Privacy Policy —
How senang88 Protects Your Data

This Privacy Policy ("Policy") issued by senang88 ("senang88", "we", "us", "our") and applies to all personal data processed in connection with your use of the website located at https://senang88.cam and any associated mobile applications, platforms, games, and services (collectively, the "Platform").

Senang88 is the data controller in respect of your personal data collected and processed through the Platform. We are committed to processing your personal data in a lawful, fair, and transparent manner, in accordance with applicable data protection legislation and principles recognised under international privacy frameworks, including those relevant to our operating jurisdiction.

This Policy describes the categories of personal data we collect, the purposes for which we process it, the legal bases on which we rely, the circumstances in which we share it with third parties, how long we retain it, and the rights you hold in relation to your personal data. Please read this Policy carefully before registering an account or using the Platform.

By creating an account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein.

In this Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person (a "data subject"), including but not limited to a name, identification number, location data, online identifier, or one or more factors specific to that person's identity.
• "Processing" means any operation or set of operations performed on Personal Data, whether or not by automated means, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data. In relation to this Policy, the Data Controller is senang88.
• "Data Processor" means any third party that Processes Personal Data on behalf of senang88 pursuant to a data processing agreement, such as payment service providers, cloud infrastructure operators, or KYC verification partners.
• "Consent" means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they signify agreement to the Processing of Personal Data relating to them.
• "KYC" means Know Your Customer — the identity verification process mandated under our anti-money laundering (AML) obligations, including collection and verification of identity documents, proof of address, and source-of-funds information.
• "Third Party" means any natural or legal person, public authority, agency, or body other than you, senang88, or persons who, under the direct authority of senang88, are authorised to Process Personal Data.

We collect Personal Data from you directly (when you provide it to us) and automatically (when you interact with the Platform). The categories of data we collect, and the context in which they are collected, are set out in the table below:

We do not intentionally collect or process special categories of sensitive Personal Data (such as health data, racial or ethnic origin, political opinions, religious beliefs, or biometric data used for identification purposes), except where expressly required for responsible gambling assessment purposes with your explicit consent.

We use the Personal Data we collect for the following purposes:

• Account Management: To create, maintain, and administer your Account, including processing registration, verifying eligibility (including age verification — minimum21 years), and managing login credentials and account security settings.
• Payment Processing: To facilitate deposits and withdrawals through Malaysian payment channels including Maybank2u, CIMB Clicks, Public Bank, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FX, and cryptocurrency networks (BTC/USDT).
• KYC and Anti-Money Laundering (AML) Compliance: To verify your identity, confirm your source of funds where required, fulfil our regulatory reporting obligations, and prevent financial crime.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, unauthorised account access, and other prohibited conduct on the Platform.
• Responsible Gambling: To monitor gaming behaviour patterns for indicators of problem gambling, apply responsible gambling tools (deposit limits, self-exclusion) where appropriate, and comply with our duty of care obligations.
• Customer Support: To respond to your enquiries, resolve complaints, process account requests, and maintain records of our communications with you.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, improve game performance, and develop new features based on aggregated and anonymised user behaviour data.
• Marketing Communications: Where you have opted in, to send you promotional offers, bonus notifications, and news about new games and features relevant to your preferences. You may opt out at any time.
• Legal and Regulatory Compliance: To comply with applicable laws, regulations, court orders, and lawful requests from regulatory or law enforcement authorities.

Senang88 processes your Personal Data on the following legal bases, each of which is applied depending on the specific purpose and category of data in question:

• Contractual Necessity: Processing is necessary to perform the contract between you and senang88 — i.e., to operate your Account, process payments, and deliver the gaming services you have requested.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including AML legislation, gaming licence conditions, and mandatory KYC requirements.
• Legitimate Interests: Processing is necessary for the purposes of senang88's legitimate interests, provided those interests are not overridden by your rights and interests. Legitimate interests include fraud prevention, platform security, responsible gambling monitoring, and internal analytics.
• Consent: For certain processing activities — particularly direct marketing communications — we rely on your explicit consent. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of prior processing.

Senang88 does not sell, rent, or trade your Personal Data to third parties for their independent commercial purposes. We share your data only in the following limited and controlled circumstances:

• Payment Service Providers: We share necessary financial and identity data with payment processors, banking partners, and e-wallet providers (including but not limited to Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, and DuitNow) solely to facilitate transactions on your Account.
• KYC and Identity Verification Partners: We engage accredited third-party KYC verification providers to assist with identity document verification and liveness checks. These providers process data solely under our instruction and pursuant to a data processing agreement.
• IT Infrastructure and Cloud Providers: We use cloud hosting and data centre providers to store and process Platform data. These providers are bound by confidentiality obligations and may not use your data for their own purposes.
• Regulatory and Law Enforcement Authorities: We may disclose Personal Data where required by law, court order, or a binding request from a competent regulatory or law enforcement authority, including gaming regulators and financial intelligence units.
• Fraud Prevention and Shared Intelligence Networks: We may share limited data with recognised fraud prevention organisations and inter-operator responsible gambling databases where we are legally permitted or obligated to do so.
• Professional Advisers: We may disclose your data to our legal counsel, auditors, and compliance consultants on a strictly need-to-know basis and subject to professional confidentiality obligations.

The senang88 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to provide a personalised experience, and to generate aggregated analytics about Platform usage. A "cookie" is a small text file placed on your device by the Platform when you visit.

We use the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the Platform to operate. They include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing the Platform's core functionality.
• Functional Cookies: These remember your preferences — such as language settings, your last-selected game category, and notification preferences — to improve your experience across sessions.
• Performance and Analytics Cookies: These collect anonymised information about how users interact with the Platform — which pages are visited most, session durations, error rates — to help us improve performance and usability.
• Responsible Gambling Cookies: These cookies help us track session duration and prompt responsible gambling reminders in accordance with your configured account settings.

You can manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the Platform, including the ability to log in, access games, or process transactions.

We retain your Personal Data for as long as it is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. The following general retention guidelines apply:

• Active Account Data: Retained for the full duration of your Account and updated continuously to ensure accuracy.
• Transaction Records: Retained for a minimum of seven (7) years following the date of each transaction, in compliance with AML and financial record-keeping obligations applicable under international gaming licence conditions.
• KYC Documentation: Retained for a minimum of five (5) years from the date of Account closure or the date of the last transaction, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the relevant interaction, unless the subject matter relates to a formal complaint or legal dispute, in which case records are retained until the matter is fully resolved.
• Marketing Data: Retained until you withdraw your marketing consent or until two (2) years of inactivity have elapsed, whichever is earlier.
• Technical and Log Data: Typically retained for ninety (90) days in active logs and up to twelve (12) months in archive form security investigation purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be attributed to an identified or identifiable individual.

As a globally operating platform, senang88 may transfer your Personal Data to countries outside Malaysia in connection with our use of cloud infrastructure, payment processing networks, and KYC verification services. Some of our Data Processors maintain data centres or operational hubs in jurisdictions outside Malaysia.

Where such transfers occur, senang88 ensures that appropriate safeguards are in place to protect your Personal Data, including:

• Standard Contractual Clauses (SCCs) or equivalent contractual protections incorporated into data processing agreements with third-party processors;
• Transfers to jurisdictions that have been recognised as providing an adequate level of data protection by relevant regulatory bodies; and
• Technical and organisational security measures comensurate with the sensitivity of the data being transferred.

You may request further information about the specific safeguards applicable to cross-border data transfers involving your Personal Data by contacting us using the details in Section 14.

Subject to applicable law and any overiding legitimate interests or legal obligations of senang88, you have the following rights in relation to your Personal Data. These rights are exercisable by submitting a request to our support team via live chat or email.

Senang88 implements a comprehensive suite of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• AES-256 encryption for all Personal Data stored at rest on our servers;
• TLS 1.3 encryption for all data transmitted between your device and the Platform;
• Multi-factor authentication (MFA) options for Account login, available to all Players;
• Role-based access controls limiting internal access to Personal Data on a strict need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent third-party security specialists;
• Intrusion detection and prevention systems (IDPS) monitoring our network infrastructure real time;
• A formal data breach response procedure, including assessment, containment, and notification protocols.

In the event of a Personal Data breach that is likely to result in a risk to your rights and freedoms, senang88 will notify you and any relevant regulatory authority in accordance with applicable breach notification obligations, without undue delay.

The senang88 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process Personal Data of persons under the age of 21. Our registration process includes mandatory age verification, and KYC procedures are applied to all Accounts prior to withdrawal processing.

If we become aware that Personal Data belonging to a person under the age of 21 has been collected — whether through misrepresentation, an error in our verification procedures, or any other means — we will immediately suspend the relevant Account, delete all associated Personal Data to the extent not required for legal or fraud investigation purposes, and return any remaining balance (net of any bonus funds) via the original payment method.

Senang88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory guidance, or business operations. When we make material changes to this Policy, we will:

• Update the "Last Reviewed" date at the top of this page;
• Notify you by email to the address registered on your Account where the change is material and directly affects your rights; and
• Display a prominent notice on the Platform where required by applicable law.

Your continued use of the Platform following notification of any update to this Policy constitutes your acknowledgement of the revised terms. We encourage you to review this page periodically to stay informed of how we protect your Personal Data.

If you have any questions or concerns about this Privacy Policy, wish to exercise any of your data protection rights, or wish to raise a concern about how we have handled your Personal Data, please contact us through any of the following channels:

• Live Chat (24/7): Available on every page of the senang88 Platform. This is the fastest channel for account-specific privacy queries and immediate data subject requests.
• Email: [email protected] — For formal privacy requests, please mark your subject line as "Privacy Request — [Your Username]" to ensure correct routing to our data protection team.

We aim to acknowledge all privacy-related enquiries within two (2) business days and to provide a substantive response within thirty (30) calendar days as noted in Section 10above.