Privacy Policy

Suka2 cuti Privacy Policy — Malaysian User Data Protection

Your privacy is not merely a legal obligation to us — it is a genuine commitment. Find out exactly how suka2 cuti manages, protects, and respects your personal data.

Updated: 1 January 2026 256-bit SSL Encryption PDPA Compliance

Suka2 cuti's Six Core Data Protection Principles

Before reading the full policy, here is a summary of how suka2 cuti protects your privacy every day.

High-Level Data Encryption

All data transmitted between your device and suka2 cuti servers is protected with 256-bit SSL encryption, meaning your sensitive information cannot be intercepted by any third party.

Strict Access Controls

Only suka2 cuti staff with specific authorisation may access user data, and only for designated operational purposes. All access is logged and continuously monitored.

Not Sold to Third Parties

Suka2 cuti never sells users' personal data to third parties for marketing or commercial purposes. Your data belongs to you, and we use it solely to deliver our services.

Malaysia PDPA Compliance

All our data management practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA). You have the right to access, correct, or request deletion of your data at any time.

Minimum Data Collection

We only collect data that is strictly necessary to operate our services and meet regulatory requirements. We do not collect irrelevant or excessive information.

Data Breach Notification

In the event of any security incident involving user data, suka2 cuti is committed to notifying affected users within a reasonable timeframe in accordance with legal requirements.

Effective Date: 1 January 2026

This Privacy Policy explains how suka2 cuti ("Platform", "we") collects, uses, stores, and protects your personal information when you use our website or mobile app. By using the suka2 cuti platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our platform.

1

Introduction and Scope of This Policy

Suka2 cuti takes our responsibility to protect every user's privacy seriously. This Privacy Policy applies to all services we offer through the suka2 cuti online platform, including the official website and mobile app for Android and iOS.

This document is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. We are committed to being transparent about our data practices so you can make informed decisions about your use of the suka2 cuti platform.

This Privacy Policy forms part of your agreement with suka2 cuti and should be read together with Terms and Conditions our platform.
2

Types of Personal Data We Collect

Suka2 cuti collects various types of personal information depending on how you interact with our platform. Below is a summary of the data types collected:

Data Categories Examples How It's Collected
Identity Data Full name, date of birth, identification card number During registration and the KYC process
Contact Data Email address, phone number During account registration
Financial Data Bank account details, transaction records During deposits and withdrawals
Technical Data IP address, device type, web browser Automatically during use
Activity Data Game history, login records, game preferences Automatically during platform use
Communication Data Live chat session records, support emails When you contact our team
We never collect credit card information directly. All payments are processed through third-party payment processors that comply with PCI-DSS standards.
3

How We Use Your Data

Suka2 cuti uses collected personal data solely for legitimate and specified purposes. Each purpose is backed by a sound legal basis, whether contractual, legitimate interest or legal obligation:

  • Account management: To register, verify and manage your suka2 cuti account, including the mandatory KYC process;
  • Transaction processing: To process deposits, withdrawals and ensure the security of all financial transactions on the platform;
  • Platform security: To detect and prevent fraud, bot usage, unauthorised access and activities that violate the Terms and Conditions;
  • Customer support: To assist you when you contact the suka2 cuti support team and resolve issues more efficiently;
  • Regulatory compliance: To fulfil legal obligations including anti-money laundering (AML) reporting and KYC requirements;
  • Platform improvements: To analyse usage patterns in order to improve the user experience and develop new features;
  • Marketing communications: To send promotional information and new offers — provided you have given consent or have not objected to receiving such communications.
Important note: You may opt out of marketing communications at any time without affecting your core services. Contact our support team via live chat to update your communication preferences.
4

Data Sharing with Third Parties

Suka2 cuti does not sell users' personal data to any party for commercial purposes. However, in operating the platform, we may need to share certain data with the following parties under limited circumstances:

  • Payment service providers: To process deposits and withdrawals — only information necessary for the transaction will be shared;
  • Third-party game providers: Basic account information required to use the suka2 cuti platform;
  • KYC service providers: To verify user identity in accordance with compliance requirements;
  • Authorities and law enforcement: When required by law or a valid court order;
  • Auditors and professional advisors: Subject to strict confidentiality obligations.

All third parties with whom we share data are required to process it strictly under our instructions and are not permitted to use it for any purpose other than what has been specified.

Should suka2 cuti be involved in a merger, acquisition, or asset sale, users will be notified in advance and data privacy will be maintained throughout the process.
5

Data Security Measures

We implement multiple layers of technical and organisational security to protect your personal data from unauthorised access, alteration, disclosure, or destruction:

  • Encryption in transit: All communication between the platform and users is secured with 256-bit TLS/SSL protocol;
  • Encryption of stored data: Sensitive data in our databases is encrypted using industry-standard encryption protocols;
  • Role-based access control: Only authorised staff may access user data, and only to the extent necessary for their role;
  • 24/7 security monitoring: Our systems are monitored around the clock to detect any suspicious activity or intrusion attempts;
  • Periodic penetration testing: We conduct regular security tests to identify and address any vulnerabilities in our systems;
  • Two-factor authentication (2FA): Users are encouraged to enable 2FA for an extra layer of protection on their accounts.
While we implement robust security measures, no system is entirely foolproof. We encourage users to also take responsibility for their own account security by using strong passwords and not sharing login credentials.
6

Data Retention Period

Suka2 cuti retains users' personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law:

  • Active account data: Retained for the duration your account is active, plus any additional period required for compliance;
  • Financial transaction records: Retained for a minimum of seven (7) years in accordance with anti-money laundering legal requirements;
  • KYC and identity verification data: Retained for five (5) years after account closure or the end of the business relationship;
  • Customer support communication logs: Retained for two (2) years for reference and service improvement purposes;
  • Technical data and access logs: Retained for one (1) year for security and troubleshooting purposes.

Once the retention period expires, data will be securely deleted or anonymised so it can no longer be linked to any specific individual.

7

Your Rights as a Data Subject

Under Malaysia's PDPA and the suka2 cuti privacy policy, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you.

Right to Rectification

You may request the correction of inaccurate or incomplete data.

Right to Erasure

You may request the deletion of your data under certain circumstances permitted by law.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Restriction

You may request a restriction on data processing under certain circumstances while your request is under review.

Right to Data Portability

You may request your data in a reusable electronic format.

To exercise any of the above rights, contact our team via live chat or email at [email protected]. We will respond to your request within 30 business days.

8

Cookies and Tracking Technologies

The suka2 cuti platform uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. Below are the types of cookies we use:

  • Essential Cookies: Required for the platform to function properly — including login session cookies and security cookies. These cookies cannot be disabled;
  • Performance Cookies: Helps us understand how users interact with the platform so we can improve performance and usability;
  • Functional Cookies: Allows the platform to remember your preferences such as language and display settings for a more personalised experience;
  • Analytics Cookies: Used to collect aggregated, anonymised data on platform traffic and usage patterns.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of the suka2 cuti platform.

9

Children's Privacy

The suka2 cuti platform is intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Important notice: If you are a parent or guardian and believe your underage child has registered an account on suka2 cuti, please contact us immediately via live chat. We will take prompt action to close the account and delete all associated data.
10

Changes to This Privacy Policy

Suka2 cuti reserves the right to update or amend this Privacy Policy at any time. Amendments take effect immediately upon publication on the platform.

For significant changes, we will notify users via:

  • Prominent notices within the suka2 cuti platform or mobile app;
  • Notification email to the address registered on your account;
  • Updating the "Last Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically. Continued use of the suka2 cuti platform after any amendments are published constitutes your acceptance of the updated policy.

11

How to Contact Us Regarding Privacy

For any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, you can reach us through the following channels:

  • Live Chat: Available 24/7 within the suka2 cuti platform or app — the fastest way to get a response;
  • Email: [email protected] — for formal written requests;
  • FAQ Page: Visit our FAQ page for answers to frequently asked questions relating to privacy and security.

All data rights requests will be processed within 30 business days from the date of receipt. For more complex cases, we may require additional time and will notify you accordingly.

We are committed to handling every privacy inquiry with seriousness and transparency. Your trust is suka2 cuti's most valuable asset.

Your Data is Safe at suka2 cuti

Join over 500,000 Malaysian users who trust suka2 cuti for a safe and secure online entertainment experience.

Register Free Log In

For users aged 18 and above. Play responsibly.

Bahasa Melayu