Privacy Policy Sakti123 — Personal Data Protection for Malaysian Members

Sakti123 collects members' personal information only when it is genuinely necessary to deliver the best possible service. We do not collect excessive or irrelevant data. The information we collect falls into three main categories:

a) Information You Provide Directly

• Full name, date of birth, and identity card number (MyKad) — collected during registration and the KYC process.
• Email address and mobile number — used for account verification and important communications.
• Bank account or digital wallet details — collected solely to process deposits and withdrawals.
• Account password — stored in hashed form and unreadable by Sakti123 staff.
• Copies of identity documents such as national identification cards and bank statements submitted during KYC.

b) Information Collected Automatically

• Your IP address, device type, operating system, and browser version.
• Game session records including login and logout times and wagering history — retained for verification and dispute resolution purposes.
• Country-level geolocation data to ensure compliance with geographic zone regulations.
• Financial transaction logs including timestamps, amounts, and payment methods used.

c) Information from Third-Party Sources

• Identity verification via approved KYC service providers to ensure the authenticity of submitted documents.
• Payment confirmation details from trusted payment processors such as FPX and DuitNow.

Every piece of information collected is used for a clear and lawful purpose. We do not use your data in ways you would not expect. The following table explains how each type of data is used:

In addition to the purposes listed above, we may use your information to send communications about Sakti123 promotions and exclusive offers. You may opt out of marketing communications at any time through your account settings without affecting your access to core services.

Sakti123 does not sell, rent, or disclose your personal information to third parties for commercial purposes. However, there are limited situations where we may need to share your information with other parties, as described below:

• Payment processors: Your bank details are shared with approved payment providers such as FPX and DuitNow solely to process your financial transactions.
• KYC service providers: Identity documents are shared with authorised identity verification partners to process your KYC application.
• Game providers: Required game session data is shared with game software providers to ensure smooth gameplay and fair wagering resolution.
• Regulatory authorities: We will disclose required information to legal authorities or regulatory bodies when legally obligated to do so, including for investigations related to anti-money laundering (AML).
• Within the corporate group: Information may be shared within the sakti123 group of companies for internal operational purposes and service improvement, with equivalent protections applied.

All third parties with whom we share data are required to comply with equivalent or higher data protection standards. We do not permit them to use your data for any purpose other than those specified in our service agreements.

We continually invest in security infrastructure to ensure your personal data is protected at every stage — whether in transit, during processing, or in storage. The security measures we implement include:

• Advanced data encryption: All communications between your browser and our servers are secured with TLS 1.3 and SSL 256-bit encryption. Sensitive data at rest is also encrypted using AES-256.
• Two-factor authentication (2FA): Sakti123 members are encouraged and able to activate 2FA for an additional layer of protection on their accounts.
• 24/7 monitoring: Our systems are continuously monitored 24 hours a day by an experienced cybersecurity team to detect and respond to any threats promptly.
• Regular security testing: Sakti123 conducts regular penetration testing and security audits through accredited independent security firms.
• Internal access controls: Access to member personal data is restricted on a need-to-know basis and requires multi-level authentication.
• Incident response plan: In the event of a serious data breach, Sakti123 is committed to notifying affected members within 72 hours of the breach being confirmed.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you hold rights that every data controller, including Sakti123, is required to respect. We fully recognise and uphold the following rights:

To exercise any of the rights listed above, please contact our data protection team by email at [email protected] or via our platform's Live Chat. We will process your request within 30 business days.

The sakti123 platform uses cookies and similar technologies to ensure a smooth and secure user experience. Cookies are small text files stored in your browser when you visit our website.

• Essential cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Helps us understand how members use our platform through aggregated and anonymised data for service improvement purposes.
• Preference cookies: Stores your personal settings such as preferred language and display preferences for a more convenient experience in future sessions.

You can manage and delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Sakti123 platform. We do not use third-party cookies for advertising purposes.

Sakti123 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by applicable law. The following are our general data retention guidelines:

• Active account data: Retained for the duration your account remains active on Sakti123, plus the post-closure retention period required by law.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with Malaysian banking and tax legal requirements.
• KYC Documents: Retained for a minimum of five (5) years after the business relationship ends, as required by anti-money laundering (AML) laws.
• Session and game logs: Retained for two (2) years for audit and dispute resolution purposes.
• Customer support correspondence: Retained for three (3) years from the date of last communication.

Once the retention period expires, your personal data will be securely deleted or anonymised using industry-standard methods.

The sakti123 platform may contain links to third-party websites or services such as game providers. Please note that this Privacy Policy applies solely to the sakti123 platform. We are not responsible for the privacy practices of third-party websites. We recommend reading the privacy policy of every website you visit before providing any personal information.

Sakti123 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. Any material amendments will be communicated to members via:

• In-platform notifications on sakti123 upon your next login.
• Notification emails sent to the email address registered to your account.
• Update the "Last Updated" date displayed at the top of this policy.

Your continued use of the sakti123 platform after any amendments are published constitutes your acceptance of the updated privacy terms. It is your responsibility to review this policy periodically.

If you have any questions or concerns, or wish to exercise your privacy rights, Sakti123's Data Protection Officer (DPO) team is ready to assist you:

• DPO Email: [email protected] — we aim to respond within 48 business hours for privacy-related enquiries.
• Live Chat: Available 24/7 via the chat icon on the Sakti123 platform for general privacy-related enquiries.
• FAQ: Visit page FAQ for quick answers to frequently asked questions about privacy and data security.