Privacy Policy

Introduction

This Privacy Policy ("Policy") issued by Suhu189 ("we", "us", "our", "the Platform"), the operator of the online gaming platform accessible at suhu189.cam ("the Website"). This Policy governs the collection, use, storage, disclosure, and protection of personal data provided by or collected from users ("you", "User "Member", "Player") of the suhu189 platform.

Suhu189 is committed to protecting the privacy of all users, with particular regard to the privacy expectations of Malaysian players. Our data handling practices are aligned with the principles set out in Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

By registering an account, accessing, or using any service on the suhu189 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions, which form an integral part of the agreement between you and suhu189.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, including name, identification number, contact details, financial data, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, deletion, and any other handling of data.
• "Data Subject" means the individual whose personal data is being processed — the context of this Policy, this is you, the User.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. For this Platform, the Data Controller is Suhu189.
• "Third Party" means any entity other than you and suhu189, including payment processors, game providers, KYC verification services, and analytics platforms.
• "Cookies" means small text files placed on your device by the suhu189 platform to store session information, preferences, and analytics data.
• "KYC" means Know Your Customer — the mandatory identity verification process carried out to comply with anti-money-laundering obligations and to verify the age and identity of Users.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia (Act 709), the primary legislation governing personal data protection in Malaysia.

Personal Data We Collect

Suhu189 collects personal data that is necessary to operate the platform, comply with legal obligations, and provide a personalised experience to Malaysian players. The categories of data we collect are set out below.

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (to verify the21+ age requirement)
• Malaysian MyKad number or passport number (for non-citizens)
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Email address and mobile phone number

3.2 Financial & Transaction Data

• Records of all deposits, withdrawals, and in-platform transactions in MYR
• Payment method details (e-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay; bank account name and last four digits for Maybank, CIMB, Public Bank, Hong Leong FPX; DuitNow reference details)
• Cryptocurrency wallet addresses used for BTC, ETH, or USDT transactions
• Transaction timestamps and processing references

3.3 Account & Gameplay Data

• Account username and encrypted password credentials
• Complete gameplay history including game titles played, bet amounts, outcomes, and session durations
• Sports betting history including markets, stake amounts, and settlement records
• Bonus and promotional activity records
• Responsible gambling settings (deposit limits, session, self-exclusion status)

3.4 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session timestamps, page visit logs, and click-path analytics
• Cookie identifiers and similar tracking technologies

3.5 Communication Data

• Records of all live chat, email, and support communications with the suhu189 team
• Feedback submissions and survey responses
• Marketing preference records (opt-in or opt-out status)

How We Collect Your Data

Suhu189 collects personal data through the following channels and mechanisms:

Purposes of Data Processing

Suhu189 processes your personal data for the following specific, legitimate purposes. We do not use your data for purposes that are incompatible with those disclosed below without first obtaining your consent or notifying you of the change.

1. Account Management: To create, maintain, and administer your suhu189 account, including login authentication, password management, and account history.
2. Age & Identity Verification (KYC): To verify that you meet the minimum age requirement of 21 years and to confirm your identity in compliance with anti-money-laundering (AML) obligations.
3. Payment Processing: To facilitate deposits and withdrawals in MYR via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks, and supported cryptocurrencies.
4. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, duplicate account creation, money laundering, and any other prohibited activity outlined in our Terms & Conditions.
5. Responsible Gambling Compliance: To monitor gameplay patterns for indicators of problem gambling and to enforce self-exclusion requests, deposit limits, and session controls.
6. Customer Support: To respond to your enquiries, process complaints, and resolve disputes efficiently and accurately.
7. Legal & Regulatory Compliance: To comply with applicable laws and regulatory requirements, including record-keeping obligations and responses to lawful requests from authorities.
8. Platform Improvement: To analyse aggregate usage data and improve the suhu189 platform, game selection, payment experience, and customer support quality.
9. Marketing Communications (with consent): To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time.

Legal Basis for Processing

Suhu189 processes your personal data only where a lawful basis exists. The primary legal bases on which we rely are as follows:

• Contractual Necessity: Processing is necessary to perform our contractual obligations to you under the Terms & Conditions — including account management, payment processing, and gameplay services.
• Legal Obligation: Processing is required to comply with applicable laws, including KYC/AML obligations, age verification requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing is necessary for the legitimate interests of suhu189 where these are not overridden by your rights and interests — for example, fraud prevention, platform security monitoring, and internal analytics.
• Consent: Where we rely on consent — primarily for direct marketing communications — you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

Suhu189 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We may share your data with the following categories of third parties strictly for operational purposes:

• Payment Service Providers: Including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX network processors, and cryptocurrency infrastructure providers — solely to process your financial transactions.
• KYC & Identity Verification Providers: Third-party verification services used to confirm your identity and age as part of our mandatory KYC process.
• Game Content Providers: Game providers whose titles are accessible via the suhu189 platform may receive anonymised session and bet data necessary to operate their games correctly and audit RNG fairness.
• IT Infrastructure & Security Providers: Cloud hosting, cybersecurity, and data backup providers who process data on our behalf under strict data processing agreements.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or other legal process, suhu189 will disclose the minimum personal data necessary to comply with such requirements.
• Professional Advisors: Legal counsel, accountants, and auditors, subject to professional confidentiality obligations.

All third-party processors with whom suhu189 shares personal data are required to handle that data in accordance with applicable privacy standards and are prohibited from using it for any purpose beyond the specific service they provide to suhu189.

Data Retention

Suhu189 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

Data Security

Suhu189 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure.

9.1 Technical Measures

• 256-bit SSL/TLS encryption for all data in transit between your browser or device and the suhu189 platform
• AES-256 encryption for personal data stored in our databases
• Bcrypt hashing for all stored password credentials — we never store plain-text passwords
• Multi-factor authentication (MFA) available for account logins
• Continuous real-time monitoring of platform traffic for anomalous activity indicative of intrusion or fraud
• Regular penetration testing and vulnerability assessments by qualified security professionals
• PCI-DS compliant payment processing infrastructure for all financial transaction data

9.2 Organisational Measures

• Access to personal data is restricted strictly to suhu189 staff and authorised contractors who require it for their specific role
• All personnel with access to personal data are subject to confidentiality obligations
• Formal data breach response procedures are in place, including notification protocols where required by law
• Regular staff training on data protection and security best practices

Cookies & Tracking Technologies

Suhu189 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and support security measures. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication tokens, login state, and security cookies. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Store your preferences such as language settings, display preferences, and previously used payment method type. These improve your experience but are not essential.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the platform — such as which pages are visited most frequently and how navigation flows work. This data informs platform improvements.
• Security & Fraud Prevention Cookies: Help identify and flag suspicious session activity, bot traffic, and potential account takeover attempts.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the suhu189 platform. Suhu189 does not use third-party advertising cookies or share cookie data with external advertising networks.

Your Data Rights

As a User of the suhu189 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team with your request. We will respond within30 days of receiving a valid, verified request.