suneo138 Privacy Policy

📋 1. Introduction

1.1 suneo138 ("we", "us", "our" or "the Platform") operates the website accessible at https://suneo138.cam, which provides English-language entertainment information services to adult users in Malaysia and other permitted jurisdictions.

1.2 This Privacy Policy ("Policy") explains how suneo138 collects, uses, discloses, stores and protects the personal data of individuals who access or register on the Platform ("you", "your" or "User").

1.3 suneo138 is the data controller for the personal information collected through the Platform. As data controller, suneo138 determines the purposes and means by which personal data is processed.

1.4 This Policy should be read alongside the suneo138 Terms and Conditions and Responsible Gambling Policy, both of which form part of the broader agreement governing your use of the Platform.

1.5 We may update this Policy from time to time. The version published on this page, with the date shown in the header, is the version currently in effect.

📖 2. Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, restriction, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. suneo138 acts as data controller for the data collected through the Platform.
• "Data Processor" means a third party that processes personal data on behalf of the data controller under a contractual arrangement.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement by which a data subject signifies acceptance of the processing of their personal data for a stated purpose.
• "KYC" (Know Your Customer) means the identity and address verification process required for regulatory compliance and to authorise payment transactions.
• "Cookies" means small text files placed on a user's device by a web browser for the purposes described in Section 11.

📜 3. Scope and Application

3.1 This Policy applies to all personal data processed by suneo138 in connection with the operation of the Platform, including data collected from registered account holders, unregistered visitors, individuals who contact the support team, and any other person whose personal data is provided to suneo138 in any context.

3.2 This Policy applies regardless of the device, browser or network connection used to access the Platform. It applies equally to users located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and all other locations from which the Platform is accessed.

3.3 Where third-party services — such as payment processors (for example, Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, Hong Leong, DuitNow and FPX) — are used during a transaction, those services are governed by their own privacy policies. suneo138 is not responsible for the data practices of third-party providers once data has been passed to them for processing.

📂 4. Data We Collect

4.1 The categories of personal data that suneo138 may collect include, but are not limited to, those set out in the following table:

4.2 suneo138 does not collect sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs or biometric data — except where strictly required for identity verification purposes and permitted by applicable law.

📡 5. How We Collect Data

5.1 suneo138 collects personal data through the following means:

• Direct submission — data you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, contacting the support team, or participating in any promotion;
• Automated collection — technical and usage data collected automatically through server logs, session cookies, browser storage and analytics tools when you access or interact with the Platform;
• Payment providers — transaction confirmation and payment reference data transmitted to suneo138 by payment processors including Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong upon completion of a payment instruction;
• Identity verification partners — data returned by third-party KYC service providers where document verification is performed on suneo138's behalf;
• Third-party analytics — aggregated and pseudonymised usage statistics collected via analytics tools deployed on the Platform to help us understand platform performance and user behaviour.

5.2 You are under no obligation to provide all requested personal data. However, failure to provide data that is required for a specific purpose — such as KYC documents required to process a withdrawal — may prevent suneo138 from completing the associated transaction or service.

⚙️ 6. Data Processing Purposes

6.1 suneo138 processes personal data for the following purposes:

1. Account management — creating, maintaining and managing your suneo138 user account, including authentication and access control;
2. Age and identity verification — confirming that you are aged 21 or above and that the identity information provided is accurate and consistent with supporting documents;
3. Payment processing — facilitating MYR-denominated deposits and withdrawals through supported Malaysian payment methods and cryptocurrency networks;
4. Regulatory and legal compliance — meeting applicable anti-money laundering (AML), counter-financing of terrorism (CFT) and Know Your Customer (KYC) obligations;
5. Fraud prevention and security — detecting, investigating and preventing fraudulent transactions, account misuse, collusion and other prohibited conduct described in the Terms and Conditions;
6. Responsible gambling monitoring — identifying patterns in account activity that may indicate problematic gambling behaviour, and administering self-exclusion, deposit limit or session limit arrangements where requested;
7. Customer support — responding to account queries, complaints and dispute submissions, and maintaining records of support interactions for quality assurance purposes;
8. Platform improvement — analysing aggregated usage data to identify technical issues, improve navigation and enhance the overall suneo138 user experience;
9. Marketing communications — sending promotional materials, bonus notifications and platform updates to Users who have provided valid consent to receive such communications. Consent may be withdrawn at any time;
10. Legal proceedings — preserving and disclosing records where required by a court order, regulatory investigation or other lawful demand.

⚖️ 7. Legal Bases for Processing

7.1 suneo138 relies on one or more of the following legal bases when processing personal data, depending on the category of data and the purpose of processing:

• Contractual necessity — processing is necessary to perform the agreement between suneo138 and the User, including account creation, payment processing and access to gaming content;
• Legal obligation — processing is required to comply with applicable laws and regulations, including AML, CFT, KYC and data protection legislation;
• Legitimate interests — processing is necessary for suneo138's legitimate business interests, including fraud detection, platform security and service improvement, provided those interests are not overridden by your privacy rights;
• Consent — processing for purposes such as direct marketing communications is conducted only where you have provided explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

🤝 8. Third-Party Disclosure

8.1 suneo138 does not sell, rent or trade personal data to third parties for their own commercial purposes.

8.2 suneo138 may disclose personal data to the following categories of recipients only where necessary for the specified purpose and subject to appropriate data protection obligations:

• Payment processors — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong — for the purpose of processing deposit and withdrawal transactions;
• Identity verification providers — KYC service partners who verify identity and address documents on suneo138's behalf;
• Game content providers — licensed third-party game studios whose software is integrated into the Platform, to the extent necessary to deliver game outcomes and manage account sessions;
• Analytics and technology providers — service providers that assist with platform hosting, performance monitoring and pseudonymised traffic analytics;
• Legal and regulatory authorities — law enforcement agencies, regulatory bodies or courts where disclosure is required by a lawful order or applicable legal obligation;
• Professional advisers — lawyers, accountants and auditors acting under duties of professional confidentiality where necessary for suneo138's business operations.

8.3 All third-party data processors engaged by suneo138 are required to implement appropriate security measures and to process personal data only in accordance with suneo138's documented instructions.

🗓️ 9. Data Retention

9.1 suneo138 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by law or regulation.

9.2 The following indicative retention periods apply:

• Account and identity data — retained for the duration of the account and for a minimum of five years following account closure, to satisfy AML and regulatory record-keeping obligations;
• Financial transaction records — retained for a minimum of seven years in accordance with applicable financial record-keeping requirements;
• KYC verification documents — retained for a minimum of five years following the completion of verification or account closure, whichever is later;
• Customer support correspondence — retained for a minimum of three years from the date of the last interaction;
• Marketing consent records — retained for the duration of the consent and for a reasonable period thereafter as evidence of consent history;
• Technical and usage logs — typically retained for up to twelve months, subject to security and platform improvement requirements.

9.3 When personal data is no longer required, suneo138 will take reasonable steps to ensure that it is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

👤 10. User Rights

10.1 Subject to applicable data protection law and any legal or regulatory obligations that limit the exercise of these rights, Users of the suneo138 platform may have the following rights in respect of their personal data:

10.2 suneo138 may need to verify your identity before acting on a data rights request in order to protect the security and integrity of account information. In certain circumstances — for example, where legal retention obligations apply — suneo138 may be unable to fulfil a deletion request in full.

🍪 11. Cookies and Tracking Technologies

11.1 The suneo138 Platform uses cookies and similar technologies to support platform functionality, maintain authenticated sessions, remember user preferences and gather anonymised usage statistics.

11.2 The following categories of cookies may be used on the suneo138 Platform:

• Strictly necessary cookies — essential for the Platform to function, including session authentication and security tokens. These cannot be disabled without impairing core functionality;
• Functional cookies — used to remember your preferences, such as language settings and account display choices, to provide a more personalised experience;
• Analytics cookies — used to collect aggregated and pseudonymised data about how visitors interact with the Platform, including pages visited, session duration and error reports, to help suneo138 improve the platform experience;
• Session security cookies — used to detect and prevent fraudulent activity and protect your account during an active session.

11.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may affect the functionality of the Platform, including the ability to log in and access account features.

11.4 suneo138 does not use cookies to track your activity on third-party websites that are unrelated to the Platform.

🔞 12. Children and Minors

12.1 The suneo138 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process or store personal data from any person under the age of 21.

12.2 If suneo138 becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, we will take prompt steps to delete that data and close the associated account.

12.3 If you believe that a person under the age of 21 has provided personal data to suneo138, please contact us immediately at the email address shown in Section 16 so that appropriate action can be taken.

🌐 13. International Data Transfers

13.1 The personal data collected by suneo138 may be processed or stored in data centres or by service providers located outside Malaysia. Where such international transfers occur, suneo138 will ensure that appropriate safeguards are in place to protect the data to a standard consistent with applicable data protection requirements.

13.2 Safeguards that suneo138 may rely upon for international transfers include contractual obligations imposed on receiving parties, requiring them to protect personal data to an equivalent standard.

13.3 Payment data transmitted to Malaysian payment providers — including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow and FPX — is subject to each provider's own security and data protection frameworks, which are independently regulated.

🛡️ 14. Data Security

14.1 suneo138 implements technical, administrative and physical security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.

14.2 Security measures applied by suneo138 include, but are not limited to:

• Encryption of data in transit using industry-standard TLS protocols;
• Access controls limiting data access to authorised personnel only;
• Regular security reviews and monitoring of system access logs;
• Secure storage of KYC documents with restricted access;
• Session timeout and token invalidation mechanisms to protect inactive accounts.

14.3 Despite these measures, no data transmission over the internet or storage system can be guaranteed to be completely secure. suneo138 cannot provide an absolute assurance against all security threats. Users are encouraged to maintain strong, unique passwords for their accounts and to report any suspected security incident promptly.

14.4 In the event of a data security incident that poses a significant risk to affected individuals, suneo138 will take appropriate steps to notify the relevant data subjects and regulatory authorities as required by applicable law.

📝 15. Policy Amendments

15.1 suneo138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or the structure of the Platform.

15.2 Where amendments are material — meaning they substantially change the basis on which your personal data is collected or used — suneo138 will notify Users through in-platform notification or email using the contact details associated with your account, at least seven calendar days before the amendment takes effect.

15.3 The version of this Policy published on this page, bearing the effective date shown in the page header, is the version currently in force. It is your responsibility to review this Policy periodically. Continued use of the Platform following the publication of an amended Policy constitutes acceptance of the revised terms.

✉️ 16. Contact Us

16.1 If you have any questions, concerns or requests relating to this Privacy Policy, the personal data suneo138 holds about you, or the exercise of any data subject right described in Section 10, please contact the suneo138 data protection team using the details below.