Casino SG Privacy Policy – Our Commitment to Protecting Malaysian Users' Data

Introduction – Casino SG's Privacy Commitment

Casino SG ("we," "the Company") understands that personal information is an extremely valuable and sensitive asset. The trust you place in us when sharing your personal data during registration or while using the Casino SG platform is a responsibility we take with the utmost seriousness.

This Privacy Policy explains in detail how Casino SG collects, uses, stores, protects, and discloses the personal data of our users, who are players based in Malaysia. This document has been prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and its applicable implementing regulations.

Casino SG's Privacy Policy applies to all personal data collected through:

• The Casino SG website at casinosg.click and all associated subdomains.
• The Casino SG mobile application, where applicable.
• Any communications between users and the Casino SG team via email, live chat, WhatsApp or other support channels.
• Any registration forms, identity verification processes or financial transactions carried out through the Casino SG platform.

Types of Personal Data Collected by Casino SG

Casino SG collects various types of personal data depending on how you interact with our platform. The following are the categories of data we may collect from Malaysian users:

Casino SG does not intentionally collect sensitive data such as medical information, religious background or users' political views. Should such information be inadvertently disclosed during communications with the Casino SG support team, it will not be retained in our permanent records.

How Casino SG Collects Your Personal Data

Casino SG collects personal data through several different channels and methods, all carried out in a lawful and transparent manner:

• Directly from you: When you complete the Casino SG registration form, fill in your profile information, make your first deposit, submit a withdrawal request or contact our support team — all information you provide voluntarily is collected and recorded.
• Through use of the platform: When you use Casino SG — playing slots, betting on Malaysia Super League or IPL football matches, playing live casino or joining the lottery — our systems automatically record these activities for account management and security purposes.
• From payment processors: When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u and CIMB Clicks, the payment processor may share the necessary transaction information with Casino SG to verify and complete the transaction.
• Through cookies and tracking technologies: Casino SG uses cookies and similar technologies to remember user preferences, optimise platform performance and support security functions. Further details are set out in Section 9.
• From authorised third-party sources: In certain situations where identity verification or legal compliance requires it, Casino SG may obtain information from legitimate sources such as recognised identity verification agencies.

How Casino SG Uses Your Personal Data

Casino SG uses the personal data it collects for lawful and specific purposes. The following outlines the primary ways your data is used in Casino SG's operations:

• Account management and services: Creating and managing your Casino SG account, processing deposits and withdrawals, verifying your identity, and confirming your eligibility to use the platform.
• Service delivery: Gives you access to all Casino SG features, including slots, live casino, Sports Betting covering badminton BWF, cricket IPL, football EPL and the Malaysian Super League, e-sports, and lottery.
• Important communications: Sending account-related notifications, transaction confirmations, security updates and other important information relevant to your use of Casino SG.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-account abuse, and other security threats that could harm other Casino SG users.
• Legal compliance: Fulfilling our obligations under Malaysia's PDPA 2010, anti-money laundering laws and any other applicable legal requirements.
• Platform improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve Casino SG's performance, design and content.
• Marketing (with consent): Sending users who have consented to receive marketing communications relevant information about Casino SG promotions, bonuses and offers.

Casino SG does not use users' personal data for any purpose beyond those stated above without obtaining fresh consent from the user concerned.

Sharing Data with Third Parties

Casino SG does not sell users' personal data. However, in the course of our operations, Casino SG may need to share users' personal data with the following categories of third parties under limited and controlled circumstances:

• Payment processors: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and banking institutions such as Maybank and CIMB need to receive the transaction information required to process your deposits and withdrawals. These processors maintain their own privacy policies and are bound by confidentiality agreements with Casino SG.
• Technology service providers: Companies providing hosting, cybersecurity, analytics, and technical infrastructure services to Casino SG may access data to the limited extent necessary to deliver their services. All such providers are bound by strict data protection agreements.
• Authorities and regulatory bodies: Casino SG will disclose users' personal data if required to do so by Malaysian law, a court order or a legitimate request from a relevant law enforcement agency.
• Identity verification providers: Where identity verification is required for regulatory compliance, Casino SG may engage recognised third-party verification services operating in Malaysia.

Data Security – How Casino SG Protects Your Information

Casino SG makes serious and ongoing investments in cybersecurity infrastructure to ensure that user personal data is protected at all times against unauthorised access, loss, alteration or unintended disclosure.

Key security measures implemented by Casino SG include:

• 256-bit SSL encryption for all data transmitted between users' devices and Casino SG's servers, ensuring information cannot be intercepted in transit.
• Passwords are stored in a hashed format that cannot be decrypted, meaning even Casino SG staff cannot view a user's original password.
• An intrusion detection system operating 24 hours a day to identify and block unauthorised access attempts.
• Strict internal access controls — Casino SG staff only access the user data necessary for their specific job responsibilities, based on the principle of least privilege.
• Regular security audits by independent third parties to identify and address system vulnerabilities before they can be exploited.
• A documented incident response procedure for handling any data breaches that may occur, including notification to affected users within the timeframe stipulated by the PDPA 2010.
• Regular and secured data backups to ensure user information is not lost in the event of a technical disaster.

While Casino SG takes all reasonable precautions, no security system can guarantee 100% protection under all circumstances. We encourage users to play their part in keeping their accounts secure by using strong passwords and never sharing their login credentials with anyone.

Data Retention Period

Casino SG retains users' personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law — whichever is longer.

Casino SG's data retention guidelines are as follows:

• Active account data: For as long as your Casino SG account remains active, and for a reasonable period following account closure to allow for the resolution of any disputes or claims that may arise.
• Financial transaction records: A minimum of seven years, in line with Malaysian legal requirements for financial records and anti-money laundering compliance.
• Customer support communication logs: Two years from the date of the last interaction, to facilitate historical reference when resolving user issues.
• Identity verification data: For the duration of the active account and a minimum of five years after account closure, in line with applicable regulatory requirements.
• Marketing data: Until you withdraw consent to receive marketing communications from Casino SG, or when you close your account.

When data is no longer needed and there is no legal obligation to retain it, Casino SG will delete or destroy that data securely and irreversibly.

User Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010, every Casino SG user holds certain rights regarding their personal data, which Casino SG is committed to respecting and facilitating:

• Right of access: You have the right to request a copy of the personal data Casino SG holds about you. Casino SG will fulfil data access requests within a reasonable timeframe, subject to identity verification.
• Right to correction: If you find that personal data held by Casino SG about you is inaccurate or incomplete, you have the right to request a correction. You can also update much of your profile information directly through your Casino SG account settings.
• Right to withdraw consent: For data processed on the basis of your consent (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawing your consent does not affect the validity of any processing that took place prior to the withdrawal.
• Right to restrict processing: In certain circumstances, you have the right to request that Casino SG restrict how your data is used while any dispute relating to that data is being resolved.
• Right to lodge a complaint: If you believe Casino SG has breached this Privacy Policy or Malaysia's PDPA 2010, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To submit any request relating to your data rights, contact the Casino SG support team by email at support@casinosg.click, clearly stating the type of request you are making. Casino SG will process your request once your identity has been verified, to ensure the security of your data.

Cookies, Browsing Data & Tracking Technologies

Casino SG uses cookies and similar tracking technologies to enhance the user experience, ensure platform security and understand how users interact with Casino SG. The following are the types of cookies used:

• Essential cookies: These cookies are required for the basic functionality of the Casino SG platform, such as maintaining your login session, securing transactions and remembering your language preference or basic settings. The Casino SG platform cannot function properly without them and they cannot be turned off.
• Performance and analytics cookies: Casino SG uses analytics data collected via cookies to understand which pages are visited most frequently, technical issues encountered by users, and general navigation patterns. All such data is processed in aggregated form without identifying any specific individual.
• Functional cookies: These cookies allow Casino SG to remember user preferences such as favourite games, display settings and notification choices, providing a more personalised experience within the platform.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality and performance of the Casino SG platform on your device. Important note: Casino SG does not use cookies to track your activity on other websites outside our platform.

Contact Us – Privacy-Related Enquiries

Casino SG welcomes any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data. You can reach the Casino SG privacy team through the following channels:

• Email: support@casinosg.click — please include "Privacy Inquiry" in the subject line to ensure your message reaches the right team.
• Live chat: Via the live chat button within the Casino SG platform, available 24 hours a day, 7 days a week, including Malaysian public holidays.
• WhatsApp: Via the Casino SG support number available on the contact us page within the platform.

Casino SG will endeavour to respond to all privacy-related enquiries within three (3) business days. For more complex requests such as data access or data deletion requests, the response time may be longer depending on the complexity of the request and the identity verification requirements involved.

This Casino SG Privacy Policy is updated from time to time to reflect changes in our practices or legal requirements. The latest version is always available on this page, and the date of the most recent update is clearly stated at the top of this document.