Privacy Policy

This Privacy Policy (hereinafter referred to as "the Policy") is published by SGA898 (hereinafter "SGA898", "we", "us", or "the Platform") and applies to all personal data collected, processed, stored, and transmitted by SGA898 in connection with the operation of the online gaming platform available at https://sga898.click and all associated services.

SGA898 serves a predominantly Malaysian user base and processes all financial transactions in Malaysian Ringgit (MYR) via locally integrated payment channels including Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay. The personal data of Malaysian players is handled with the care, transparency, and security that users of these trusted financial systems expect.

This Policy should be read in conjunction with SGA898's Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, online identifiers, and behavioural data gathered during platform use.
• "Processing" any operation performed on personal data, whether by automated or manual means, including collection, recording, storage, alteration, retrieval, disclosure, erasure, and destruction.
• "Data Controller" SGA898, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" any third party that processes personal data on behalf of SGA898 pursuant to a data processing agreement, including payment processors, KYC verification providers, and customer support infrastructure providers.
• "Data Subject" the individual whose personal data is being processed — in the context of this Policy, the registered Account Holder or visitor to the Platform.
• "Consent" a freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for a stated purpose.
• "KYC" Know Your Customer — the identity verification process mandated by applicable anti-money laundering obligations, requiring users to submit proof of identity and address.

SGA898 collects the categories of personal data listed below. We apply the principle of data minimisation — we collect only what is necessary for the specified purposes described in Section 5 of this Policy.

3.1 Identity & Registration Data

• Full legal name and date of birth;
• Malaysian NRIC number or passport number (for KYC verification);
• Username and account credentials;
• Profile information provided voluntarily during registration or account updates.

3.2 Contact & Communication Data

• Email address;
• Mobile phone number (used for account verification and two-factor authentication);
• Residential address (for KYC and communication purposes);
• Records of communications with SGA898's customer support team, including live chat transcripts and email correspondence.

3.3 Financial & Payment Data

• Bank account details associated with Maybank2u, CIMB Clicks, Public Bank, or Hong Leong Connect transactions;
• E-wallet account identifiers for Touch 'n Go eWallet, Boost, and GrabPay;
• FPX and DuitNow transaction reference numbers;
• Deposit and withdrawal amounts, dates, and payment method records;
• Account balance history and transaction logs.

3.4 Gameplay & Behavioural Data

• Betting history, including sports markets wagered, casino games played, stake amounts, and outcomes;
• Session duration, login frequency, and active game time;
• Bonus and promotion interactions;
• Game preferences and browsing patterns within the Platform.

3.5 Technical & Device Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, and browser version;
• Cookie identifiers and session tokens;
• Platform interaction logs, including page views and click events.

SGA898 collects personal data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, contact customer support, or update your account profile;
• Automatically during Platform use — through server logs, cookies, and session tracking technologies that record your interactions with the SGA898 website;
• From payment processors — when you initiate a deposit or withdrawal via Maybank2u, CIMB Clicks, FPX, DuitNow, or any supported e-wallet, transactional confirmation data is passed to SGA898 to reconcile your account;
• From identity verification providers — where SGA898 uses a third-party KYC service to verify identity documents, that provider may return structured verification results to SGA898 confirming or denying identity match;
• From fraud prevention and AML screening services — where required by our compliance obligations, data may be cross-referenced against watchlist databases.

SGA898 processes your personal data for the following specific purposes:

5.1 Account Management

To create, verify, maintain, and administer your SGA898 account, including processing registration, verifying eligibility, managing account settings, and communicating account-related updates and notifications.

5.2 Payment Processing

To process deposits and withdrawals via the Malaysian payment channels you select, to reconcile transactions with payment providers, and to maintain accurate financial records of all account activity in MYR.

5.3 Identity Verification & KYC Compliance

To verify your identity and age in compliance with applicable anti-money laundering, counter-terrorism financing, and responsible gambling age restriction obligations. SGA898 is for players aged 21 and above only, and KYC is the primary mechanism through which this obligation is enforced.

5.4 Service Delivery & Platform Operation

To provide access to betting markets, casino games, slot titles, lottery products, and all other SGA898 services; to process wagers and calculate payouts; and to maintain the technical infrastructure of the Platform.

5.5 Customer Support

To respond to inquiries, resolve disputes, process complaints, and provide technical assistance through SGA898's live chat, email, and Telegram support channels.

5.6 Responsible Gambling Monitoring

To monitor gameplay patterns for indicators of problem gambling behaviour; to enforce self-exclusion, deposit limits, and loss limits set by the player; and to identify accounts that may benefit from responsible gambling intervention.

5.7 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in SGA898's Terms & Conditions.

5.8 Personalisation & Marketing

Where you have provided consent, to send promotional communications about SGA898 offers, bonuses, and platform updates relevant to your interests and activity profile. You may withdraw consent to marketing communications at any time via your account settings or by contacting our support team.

5.9 Legal & Regulatory Compliance

To comply with applicable legal and regulatory obligations, including responding to lawful requests from regulatory authorities, law enforcement agencies, and courts of competent jurisdiction.

SGA898 processes personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity — processing required to fulfil our obligations to you under the Terms & Conditions you agreed to at registration (e.g., account management, payment processing, service delivery);
• Legal obligation — processing required to comply with applicable law, including KYC verification, AML reporting, and age verification obligations;
• Legitimate interests — processing carried out to protect the security of the Platform, prevent fraud, and maintain the integrity of our gaming operations, where such interests are not overridden by your fundamental rights;
• Consent — processing for marketing and personalisation purposes, where your explicit consent has been obtained and where you retain the right to withdraw that consent at any time.

SGA898 may share your personal data with the following categories of third parties:

• Payment service providers — Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay, solely for the purposes of processing your deposits and withdrawals;
• KYC and identity verification providers — contracted third-party services engaged to verify identity documents and screen against watchlists, bound by data processing agreements restricting their use of your data;
• Fraud prevention and AML service providers — services that cross-reference account data against relevant databases to detect and prevent financial crime;
• Customer support infrastructure providers — third-party platforms that host SGA898's live chat, email ticketing, or Telegram support systems;
• Regulatory authorities and law enforcement — where SGA898 is required by law, court order, or regulatory direction to disclose specific user data;
• Professional advisors — legal counsel, auditors, and compliance advisors engaged by SGA898 under strict confidentiality obligations.

All third parties with whom SGA898 shares personal data are contractually required to process that data only for the purposes for which it was shared and in accordance with applicable data protection standards.

SGA898 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory retention obligations, and to resolve any disputes that may arise.

Where personal data is no longer required for any applicable purpose, SGA898 will securely delete or anonymise it in accordance with our internal data lifecycle procedures.

SGA898 implements technical and organisational security measures proportionate to the sensitivity of the personal data held and the risks posed by unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and SGA898's servers — the same standard employed by Malaysian internet banking portals including Maybank2u and CIMB Clicks;
• Encryption at rest for sensitive data categories including financial records, identity documents, and authentication credentials;
• Access controls restricting internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging;
• Two-factor authentication available for all player accounts;
• Regular security assessments and vulnerability testing of the Platform and its supporting infrastructure;
• Incident response procedures to detect, contain, and remediate any suspected data security breach within appropriate timeframes.

SGA898 uses cookies and similar tracking technologies to operate the Platform effectively, improve user experience, and gather aggregated analytics on Platform usage patterns.

10.1 Types of Cookies Used

• Strictly necessary cookies — required for the Platform to function, including session management, authentication tokens, and security cookies. These cannot be disabled without impairing Platform functionality;
• Functional cookies — store your preferences such as preferred game categories, language settings, and layout choices to improve your experience on return visits;
• Analytics cookies — collect anonymised data on how visitors interact with the Platform, such as pages visited and session duration, to help SGA898 improve the user interface and game discovery features;
• Security cookies — support fraud detection and multi-accounting prevention mechanisms by identifying behavioural patterns across sessions.

10.2 Cookie Management

Most browser software allows you to manage your cookie preferences, including blocking or deleting cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use the SGA898 Platform. Information on managing cookies is available through your browser's settings or help documentation.

In the course of operating the SGA898 platform, personal data may be transferred to, stored in, or processed by systems located outside of Malaysia. This may occur, for example, where SGA898 engages with internationally based payment processors, KYC verification providers, or cloud infrastructure providers.

Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, SGA898 will implement appropriate safeguards to protect that data, such as contractual clauses equivalent to standard data protection agreements, to ensure that your data receives a standard of protection consistent with this Policy.

Subject to applicable law and the specific circumstances of your request, you hold the following rights in relation to the personal data SGA898 holds about you:

To exercise any of the rights listed above, please contact SGA898's support team via live chat, email at [email protected], or through our Telegram support channel. SGA898 will acknowledge rights requests within a reasonable period and respond substantively as required by applicable law.

Please note that certain rights are subject to limitations — for example, the right to erasure does not apply to data that SGA898 is legally obligated to retain for AML or regulatory purposes.

Parents and guardians who believe a minor may have registered on SGA898 are encouraged to contact our support team immediately so that the matter can be investigated and resolved promptly.

SGA898 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material amendments will be communicated to registered users via the Platform's notification system or by email to the address on their account.

The "Last Reviewed" date at the top of this Policy will be updated upon each revision. Continued use of the SGA898 platform following the publication of a revised Policy constitutes your acceptance of the changes. We encourage you to review this page periodically to remain informed of how your data is being handled.

For any questions, concerns, or formal requests relating to this Privacy Policy or SGA898's data processing practices, please contact us through the following channels. All data-related enquiries will be handled with appropriate care and confidentiality.

SGA898 aims to acknowledge all privacy-related requests within 5 business days. Complex requests, such as data subject access requests, may require up to 30 days to fulfil in full, particularly where KYC re-verification is required before personal data can be released.