Super222 Privacy Policy – Data Protection You Deserve

This Privacy Policy is published by super222 ("we", "Platform") and describes our practices regarding the collection, use, disclosure, and protection of personal information of our platform users. This document applies to all your interactions with super222, whether through the official website, mobile app, live chat, or any of our customer service channels.

By registering as a super222 member, accessing your account, or using any feature of our platform, you confirm that you have read and understood this Privacy Policy and agree to how we handle your personal data as described. If you disagree with any part of this policy, please contact our support team or discontinue use of the platform.

This Privacy Policy forms part of the overall super222 legal framework and should be read together with Terms and Conditions us. In the event of any conflict between the two documents regarding privacy matters, this Privacy Policy shall prevail.

Super222 collects various categories of personal data depending on the nature of your interactions with the platform. Below is a detailed overview of the data we collect and its sources:

We also collect data you provide voluntarily, such as information in satisfaction surveys, product suggestions, or when completing promotional forms. All such data is handled with the same level of security regardless of its source.

The personal data we collect is used solely for legitimate purposes directly related to the operation of the super222 platform. We do not use your data for any purpose not stated in this policy without first obtaining your additional consent.

The primary purposes for which your personal data is used are as follows:

• Account management: Creating, maintaining and securing your member account on the super222 platform.
• Transaction processing: Processing deposits, withdrawals and any financial transactions initiated by you.
• Identity verification (KYC): Verifying your identity to meet anti-money laundering legal compliance requirements.
• Customer support: Providing technical assistance and resolving any issues or enquiries you raise.
• Platform security: Detecting, investigating and preventing fraudulent activity, money laundering and security breaches.
• Product improvement: Analysing usage patterns to enhance the user experience and develop better new features.
• Marketing communications: Sending information about promotions, bonuses and exclusive offers — only if you have consented to receive them.
• Legal compliance: Meeting reporting obligations and compliance requirements set by relevant authorities.

Every time we process your data, we ensure there is a valid legal basis for doing so — whether based on your consent, contractual necessity, our legitimate interests, or applicable legal obligations.

Super222 does not sell member personal data to any party. However, in the course of operating the platform, there are certain situations where we need to share some data with trusted parties:

• Payment service providers: To process deposits and withdrawals, required transaction information is shared with licensed payment processors such as DuitNow, FPX, and digital wallet providers.
• Game providers: Third-party game software providers receive the minimum data required to deliver a seamless gaming experience and to resolve any game outcome disputes.
• Identity verification services: Our KYC partners receive identity documents for verification purposes only and are bound by strict confidentiality agreements.
• Relevant authorities: Super222 fully complies with any lawful requests from law enforcement agencies or regulatory authorities with valid jurisdiction.
• Business transfers: In the event of a merger, acquisition, or sale of company assets, member data may be transferred to the successor entity subject to equivalent privacy protections.

The security of member personal data is super222's highest priority. We continuously invest in the latest security infrastructure to ensure your data is always protected against unauthorised access, loss, alteration or disclosure.

The technical and organisational security measures we implement include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and super222 servers.
• Encryption of sensitive data at rest using the AES-256 algorithm.
• Strict role-based access control — only specifically authorised staff may access member data, and every access is logged and audited.
• Regular penetration testing by independent security experts to identify and remediate any system vulnerabilities.
• Enterprise-grade intrusion detection systems (IDS) and firewalls that monitor network traffic in real time.
• A comprehensive incident response procedure to address any data breach swiftly and effectively.
• Regular cybersecurity awareness training for all staff who handle member data.

Super222 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website or use our app.

The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and navigation. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helping us understand how members use the platform so we can improve performance and the overall experience.
• Functional Cookies: Storing your preferences such as selected language, display settings and your login details (if you choose to be remembered).
• Analytics Cookies: Used to collect aggregated, anonymised usage data for internal analytics and product improvement purposes.

You can manage your cookie preferences at any time through your browser settings. However, disabling essential cookies may affect your ability to access certain super222 platform features. We do not use third-party cookies for behavioural advertising.

As a super222 member, you have certain rights regarding the personal data we handle. We are committed to respecting and facilitating the exercise of these rights in a prompt and effective manner.

To exercise any of the above rights, please contact the super222 data protection team via our support email. We will respond to your request within 30 business days. For more complex cases, this period may be extended to up to 60 days with prior notice.

Super222 retains your personal data only for as long as necessary to fulfill the original purpose of collection or to meet applicable legal requirements. This principle is known as "data retention limitation" and is central to responsible privacy practice.

Our general data retention guidelines are as follows:

• Active account data is retained for as long as your account remains active on super222.
• Financial transaction records are retained for a minimum of seven (7) years to meet accounting and anti-money laundering legal requirements.
• Customer support communication records are retained for two (2) years from the date of the last interaction.
• Anonymised analytics data may be retained for a longer period for product improvement purposes.
• Upon account closure, personal data no longer required by law will be deleted or anonymized within 90 days.

When the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. In cases where immediate deletion is not possible for technical reasons, the data will be isolated and protected until deletion can be carried out.

In operating the super222 platform globally, your personal data may be transferred to and processed in countries other than Malaysia. This includes servers located in countries where our technology partners and service providers operate.

When your data is transferred outside Malaysia, super222 ensures equivalent protection is provided through the following mechanisms:

• Legally binding data processing agreements (DPA) with all third-party service providers who receive member data.
• Regular security assessments of all partners who handle super222 member data.
• Application of internationally recognised contractual protection standards for data transfers between jurisdictions.

You may contact us for more information about the specific safeguards used for data transfers to particular countries.

Super222 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data. Each version of the Privacy Policy will display the "Last Updated" date at the top of the document.

For amendments that materially affect how we handle your data, we will notify you via an in-account notification or your registered email at least seven (7) days before the changes take effect. It is your responsibility to review this Privacy Policy periodically to stay informed of our latest privacy practices.

If you have any questions, concerns, or complaints about how super222 handles your personal data, or if you wish to exercise any of the privacy rights stated in this policy, our team is ready to assist you.

You may contact the super222 Data Protection Officer (DPO) through the following channels:

• Support email: [email protected]
• Live chat within the super222 app — available 24 hours a day, 7 days a week.
• The "Contact Us" section in your account settings.

We commit to responding to all privacy-related enquiries within 48 business hours. For more complex data rights requests, we will provide a status update within seven days of receiving your request.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. super222 will fully cooperate with any investigation or review conducted by such an authority.