Privacy Policy — suster123

This Privacy Policy is issued by suster123 (hereinafter "suster123", "we", "us", or "the Platform"), the operator of the online casino and sports betting platform accessible at https://suster123.cam (the "Website"). This Policy applies to all personal data collected from users who access or register on the suster123 platform, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and any other location in Malaysia or internationally.

suster123 takes its data protection responsibilities seriously. We are committed to processing personal data in a lawful, transparent, and proportionate manner, consistent with applicable data protection legislation, including Malaysia's Personal Data Protection Act 2010 (PDPA) and any requirements imposed under suster123's international gaming license.

This Privacy Policy describes: the categories of personal data we collect; the purposes for which that data is processed; the legal basis for processing; how long data is retained; who data may be shared with; and the rights available to you as a data subject. Please read this Policy carefully. If you have any questions, contact our support team via the details provided in Section 15.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

suster123 acts as the Data Controller in respect of all personal data collected through the Website and associated platform services. As Data Controller, suster123 determines the purposes for which personal data is collected and the manner in which it is processed.

suster123 collects personal data in the following categories. We collect only the data that is necessary for the specific purposes identified in Section 5.

suster123 processes your personal data for the following specific and clearly defined purposes:

• Account Registration and Management: Creating and maintaining your player account, authenticating your identity at login, and managing account preferences and settings.
• Identity Verification (KYC): Verifying your identity, age, and address in compliance with anti-money laundering (AML) regulations and our gaming license obligations, including confirming that all users are aged 21 or above.
• Payment Processing: Processing deposits and withdrawals via Touch 'n Go eWallet, Boost, DuitNow, GrabPay, FPX bank transfers (Maybank, CIMB, Public Bank, Hong Leong Bank), and USDT TRC20; verifying the legitimacy and ownership of payment instruments.
• Platform Operation and Game Integrity: Enabling gameplay, recording wagering activity, ensuring the integrity of all games and betting markets, and resolving disputes.
• Regulatory Compliance and AML: Meeting obligations under our gaming license, applicable AML regulations, and the requirements of financial intelligence units where applicable.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, bonus abuse, multi-accounting, and other forms of platform misuse.
• Responsible Gambling: Monitoring player behaviour to identify potential problem gambling indicators, administering self-exclusion and deposit limit requests, and complying with responsible gambling obligations.
• Customer Support: Responding to queries, resolving complaints, and maintaining records of support interactions.
• Platform Improvement: Analysing usage patterns and technical performance data to improve platform functionality, game selection, and user experience.
• Promotional Communications: Sending you information about promotions, bonuses, and platform updates where you have given consent to receive such communications.

suster123 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and suster123 — i.e., providing you with access to the platform, processing your deposits and withdrawals, and enabling gameplay.
• Legal Obligation: Processing is required to comply with AML regulations, gaming license conditions, identity verification requirements, and reporting obligations to regulatory authorities.
• Legitimate Interests: Processing is carried out for suster123's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and improving our services — where those interests are not overridden by your rights and interests.
• Consent: Where you have provided explicit consent, such as for the receipt of promotional communications. You may withdraw consent at any time by contacting our support team, without affecting the lawfulness of processing carried out prior to withdrawal.

suster123 does not sell, rent, or trade your personal data to third parties for marketing purposes under any circumstances. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Service Providers: Including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency infrastructure providers — for the purpose of processing deposits and withdrawals.
• Identity Verification (KYC) Providers: Third-party services engaged to assist with document verification, age checking, and AML screening.
• Regulatory and Law Enforcement Authorities: Where required by law, regulation, court order, or applicable gaming license conditions, suster123 may disclose personal data to regulatory bodies, financial intelligence units, or law enforcement agencies.
• Gaming Platform Technology Providers: Suppliers of the platform infrastructure, game content management systems, and IT security tools — all engaged under contractual data processing agreements that restrict the use of personal data to platform operation purposes only.
• Fraud Prevention Networks: Industry-shared fraud prevention databases where suster123 participates in reporting confirmed cases of fraud, multi-accounting, or money laundering for the collective protection of the gaming industry.

suster123 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or our gaming license conditions. The following retention periods generally apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Where data is anonymised, it may be retained for analytical purposes without restriction.

suster123 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, accidental loss, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between users and the platform.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Access controls ensuring that personal data is accessible only to authorised personnel who require it for their specific job functions.
• Multi-factor authentication requirements for administrative access to internal systems.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified third-party security firms.
• Incident response procedures to contain and remediate any security breaches promptly and notify affected users in accordance with applicable obligations.

While suster123 takes every reasonable precaution to secure your data, no method of internet transmission or electronic storage is completely infallible. You also play a role in protecting your data: we strongly recommend enabling two-factor authentication (2FA) on your account and keeping your login credentials confidential.

suster123 uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device that enable certain platform functionality and help us understand how users interact with our services.

suster123 does not use third-party advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may affect your ability to use the platform.

As suster123 operates under an international gaming license and uses service providers located in multiple jurisdictions, your personal data may be transferred to, and processed in, countries other than Malaysia. Where such transfers occur, suster123 ensures that appropriate safeguards are in place to protect your personal data, consistent with the requirements of the PDPA and our licensing obligations.

Such safeguards may include contractual clauses that impose equivalent data protection standards on data importers, ensuring your rights as a data subject are maintained regardless of where processing occurs.

As a data subject, you have the following rights in relation to your personal data held by suster123. To exercise any of these rights, please contact our support team via the live chat or email address provided in Section 15. We will respond to all valid requests within 30 days.

The suster123 platform is strictly restricted to individuals aged 21 years and above. suster123 does not knowingly collect personal data from persons under the age of 21. Age verification is mandatory as part of the KYC process for all registered accounts.

suster123 reserves the right to update or amend this Privacy Policy at any time. All changes will be published on this page with an updated "Last Reviewed" date. Where amendments are material — meaning they significantly change how your personal data is collected, used, or shared — suster123 will provide notice to registered users via the platform or by email to the address on your account.

Your continued use of the suster123 platform following publication of a revised Privacy Policy constitutes your acceptance of the amended terms. If you do not agree to any amendment, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how suster123 protects your personal data.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by suster123, please contact us using the following methods:

suster123 will acknowledge all data subject rights requests within 5 business days and will endeavour to fulfil or formally respond to requests within 30 calendar days. In complex or high-volume circumstances, this period may be extended by a further two months, in which case we will notify you of the extension and the reason for it.