Privacy Policy sbutogel –
Malaysia User Data Security

This Privacy Policy is published by sbutogel and applies to all users who access or use our platform, including the website, mobile app, and any related services provided by sbutogel. This document outlines our practices regarding the collection, use, disclosure, and protection of your personal information.

We understand that trust is the foundation of the relationship between a platform and its users. As such, sbutogel takes seriously its responsibility to protect every user's privacy — not merely to fulfil legal requirements, but as a genuine commitment to the trust you place in us.

By registering or continuing to use sbutogel's services, you agree to the collection and use of information as described in this Privacy Policy. This Policy should be read together with Terms and Conditions sbutogel.

Sbutogel collects personal data necessary to allow you to use the platform safely and effectively. Below is a summary of the types of data we collect and the purposes for collection:

We does not collect sensitive data such as health information, religious beliefs, political opinions or any biometrics unless specifically required for agreed identity verification purposes.

The data we collect is used exclusively for the following purposes and nothing beyond that:

• Operate and manage your account — registration, secure login and profile management
• Process financial transactions — deposits via DuitNow, FPX, Touch 'n Go and withdrawals to your Malaysian bank account
• Identity verification (KYC) — ensuring compliance with age limit requirements and fraud prevention
• Deliver customer support — helping you resolve any issues or enquiries
• Send important communications — transaction notifications, security updates and service information
• Prevent fraud and money laundering — monitoring suspicious activity to protect all users
• Improve the platform — aggregated and anonymised usage analytics to improve the user experience
• Comply with legal requirements — compliance with applicable regulations and directives from relevant authorities

For marketing communications such as promotional offers and the latest bonuses, we will only send messages to users who have given explicit consent. You may withdraw this consent at any time through the notification settings in your account.

Sbutogel does not sell your personal data. However, there are limited situations where we share certain information with carefully selected third parties:

• Trusted payment processors — payment partners such as FPX, DuitNow, and e-wallet gateways responsible for securely processing your transactions
• KYC service providers — identity verification companies that help us validate user information in compliance with industry standards
• Technology infrastructure providers — cloud computing and hosting services that store data in protected, audited environments
• Authorities and regulatory bodies — only when required by law or a valid court order

All third-party partners of sbutogel are bound by strict confidentiality agreements and are required to comply with data protection standards equal to or higher than those we uphold ourselves. They are not permitted to use your data for any purpose beyond what is specified in the service agreement with sbutogel.

Sbutogel continually invests in the latest security technologies and procedures to protect your personal data from unauthorised access, loss, misuse or disclosure. Key security measures we implement:

• 256-bit SSL encryption for all data transmitted between your device and our servers
• Hashed password storage using the latest cryptographic algorithms — we do not store passwords in plain text
• Two-factor authentication (2FA) available to all user accounts for an additional layer of protection
• 24/7 security monitoring by a dedicated cybersecurity team to detect suspicious activity
• Data segregation — financial data is stored separately from user profile data in distinct systems
• Strict internal access controls — sbutogel staff may only access data relevant to their job responsibilities
• Regular security audits by independent third parties to identify and address any vulnerabilities

Sbutogel retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by law. The following are our data retention guidelines:

• Active account data — retained for as long as your account is active and for a defined period after account closure for audit purposes
• Financial transaction records — retained for seven (7) years in line with financial compliance requirements
• KYC verification logs — retained for the period mandated by applicable anti-money laundering regulations
• Technical and security logs — retained for 90 days for security investigation purposes if required
• Customer support communication data — retained for two (2) years for service reference and improvement

Once the retention period expires, data will be securely deleted or anonymised so it can no longer be linked to a specific individual. sbutogel follows industry-standard data deletion procedures to ensure deleted data cannot be recovered.

As a sbutogel user, you have the following rights regarding your personal data. All requests will be processed within 14 working days:

To exercise any of the above rights, you may submit a request via your account settings or contact the sbutogel customer support team. Please include sufficient proof of identity to ensure the security of the process.

Sbutogel uses cookies and similar technologies to enhance the user experience and ensure platform security. The following are the types of cookies we use:

• Essential Cookies — required for core platform functions such as login session verification and security. These cookies cannot be disabled as they are critical to platform operation
• Performance Cookies — collecting anonymised information on how users interact with the platform to help us identify and address technical issues
• Functional Cookies — storing user preferences such as language and display settings to provide a more personalised experience
• Analytics Cookies — helping us understand aggregated usage patterns for platform improvement purposes

You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect the functionality of the sbutogel platform. Visit our cookie settings via the link at the bottom of the platform page to manage your cookie preferences.

Sbutogel takes the protection of children and minors seriously. Our platform is restricted to users aged 18 and above without exception. We do not knowingly collect personal data from individuals under the age of 18.

Protection measures we apply:

• Strict age verification process during account registration
• KYC verification requiring official identification documents
• Continuous monitoring to detect usage patterns that may indicate underage users
• Immediate termination of accounts confirmed to belong to underage individuals

If you believe a child has provided personal data to sbutogel, please contact our support team immediately. We will take prompt action to delete the information and close the associated account.

Sbutogel reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or platform improvements. When significant changes are made, we will:

• Updating the "Last Updated" date at the top of this document
• Sending email notifications to all registered users
• Displaying a clear notice on the platform's main page for at least 7 days before changes take effect

Continued use of the sbutogel platform after any amendments take effect will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and stop using our services.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our team through the following channels:

• Privacy Email: [email protected]
• Customer Support: [email protected]
• Response Time: We aim to respond to all privacy-related enquiries within 3 working days

For general enquiries, you may also visit our FAQ page, which contains answers to frequently asked questions about privacy and account security.