Privacy Policy spa09

Personal Information We Collect

During the account registration process and your ongoing use of the spa09 platform, we collect various categories of personal information to ensure the services provided are secure, transparent and compliant with international licensing requirements.

Identity Information

This includes your full name as stated in official documents, identity card number (MyKad), date of birth and an active mobile phone number. This information is required for the identity verification process (KYC), which is mandatory under the licensing framework we adhere to.

Contact Information

A valid email address must be registered when opening a spa09 account. This email address serves as the primary communication channel between you and us, including transaction confirmations, security notices and service updates.

Financial Information

To process deposits and withdrawals, we collect information relating to the payment method you use — including your e-wallet account number, bank account number for FPX transactions, or your crypto wallet address. We do not store credit or debit card numbers directly in our systems.

Technical Usage Data

• Device IP address at the time of login and transaction activity
• Type and version of the web browser or application used
• Your device's operating system
• Date, time and duration of login sessions
• Records of betting activity conducted through our platform

Purpose of Data Collection and Processing

Every piece of information we collect has a clear and legitimate purpose. spa09 does not collect data beyond what is necessary for the following purposes:

• Creating and verifying new player accounts in accordance with standard KYC procedures
• Processing deposits using Touch 'n Go eWallet, DuitNow, FPX, ShopeePay or cryptocurrency securely
• Verifying and executing withdrawals within 30 minutes to 3 hours
• Providing 24/7 customer support in Malay and English
• Sending important security notices and account updates
• Meeting international licensing obligations, including anti-money laundering (AML) measures
• Detecting and preventing fraud and account misuse
• Improving product quality and the overall user experience

Legal Basis for Data Processing

spa09 processes your personal information based on the following grounds recognised in international data protection practices:

Contractual Fulfilment

Data processing is necessary to carry out the Terms and Conditions you agreed to when registering your account. This covers all activities related to account management, transaction processing and the provision of betting services.

Legal Obligation

As an operator licensed under international licensing, we are required to comply with identity verification requirements, reporting of suspicious transactions and retention of financial records for specified periods.

Legitimate Interests

We process certain data based on legitimate business interests, such as analysing usage patterns to improve the platform, detecting fraud attempts and maintaining the integrity of betting operations.

Sharing Information With Third Parties

spa09 firmly upholds the principle that your personal information is a trust that must be safeguarded. We do not sell or transfer your personal data to any party for commercial marketing purposes.

Authorised Service Providers

We work with selected technical service providers — such as payment gateway providers, identity verification platforms and cloud computing infrastructure — who process data on our behalf. All such providers are bound by strict data confidentiality agreements and are only permitted to use your data for the purposes specified.

Legal Requirements and Authorities

spa09 will disclose personal information to the relevant authorities when required to do so by law, court order or a licensed regulatory body. We will notify you of such disclosure unless prohibited from doing so by law.

Cookies and Tracking Technologies

The spa09 website uses cookies and similar technologies to ensure a smooth and secure browsing experience. Cookies are small text files stored on your device when you visit our site.

Types of Cookies Used

• Session Cookies: Required to maintain your login status during an active session. These cookies are automatically deleted when you close your browser.
• Preference Cookies: Store your chosen settings such as interface language so you do not need to set them again on each visit.
• Security Cookies: Used to detect suspicious login attempts and protect your account from unauthorised access.
• Analytics Cookies: Help us understand how users interact with our site, allowing us to improve navigation and interface design.

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality of some parts of our platform.

Account Security and Protective Measures

spa09 implements multiple layers of technical and procedural security to protect your personal information from unauthorised access, accidental disclosure, alteration or destruction.

Technical Measures

• SSL/TLS encryption on all communications between your device and our servers
• Password storage using secure cryptographic hashing methods
• Two-factor authentication (2FA) available to strengthen account security
• Continuous account activity monitoring to detect unusual patterns
• Regular data backups and tested disaster recovery procedures

User Responsibilities

The security of your account also depends on your own actions. We recommend that you use a strong and unique password for your spa09 account, do not share your login details with anyone, and ensure you log out of your account when using a shared device.

If you suspect unauthorised access to your account, contact our customer support team, which operates 24/7, immediately.

Your Rights Regarding Personal Data

As a data subject, you have rights that you may exercise at any time by contacting our team. spa09 is committed to facilitating the exercise of these rights within a reasonable timeframe.

Right of Access

You have the right to request a copy of the personal information we hold regarding your account. This request will be processed within the timeframe set by our internal procedures.

Right of Correction

If the information we hold is inaccurate, incomplete or no longer relevant, you may request that it be corrected. Some corrections may require you to submit valid supporting documents.

Right to Restriction of Processing

In certain circumstances provided for under this policy, you may request that the processing of your data be restricted, although we may still retain it for specified purposes.

Right to Object

You have the right to object to the processing of your personal information carried out on the basis of legitimate interests, unless we can demonstrate compelling and legitimate grounds for that processing.

Data Retention Period

spa09 only retains your personal information for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable laws and licensing requirements.

Financial transaction records and account activity are retained for the minimum period set by our international licensing authority, for the purposes of audit requirements, AML compliance and the resolution of any disputes that may arise.

When your account is closed at your own request or for other valid reasons, data related to financial transactions will continue to be retained for the minimum retention period specified before being permanently deleted or anonymised.

Amendments and Changes to the Privacy Policy

spa09 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or developments in the data protection industry.

Any material changes will be communicated to you via a clear notice on our website or by email to the address registered with your account, at least 14 days before the changes take effect. Continued use of our platform after the effective date means you accept the latest version of this Privacy Policy.

The latest version of the Privacy Policy is always available at spa09.com/dasar-privasi. We encourage you to check this page periodically.

How to Contact Us About Privacy

For any questions, concerns or requests relating to your personal data and privacy, the dedicated spa09 team is ready to assist you through the following channels:

• Live chat directly on our website — available 24/7 in Malay and English
• Email our privacy team: [email protected]

We are committed to addressing every request relating to data privacy rights with full attention and within a reasonable timeframe.