Privacy Policy satset138 –
Your Data Always Protected

Satset138 takes the protection of your personal data very seriously. This Privacy Policy document explains in detail how we collect, use, store, share, and protect your personal information when you use the satset138 online gaming platform — whether through our website satset138.vu or our mobile app.

By registering an account, accessing, or using any satset138 service, you agree to the terms set out in this Privacy Policy. If you do not agree with any provision herein, you are advised not to use our platform.

This Privacy Policy is drafted in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia. We are committed to ensuring your personal data is processed lawfully, fairly, and transparently at all times. We do not take lightly the trust you place in us when sharing personal information, and we uphold that trust with full dedication.

Satset138 collects various types of information depending on how you interact with our platform. The following are the main categories of data we collect:

A. Information You Provide Directly

• Full name as stated on official identification documents.
• Date of birth for age verification purposes (18 years and above).
• Active email address used for account communications.
• Mobile phone number for two-factor authentication (2FA) and transaction notifications.
• Current residential address for KYC compliance purposes.
• Bank account or e-wallet details for payment processing.
• Identity documents such as MyKad or passport for identity verification.

B. Information Collected Automatically

• IP address and general geographic location information.
• Device type, operating system, and browser version used.
• Session activity log including login times, games played, and transaction records.
• Cookie data and related website tracking technologies.
• User behaviour data such as pages visited and session duration.

C. Information from Third Parties

• Identity verification through approved KYC service providers.
• Transaction information from authorised payment processors.
• Screening against restriction lists from the relevant regulatory bodies.

Below is a summary of data types, collection purposes, and retention periods:

Every piece of data we collect has a clear and legitimate purpose. satset138 uses your information solely for the following purposes and will not use it for any other purpose without obtaining your consent first:

1. Account Management & Verification — verifies that you are a valid individual aged 18 and above and are eligible to use the platform.
2. Financial Transaction Processing — facilitates deposits, withdrawals, and other payment transactions quickly and securely.
3. Legal and Regulatory Compliance — fulfils legal obligations including anti-money laundering (AML) compliance and KYC requirements.
4. Platform Service Improvements — analyses usage patterns to improve overall design, performance, and user experience.
5. Customer Service Communications — answering inquiries, resolving complaints, and providing the technical support you need.
6. Security & Fraud Prevention — identifies and blocks suspicious activity, fraud attempts, and unauthorised access.
7. Marketing Communications — sends you promotional information, bonuses, and the latest offers, subject to your communication preferences.
8. Responsible Gaming — monitors gaming patterns to identify signs of problem gambling and provide appropriate support when needed.

We will not use your data for automated decisions that materially affect your rights without appropriate human review. Any new use of data not stated here will be communicated to you via an updated notice before it takes effect.

Satset138 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, there are limited situations where we may need to share your information with certain parties:

Permitted Sharing:

• Payment Service Providers — such as FPX, Touch 'n Go, GrabPay, and major banks, solely for processing your financial transactions.
• KYC Service Providers — approved identity verification companies bound by strict confidentiality agreements.
• Technology Service Providers — cloud infrastructure and security partners supporting our platform operations, all subject to binding data processing agreements.
• Regulatory authorities and law enforcement agencies — when required by a court order or a lawful request from the relevant authorities.
• Professional Advisors — lawyers, accountants, or auditors bound by professional confidentiality obligations.

In the event of a company merger, acquisition, or asset sale, user data may be transferred as part of the business assets. You will be notified in advance via your registered email and will have the option to opt out before your data is transferred to the new entity.

The satset138 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The following are the types of cookies we use:

• Essential Cookies — required for core platform functions such as login session authentication, bet slip management, and security settings. Without these cookies, the platform cannot function properly.
• Performance Cookies — collects information on how you use the platform, such as the most frequently visited pages and any error messages encountered. All data is collected anonymously.
• Functional Cookies — allows the platform to remember your preferences such as language selection, display settings, and login details for a more personalised experience.
• Analytics Cookies — helps us understand how users interact with the platform so we can continually improve the services we provide.

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the satset138 platform. Session cookies are automatically deleted when you close your browser, while persistent cookies have their own respective expiry periods.

Protecting your personal data from unauthorised access, breaches, or damage is satset138's absolute priority. We implement multiple layers of technical and organisational security measures for this purpose:

• Data Encryption in Transit using TLS 1.3 protocol for all communications between your device and our servers.
• Data Encryption at Rest — all sensitive data is encrypted using AES-256 standards before being stored in our database.
• Two-Factor Authentication (2FA) available and recommended for all user accounts to protect against unauthorised access.
• Internal Access Controls strict controls ensure that only satset138 staff with a legitimate operational need may access user data.
• 24/7 Security Monitoring by our automated systems and IT security team to detect any threats or unusual activity.
• Penetration Testing regularly by independent security experts to identify and patch system vulnerabilities.
• Incident Response Plan tested to ensure a swift and effective response in the event of any security incident.

While we take all reasonable precautions, no digital security system can guarantee 100% protection at all times. In the unlikely event of a data breach that may affect your rights, we are committed to notifying you within 72 hours of becoming aware of the incident, in accordance with applicable legal requirements.

As a user of the satset138 platform and as an individual protected under the Personal Data Protection Act 2010, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the satset138 Privacy team via email at [email protected]. We will process your request within thirty (30) business days from the date of receipt. In complex situations, this period may be extended up to two (2) months, with prior notice given to you.

Satset138 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law — whichever is longer.

When your account is closed at your own request, we will initiate the removal of non-mandatory data within ninety (90) days. Data subject to legal retention obligations — such as financial records for seven (7) years — will be kept in a separate encrypted system and will not be used for any other purpose.

All data that is no longer needed will be securely deleted using industry-standard deletion methods, ensuring it cannot be recovered or accessed again. Data backups will also be purged according to the established schedule.

Satset138 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data management practices, new legal requirements, or relevant technological developments.

Any material changes — meaning those that significantly alter how we use your personal data — will be communicated through:

• In-account notification upon your next login.
• Email to the address registered with your account.
• A clear notice on the satset138 website homepage.

The "Last Updated" date at the top of this page will always reflect the date of the current version of the Privacy Policy. You are encouraged to review this page periodically. Continued use of the satset138 platform after any changes take effect will be considered your acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the satset138 Privacy team is ready to assist you.

You may reach us through the following channels:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Response Time: Within 3–5 business days for general enquiries; 30 days for formal data rights requests.

When contacting us regarding a data rights request, please include the following to help us process it faster: your account username, registered email address, type of request, and any relevant additional details. We may require additional identity verification before processing your request to protect your account security.