Privacy Policy svip2 –
Your Data Always Secure

1 Privacy Policy Introduction and Scope

Welcome to the svip2 Privacy Policy. This document is an agreement between you as a Member and svip2, Malaysia's leading online casino platform, accessible via svip2.best. This policy explains in detail how we handle your personal information – from how we collect data, the purposes for which it is used, who can access it, how long it is retained, to your rights as the data owner.

Privacy is not merely a legal obligation to us — it is a core value that shapes how we build and operate this platform. Every data-related decision we make always considers the best interests of our members. We believe your trust is the most valuable asset we hold, and we will never take that trust for granted.

This Privacy Policy applies to all users of the svip2 platform, including website visitors, registered members, prize winners, and anyone who interacts with any svip2 service. By using our platform, you agree to the data handling practices described in this document.

2 Types of Personal Data We Collect

Svip2 collects various types of personal information for legitimate and specific purposes. We only collect data that is genuinely required to provide our services safely and efficiently. The following are the main categories of data we collect:

A. Personal Identification Information

• Full name as stated on official identification documents
• Date of birth for minimum age verification of 18 years
• National identification number (MyKad) or passport number
• Active Malaysian-registered mobile phone number
• A valid and active email address
• Current residential address

B. Financial Information

• Bank account number and bank name for deposit and withdrawal processing
• E-wallet account holder name (Touch 'n Go, GrabPay)
• Deposit and withdrawal transaction history on the svip2 platform
• Financial KYC verification information required by authorities

C. Platform Usage Data

• Gaming history including game type, session duration and betting records
• IP address and device type used for login
• Session data including login time, logout time, and session duration
• Language, currency and personal account settings
• Customer support records and live chat logs

D. Automated Technical Data

• Cookies and similar tracking technologies to enhance the user experience
• Server log data including page requests and response codes
• Device information such as operating system, browser type, and screen resolution
• General location data (state/city) based on IP address – not GPS location

3 Purpose and Legal Basis for Data Processing

Every piece of data we collect has a clear purpose and a valid legal basis. svip2 does not process your personal data carelessly. The following are the primary purposes of our data processing along with their underlying legal bases:

Where we rely on your consent as the basis for data processing (such as for marketing purposes), you have the right to withdraw that consent at any time without affecting the validity of processing that took place prior to the withdrawal.

4 Data Sharing with Third Parties

Svip2 does not sell or trade your personal data to third parties. However, in the course of our business operations, there are certain situations where we need to share data with trusted parties. The following is a complete list of such situations:

Approved Service Providers

Svip2 works with carefully selected third-party service providers to help operate our platform. These include payment solution providers (FPX, DuitNow, Touch 'n Go eWallet, GrabPay), KYC service providers for identity verification, certified cloud infrastructure providers, and email and SMS service providers for important communications. All these providers are bound by strict data protection agreements and are only permitted to use your data for the purposes we specify.

Legal Obligations and Authorities

Svip2 may be required to disclose your personal information to government authorities or law enforcement bodies when mandated by applicable Malaysian law, a valid court order, or an official investigation related to fraud, money laundering, or financial crime. In such cases, we will endeavour to notify you in advance, provided that doing so is not prohibited by law.

Corporate Restructuring

If svip2 undergoes a merger, acquisition or asset sale, members' personal data may be transferred as part of the business assets. You will be notified in advance and given the option to withdraw your data should the receiving party have a materially different privacy policy.

5 Data Retention Period

Svip2 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable Malaysian law. Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be identified.

When you close your svip2 account, we will initiate the deletion of your personal data within 30 days, except for data that must be retained under legal obligations such as KYC records and transaction history as outlined in the table above.

6 Your Rights as a Data Owner

As a svip2 member and owner of your own personal data, you have rights protected under Malaysia's Personal Data Protection Act (PDPA) 2010. svip2 respects and facilitates the exercise of all these rights at no additional charge.

7 Data Security Measures

Svip2 continuously invests in the latest cybersecurity infrastructure to ensure members' personal data is always protected against unauthorised access, loss, modification or improper disclosure. The following are the security layers we have in place:

• Encryption in transit: All communications between your browser and svip2's servers are secured with TLS 1.3 and 256-bit SSL certificates that are renewed automatically.
• Encryption at rest: Sensitive data such as banking information and KYC documents are encrypted using AES-256 when stored in our database.
• Role-based access control: svip2 staff may only access data required for their specific tasks. Access to sensitive data requires two-factor authentication.
• 24/7 Monitoring: Our threat detection system operates around the clock to identify suspicious activity and respond in real time.
• Regular security audits: svip2 conducts regular penetration testing and security audits through independent third-party security firms.
• Secure backup: Data is automatically backed up to geographically separate locations with full encryption, ensuring service continuity even in the event of disruptions.

While no security system is perfect, svip2 employs a layered defence approach that ensures any threat that successfully breaches one layer will be stopped by the next. We also maintain a regularly tested incident response plan to ensure any data breach can be detected and addressed swiftly.

8 Cookie and Tracking Technology Policy

Svip2 uses cookies and similar tracking technologies to enhance the user experience, ensure account security and analyse our platform's performance. The following are the categories of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification, CSRF security, and language preferences. These cookies cannot be disabled.
• Functional Cookies: Saves your preferences such as currency, display theme, and favourite game selections for a more personalised experience.
• Analytics Cookies: Helps us understand how members use the platform, which pages are most popular, and where members encounter difficulties – all to improve the user experience.
• Security Cookies: Used to identify suspicious login attempts, unusual activity patterns, and to protect your account from takeover.

You can manage cookie settings through your browser preferences. Please note that disabling essential cookies may affect the functionality of the svip2 platform. Analytics and functional cookies can be disabled without significantly impacting your gaming experience.

9 Privacy Policy Updates

Svip2 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal changes, or the introduction of new services. Any material updates will be communicated to you via email or in-platform notification at least 14 days before the changes take effect.

The latest update date will always be displayed at the top of this document. We encourage you to review this Privacy Policy periodically. Your continued use of the svip2 platform following any updates is considered your acceptance of the latest version of this Privacy Policy.

If you disagree with any material changes, you have the right to close your account and request deletion of your personal data as described in Section 6. Our team is ready to guide you through this process smoothly and respectfully.

Contact Our Privacy Officer

If you have any questions, concerns or complaints regarding how svip2 handles your personal data, we encourage you to contact us directly. Our privacy team is ready to assist you wholeheartedly.

You may contact the svip2 Data Protection Officer through the following methods:

• Live Chat: Available 24/7 via the chat icon at the bottom right corner of the svip2 platform
• Email: [email protected] (response time within 2 business days)
• Ticketing System: Login to your account and submit a support ticket under the "Privacy & Data" category.

We are committed to responding to all privacy-related enquiries within 14 business days. For more complex complaints, we will keep you informed of the investigation's progress within the same timeframe. Your satisfaction and trust are our top priority.