Privacy Policy Suncity 2 —
Our Commitment to Protection
Malaysian Player Personal Data

Suncity 2 values the privacy of every player on our platform. This Privacy Policy details how suncity 2 collects, uses, stores, and protects your personal information when you register, make a deposit, place a bet, or interact with any part of our platform.

This policy applies to all users of the suncity 2 platform, including players who register via the official website, through the Android or iOS mobile app, or through any official channel operating under the suncity 2 name. It does not apply to third-party websites or services that may link to our platform.

By using the suncity 2 platform, you consent to the data handling practices described in this document. If you do not agree with any part of this policy, please stop using the platform and contact us to request the deletion of your existing data.

Suncity 2 collects personal information in three main circumstances — when you register an account, when you use our services, and when you contact our support team. Below are the categories of data collected:

Suncity 2 no collecting sensitive data such as medical information, sexual orientation, or political views. We also do not collect data from individuals under 18 years of age — any data found to have been collected from minors will be deleted immediately upon verification.

All data collected by suncity 2 has a clear purpose and is never used beyond what is necessary. Below are the specific purposes for which your data is used:

• Account operations: Registering your account, verifying your identity (KYC), processing logins, and maintaining the security of your session on the suncity 2 platform
• Financial processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals of winnings to accounts registered in your name
• Legal compliance: Meeting KYC (Know Your Customer), AML (Anti-Money Laundering), and relevant regulatory reporting requirements
• Platform security: Detecting suspicious activity, preventing fraud, and protecting player accounts from unauthorized access
• Service improvement: Analyzing usage patterns in aggregate (not individual data) to improve the overall suncity 2 platform experience
• Service communications: Sending important account-related notices — such as deposit confirmations, security alerts, or policy updates — via email or SMS
• Customer support: Resolving enquiries and complaints you submit to the suncity 2 support team

Suncity 2 does not use your data to build advertising profiles for sale to third-party advertisers. Any promotional communications we send relate solely to suncity 2's own offers, and you may opt out of promotional emails at any time via the unsubscribe link in each email.

Suncity 2 does not sell, rent, or commercialise player personal data to any third party. This is a core commitment that remains unchanged under any business circumstances.

However, there are limited circumstances where suncity 2 is required to share data with certain parties in order to operate the platform lawfully:

• Payment providers: Required transaction information is shared with authorised payment processors (such as FPX processors and digital wallet providers) solely to complete your deposits and withdrawals. These providers are bound by strict confidentiality agreements with suncity 2.
• Regulatory body: Suncity 2 will disclose information to competent authorities or regulatory bodies when lawfully required to do so under applicable law — for example, in the course of fraud or money laundering investigations.
• Technical service providers: Server infrastructure and security providers that operate suncity 2's systems may have limited access to data in the course of performing their technical functions. All such providers are bound by strict data protection agreements.
• Business transfer: In the event of a merger, acquisition, or sale of company assets, user data may be transferred as part of the business assets — with prior notice given to affected users.

All third parties receiving data from suncity 2 are bound by contractual obligations to protect that data to the same or higher standards that suncity 2 itself applies. suncity 2 is not responsible for the privacy practices of third parties with whom we have no contractual relationship.

Suncity 2 invests seriously in security infrastructure to ensure that players' personal and financial data is always protected. The key security measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and suncity 2's servers is encrypted to the same standard used by banking institutions. Data stored in our databases is also encrypted.
• Two-factor authentication (2FA): Players can enable 2FA for an added layer of security. With 2FA active, logging in from a new device requires a verification code sent to your registered phone number.
• Real-time monitoring: suncity 2's systems continuously monitor account activity to detect unusual patterns — such as login attempts from unfamiliar locations or suspicious transaction activity — and will alert you immediately if any such activity is detected.
• Internal access restrictions: suncity 2 staff can only access user data required for their specific job functions. All access is logged and audited on a regular basis.
• Regular penetration testing: suncity 2 conducts regular security testing (penetration testing) with the assistance of independent cybersecurity experts to identify and address any vulnerabilities before they can be exploited.

In the unlikely event of a security breach involving user data, suncity 2 is committed to notifying affected users within a reasonable timeframe and taking the necessary remedial steps as quickly as possible.

The suncity 2 platform uses cookies and similar tracking technologies to ensure a smooth user experience and to understand how the platform is being used. The types of cookies we use include:

• Session cookies (required): Required to maintain your login session while using the platform. Without these cookies, you would be logged out every time you navigate to a new page. These cookies cannot be disabled without affecting the core functionality of the suncity 2 platform.
• Preference cookies: Saves your preferences such as language and display settings so you don't have to reconfigure them on every new visit.
• Analytics cookies: Helps us understand which pages or sections of the platform receive the most traffic and how players interact with the interface. This data is used in aggregate, anonymised form for product improvement purposes only.
• Security cookies: Helping us identify suspicious activity, prevent fraud, and ensure only authorized users can access their accounts.

You can manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the suncity 2 platform — particularly session cookies required for login. suncity 2 does not use third-party cookies for advertising purposes.

As a suncity 2 player, you have clear and enforceable rights over your personal data. Suncity 2 respects these rights and makes them straightforward to exercise:

To exercise any of the rights above, contact the suncity 2 privacy team by email at support@suncity2.best, specifying the right you wish to exercise and your account details for identity verification. Suncity 2 will respond within 30 calendar days of receiving your request.

Suncity 2 retains your personal data only for as long as necessary for the purposes outlined in this policy, or as required by applicable law. The following is a guide to retention periods by data category:

• Active account data: Retained for as long as your account remains active and in use on suncity 2. This data is necessary for the continued operation of platform services.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date following account closure, in line with applicable accounting and AML legal requirements.
• Support communication logs: Retained for 3 years from the date of the conversation for dispute resolution and service quality purposes.
• Usage & analytics data: Anonymized aggregate data is retained indefinitely as it contains no personal information that could identify an individual.
• Closed accounts: Basic identity data is retained for 5 years following account closure for fraud prevention purposes and to demonstrate legal compliance.

When data is no longer needed and there is no legal obligation to retain it, suncity 2 will securely delete or anonymize that data using methods that ensure it cannot be recovered.

In the course of operating the suncity 2 platform, player personal data may need to be processed or stored on servers located outside Malaysia — for example, in connection with cloud computing services used by the platform.

Where cross-border data transfers occur, suncity 2 ensures the following protections are in place:

• Data is only transferred to countries or entities that provide a level of data protection equivalent to or greater than Malaysian standards
• All data transfers are governed by legally binding data transfer agreements between suncity 2 and the receiving party
• The cloud service providers used by suncity 2 are selected based on their security track record and compliance with recognised international data standards

Suncity 2 reserves the right to update this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or developments in the technology we use. Users will be notified of significant changes through:

• A notice displayed within the suncity 2 platform when you log in after an update takes effect
• Email to the address registered on your account for significant changes
• Updates will be reflected in the "Last Updated" date at the top of this document

For any questions, concerns, or requests relating to your privacy and personal data at suncity 2, please reach out to us through the following channels: