Privacy Policy — sas988 Online Casino Malaysia

1. Introduction

sas988 ("the Platform", "we", "us", "our") operates the website at https://sas988.cam and is committed to protecting the privacy and personal data of all users ("Player", "User", "you") who access or use our services. This Privacy Policy ("Policy") sets out in full how sas988 collects, processes, stores, shares, and safeguards your personal information in connection with the provision of our online casino, sports betting, and related services.

This Policy applies to all personal data collected through the Website, our mobile-optimised interface, live chat support, email correspondence, and any other channel through which you interact with sas988. By creating an account or continuing to use the Platform, you acknowledge that you have read this Policy and consent to the data practices described herein.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or transmission.
• "Data Controller" means sas988, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of sas988, subject to contractual obligations.
• "KYC Data" means identity and address verification documents collected as part of the Know Your Customer process required before a Player may make a withdrawal.
• "Cookie" means a small text file placed on your device by the Website to store session and preference information.
• "MYR" / "RM" refers to Malaysian Ringgit, the currency in which all sas988 transactions are denominated.

3. Data We Collect

sas988 collects the following categories of Personal Data:

3.1 Registration & Account Data

• Full legal name as it appears on your identity document;
• Date of birth (used to verify the 21+ age requirement);
• Email address and mobile phone number;
• Username and encrypted password;
• Residential address, including city (Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere in Malaysia);
• Preferred language and currency (MYR).

3.2 KYC & Identity Verification Data

• Malaysian IC (MyKad) number, Driver's Licence number, or Passport number and expiry date;
• Scanned copies or photographs of identity documents;
• Proof of address documents (utility bills, bank statements);
• Selfie images submitted for liveness verification purposes.

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps;
• Payment method identifiers (e.g., masked bank account numbers, e-wallet registered phone numbers for Touch 'n Go eWallet, GrabPay, Boost, DuitNow, or FPX);
• Transaction history and account balance records;
• Bonus claims, wagering activity, and promotional participation records.

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Session start and end times, pages visited, and features accessed;
• Game play history, bet amounts, and game outcomes;
• Referring URL and search terms used to find the Website.

3.5 Communications Data

• Live chat transcripts with the sas988 support team;
• Email and in-account message content relating to support queries, disputes, or account management;
• Survey responses and feedback submitted voluntarily.

4. How We Collect Your Data

sas988 collects Personal Data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, participate in a promotion, or submit any form on the Website;
• Automatically — through cookies, server logs, and analytics tools as you browse and interact with the Website;
• From third parties — including identity verification service providers, payment processors (Maybank, CIMB, Public Bank, Hong Leong Bank, FPX gateway operators, e-wallet providers), and fraud detection services, where necessary to fulfil our legal and operational obligations.

5. Purposes of Data Processing

sas988 processes your Personal Data for the following purposes:

6. Legal Basis for Processing

sas988 processes your Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing required to deliver the services you have contracted for by registering an account, including account management, payment processing, and gameplay;
• Legal obligation: Processing required to comply with applicable laws, including AML regulations, KYC requirements, and international licensing conditions;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and service improvement, where these interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

sas988 does not sell, rent, or commercially disclose your Personal Data to unaffiliated third parties for their own purposes. We may share your data with the following categories of recipients, solely as required to operate the Platform and meet our legal obligations:

7.1 Payment Processors

To process deposits and withdrawals, we share necessary financial and identity data with payment service providers including Maybank, CIMB, Public Bank, Hong Leong Bank, FPX gateway operators, and e-wallet providers (Touch 'n Go eWallet, GrabPay, Boost, DuitNow). These processors act under binding data processing agreements and may only use your data to facilitate the specific transaction.

7.2 Identity Verification Providers

KYC Data is shared with third-party identity verification services to validate your identity documents and confirm that you meet the 21+ age requirement. These providers operate under strict confidentiality obligations.

7.3 Fraud & AML Compliance Services

sas988 uses third-party fraud detection and anti-money laundering screening services. Relevant account and transaction data may be shared with these services to identify suspicious activity and fulfil our compliance obligations.

7.4 Regulatory & Law Enforcement Authorities

We may be required to disclose Personal Data to licensing authorities, regulatory bodies, or law enforcement agencies where mandated by applicable law, court order, or in the legitimate exercise of our legal rights.

7.5 Technology & Infrastructure Providers

Hosting, cloud storage, email delivery, and analytics services are provided by third-party technology vendors. These parties act as Data Processors under contractual agreements and may only access data to the extent required to deliver their specific service.

8. Cookies & Tracking Technologies

The sas988 Website uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. The following categories of cookies are in use:

• Strictly Necessary Cookies: Required for the Website to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cookies cannot be disabled without impairing Website functionality.
• Functional Cookies: Store your preferences such as language, currency (MYR), and display settings to personalise your experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Website (pages visited, session duration, referral source) to help us improve the Platform.
• Marketing Cookies: Used to deliver relevant promotional content to returning Players. These cookies are only set with your prior consent and can be withdrawn at any time through your browser settings.

You can manage cookie preferences through your browser's settings. Please note that disabling certain cookies may affect your ability to use some features of the sas988 Website.

9. Data Retention

sas988 retains Personal Data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods:

• Account and KYC Data: Retained for a minimum of five (5) years following account closure, as required by AML regulations and our licensing obligations;
• Transaction and Financial Data: Retained for a minimum of seven (7) years to satisfy financial record-keeping requirements;
• Support Communications: Retained for a period of three (3) years following the resolution of the relevant query or dispute;
• Technical and Usage Data: Typically retained in identifiable form for up to twelve (12) months, after which it may be anonymised and retained indefinitely for statistical analysis;
• Marketing Data: Retained until consent is withdrawn, after which it is promptly removed from active marketing lists.

Upon the expiry of applicable retention periods, Personal Data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

10. Data Security

sas988 implements a multi-layered security framework to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and the sas988 server is encrypted using industry-standard TLS 1.3 protocols;
• Encrypted Data Storage: Sensitive data fields, including passwords and payment identifiers, are stored using strong one-way hashing or AES-256 encryption at rest;
• Two-Factor Authentication (2FA): Available for all Player accounts and strongly recommended to provide an additional layer of access security;
• Segregated Fund Accounts: Player funds are held in accounts entirely separate from operational funds, protecting deposits in the event of operational disruption;
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis, with role-based permissions and activity logging applied to all systems holding Player data;
• Regular Security Audits: Our platform undergoes periodic security assessments and penetration testing conducted by independent security professionals.

11. Your Data Rights

Subject to applicable law, you hold the following rights in respect of your Personal Data held by sas988:

• Right of Access: You may request a copy of the Personal Data sas988 holds about you, along with information about how it is being processed;
• Right to Rectification: You may request the correction of inaccurate or incomplete Personal Data. You may update most account details directly through your Account settings;
• Right to Erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations;
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances, such as while a dispute is under investigation;
• Right to Data Portability: You may request a structured, machine-readable copy of the Personal Data you provided to sas988, where technically feasible;
• Right to Object: You may object to the processing of your data for direct marketing at any time. You may also object to processing based on legitimate interests, subject to our demonstration of compelling grounds;
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the sas988 Data Privacy team via live chat or by email at the address provided in Section 16 below. We will respond to verifiable requests within a reasonable timeframe and in accordance with applicable law. We may require you to verify your identity before processing a data rights request.

12. Children's Privacy

The sas988 platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from anyone under the age of 21. If sas988 becomes aware that Personal Data has been collected from a person under 21 without appropriate parental or guardian consent, such data will be promptly deleted and the associated account permanently closed.

If you are a parent or guardian and believe that a minor has created an account on sas988 without your knowledge, please contact our support team immediately via live chat or email so that we may take swift action.

13. International Data Transfers

sas988 may transfer your Personal Data to servers or service providers located outside of Malaysia. Where such transfers take place, sas988 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable privacy law. These safeguards include contractual data processing agreements incorporating standard data protection clauses, and transfers only to jurisdictions or providers that offer an adequate level of data protection.

By using the sas988 platform, you consent to your Personal Data being transferred to and processed in jurisdictions outside Malaysia where our infrastructure or service providers are located.

14. Third-Party Links

The sas988 Website does not include links to external third-party websites as a general rule. In the event that any informational reference to a third-party service appears on the Website, please be aware that sas988 has no control over and accepts no responsibility for the privacy practices of any third-party operator. This Privacy Policy applies solely to data collected and processed by sas988 through the Website and its associated services.

15. Amendments to This Policy

sas988 reserves the right to amend, update, or replace this Privacy Policy at any time. Where material changes are made, sas988 will publish the revised Policy on the Website and, where reasonably practicable, notify registered Players via in-account notification. The "Last updated" date at the top of this page will be revised accordingly.

Your continued use of the sas988 platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. We recommend reviewing this Policy periodically to remain informed of how your data is being handled.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the sas988 Privacy team through any of the following channels. Please note that the email address below is displayed as plain text only and is not a clickable link: