Does suka2 cuti share my information with the Malaysian government without my knowledge?

suka2 cuti only discloses member information to Malaysian authorities — including LHDN, BNM, SPRM, or the police — when required by law or a valid court order. We do not voluntarily share member information with any government agency without a clear legal basis. Where we are legally required to disclose information, we disclose only the minimum necessary, and where the law permits, we will notify you of such a request.

Can I request suka2 cuti to delete all my data when I close my account?

Yes, you may request deletion of your personal data when closing your suka2 cuti account. However, some data cannot be deleted immediately due to legal obligations – specifically, financial transaction records that must be retained for 7 years under Malaysian anti-money laundering law. Data not subject to mandatory retention obligations will be deleted within 30 days of your deletion request being approved. You will receive written confirmation detailing what has been deleted and what has been retained, along with the reasons.

Does suka2 cuti use my gaming data for targeted advertising?

Your gaming data on suka2 cuti is used on a limited basis for internal purposes only — such as recommending games you may enjoy based on your play history, monitoring gameplay patterns for responsible gaming, and sending relevant promotional offers. We do not sell or share your personal gaming data with external advertisers or social media platforms for third-party advertising purposes. You can opt out of personalised recommendations through your suka2 cuti account settings.

How does suka2 cuti protect my identity card information submitted during KYC?

KYC documents such as copies of your Malaysian identity card submitted to suka2 cuti are protected with the highest level of encryption during both transmission and storage. These documents are held in a separate system with strictly limited access controls – only trained and authorised compliance team staff may access them, and solely for the purpose of identity verification. KYC documents are deleted from active systems once the mandatory retention period has ended and the required digital records have been substituted.

What should I do if I suspect my suka2 cuti account has been accessed without authorisation?

If you suspect unauthorised access to your suka2 cuti account, contact our customer support team immediately via live chat on the platform (available 24/7) or by email at support@suka2cuti.best. We will freeze your account immediately to prevent any unauthorised transactions, investigate access logs to identify suspicious activity, help you reset your password and securely reactivate your account, and – should any loss occur as a result of unauthorised access that was not due to your own negligence – we will investigate and determine the appropriate remedial action.

suka2 cuti | Privacy Policy and Your Data Rights in Malaysia

1. Scope & Purpose of This Privacy Policy

This Privacy Policy ("Policy") describes the personal data handling practices of suka2 cuti ("Platform", "We") with respect to all members and users of the platform in Malaysia. This document has been prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practice standards in data protection.

This Policy applies to all personal data collected when you register a suka2 cuti account, make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, play casino or sports games on the platform, contact our customer support team, or simply browse the suka2 cuti website without registering an account.

"Personal Data" in the context of this Policy refers to any information that can identify you directly or indirectly — such as your name, phone number, email address, Malaysian identification number, financial information, and platform usage data.

Important: This Privacy Policy forms part of the suka2 cuti Terms & Conditions and should be read alongside that document. Continued use of the suka2 cuti platform constitutes your acceptance of this Privacy Policy in its entirety.

2. Personal Data We Collect

Suka2 cuti adheres to the principle of data minimisation — we only collect information that is genuinely necessary to deliver a safe, fair, and legally compliant platform service. Below are the categories of data we collect and the purposes for which they are collected:

Data Category	Examples of Information	How It's Collected
Identity Data	Full name, Malaysian identity card number, date of birth, gender	Registration form, KYC process
Contact Data	Malaysian phone number, email address, state of residence	Account registration, profile updates
Financial Data	E-wallet account numbers, deposit & withdrawal records, MYR transaction history	Payment processing, transaction records
Gaming Data	Betting history, games played, session duration, wins & losses	Automated platform activity
Technical Data	IP address, device type, web browser, operating system, access logs	Automatic collection during use
Communication Data	Customer support chat logs, submitted emails, feedback	Interactions with the suka2 cuti team

Sensitive Data – Additional Protections

Suka2 cuti does not collect data classified as "sensitive" under Malaysia's PDPA 2010 – such as health information, religion, or political views – unless you voluntarily share such information in the context of responsible gambling (for example, if you seek help regarding a gambling problem). In such cases, that information is handled with the highest level of protection and confidentiality.

3. How & Why We Use Your Data

All use of personal data by suka2 cuti is grounded in a valid legal basis under PDPA 2010. The following are the primary purposes for which we use the data we collect:

Account Management

Verifying member identity during registration, activating and managing your suka2 cuti account, processing logins, and ensuring that only you can access your own account.

Financial Transaction Processing

Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX, verifying withdrawals to your Malaysian bank account, and maintaining transaction records required for auditing.

Security & Fraud Prevention

Detecting and preventing fraud, money laundering, multi-account abuse, and other suspicious activity that could compromise the integrity of the suka2 cuti platform and the safety of other members.

Customer Support

Providing relevant assistance when you contact the suka2 cuti support team, resolving enquiries more efficiently based on your account history, and handling complaints more effectively.

Responsible Gaming

Monitoring gameplay patterns to identify signs of at-risk behaviour, sending appropriate alerts, processing deposit limit and self-exclusion requests, and fulfilling the platform's responsible gaming obligations.

Platform Improvements

Analysing usage data in aggregate (not individual data) to understand how members use the suka2 cuti platform, identify areas for improvement, and develop new products relevant to the needs of Malaysian users.

Marketing: suka2 cuti may use your contact details to send notifications about relevant new promotions and bonuses. You can withdraw your consent to marketing communications at any time through your account settings or by contacting our support team. Withdrawing consent for marketing does not affect the functionality of your suka2 cuti account.

4. Sharing Data with Third Parties

Suka2 cuti does not sell or transfer members' personal data to any third party for their own commercial or marketing purposes. Your data is only shared in the following limited situations, and only to the extent necessary for the stated purpose:

Malaysian Payment Service Providers

To process deposits and withdrawals, suka2 cuti shares the necessary transaction information with payment providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and banks operating FPX (Maybank, CIMB, and others). All these providers are bound by strict data protection agreements and comply with Bank Negara Malaysia regulations.

Technical Service Providers

Suka2 cuti works with a select group of third-party technical service providers for hosting, cybersecurity, gaming software, and platform analytics. These providers receive only the data required to perform their services and are not permitted to use it for any other purpose.

Regulatory Bodies & Law Enforcement Authorities

Suka2 cuti may be required to disclose members' personal data to regulatory bodies, anti-money laundering authorities, or Malaysian law enforcement agencies if mandated by law or a valid court order. In such situations, suka2 cuti will disclose only the minimum information necessary.

Business Transfer

In the event that suka2 cuti is involved in a merger, acquisition, or asset transfer, members' personal data may be transferred to the successor entity. In such circumstances, members will be notified in advance and your data protection rights will be fully preserved.

5. Data Retention & Security

Suka2 cuti invests seriously in data security infrastructure to protect the personal information of every member. Below are the technical and organisational protection layers we have in place:

Data Encryption in Transit

All data travelling between your device and suka2 cuti's servers is encrypted with TLS 1.3 and 256-bit SSL encryption. This prevents any third party from intercepting or reading your data in transit.

Data Encryption at Rest

Member personal data stored in the suka2 cuti database is also encrypted at rest using current encryption standards, ensuring it remains secure even in the event of any unauthorised access attempt to the servers.

Internal Access Control

Only suka2 cuti staff who require access to specific data in order to perform their duties are permitted to access it. All internal access is logged and monitored, and staff are required to sign confidentiality agreements.

Continuous Security Monitoring

Suka2 cuti's security systems operate 24/7 to detect unauthorised access attempts, traffic anomalies, and other cybersecurity threats. Incident response is activated immediately upon detection of any threat.

Data Retention Period

Financial transaction records: Retained for a minimum of 7 years to comply with Malaysian legal requirements relating to financial records and anti-money laundering.
Member identity data: Retained for the duration of the active account plus 5 years after account closure for compliance and dispute resolution purposes.
Game logs and activity: Retained for 5 years from the date of activity for security audit and dispute resolution purposes.
Customer support communication data: Retained for 3 years from the date of interaction.
Marketing data: Deleted upon withdrawal of consent for marketing communications, with the exception of consent logs retained for compliance records.

6. Cookies & Tracking Technologies

The suka2 cuti website uses cookies and related tracking technologies to ensure the platform operates correctly and to enhance the user experience. The following are the types of cookies we use:

Mandatory Cookies (Cannot Be Disabled)

These cookies are essential for the core functionality of the suka2 cuti platform — including maintaining your login session, securing financial transactions, remembering your language preferences, and preventing CSRF (cross-site request forgery) attacks. Without these cookies, the suka2 cuti platform cannot function properly.

Analytics Cookies (Withdrawable)

Suka2 cuti uses analytics cookies to understand how members use the platform — including the most frequently visited pages, time spent in each section, navigation paths, and traffic sources. This data is used in aggregate form for platform improvements. You can disable analytics cookies through the cookie settings at the bottom of the suka2 cuti website.

Functional Cookies (Optional)

These cookies remember your preferences — such as favourite games, display settings, and interface choices — to make your suka2 cuti experience more personalised and comfortable. They do not contain sensitive personal information.

You can manage or delete cookies through your smartphone or computer's web browser settings. However, disabling mandatory cookies will affect the login and transaction functionality on the suka2 cuti platform. For guidance on managing cookies in popular browsers, please contact our customer support.

7. Your Rights as a suka2 cuti Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to the personal data held by suka2 cuti. suka2 cuti respects and facilitates the exercise of all these rights:

1

Data Access Rights

You have the right to know what personal data suka2 cuti holds about you and to request a copy of it. Requests are processed within 14 working days of receipt.

2

Right to Data Rectification

If your personal data in the suka2 cuti system is inaccurate or out of date, you have the right to request a correction. This can be done directly through your account profile settings or by contacting our support team.

3

Right to Data Deletion

You may request suka2 cuti to delete your personal data, subject to any applicable legal retention obligations. Deletion requests are typically processed alongside account closure requests.

4

Right to Withdraw Consent

For data processing based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

5

Right to Object to Processing

You have the right to object to the processing of your personal data for specific purposes such as direct marketing. suka2 cuti will honour such objections immediately and without question.

6

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for the purpose of transferring it to another service provider. Contact suka2 cuti support to submit a data portability request.

How to Submit a Data Rights Request: Submit a written request to support@suka2cuti.best with the subject line "Data Rights Request – [Full Name & Account Number]". We will verify your identity before processing any data rights request to ensure the security of your account. The process typically takes 14 business days.

8. Children's Data Protection

The suka2 cuti platform is exclusively for users aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under 18 years of age.

Child Protection Measures

All new accounts undergo age verification at registration via a registered Malaysian phone number.
The KYC (Know Your Customer) process carried out for identity verification also confirms that the account holder is 18 years of age or older.
Should suka2 cuti discover that personal data of an underage user has been collected without our knowledge, that data will be deleted immediately and the account in question will be closed.
Parents or guardians concerned about the possible use of the suka2 cuti platform by a minor may contact us immediately at support@suka2cuti.best for prompt action.

9. Cross-Border Data Transfers

In the course of platform operations, suka2 cuti may store or process members' personal data on servers located outside Malaysia – for instance, in the context of cloud infrastructure used for platform hosting or related technical services.

In such cases, suka2 cuti ensures that any international data transfers are protected to a standard equivalent to or exceeding the requirements set out under Malaysia's PDPA 2010. This is achieved through:

International Data Transfer Protections

Data Processing Agreements with all international service providers that handle suka2 cuti members' data.
Use of internationally recognised standard contractual clauses to safeguard data during cross-border transfers.
Ongoing assessment of overseas service providers to ensure continued compliance with the required data protection standards.
Priority is given to storing data within Malaysia where this is practically and cost-effectively feasible.

10. Changes to This Privacy Policy

Suka2 cuti reserves the right to update or amend this Privacy Policy at any time to reflect changes in our operational practices, evolving Malaysian legal requirements, or technological developments that affect how we handle data.

Policy Change Notifications

Members will be notified of any significant changes to this Privacy Policy via an in-platform notification upon their next login.
The "Last Updated" date at the top of this document will be updated to reflect the date of the most recent amendment.
For significant changes that materially affect members' privacy rights, suka2 cuti will send a direct notification via email or SMS to your registered Malaysian phone number.
You are encouraged to review this Privacy Policy page periodically.

Continued use of the suka2 cuti platform after notice of changes to the Privacy Policy has been issued will be considered your acceptance of the updated policy. If you do not agree with the changes made, you should stop using the platform and contact us to close your account and withdraw your balance.

11. Contact suka2 cuti's Privacy Officer

Suka2 cuti has appointed a Data Protection Officer who is responsible for ensuring compliance with this Privacy Policy and for handling all privacy-related enquiries and complaints from members.

Privacy Contact Information

Email: support@suka2cuti.best (subject: "Privacy Enquiry" or "Privacy Complaint")
Live Chat: Available 24/7 on the suka2 cuti platform after logging in
Response time: All privacy enquiries will receive a response within 5 working days
Data rights request: Processed within 14 business days after identity verification

If you are not satisfied with suka2 cuti's response to your privacy query or complaint, you have the right to escalate the matter to the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body responsible under the PDPA 2010.

Our Commitment: For suka2 cuti, privacy is not just a document — it's a value built into the way we work every day. Every Malaysian member who trusts our platform with their personal data deserves the best protection we can provide, and we take that responsibility wholeheartedly.

Privacy Policy suka2 Cuti – Malaysian Member Data Protection

Six Privacy Commitments of Suka2 Cuti