Sicbo Privacy Policy – Personal Data Protection for Malaysia's Platform

Sicbo takes the personal data privacy of its members very seriously. We understand that when you register an account with sicbo, you are entrusting us with your personal information — your name, phone number, email address, and financial transaction details. We do not take that trust lightly, and we want to ensure you have a clear understanding of exactly how we handle that information.

This sicbo Privacy Policy is drafted in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 — the primary legislation governing the collection and use of personal data in Malaysia. We also take into account international industry best practices in data protection to ensure your information is safeguarded to the highest standard we can provide.

Please note that sicbo is a platform built for Malaysian users — our deposit methods are all local Malaysian options, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. This means all financial transactions take place within Malaysia's financial system, and we comply with all applicable local financial regulations.

Sicbo collects various categories of personal data depending on how you interact with our platform. Below is a detailed breakdown of each data category collected:

Sicbo collects your personal data through several channels. It is important that you understand these collection points so you know exactly when and how your information is collected by our platform.

• During Account Registration — When you register a sicbo account, you provide your name, phone number, email address, and other basic information required to create the account.
• During the KYC Verification Process — When identity verification is required, you may need to submit documents such as a copy of your MyKad. This information is processed securely and stored in accordance with legal requirements.
• During Financial Transactions — Each time you make a deposit via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX, a transaction record is created in the sicbo system for accounting and compliance purposes.
• While Using the Platform — Technical data such as IP address, device type, and usage history is collected automatically when you access and use sicbo.
• When Contacting Support — When you contact the sicbo customer support team via email or live chat, the information you provide during those interactions is stored for service record purposes.
• Through Cookies and Tracking Technologies — sicbo uses cookies and similar technologies to collect website usage data that helps us improve the user experience. See Section 7 for more details.

Sicbo uses the personal data we collect for specific, legitimate, and necessary purposes. We do not use your data for anything unrelated to delivering sicbo's platform services to you. The following are the primary purposes for which your data is used:

• Account Management — Creating, maintaining, and managing your sicbo account, including processing deposits and withdrawals in RM.
• Identity Verification — To verify that you meet the minimum age requirement of 18 years and to confirm your identity in accordance with anti-money laundering (AML) legal requirements.
• Platform Security — Detecting and preventing fraud, unauthorised access, multi-accounting, and other suspicious activity.
• Service Communications — Sends important notifications relating to your account, transactions, Privacy Policy updates, and security information.
• Responsible Gaming — Monitoring usage patterns to identify signs of problem gambling and offering appropriate support tools.
• Platform Improvements — Analysing usage data to improve sicbo's design, speed, and content for a better user experience.
• Legal Compliance — Fulfilling reporting obligations to Malaysian authorities where required by law.
• Marketing Communications — Sending relevant promotional offers and bonuses (only if you have opted in — you can unsubscribe at any time).

Sicbo does not sell member personal data to any party. However, in the course of operating the platform, there are specific situations where data must be shared with carefully selected third parties. All data sharing is conducted under strict controls and for legitimate purposes only.

• Payment Gateway Providers — Transaction details are shared with payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banks solely to process your deposits and withdrawals.
• Technology Service Providers — Cloud infrastructure providers and technical service vendors that support sicbo's operations may have limited access to data for technical purposes only, and are bound by strict confidentiality agreements.
• Malaysian Authorities — sicbo complies with all Malaysian legal obligations. Where required by law or a valid court order, data may need to be disclosed to the relevant authorities.
• Anti-Fraud Authority — To protect the integrity of the platform and prevent money laundering, certain information may be shared with relevant industry bodies as required for compliance purposes.
• Game Providers — Third-party casino game providers used by sicbo may receive the game data necessary to operate the games properly. These providers do not receive your full identity information.

Sicbo continuously invests in security infrastructure to protect member personal data from unauthorised access, disclosure, alteration, or destruction. The following are the key security layers we have in place:

• 256-bit SSL Encryption — All communications between your browser and the sicbo server are encrypted using 256-bit TLS/SSL protocol — the same standard used by banking institutions.
• Stored Data Encryption — Sensitive data stored in sicbo's databases is encrypted using robust encryption algorithms. Member passwords are stored in hashed form — our staff cannot view your password.
• Two-Factor Authentication (2FA) — sicbo supports two-factor authentication for added login security. You are strongly encouraged to enable 2FA on your account.
• 24/7 Security Monitoring — Our automated monitoring system operates continuously to detect suspicious activity and security threats in real time.
• Internal Access Controls — Only sicbo staff with a legitimate business need are permitted to access member personal data, and all access is logged and monitored.
• Regular Security Audits — sicbo conducts regular security audits and penetration testing carried out by independent security experts.
• Secure Data Centre — sicbo data is stored in certified data centres with physical access controls, redundant cooling systems, and disaster recovery procedures.

While we take every reasonable precaution, no security system can be guaranteed 100% secure against all threats. You also play an important role in protecting your account by using a strong and unique password, not sharing your login credentials, and notifying us immediately if you suspect any unauthorised activity on your account.

Like most online platforms, sicbo uses cookies and similar technologies to enhance your experience, understand how the platform is used, and ensure it functions correctly.

• Essential Cookies — These cookies are required for the sicbo platform to function properly. They maintain your login session, save language preferences, and ensure transaction security. These cookies cannot be disabled.
• Performance Cookies — These cookies collect information about how visitors use sicbo, such as the most frequently visited pages and any error messages encountered. All information is collected anonymously.
• Functionality Cookies — These cookies allow sicbo to remember your preferences, such as your username, language, and region, to provide a more personalised experience.
• Analytics Cookies — We use analytics tools to understand aggregate usage patterns on the sicbo platform, helping us plan better product improvements for Malaysian users.

You can manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of the sicbo platform. To disable non-essential cookies, access your browser settings (Chrome, Firefox, Safari, or others) and follow the instructions provided.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have several important rights regarding the personal data sicbo holds about you. We fully respect these rights and provide straightforward channels for you to exercise them.

Sicbo retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. Retention periods vary by data category.

• Active Account Data — Retained for the duration your sicbo account remains active, and for up to 7 years after account closure in accordance with Malaysian financial regulatory requirements.
• Financial Transaction Records — Retained for a minimum of 7 years in accordance with Malaysia's Anti-Money Laundering laws (AMLA) and accounting standards.
• KYC Documents — Retained for 5 years after the business relationship ends, in accordance with Malaysian legal requirements.
• Support Communication Logs — Retained for 2 years for service reference and quality improvement purposes.
• Cookie & Analytics Data — Typically deleted or anonymised within 13 months from the date of collection.

Once the retention period expires and there is no longer any legal obligation to retain the data, sicbo will securely delete or anonymise your personal data in a manner that is permanent and irreversible. Deletion is carried out using methods that ensure the data cannot be recovered by any party.

Sicbo is an adults-only platform for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. Our registration process is designed to prevent underage use, including age verification at sign-up.

If we discover that we have collected personal data from an individual under 18 years of age without appropriate parental consent verification, we will take immediate steps to delete that information. If you believe we may hold information about a child, please contact us at support@sicbo-khelo.com right away.

Sicbo reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. We encourage you to review this page periodically to stay informed of any updates.

When we make material changes to this Privacy Policy, we will notify you via:

• An in-platform sicbo notification displayed the next time you log in.
• An email to the address registered on your account, for significant changes that affect your rights.
• A clear notice at the top of this Privacy Policy page indicates the date of the most recent update.

Your continued use of the sicbo platform following notification of any changes to the Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with any of the changes, you have the right to close your account and request deletion of your data in accordance with the procedure set out in Section 8.

If you have any questions, concerns, or requests regarding this Privacy Policy or how sicbo handles your personal data, we encourage you to reach out to us. Our team is ready to assist you in either Bahasa Malaysia or English.

• Data Protection Officer Email: support@sicbo-khelo.com — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request".
• Response Time: We aim to respond to all privacy-related enquiries within 3 business days, and to data rights requests within 14 business days.
• General Customer Support: For enquiries unrelated to privacy, the sicbo support team is available 24/7 via live chat on the platform.