Privacy Policy spiv2 – Malaysian User Data Protection

1 Introduction

Spiv2 is a trusted online entertainment platform committed to protecting the privacy of every user who registers and uses our services. We understand that your trust is our most valuable asset, and we treat personal data protection as a responsibility we take seriously.

This Privacy Policy is drafted in accordance with internationally recognised data protection principles and covers all aspects of how your information is handled — from the moment you register an account to every interaction you make on our platform. We want to ensure you always know what happens with your data, why it is needed, and what choices you have.

For the purposes of this Privacy Policy, "personal data" refers to any information that can be used to identify you directly or indirectly, including your name, email address, phone number, financial information, and platform usage data.

2 Information We Collect

Spiv2 collects your personal information through several different channels. Each piece of information collected has a clear purpose and is only used to the extent necessary to provide you with quality service.

2.1 Information You Provide Directly

• Registration information: Full name, email address, Malaysian mobile number, date of birth and password.
• Identity verification documents (KYC): A copy of your MyKad or passport, proof of address, and other relevant documents required for verification.
• Financial information: Payment method details such as bank account information, e-wallet account numbers (DuitNow, Touch 'n Go eWallet, Boost, GrabPay), and transaction records.
• Communications: Messages, complaints or feedback you submit to our support team.

2.2 Information Collected Automatically

• Device data: Device type, operating system, phone model and unique device identifier.
• Network data: IP address, internet service provider (ISP), and approximate location based on IP.
• Usage data: Pages visited, games played, session duration, betting history and navigation patterns.
• Cookie data: Session cookies, preference cookies and analytics identifiers to help us understand how you use the platform.

2.3 Information from Third-Party Sources

In certain cases, we may receive information about you from trusted third parties such as payment processors, identity verification agencies, or loyalty programme partners — all subject to strict confidentiality agreements.

3 How We Use Your Data

Every piece of data we collect is used for a specific and legitimate purpose. spiv2 does not use your data for unrelated purposes without informing you in advance.

3.1 Account Management & Services

• Creating, managing and maintaining your user account.
• Processing deposits, withdrawals and other financial transactions securely.
• Providing access to all games and features on the spiv2 platform.
• Sending transaction notifications, account updates and security alerts.

3.2 Security & Fraud Prevention

• Detecting and preventing unauthorized access, fraud and money laundering.
• Conducting KYC checks and Know Your Customer procedures.
• Monitoring suspicious activity to protect all users on the platform.

3.3 Service Improvement

• Analyzing usage patterns to improve platform design and performance.
• Running A/B tests and usability studies to ensure the best experience.
• Developing new features relevant to the needs of Malaysian users.

3.4 Marketing Communications

With your consent, we use your information to send promotional offers, exclusive bonuses, and relevant product updates. You may withdraw this consent at any time through your account settings or by contacting our support team.

4 Information Sharing

Spiv2 maintains a strict policy regarding the sharing of user data. We do not share your personal information arbitrarily. There are only a limited number of situations where data sharing becomes necessary:

4.1 Trusted Service Providers

Spiv2 works with carefully selected third-party service providers to support our operations. These include payment processors, cloud service providers, analytics platforms, and identity verification companies. All third parties are bound by strict data confidentiality agreements and are only permitted to use your data for specified purposes.

4.2 Legal Requirements

Spiv2 may disclose user information to competent authorities if required by applicable Malaysian law, a valid court order, or in the context of an official investigation involving public safety.

4.3 Business Transfers

In the event of a merger, acquisition, or asset sale, user data may be transferred as part of the business assets. We will notify you in advance should this occur and ensure continued data protection.

5 Data Security

The security of your data is spiv2's absolute top priority. We continuously invest in the latest security infrastructure to ensure your personal and financial information is always protected against both external and internal threats.

5.1 Technical Measures

• 256-bit SSL Encryption: All data transmitted between your device and spiv2 servers is encrypted using the latest TLS protocol — the same standard used by major banks in Malaysia.
• Static data encryption: Sensitive information stored in our databases is also encrypted using AES-256.
• Two-Factor Authentication (2FA): An additional security layer that protects your account from unauthorized access even if your password is compromised.
• 24/7 Monitoring: Our automated monitoring system detects and responds to suspicious activity around the clock.
• Regular penetration testing: Independent security experts conduct regular vulnerability assessments to identify and address potential weaknesses.

5.2 Organisational Measures

• Access to user data is restricted to staff who genuinely need it to perform their duties.
• All spiv2 staff who handle user data undergo regular data security training.
• A clear incident response procedure is in place in the event of any data breach.

6 Cookies & Tracking Technologies

Spiv2 uses cookies and similar tracking technologies to ensure the platform functions properly, enhance the user experience, and understand how our platform is used. The following are the types of cookies we use:

6.1 Essential Cookies

These cookies are required for the platform's core functions, such as maintaining login sessions, security and language preferences. The platform cannot function properly without them and they cannot be disabled.

6.2 Performance & Analytics Cookies

These cookies help us understand how visitors interact with the platform — which pages are visited most, session duration and any errors encountered. This information is used in aggregate and cannot be traced to any specific individual.

6.3 Functional Cookies

Functional cookies allow the platform to remember your preferences such as your preferred language, display settings and login information saved at your own request.

6.4 Cookie Controls

You can manage and delete cookies through your browser settings. However, disabling essential cookies may affect the functionality of the spiv2 platform. For cookie management guidance on popular browsers, refer to your browser's documentation.

7 Your Rights as a User

Spiv2 respects and upholds your rights as the owner of your personal data. You have meaningful control over the information we hold about you. The following are the rights you are entitled to:

To exercise any of the above rights, contact our support team via live chat or email. We will process your request within 30 business days in accordance with applicable legal requirements.

8 Data Storage & Deletion

Spiv2 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by applicable laws in Malaysia.

8.1 Retention Period

• Active account data: Retained for the duration your account is active, plus any applicable statutory period.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial compliance requirements.
• KYC documents: Retained for 5 years after account closure in accordance with AML/CFT requirements.
• Support communication log: Retained for 2 years for reference and service improvement purposes.
• Anonymous analytics data: May be retained indefinitely as it cannot be traced to any specific individual.

8.2 Deletion Procedures

When data is no longer required, spiv2 applies industry-standard secure deletion methods. Data that cannot be fully deleted will be anonymised in a form that cannot be traced back to you.

9 Changes to This Privacy Policy

Spiv2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Each version of the policy will include a clear effective date.

For significant changes that affect how we use your data, we will provide adequate notice through:

• In-account notifications on spiv2 when logged in.
• An email will be sent to your registered address at least 14 days before any changes take effect.
• A clear announcement on the spiv2 website homepage.

Your continued use of the spiv2 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes, you may close your account before the effective date.

10 Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist through the following channels:

• Live Chat: Available 24/7 directly from the spiv2 website or app — the fastest way to get immediate assistance.
• Email: [email protected] — response within 24 business hours.
• FAQ Page: Visit our FAQ page for answers to frequently asked privacy questions.

All privacy and data protection inquiries will be handled by our dedicated team, trained in data protection law. You will receive a reference number for follow-up within one business day.