Privacy Policy

This Privacy Policy ("Policy") issued by Super222 ("we", "us", "our", or "the Platform") and applies to all personal data collected from users ("you", "Player", or "Account Holder") who access or register on the Super222 online gaming platform atsuper222.cam.

Super222 serves players primarily across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions nationwide. In the course of providing our online casino, sports betting, and payment services — including integration with Malaysian payment systems such as FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and RHB — we necessarily collect and process certain personal data.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling policy, which together form the complete framework governing your relationship with Super222.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, either directly or in combination with other data. This includes, but is not limited to, name, email address, phone number, MyKad (NRIC) number, bank account details, IP address, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, erasure, or any combination thereof.
• "Data Controller" means Super222, the entity that determines the purposes and means by which personal data is processed.
• "Third-Party Service Provider" means any external company or individual engaged by Super222 to provide services that require access to personal data, including payment processors, identity verification providers, and IT infrastructure providers.
• "KYC" means Know Your Customer — the identity, age, and address verification process required to comply with applicable anti-money-laundering and responsible gambling obligations.
• "Cookies" means small data files stored on a user's device by a web browser for the purpose of retaining session information, preferences, and anonymised usage analytics.

Super222 collects personal data through several channels: account registration, KYC verification, payment processing, customer support interactions, and automated technical collection during platform use. The categories of data collected are set out in the table below:

Super222 processes your personal data for the following purposes, all of which are necessary to provide a functional, secure, and legally compliant gaming service:

• Account Management: To create and maintain your Super222 account, authenticate your identity at login, and manage your account settings and preferences.
• KYC & Age Verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with responsible gambling obligations and anti-money-laundering requirements.
• Payment Processing: To facilitate deposits via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, RHB, 7-Eleven CLiQ, and USDT TRC20, and to process withdrawal requests to your nominated payment method.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity money laundering, account compromise, and other malicious conduct on the platform.
• Customer Support: To respond to your queries, process complaints, manage account disputes, and deliver support in English, Bahasa Melayu, and Mandarin.
• Responsible Gambling Compliance: To monitor gambling behaviour, apply self-exclusion elections, enforce deposit limits, and identify players who may be at risk.
• Legal Compliance: To comply with applicable legal obligations, including record-keeping requirements, law enforcement requests, and court orders.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the platform, fixing technical issues, and enhancing user experience.
• Promotional Communications: To send you relevant bonus offers, promotions, and platform updates — only where you have provided consent or where permitted under applicable marketing communication rules.

Super222 processes personal data under the following legal bases, depending on the nature and purpose of each processing activity:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to perform our contractual obligations to you — specifically, to operate your account and process your transactions.
• Legal Obligation: KYC verification, age verification, and transaction record-keeping are conducted to comply with applicable anti-money-laundering, responsible gambling, and financial services regulations.
• Legitimate Interests: Fraud detection, platform security monitoring, and anonymised analytics are conducted on the basis of Super222's legitimate interest in maintaining a secure, fair, and functional platform.
• Consent: Where Super222 sends you direct marketing communications, this is done on the basis of your prior consent. You may withdraw consent at any time by updating your marketing preferences in your account settings or by contacting our support team.

Super222 does not sell your personal data. We may share your personal data with carefully selected third parties only in the following limited circumstances:

• Payment Partners: We share transaction data with Malaysian payment network operators (PayNet for FPX/DuitNow) and e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay) strictly to process your deposits and withdrawals.
• Identity Verification Providers: We engage accredited KYC verification service providers to confirm the authenticity of identity documents submitted during account verification.
• IT Infrastructure & Security Providers: Our platform infrastructure is supported by third-party cloud hosting and cybersecurity providers operating under strict data processing agreements with Super222.
• Legal Authorities: Where required by law, court order, or a competent regulatory authority, we may disclose personal data to relevant governmental or law enforcement bodies. We will notify affected users where legally permissible to do so.
• Business Transfers: In the event of a corporate restructuring, merger, or acquisition, your personal data may be transferred to the acquiring entity as part of the business assets. You will be notified of any such transfer and the applicable privacy terms of the new entity.

Super222 uses cookies and similar tracking technologies to operate the platform, maintain session security, remember your preferences, and analyse platform usage on anonymised basis.

The categories of cookies we use are as follows:

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged in during your gaming session. These cannot be disabled without impairing platform functionality.
• Security Cookies: Used to detect and prevent fraudulent logins, bot activity, and session hijacking attempts.
• Preference Cookies: Store your language preference, display settings, and other account-level customisations.
• Analytics Cookies: Collect anonymised data about how players navigate and use the platform, helping us identify areas for improvement. No personally identifiable information is contained in analytics data.

You may manage cookie preferences through your browser settings. Please note that disabling essential or security cookies may prevent you from accessing your Super222 account or using certain platform features.

Super222 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account, and for a minimum of five (5) years following account closure, in compliance with applicable record-keeping regulations.
• Financial Transaction Data: Retained for a minimum of seven (7) years following each transaction, in compliance with anti-money-laundering record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification process.
• Customer Support Communications: Retained for three (3) years following the close of each support case, unless longer retention is required for dispute resolution purposes.
• Analytics Data: Anonymised and aggregated — no personal retention period applicable.

Where data is no longer required for the purposes outlined in this Policy, Super222 will securely erase or anonymise it in accordance with industry best practices.

Super222 applies a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or loss. Our security measures include:

• Encryption in Transit: All data transmitted between your device and the Super222 platform is protected using 256-bit SSL/TLS encryption.
• Encryption at Rest: Sensitive data stored on our servers — including financial data and KYC documents — is encrypted at rest using industry-standard protocols.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. All Super222 staff with data access are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication (2FA): Available and strongly recommended for all player accounts. Super222 also uses2FA internally for staff access to data systems.
• Regular Security Audits: Super222 conducts regular penetration testing, vulnerability assessments, and security audits to identify and remediate potential weaknesses.
• Incident Response: In the event of a data breach that is likely to result in risk to affected individuals, Super222 will notify relevant authorities and affected users in accordance with applicable breach notification requirements.

As a Super222 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected]. We will respond to verified requests within thirty (30) calendar days.

The Super222 platform is strictly intended for individuals who are 21 years of age or older. Super222 does not knowingly collect personal data from individuals under the age of 21.

All account registrations are subject to age verification as part of the KYC process. Where Super222 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, the account will be immediately suspended, any winings will be forfeited, and the data will be securely deleted.

Parents or guardians who believe their child may have registered on the Super222 platform should contact our support team immediately at [email protected].

Super222 primarily processes and stores personal data within its secure server infrastructure. In limited circumstances, personal data may be transferred to or accessed by our technology service providers operating outside Malaysia. Where such transfers occur, Super222 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to those described in this Policy.

Such safeguards may include contractual data protection clauses agreed with third-party processors, or reliance on internationally recognised data transfer mechanisms where applicable. Super222 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate compensatory measures.

Super222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our internal data handling practices. When material changes are made, we will notify registered users via their registered email address and/or display a prominent notice on the platform at least seven (7) days before the changes take effect.

The current version of this Policy will always be available at super222.cam/privacy-policy. The "Last Reviewed" date at the top of this document will be updated with each revision. Continued use of the Super222 platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact Super222's customer support team using any of the channels below. All privacy-related requests will be handled with confidentiality and responded to within thirty (30) calendar days.