Privacy Policy suka2 — Protection of Your Personal Data

Suka2 (operating under the domain suka2.fun) takes data protection seriously. This Privacy Policy explains in detail how we collect, process, store, and safeguard the personal information you share with us when using our platform, website, and mobile app.

This policy applies to all users who access suka2 — whether you are simply browsing our website, registering a new account, making a deposit, playing games, or contacting our support team. By continuing to use our services, you are deemed to have read, understood, and agreed to the terms stated herein.

Suka2 only collects data that is strictly necessary to provide a safe, seamless, and quality service. Below are the categories of information we collect and their respective purposes:

We do not collect sensitive information such as biometric data, medical records, or religious information unless specifically required by applicable law.

Your personal data is collected through several different channels as you interact with the suka2 platform. It is important for you to be aware of each of these channels so you can make informed decisions about the information you share:

• Account Registration — When you complete the registration form, your name, email, phone number, and other basic information are collected directly.
• KYC Process — During identity verification, you are asked to upload a copy of your official identification document and a verification selfie.
• Financial Transactions — Every deposit and withdrawal automatically records bank account details and transaction amounts.
• Gaming Activity — Our system records every game session, wager, and outcome for security and audit purposes.
• Support Communications — When you contact our support team via live chat or email, the content of that conversation is stored for reference.
• Cookies and Tracking Technologies — Our website uses session cookies and functional cookies to ensure a smooth and secure browsing experience.

Suka2 uses collected personal data solely for legitimate purposes that have been disclosed to you. We adhere to the principle of data minimisation — your data will not be used beyond what is required for the stated purposes.

• Verifying your identity during registration and the KYC process to meet legal compliance requirements.
• Processing deposits and withdrawals securely and accurately, and preventing financial fraud.
• Keeping your account secure by detecting suspicious or unusual activity.
• Providing effective customer support and resolving any complaints or enquiries you may have.
• Sending important notifications related to your account, transactions, promotions, and policy updates.
• Monitoring gaming patterns for responsible gaming compliance and player protection purposes.
• Improving our products, services, and user experience based on aggregated usage data.
• Meeting applicable legal and regulatory obligations, including anti-money laundering (AML) requirements.

Suka2 does not sell or trade your personal data. However, in certain limited situations, we may need to share your information with carefully selected third parties. All such sharing is subject to strict confidentiality agreements and is for legitimate purposes only.

• Payment Processors — Payment service providers such as FPX, DuitNow, and digital wallet providers require minimum transaction information to process your payments.
• KYC Service Providers — We use approved third-party services to assist with identity verification processes, subject to strict data processing agreements.
• Game Providers — Game software providers may receive game session data necessary to deliver a seamless gaming experience.
• Legal Authorities — We will disclose the required information when mandated by law, court order, or a legitimate law enforcement agency.

Protecting your personal data is a responsibility we take seriously. suka2 implements multiple layers of technical and organisational security to ensure your data remains safe from unauthorised access, loss, or misuse at all times.

• 256-bit SSL/TLS Encryption covering all communications between your device and suka2 servers, ensuring data cannot be intercepted in transit.
• Two-Factor Authentication (2FA) available on all accounts and strongly recommended to protect your login from unauthorised access.
• 24/7 Monitoring by automated security systems that detect and block suspicious activity in real time.
• Regular Security Audits conducted by independent third parties to identify and address any system vulnerabilities.
• Staff Training — all suka2 employees who handle personal data undergo rigorous data protection training and sign confidentiality agreements.

While we implement industry-leading security measures, no system can be guaranteed 100% secure. We therefore encourage you to take proactive steps such as using strong passwords, not sharing your login credentials, and promptly reporting any suspicious activity to our support team.

Suka2 does not retain your personal data longer than necessary to fulfil the purpose for which it was collected. Retention periods vary by data type and applicable legal requirements:

• Active Account Data — Retained throughout the period your account is active and for any additional period required by law following account closure.
• Financial Transaction Records — Retained for a minimum of 7 years in compliance with financial compliance and anti-money laundering (AML) requirements.
• KYC Records — Retained for the duration of the active account plus 5 years after account closure, or longer if required by the relevant jurisdiction.
• Communication Logs — Customer support logs are retained for 2 years for reference and dispute resolution purposes.
• Session and Technical Log Data — Retained for 90 days for security and technical troubleshooting purposes.

As a suka2 user, you have clear and enforceable rights regarding your personal data. suka2 is committed to respecting and facilitating the exercise of these rights without unnecessary obstacles.

In the course of its operations, suka2 may transfer your personal data to servers or service partners operating outside Malaysia. Every such transfer is carried out in strict compliance with international data protection standards.

• All international data transfers are governed by legally binding data processing agreements (DPA).
• We only transfer data to countries or entities that provide an equivalent or higher level of data protection.
• End-to-end encryption is applied to all data transfers across international borders.
• You will be notified of any material changes to the location where your data is stored.

Suka2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any material updates will be communicated to you via:

• An in-account notification will appear the next time you log in.
• Email notification to the address registered to your account.
• A clear notification banner on the suka2.fun homepage.

Your continued use of the suka2 platform after any amendments take effect will be considered your acceptance of the updated terms. We encourage you to review this page regularly.