🔒 SA969 Privacy Policy — Your data is fully protected with 256-bit SSL encryption 🛡️ No Data Sales — SA969 never sells or shares member data with third parties 💰 Secure Transactions in MYR — TnG eWallet, GrabPay, DuitNow, FPX Maybank2u & CIMB Clicks ⚽ Malaysia's Betting Platform — Super League, EPL, Badminton BWF, E-Sports & more 🎁 100% Welcome Bonus — Up to RM 500 for new SA969 members 🔒 SA969 Privacy Policy — Your data is fully protected with 256-bit SSL encryption 🛡️ No Data Sales — SA969 never sells or shares member data with third parties 💰 Secure Transactions in MYR — TnG eWallet, GrabPay, DuitNow, FPX Maybank2u & CIMB Clicks ⚽ Malaysia's Betting Platform — Super League, EPL, Badminton BWF, E-Sports & more 🎁 100% Welcome Bonus — Up to RM 500 for new SA969 members
🔒 SA969 Official Documents

Privacy Policy SA969 — How We Protect the Personal Data of Malaysian Members

SA969 takes the privacy of every member seriously. This Privacy Policy transparently sets out what data we collect, how it is used, who it is shared with — if at all — and your rights to control your own personal data. This document is written in plain, easy-to-understand language, not confusing legal jargon.

Last updated: 1 January 2026 Version 2.4
256-bit SSL Encryption
10 Main Sections
0 Third-Party Data Sales

SA969's Six Privacy Commitments to Malaysian Members

SA969's Privacy Policy is built on commitments that are tangible and measurable — not just words on paper.

ENCRYPTION
Full 256-Bit SSL Protection

All data transmitted between your device and SA969's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banks such as Maybank and CIMB. No data is ever sent unprotected.

NO DATA SALES
Your Data Is Never Sold to Anyone

SA969 has never sold, rented, or transferred members' personal data to any third party for marketing or commercial purposes — and never will. Your data belongs to you, not SA969.

USER CONTROLS
You Control Your Own Data

SA969 gives every member full rights to access, correct, transfer, or request deletion of their personal data at any time through the account panel or by contacting our team directly.

PDPA COMPLIANCE
Compliance with Malaysia's Personal Data Protection Act

SA969 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. For us, compliance is not optional — it is the foundation of how we operate.

RESTRICTED ACCESS
Strict Internal Data Access

Only SA969 staff who require access to your data for legitimate operational purposes are permitted to do so. Every access is logged and regularly audited. No staff member may access member data without a clear operational need.

INSTANT NOTIFICATIONS
Immediate Notification in the Event of a Breach

In the event of any security incident involving SA969 member data, we are committed to notifying affected members within 72 hours of the incident being identified — in line with global best practices for data protection.

1

Introduction & Scope of SA969's Privacy Policy

This Privacy Policy is issued by SA969 and applies to all personal information collected through the SA969 platform on the sa969.xyz website and the SA969 mobile app (Android and iOS). It explains how SA969 collects, processes, stores, protects, and — in certain limited circumstances — discloses your personal data as a member.

By registering an SA969 account or continuing to use our services, you agree to the data collection and processing practices described in this document. If you do not agree with any part of this Privacy Policy, you are advised not to use SA969's services.

Important: This Privacy Policy should be read together with SA969 Terms & Conditions. Both documents together form the complete agreement between you and SA969 regarding your use of the platform and the handling of your data.

2

Types of Personal Data SA969 Collects

SA969 collects only the data necessary to deliver platform services safely and effectively. The following are the categories of data SA969 collects from members:

Data Category Data Examples How Data Is Collected
Identity Information Full name, MyKad/passport number, date of birth, gender Account registration & KYC process
Contact Information Malaysian phone number, email address Account registration
Financial Information E-wallet account numbers (TnG, GrabPay, Boost, ShopeePay), FPX bank account numbers Process deposits & withdrawals
Platform Activity Data Betting history, games played, total deposits & withdrawals, active session times Automatic platform usage
Technical Data IP address, device type, operating system, browser, cookie data Collected automatically during use
Communication Data Live chat conversation records, support emails, help tickets Interactions with the SA969 support team

SA969 does not collect credit or debit card numbers directly. All payments are processed through third-party payment gateways that comply with PCI DSS standards, ensuring your sensitive financial information is never stored on SA969's servers.

3

Purposes & Legal Basis for Data Use

SA969 processes members' personal data on lawful grounds under Malaysia's Personal Data Protection Act 2010 (PDPA). The following are the specific purposes for which your data is used:

  • Account Management: Creating and managing your SA969 account, verifying your identity at login, and processing the KYC procedure for withdrawal security.
  • Financial Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and Malaysian FPX banking, and to handle withdrawals of your winnings in MYR.
  • Platform Services Provided: To display accurate betting odds, calculate winnings, manage the SA969 VIP programme, and ensure a seamless experience across all sections of the platform, including sports, Live Casino, slots, and e-sports.
  • Service Communications: Sending important account notifications, security updates, SA969 promotional information, and transaction alerts via email or SMS.
  • Fraud Prevention & Security: To identify and prevent fraud, money laundering, bonus abuse, and other security threats to the SA969 platform and its members.
  • Legal Compliance: To fulfil legal obligations imposed on SA969 by relevant authorities, including reporting requirements and record retention obligations.
  • Platform Improvement: Analysing aggregated usage data (with no individual identification) to improve SA969's platform features, user experience, and technical performance.

SA969 will not use your personal data for any purpose beyond those stated above without first obtaining your separate consent.

4

Data Sharing with Third Parties

SA969 maintains a strict policy on data sharing. In short: we do not sell your data. However, there are limited situations where SA969 needs to share data for legitimate operational purposes:

  • Payment Processing Providers: SA969 works with recognised payment gateways to process e-wallet transactions (Touch 'n Go, GrabPay, Boost, ShopeePay) and FPX bank transfers. Only the data necessary to process each transaction is shared, and these providers are bound by strict data protection agreements.
  • Casino & Game Software Providers: The SA969 platform uses software from accredited international casino providers. Minimal game data required to synchronise gameplay may be shared with these providers, all of whom comply with industry data security standards.
  • Identity Verification Service (KYC): SA969 uses accredited third-party identity verification services to verify members' MyKad or passport documents for KYC purposes. These services process only the data required and do not retain copies of your documents once verification is complete.
  • Legal Authorities: SA969 will disclose member data to the relevant authorities (police, courts, regulatory bodies) when required by law, court order, or to support financial crime investigations.

SA969 never share members' personal data with marketing companies, data brokers, social media platforms, or any third party for advertising or commercial purposes. This is an absolute and unwavering commitment by SA969.

5

SA969 Data Security Measures

SA969 continuously invests in security infrastructure to protect members' personal data. The key technical and organisational measures SA969 employs include:

  • Data Encryption in Transit: All communications between your device and SA969's servers are encrypted using TLS 1.3 protocol with a 256-bit SSL certificate, ensuring that no third party can intercept or read the data transmitted.
  • Data Encryption at Rest: Sensitive data stored on SA969's servers — including identity and payment information — is encrypted using AES-256 standards before being stored.
  • Role-Based Access Control: Every SA969 staff member is granted access only to the data required for their specific role. Access to sensitive member data requires multi-level authorisation and is automatically audited.
  • 24-Hour Security Monitoring: SA969's systems are continuously monitored by our cybersecurity team to promptly detect and respond to any threats or suspicious activity.
  • Regular Penetration Testing: SA969 conducts regular penetration testing by independent security experts to identify and address any vulnerabilities before they can be exploited.
  • Staff Security Training: All SA969 staff who handle member data undergo comprehensive data security training and are bound by strict confidentiality agreements.

While SA969 takes all reasonable precautions, no digital system can guarantee absolute 100% security. You also play an important role in protecting your account by keeping your password confidential and enabling the two-factor authentication (2FA) feature provided by SA969.

6

SA969 Cookies, Analytics & Tracking Technologies

SA969 uses cookies and similar tracking technologies to keep the platform running smoothly and to improve your experience. Below are the types of cookies SA969 uses:

  • Essential Cookies (Required): These cookies are required for the core functions of the SA969 platform — including maintaining your login session, remembering your preference settings, and ensuring transaction security. The SA969 platform cannot function without these cookies.
  • Performance & Analytics Cookies: SA969 uses these cookies to understand how members use the platform — which pages are visited most frequently, how long members spend in each section, and where technical issues may arise. This data is collected in aggregate and does not identify individual users.
  • Functional Cookies: These cookies remember your preferences within the SA969 platform — such as your chosen language, odds display settings, and other display configurations you have set. This means you will not need to reconfigure your preferences every time you log in.

How to manage SA969 cookies: You can manage and delete cookies through your internet browser settings at any time. Please note that disabling essential cookies may affect SA969 platform functionality and you may be required to log in more frequently. Cookie settings are typically found under the "Privacy" or "Security" section of your browser.

7

SA969 Data Retention & Deletion Period

SA969 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy. The following are SA969's data retention guidelines:

  • Active Account Data: For as long as your SA969 account remains active, your account data is retained so you can make full use of the platform.
  • Data After Account Closure: After an account is closed, SA969 retains financial transaction records and KYC data for 7 years to comply with anti-money laundering legislation and financial reporting requirements.
  • Support Communication Records: Customer support conversation records are retained for 3 years for reference and service quality improvement purposes.
  • Technical Log Data: Technical logs such as server access records and IP data are retained for 12 months for security and technical troubleshooting purposes.

Once the applicable retention period has ended, your personal data will be securely deleted or anonymised so that it can no longer be linked back to you as an individual. If you wish to request early deletion of your data, please refer to the Your Rights section below.

8

SA969 Members' Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the data protection principles SA969 upholds, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of all personal data SA969 holds about you. SA969 will provide a data report within 14 business days of receiving your request.

Right to Rectification

If any personal data SA969 holds about you is inaccurate or outdated, you have the right to request an immediate correction. This can be done through your profile settings or by contacting our support team.

Right to Erasure

You may request the deletion of your personal data from SA969's systems. This right is subject to SA969's legal obligations to retain certain records — in such cases, SA969 will inform you which data cannot be deleted and the reasons why.

Right to Object

You have the right to object to the processing of your personal data for specific purposes, including direct marketing. Once an objection is received, SA969 will cease that processing immediately.

Right to Data Portability

You may request SA969 to provide your personal data in a machine-readable format (such as CSV or JSON) for transfer to another service. This request will be processed within 30 days.

Right to Restrict Processing

In certain situations — such as when you are verifying the accuracy of your data or considering an objection — you may request that SA969 temporarily restrict the processing of your data.

How to exercise your rights: To submit any request relating to your privacy rights, contact the SA969 data protection team by email at support@sa969.xyz with the subject line "Data Privacy Request", or via the 24-hour live chat within the SA969 platform. SA969 will verify your identity before processing any request to ensure the security of your data, and will respond within the timeframe stipulated by the PDPA.

9

Children's Privacy & Age Restriction

SA969 strictly prohibits use of the platform by individuals under 18 years of age. The SA969 platform — including Sports Betting, live casino baccarat and blackjack, slots, and e-sports — is intended for adults only.

SA969 does not knowingly collect personal data from minors. The SA969 registration process requires age verification, and the KYC process using a MyKad or passport confirms that a member is at least 18 years of age.

If a parent or guardian discovers that their underage child has registered an SA969 account by circumventing the age verification system, please contact SA969 immediately at support@sa969.xyz. SA969 will close the account without delay and delete all data associated with the minor.

10

Privacy Policy Amendments, Enquiries & Contact SA969

SA969 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in how we operate, the technologies we use, or applicable legal requirements. Significant amendments will be communicated to members via their registered email or an in-platform notification at least 14 days before taking effect.

The last updated date of this document is always shown at the top of this page. Your continued use of the SA969 platform after any amendments take effect will be considered your acceptance of the updated Privacy Policy.

Contact the SA969 Data Protection Team:
Email: support@sa969.xyz
Email subject: "Privacy Policy Enquiry" or "Data Privacy Request"
Live Chat: Available 24 hours on the SA969 platform
Support language: Full Bahasa Melayu support
Response time: Within 3 business days for privacy enquiries

This Privacy Policy is governed by the laws of Malaysia, including the Personal Data Protection Act 2010 (PDPA). Any privacy-related disputes that cannot be resolved directly with SA969 may be referred to the relevant Malaysian Personal Data Protection Commissioner.

Why Data Privacy Matters to SA969 and to You as a Malaysian Member

Many people wonder — why does a betting platform need such a detailed Privacy Policy? The answer is straightforward: trust. SA969 understands that for members to use our platform with confidence, they need to know exactly what happens to their personal information — from their phone number to their transaction history. Uncertainty on this front can erode member confidence, and that is not the kind of environment SA969 wants to operate in.

Betting platforms handle a wide range of sensitive data — identity information, financial details, and user activity history — making them a more attractive target for cybercriminals than many other types of businesses. SA969 takes this responsibility seriously and has made substantial investments in cybersecurity infrastructure on par with financial institutions, well beyond the bare minimum of basic protections.

The question SA969 members ask most often concerns their payment data. When you deposit funds via Touch 'n Go eWallet, GrabPay, or FPX Maybank2u, your actual payment information does not pass beyond the accredited third-party payment gateway to SA969's servers. SA969 only receives confirmation that the payment was successful and the amount — not your account details or PIN. This is a security design deliberately built into SA969's platform to ensure that even in the event of a security incident, your sensitive payment information remains protected.

Some members may find the collection of activity data — such as betting history and platform usage patterns — somewhat sensitive. SA969 wants to be transparent about why this data is necessary and how it is used responsibly. First, activity data is used to calculate SA969's VIP programme fairly and automatically — without it, the system cannot determine whether you qualify for Gold or Diamond tier. Second, activity data enables SA969's systems to identify suspicious patterns that may indicate fraud attempts or account abuse, which ultimately protects you as well. Third, in aggregated and anonymised form, this data helps SA969 understand which parts of the platform are most useful and which areas need improvement.

One thing SA969 wants to make unequivocally clear: we do not sell user profiles to advertising companies or data brokers. This means your data — including your betting preferences or the sports you follow — will not be used by third parties to target you with ads outside the SA969 platform. In an era where many digital companies treat user data as a primary revenue stream, SA969 has made a deliberate business decision not to go down that path — because we believe long-term member trust is worth far more than short-term revenue from data sales.

Regarding the KYC (Know Your Customer) process that SA969 carries out before your first withdrawal, we understand that some members may feel slightly uncomfortable with the requirement to submit a copy of their MyKad or passport. However, this is a legal obligation imposed on all digital financial platforms in Malaysia under the Anti-Money Laundering Act 2001 — it is not SA969's choice. More importantly, KYC also protects you: it ensures that no one else can use your name to withdraw funds from your SA969 account. Documents submitted for KYC are processed by an accredited third-party verification service and are not permanently stored on SA969's servers once verification is complete.

SA969 also wants to explain the cookies used on the platform. Essential cookies allow SA969 to identify your login session and prevent CSRF (Cross-Site Request Forgery) attacks that could compromise your account. Analytics cookies help us understand, for example, that many members have difficulty finding the badminton odds page — this information allows SA969 to improve platform navigation for all members. You can disable analytics cookies without affecting core platform functionality, though doing so means you will not be contributing to SA969 platform improvements that would benefit you and other members alike.

Finally, SA969 would like to remind you that data protection is a shared responsibility. SA969 can do everything possible from a technical and organisational standpoint, but your account security also depends on your own actions — using a strong password, not sharing your login credentials with anyone, and promptly reporting to SA969 if you notice any suspicious activity in your account. SA969's support team is available 24 hours in Bahasa Malaysia via live chat or email at support@sa969.xyz. Your data privacy and security are our shared priority.

SA969 Related Documents

This Privacy Policy forms part of SA969's complete policy framework. To fully understand your rights and responsibilities as a member, please also read SA969 Terms & Conditions and page SA969 Responsible Gaming. Any privacy enquiries can be directed to support@sa969.xyz — responses in Bahasa Melayu within 3 business days.

FAQ — SA969 Privacy Policy

The most frequently asked questions from members about how SA969 handles and protects their personal data.

No — SA969 does not sell, rent, or share members' personal data with any company for third-party advertising or marketing purposes. Your data is used solely for the operational purposes of the SA969 platform as described in this Privacy Policy. The only third parties that receive any data are operational service providers directly involved in delivering the SA969 platform to you — such as payment processors for TnG, GrabPay, or FPX transactions — and they are bound by strict confidentiality agreements with SA969.

You can submit a data access request by emailing support@sa969.xyz with the subject line "Personal Data Access Request" from the email address registered to your SA969 account. SA969 will first verify your identity through a series of security questions, then provide your data report in a readable format within 14 business days. The report will cover all personal data SA969 holds about you, including account information, transaction history, and relevant support communication records.

When you close your SA969 account, your active profile data is deactivated immediately. However, SA969 is required under Malaysian law — including the Anti-Money Laundering Act and financial reporting obligations — to retain your financial transaction records and KYC documents for 7 years following account closure. After that 7-year period, your data will be securely deleted or fully anonymised. Support communication records are retained for 3 years. You may request a report on what specific data is still held about you after account closure by contacting the SA969 team.

SA969 does not store credit or debit card details directly on our servers. All payments are processed through third-party payment gateways that comply with PCI DSS (Payment Card Industry Data Security Standard) — the highest industry standard for payment processing. For e-wallets such as Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, authentication is handled directly through your e-wallet app — SA969 never sees your PIN or e-wallet password. For FPX via Maybank2u or CIMB Clicks, verification takes place directly on your bank's website, not on the SA969 platform. SA969 only receives confirmation that a payment was successful and the transaction amount — nothing more.

SA969 uses multiple layers of protection to prevent unauthorised access to your account. First, 256-bit SSL encryption secures all data in transit. Second, SA969's systems monitor suspicious login patterns — such as login attempts from unfamiliar locations or devices — and will send an alert to your email. Third, after several failed login attempts, the account is automatically locked temporarily and an additional verification process is required. Fourth, SA969 provides a two-factor authentication (2FA) feature that you can enable in your account security settings for an extra layer of protection. SA969 also recommends using a unique, strong password and not reusing the same password across other services.

Yes — SA969 is committed to notifying affected members within 72 hours in the event of a security incident involving their personal data. A notification will be sent to your registered email address with details on the nature of the incident, what data may have been exposed, the steps SA969 has taken to address the issue, and the actions you should take to protect your account. This reflects global data protection best practice that SA969 follows, even where Malaysian law may not require notification within that timeframe. We believe you have the right to know as early as possible so you can take the necessary precautions.

Your Data Is Safe with SA969 — Ready to Get Started?

Register a free SA969 account in 2 minutes and enjoy Malaysia's best Sports Betting and Live Casino experience, backed by genuine data protection — not just a promise.

256-bit SSL Encryption No Data Sales Your Data, Your Control Malaysia PDPA Compliance
Bahasa Melayu