundering legal requirements.
• KYC Documents — retained for five (5) years after account closure or longer if required by regulators.
• Support communication logs — retained for three (3) years for dispute resolution and service improvement purposes.
• Analytics data and cookies — retained for between 30 days and 24 months depending on the data type and analytics requirements.

Once the retention period expires, your data will be securely deleted using industry-recognised data erasure procedures, ensuring it cannot be recovered or misused.

---

8 Changes to This Privacy Policy

Super22 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements to our security technology.

When a material change occurs, we will:

• Publishing the updated version on this page with a clear update date.
• Sending notifications to members via email or in-platform notices for significant changes.
• Providing reasonable advance notice before changes take effect where applicable.

We encourage you to review this page periodically to stay informed about how we protect your information. Continued use of the super22 platform after any changes are published constitutes your acceptance of the updated terms.

If you have any questions, concerns, or feedback about this Privacy Policy, our team is available at all times via Live Chat within the super22 platform.