Personal Data Protection spa09

1. Introduction and Scope of This Policy

This Privacy Policy is established by spa09 to describe our practices in collecting, processing, storing and disclosing personal information provided by members and visitors to our website at https://spa09.net. This policy applies to all users who register an account, use betting services, or simply browse the spa09 platform.

By registering an account or using any spa09 service, you are considered to have read, understood and agreed to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please stop using our platform and contact the support team for account closure.

2. Personal Information We Collect

spa09 collects personal information directly from members during the registration process and platform use, as well as automatically through standard website tracking technologies. The categories of information we collect are as follows:

Account Registration Information:

• Full name as shown on the identity card (MyKad) or passport
• Valid identity card or passport number
• Date of birth — for verification of the minimum age of 21 years
• An active email address
• A mobile phone number registered in Malaysia
• A password that has been processed through a hashing function before being stored

Financial Transaction Information:

• E-wallet account name (Touch 'n Go eWallet, Boost) or bank account details for FPX verification
• Deposit and withdrawal records including date, time and amount
• Crypto wallet information (public address only) for transactions using USDT, BTC or ETH
• Transaction history stored for the period required by licensing requirements

Technical and Usage Information:

• IP address and geographic location (country and state)
• Web browser type and device operating system
• Activity log data including login time, logout time and game session details
• Game preferences and betting history for content recommendation purposes

3. Purpose of Data Collection and Processing

spa09 processes member personal information for the following legitimate and reasonable purposes:

• Member account management and verification, including the Know Your Customer (KYC) process required by international licensing
• Processing deposits, withdrawals and other financial transactions securely through supported payment methods
• Providing customer support services via live chat and email in Bahasa Melayu and English, 24 hours a day seven days a week
• Sending account-related notifications, bonus promotions and system updates via email or in-platform notifications
• Detecting and preventing fraud, money laundering and activities that breach the platform's Terms & Conditions
• Fulfilling reporting obligations set by the licensing body and relevant authorities
• Analysing usage patterns to improve user experience and the quality of platform services

4. Sharing Information with Third Parties

spa09 does not disclose member personal information to outside parties except in the following limited and legitimate circumstances:

• Payment Service Providers: The minimum information required to process transactions is shared with payment processors DuitNow, FPX, Touch 'n Go eWallet, Boost and relevant crypto platforms.
• Game Platform Providers: Betting session data needed to run games is shared with registered and licensed game developers.
• Legal Requirements: spa09 may disclose information to the relevant authorities when required by a court order, valid warrant or binding licensing regulations.
• Fraud Prevention: In situations where there is strong suspicion of fraud or illegal activity, relevant information may be shared with the licensing body or relevant enforcement agencies.

Every third party that receives spa09 member data is bound by strict data confidentiality agreements and is only permitted to use that information for the specified purposes.

5. Cookies and Tracking Technologies

The spa09 website uses cookies and similar technologies to improve user experience and collect analytical data about platform usage patterns. The types of cookies used include:

• Essential Cookies: Required for basic platform functions such as login session verification and account security. These cookies cannot be disabled.
• Preference Cookies: Store user preference settings such as display language and game display preferences for ease of use.
• Analytics Cookies: Collect anonymous usage data to help us understand how members interact with the platform for continuous improvement purposes.

You can manage cookie preferences through your web browser settings. Please note that disabling certain cookies may affect specific functions of the spa09 platform.

6. Data Retention Period

spa09 retains member personal information for as long as the account is active and for the period specified after account closure to meet licensing requirements, fraud prevention needs and reporting obligations. Financial transaction records are kept for the period set by the international licensing body that governs our platform operations. After the retention period ends, data will be securely deleted or anonymised.

7. Data Security and Protection Measures

spa09 implements multiple layers of technical and organisational security controls to protect member personal data from unauthorised access, loss, alteration or unintended disclosure:

• SSL/TLS encryption for all communications between the user's browser and spa09 servers
• Member passwords are stored in hashed form using a strong algorithm — spa09 does not have access to your actual password
• Two-factor authentication (2FA) is available as an additional security layer for member accounts
• Continuous monitoring for suspicious activity and unauthorised access attempts
• Regular security training for staff who handle member personal data
• Periodic internal and external security audits to identify and address vulnerabilities

8. Cross-Border Data Transfers

As spa09 operates under international licensing, member personal information may be processed or stored on servers located outside Malaysia. In each such case, spa09 ensures that data transfers are carried out in accordance with appropriate data protection mechanisms and that the receiving jurisdiction maintains an equivalent level of data protection.

9. Updates to This Privacy Policy

spa09 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in data practices, licensing regulations or applicable legal requirements. The latest version of this policy is always available on this page with a clear update date. Members will be informed of significant changes via email or in-platform notifications.

Continued use of spa09 services after the updated policy date is considered acceptance of the updated terms.