spa09 Privacy Policy

This Privacy Policy is issued by spa09, an online sports betting and casino platform operating under international licensing. This policy applies to all users who register an account, visit our website at spa09.org, use our services or interact with any part of our platform.

By registering an account with spa09, you acknowledge that you have read, understood and agreed to the terms outlined in this Privacy Policy. If you do not agree with any part of this policy, you are advised not to use our platform.

spa09 is committed to ensuring that personal information shared with us is handled with a high level of confidentiality and security. We respect the privacy of every player and place your trust at the foundation of a lasting relationship.

Information You Provide Directly

When you register a spa09 account or use our services, we collect information you provide directly, including:

• Full name as it appears on your official identification document
• Identity card number (MyKad) or passport number
• Date of birth — to verify that you are at least 21 years old
• An active email address and mobile phone number
• Current residential address
• Bank account or e-wallet information used for deposits and withdrawals
• Username and password chosen during registration

Information Collected Automatically

While you use the spa09 platform, our system also records technical data automatically, including:

• IP address and general location of your device
• Web browser type and device operating system
• Pages visited, session duration and navigation patterns within the platform
• Betting history, deposits, withdrawals and game activity
• Interaction logs with the customer support team

Information From Other Sources

In certain situations, particularly relating to identity verification (KYC) and anti-money laundering (AML) procedures, spa09 may receive information about you from authorised third-party service providers, such as credit bureaus or licensed identity verification agencies. This information is used exclusively to meet regulatory compliance obligations.

Primary Purposes of Data Use

spa09 uses the personal information collected for the following purposes:

• Account Management: Creating, verifying and managing your player account, including processing withdrawal and deposit requests.
• Platform Security: Identifying and preventing fraudulent activity, money laundering and duplicate account use that violates the terms of service.
• Regulatory Compliance: Meeting international legal and licensing requirements, including mandatory KYC procedures.
• Service Improvement: Analysing usage patterns to enhance the playing experience, platform stability and game offerings.
• Service Communications: Sending important notifications related to your account, policy changes or relevant security information.
• Customer Support: Processing your enquiries and complaints via 24/7 live chat or support email.

Marketing Communications

spa09 may send you information about promotions, bonuses and special offers via email or platform notifications. You can opt out of receiving these marketing communications at any time by contacting our support team or through your account settings. This choice will not affect your basic account services.

Basic Principles of Data Sharing

spa09 does not sell, rent or disclose your personal information to third parties for their own marketing or commercial purposes. Any data sharing only occurs in limited situations and for legitimate purposes, as follows:

• Payment Service Providers: Information required to process transactions via Touch 'n Go eWallet, DuitNow, FPX, ShopeePay, USDT, BTC and ETH is shared with the relevant payment processors. They are bound by strict confidentiality agreements.
• Game Platform Providers: Game software providers working with spa09 receive only the minimum data required to deliver a proper playing experience.
• Regulatory Authorities: If required by a licensing body or legitimate legal authority, spa09 will disclose the requested information in line with our compliance obligations.
• Identity Verification Services: Licensed third-party KYC providers assist us in verifying players' identities to prevent fraud and money laundering.

What Are Cookies?

Cookies are small data files stored on your device when you visit a website. spa09 uses cookies to ensure the platform functions properly, maintain the security of your login session and understand how players use our website.

Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login, game sessions and account security. These cookies cannot be disabled without affecting website functionality.
• Performance Cookies: Collect information about how pages are visited to help us improve the speed and reliability of the platform.
• Functional Cookies: Remember your preferences such as language settings and display options to provide a more personalised experience.
• Analytics Cookies: Help us understand aggregated usage trends for technical planning and content purposes.

You can manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the spa09 platform. For more information, refer to the help guide of the web browser you use.

Technical Security Measures

spa09 implements multiple layers of technical protection to keep player data safe from unauthorised access, leaks or misuse. The measures in place include:

• Data encryption during transmission using SSL/TLS protocols
• Strict access controls — only staff with specific authorisation may access player data
• Continuous system monitoring to detect suspicious activity
• Regular security testing and audits by the internal security team
• Two-factor authentication (2FA) available for additional account protection

Shared Responsibility

The security of your account also depends on your own actions. spa09 recommends that you use a strong and unique password, do not share your login details with anyone, ensure you log out of your account when using a shared device, and notify us immediately if you suspect any unauthorised activity on your account.

Although we take all reasonable precautions, no system can be guaranteed 100% secure against cyber threats. Should a security incident involving your data occur, we are committed to notifying you and taking prompt corrective action.

Financial Transaction Information

When you make a deposit or withdrawal via Touch 'n Go eWallet, DuitNow, online banking (FPX), ShopeePay or cryptocurrency (USDT, BTC, ETH), your transaction information is recorded for compliance, verification, fraud prevention and the resolution of any disputes that may arise.

The minimum deposit is RM20, while the minimum withdrawal is RM50 with a processing time of between 10 and 45 minutes. These transaction records are retained for the period required by compliance obligations.

Know Your Customer (KYC) Procedure

As a platform operating under international licensing, spa09 is required to carry out KYC procedures to verify player identities. This includes collecting and storing copies of identification documents such as MyKad or passport, and in certain situations, proof of address or source of funds.

Data Retention Period

spa09 retains players' personal information for as long as it is needed to fulfil the purposes stated in this Privacy Policy, or for as long as required by legal and licensing obligations. In general:

• Financial transaction records are retained for the period required by regulatory compliance obligations.
• Active account information is retained for as long as your account remains active on the platform.
• Customer support communication logs are retained for reference and dispute resolution purposes.
• After an account is closed, certain data may need to be retained for an additional period in accordance with legal requirements.

Account Deletion Requests

If you wish to close your spa09 account and request the deletion of your personal data, you may contact our support team via 24/7 live chat or email. We will process your request promptly, but please note that some data may need to be retained to fulfil certain legal obligations.

Account deletion will not affect any valid transactions or financial records that occurred during the period your account was active.

spa09 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our service practices, applicable legal requirements or improvements in how we protect player data. Any amendments made will take effect immediately upon the updated version being published on the spa09 website.

For significant amendments, we will endeavour to notify players via their registered email or through in-platform notifications. However, it is your responsibility to review this Privacy Policy periodically to stay updated on any changes.