Privacy Policy Spade96 – Our Commitment to Protecting Your Data

Spade96 collects your personal data through several means – during registration, during platform use, and automatically via tracking technologies. The following are the categories of data we collect:

Data you provide directly:

• Full name as shown on your Malaysian MyKad.
• Active Malaysian mobile number.
• Valid email address.
• Date of birth (for age verification — you must be 18 years of age or older).
• Payment method details – account number or eWallet username (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or FPX online banking.
• Identity verification documents such as a copy of your MyKad, when requested for KYC (Know Your Customer) purposes.

Data collected automatically during use:

• IP address and approximate location data (state/city within Malaysia).
• Device type, operating system, and web browser version in use.
• Login history and in-platform activity, including games played, bets placed, and session duration.
• Financial transaction data — deposit amounts, withdrawal amounts, and complete transaction history.
• Cookie data and other tracking technologies (described in further detail in Section 4).

Spade96 does not collect sensitive data such as health information, religious beliefs, political views, or sexual orientation. We also do not collect data from individuals under the age of 18 — if we discover that such data has been collected without our knowledge, it will be deleted immediately.

Data Spade96 collected is used for specific and legitimate purposes. We will not use your data beyond the purposes stated below without first obtaining your additional consent:

• Managing your account: Enables you to log in, play games, make deposits and withdrawals, and manage your account settings.
• Processing financial transactions: Verifying deposits made via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, or FPX, processing winnings withdrawals, and maintaining required transaction records.
• Identity verification and KYC: Meeting anti-money laundering (AML) legal requirements and verifying player age eligibility.
• Security and fraud prevention: Detecting unusual activity, preventing multiple account ownership, and protecting the platform and its members from fraud.
• Customer support: Enables our support team to assist you in resolving any issues related to your account, transactions, or gameplay.
• Platform improvements: Analyzing aggregated (not individual) usage patterns to improve user experience, platform speed, and game selection.
• Marketing communications: Sending promotional information, bonuses, and special offers – only if you have consented to receive them during registration or through your notification settings.
• Legal compliance: Maintaining records required under Malaysian law, complying with court orders, or fulfilling directives from relevant regulatory bodies.

Spade96 does not sell, rent, or trade your personal data to any third party. However, there are limited situations where data sharing is necessary to operate our services or comply with legal obligations:

Trusted service providers:

• Game providers: Companies such as Microgaming, NetEnt, and Pragmatic Play receive only the minimum technical data required to operate your games. They do not receive your financial information or full identity details.
• Payment processors: Malaysian eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and FPX banks receive the transaction information needed to process your deposits and withdrawals.
• Infrastructure providers: Cloud hosting and security companies that help us operate the platform securely and reliably.

Legally mandated disclosure:

• Malaysian authorities such as the police, Securities Commission, Bank Negara Malaysia, or courts issuing a valid order requiring data disclosure.
• Regulatory body with valid jurisdiction over operations Spade96.
• In situations where disclosure is necessary to prevent serious harm to the public or for national security purposes.

All third-party service providers we engage are bound by confidentiality agreements that prohibit them from using your data beyond the scope of services provided to Spade96. We review these agreements periodically to ensure ongoing compliance.

Platform Spade96 uses cookies and similar tracking technologies to enhance your experience and ensure key platform features function correctly. Below are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the core functionality of the platform Spade96 such as login sessions and transaction security. We recommend keeping at least the essential cookies enabled for a smooth and secure gaming experience.

We do not use cross-site tracking cookies for third-party advertising purposes. The cookies we use are solely for internal Spade96 platform use.

Spade96 implements a range of technical and organisational measures to protect your personal data from unauthorised access, breaches, modification, or loss:

• 256-bit SSL encryption: All communications between your device and Spade96's servers are encrypted using the latest TLS 1.3 protocol with 256-bit key length.
• Data-at-rest encryption: Sensitive data stored in our databases — including financial information and identity documents — is encrypted using AES-256 at rest.
• Strict access controls: Only Spade96 staff with a legitimate business need are granted access to user data, and all access is logged and monitored.
• Regular security audits: Our platform undergoes regular penetration testing and security audits conducted by independent security firms.
• Two-Factor Authentication (2FA): Available to all member accounts as an added layer of protection against unauthorised access.
• 24/7 Monitoring: Our automated monitoring system watches for suspicious activity around the clock and will take immediate action upon detecting any threat.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. Should a data breach occur that materially affects your personal information, Spade96 will notify you within 72 hours of detecting the incident, in line with international best practices.

As a player Spade96 who are Malaysian citizens or residents, you have the following rights under the Personal Data Protection Act (PDPA) 2010:

Spade96 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under Malaysian law:

Once the retention period has lapsed or the data is no longer required, Spade96 will securely delete or anonymise that data using industry-standard methods. Deleted data cannot be recovered.

Please note that even if you request account deletion, we may be required to retain certain financial records for 7 years in accordance with Malaysian anti-money laundering laws. This is a legal obligation beyond our control and cannot be waived.

If you have any questions or concerns, or wish to exercise your rights under Malaysia's PDPA, please contact our Data Protection Officer Spade96 through the following channels:

• Privacy email: support@spade96.biz – please include "PDPA – Privacy Request" in the subject line. Responded to within 14 business days.
• Live Chat: Available 24/7 on the platform – ideal for general privacy enquiries. Response time under 2 minutes.
• Language: All privacy-related communications can be conducted in Bahasa Melayu or English.

For more information about your rights under Malaysian law, you may refer to the official website of the Department of Personal Data Protection Malaysia. For information about Terms & Conditions or Responsible Gaming, please visit our relevant page.