SP6789 Privacy Policy – Our Commitment to Protecting the Personal Data of Every Malaysian Member

1. Introduction and Scope of This Privacy Policy

SP6789 committed to protecting the privacy of every individual who interacts with our platform. This Privacy Policy applies to all personal information we collect through the website https://sp6789.best, the SP6789 mobile application, customer support services, and all other communication channels associated with this platform.

As an online entertainment platform operating in Malaysia and serving Malaysian users, SP6789 recognises that member trust is its most valuable asset. We therefore do not take this responsibility lightly. Every decision relating to members' personal data is made with security, transparency, and respect for individual privacy as the top priority.

This policy should be read in conjunction with Terms & Conditions and Responsible Gaming Policy SP6789, which forms part of our overall user agreement.

2. Personal Data We Collect

SP6789 collects various categories of personal data depending on how you interact with our platform. Below is a full breakdown of the data we collect and its sources:

3. How SP6789 Uses Your Personal Data

The personal data we collect is used solely for the following purposes. Each use has a clear legal basis under PDPA 2010:

• Account Management: Creating, verifying, and managing your SP6789 account, including identity verification required for legal compliance.
• Transaction Processing: Deposits and withdrawals are processed in Malaysian Ringgit (RM) through approved local Malaysian payment providers.
• Service Delivery: Enabling you to access all games and features on the SP6789 platform, including slots, live casino, roulette, poker, and lottery.
• Customer Support: Resolving complaints, responding to enquiries, and providing technical assistance through SP6789's 24/7 support team.
• Platform Security: Detecting and preventing fraud, bot usage, collusion, money laundering, and any other unauthorised activities on the SP6789 platform.
• Platform Improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve the quality and experience of the SP6789 platform.
• Marketing Communications: To keep you informed about SP6789 promotions, bonuses, and special events — only if you have given your consent to receive marketing communications.
• Legal Compliance: Fulfilling legal and regulatory obligations applicable in Malaysia, including reporting requirements to the relevant authorities where required by law.

4. Sharing Data with Third Parties

SP6789 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This has been an unwavering commitment since the platform first launched.

However, in certain circumstances, SP6789 may need to share your data with the following parties for legitimate operational purposes:

• Malaysian Local Payment Providers: Transaction information is shared with providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX providers (Maybank2u, CIMB Clicks, and other Malaysian banks) solely for the purpose of processing your deposits and withdrawals in MYR.
• Game Software Providers: Limited technical data required to ensure games function correctly. These providers are bound by strict confidentiality agreements with SP6789.
• IT Service Providers: Technical infrastructure providers required for SP6789 platform operations, including secure cloud storage and cybersecurity services.
• Legal Authorities: In cases where SP6789 is required by Malaysian law or court order to disclose certain information to law enforcement agencies or authorised regulatory bodies.

All third parties receiving SP6789 members' personal data are bound by strict data protection agreements and are not permitted to use that data for any purpose other than what is specified in the relevant agreement.

5. Personal Data Security

SP6789 invests seriously in security infrastructure to protect members' personal data. The security measures we employ include:

• Transmission Encryption: All communications between your browser or app and SP6789's servers are protected with TLS 1.3 protocol and 256-bit SSL encryption.
• Storage Encryption: Personal data stored on SP6789 servers is encrypted using AES-256 — the same security standard employed by leading financial institutions.
• Tiered Access Control: A role-based access control (RBAC) system ensures that only authorised personnel can access specific data categories based on their job responsibilities.
• Regular Security Audits: SP6789 conducts monthly internal security audits and independent third-party audits on a quarterly basis to identify and address any vulnerabilities.
• DDoS Protection and Firewall: SP6789's infrastructure is protected by enterprise-grade DDoS protection and firewall systems to prevent unauthorised access.
• Incident Management: SP6789 has a comprehensive incident response plan to address any security breaches swiftly and effectively.

6. Use of Cookies and Tracking Technologies

Like most online platforms, SP6789 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Below are the types of cookies we use:

• Essential Session Cookies: Required for the SP6789 platform to function — it stores your login information during active sessions. These cookies cannot be disabled without affecting the platform's core functionality.
• Preference Cookies: Saving your preferences such as interface language and display settings so you do not have to reconfigure them each time you access SP6789.
• Analytics Cookies: Helps us understand how members use the SP6789 platform in aggregate for improvement purposes. This data is processed anonymously and does not identify any individual.
• Security Cookies: Used to detect and prevent unauthorised access, fraud, and bot activity on the SP6789 platform.

You can manage or restrict cookie usage through your browser settings. However, blocking essential cookies may affect certain functions of the SP6789 platform. For more information on how to manage cookies in your browser, please refer to your browser's help documentation.

7. Protection of Children's Data

Platform SP6789 is intended exclusively for adults aged 21 and above. We do not accept registrations from individuals under 21 years of age and do not knowingly collect personal data from minors.

If SP6789 finds that personal data belonging to an individual under 21 has been collected without our knowledge, we will take immediate action to delete that data from our systems and close the relevant account. Parents or guardians who discover that their child's data has been registered on the SP6789 platform without authorisation are encouraged to contact us at support@sp6789.best immediately.

8. Personal Data Retention Period

SP6789 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by Malaysian law. The following are our data retention guidelines:

• Active Account Data: Retained for as long as your SP6789 account is active and for 7 years after account closure, for legal compliance purposes and to resolve any disputes that may arise.
• Financial Transaction Records: Retained for 7 years from the date of transaction, in line with Malaysian accounting and anti-money laundering legal requirements.
• Support Communication Logs: Retained for 2 years from the date of the last interaction for quality control purposes and reference in the event of any subsequent complaints.
• Technical Data & Security Logs: Retained for 90 days for security and fraud detection purposes, after which it is automatically deleted.

When data is no longer required, SP6789 ensures it is securely deleted or anonymised using established procedures. Anonymised data — where individuals can no longer be identified — may be retained longer for analytics and platform improvement purposes.

9. Your Rights as a Data Owner

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by SP6789:

To exercise any of the above rights, please submit a written request to support@sp6789.best specifying the type of right you wish to exercise and your SP6789 account details. All requests will be handled in strict confidence and processed within the stipulated timeframe.

10. Cross-Border Data Transfers

In the context of the platform's operations SP6789, there are circumstances where your personal data may need to be processed on servers located outside Malaysia — for example, servers belonging to game software providers or cloud storage infrastructure.

In such circumstances, SP6789 ensures that such data transfers are carried out with adequate safeguards through:

• Legally binding data processing agreements with all data recipients, ensuring protection standards equivalent to PDPA 2010 are upheld.
• Use of recognised standard contractual clauses for international data transfers.
• Regular security assessments of all third parties that process SP6789 member data outside Malaysia.

If you have any concerns about cross-border data transfers related to your SP6789 account, please contact our Privacy Officer for further information.

11. Data Breach Procedures

Although SP6789 takes all reasonable steps to prevent data security breaches, we have clear procedures in place to address any incidents that may occur:

• Detection and Prevention: The SP6789 security team monitors systems around the clock, 24 hours a day. Any signs of a breach are investigated immediately and containment measures are put in place to limit potential damage.
• Risk Assessment: Each incident will be assessed in terms of its scope, the type of data involved, and the potential impact on affected members.
• Member Notification: If a data breach involves your personal data and poses a high risk to your rights and freedoms, SP6789 will notify you within a reasonable timeframe via your registered email. The notification will clearly explain what occurred, what data may have been affected, and the steps you can take to protect yourself.
• Reporting to Authorities: SP6789 will report significant data breaches to the relevant authorities in Malaysia in accordance with applicable legal requirements.

12. Amendments to This Privacy Policy

SP6789 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or new platform features. When material amendments are made, we will:

• Updating the "Last updated" date at the top of this document.
• Notifying SP6789 members via their registered email or in-platform notification at least 7 days before any amendment takes effect.
• In the case of highly material amendments, SP6789 may request your consent again before you continue using the platform.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the SP6789 platform after any amendments take effect constitutes your acceptance of the revised terms.

13. Contact SP6789's Privacy Officer

SP6789 has appointed a Privacy Officer responsible for ensuring compliance with PDPA 2010 and addressing any privacy-related enquiries or complaints. If you have any questions, concerns, or wish to exercise your rights regarding your personal data, please contact us:

• Privacy Officer Email: support@sp6789.best (please state "Privacy Enquiry" in the email subject line)
• Live Chat: Available on the SP6789 platform — 24 hours a day, 7 days a week
• Response Time: Privacy enquiries are responded to within 5 business days; data rights requests are processed within 14–30 business days depending on the type of request