Segi44 Privacy Policy – Malaysia Member Personal Data Protection

In our commitment to providing a safe, personalized, and enjoyable gaming experience at segi44, we collect several categories of information from you. Below is a detailed explanation of each data type:

a) Registration & Identity Information

When you create a segi44 account, we collect your full name, date of birth, identity card number (MyKad), email address, mobile number and hashed password. This information is required to verify your identity and ensure that only eligible individuals use our platform.

b) KYC Verification Documents

As part of the Know Your Customer (KYC) process, we may request a copy of your identity card, passport, utility bill or recent bank statement. These documents are stored securely and accessed only by our licensed compliance team.

c) Financial Information

To process deposits and withdrawals, we collect bank account numbers, bank names, and relevant e-wallet information. We do not store credit or debit card details directly — all payment processing is handled through PCI-DSS certified integrated payment gateways.

d) Usage & Technical Data

Our system automatically records your IP address, device type, operating system, web browser, pages visited, session duration and gameplay patterns. This data is used to improve platform performance, detect suspicious activity and ensure the security of your account.

e) Customer Support Communications

Every interaction you have with the segi44 support team — whether via live chat, email or other channels — is recorded for training, quality control and future dispute resolution purposes.

Segi44 uses your personal data for clearly defined and lawful purposes only. We do not process your data for any purpose not stated in this policy without first obtaining your consent.

For marketing communications specifically, you may opt out at any time by contacting our support team. Opting out of marketing communications will not affect your access to segi44's core services.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), segi44 processes your personal data on a solid legal basis:

• Contract Performance: Processing is required to fulfil the agreement between you and segi44, including account management and payment processing.
• Legal Obligation: Processing is required to comply with applicable Malaysian law, particularly in relation to anti-money laundering (AMLA) and KYC requirements.
• Legitimate Interest: Processing for platform security, fraud prevention and service improvement purposes, based on segi44's legitimate interests that do not override your rights.
• Permission: For marketing and promotional communications, we rely on your explicit consent given at registration or at a later time.

Segi44 does not sell or rent your personal data to any third party. However, there are specific situations where we need to share your data with trusted parties:

• Payment Service Providers: The PCI-DSS certified payment gateways and transaction processors we use to securely handle your deposits and withdrawals.
• Game Providers: Licensed game development companies such as Pragmatic Play, PG Soft and others may receive the minimum data necessary to deliver a seamless gaming experience.
• KYC Compliance Services: Third-party providers that help us verify member identities and ensure compliance with anti-money laundering laws.
• Legal Authorities: We will disclose your data to government authorities or law enforcement if required by law, court order, or legal proceedings.
• Selected Business Partners: In the event of an acquisition, merger, or sale of business assets, your data may be transferred — you will be notified in advance.

All third-party partners of segi44 are bound by strict data protection agreements and are required to comply with our privacy policy and applicable laws.

Segi44 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by law.

• Active Account Data: Retained for the duration your account remains active at segi44, plus any additional period required for audit and compliance purposes.
• Financial Transaction Records: Retained for at least 7 years from the transaction date, in line with Malaysia's accounting and anti-money laundering legal requirements.
• KYC Records: Retained for 5 years after the end of the business relationship, or longer if required by the relevant authorities.
• Support Communication Logs: Retained for 2 years for quality control and dispute resolution purposes.
• Marketing Data: Retained until you unsubscribe from marketing communications or close your account.

Once the specified retention period has elapsed, your data will be securely deleted or anonymised using irreversible deletion procedures.

Your data security is segi44's highest priority. We implement a multi-layered security framework that includes the following technical and organisational measures:

• Data-in-Transit Encryption: All communications between your device and segi44 servers are secured by TLS 1.3 protocol with AES-256 encryption — the highest standard in the industry.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including passwords and KYC documents, is encrypted using robust encryption algorithms.
• Strict Access Controls: Only licensed staff with a legitimate business need are permitted to access member personal data. All access is logged and audited on a regular basis.
• Real-Time Threat Monitoring: Our systems are equipped with intrusion detection tools (IDS) and 24/7 security monitoring that respond immediately to any threats.
• Regular Security Testing: segi44 conducts regular penetration testing and security audits by accredited independent security firms.
• Two-Factor Authentication (2FA): We provide a 2FA feature for member accounts to add an extra layer of protection during login.

Under Malaysia's PDPA and segi44's privacy commitments, you have the following rights regarding your personal data:

To exercise any of the above rights, contact the segi44 Privacy Officer via live chat or email. We will respond to your request within 30 business days.

Segi44 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Performance & Analytics Cookies: Helping us understand how members use the segi44 platform so we can make meaningful improvements. Data collected is anonymised.
• Functional Cookies: Remembering your preferences such as language, display settings and saved login details for your convenience.
• Marketing Cookies: Used to display more relevant ads and promotions based on your interests and usage patterns.

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect the functionality of segi44. For more information on managing cookies, refer to your browser's help guide.

In some circumstances, your personal data may be transferred to or processed in countries outside Malaysia. This may occur when we use cloud services, game providers, or technical infrastructure operating across multiple global locations.

Segi44 ensures that all international data transfers are carried out with adequate safeguards, including:

• Ensuring the recipient country has equivalent data protection laws.
• Implementing Standard Contractual Clauses with data recipients.
• Assessing the data protection provided by the recipient before any transfer is made.

Segi44 is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of minors under the age of 18.

If you believe that someone under the age of 18 has registered an account at segi44, please contact us immediately. We will promptly investigate the matter and take appropriate action, including closing the account and deleting all associated data.

Our age verification system is designed to prevent registration by minors. However, we recognise that no system is perfect and rely on community cooperation to report any suspicious cases.

Segi44 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or service improvements.

If we make significant changes to this policy, we will notify you via:

• Email notifications sent to the address registered in your account.
• A prominent notice on the segi44 homepage at least 14 days before changes take effect.
• A link to the latest version of this policy, easily accessible via the website footer.

Continued use of the segi44 platform after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account and request deletion of your personal data.

For any enquiries, concerns or requests relating to your privacy and personal data, please contact our Data Protection Officer (DPO):

If you believe that segi44 has failed to address your privacy concerns satisfactorily, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia (JPDP).