sakura188 Privacy Policy for Malaysian Users

1 Definitions

• "Account" — the registered user profile created through the sakura188 registration process.
• "Controller" — sakura188 and its operating entity, which determines the purposes and means of processing personal data collected through the Platform.
• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, including name, email address, date of birth, phone number, payment details and device identifiers.
• "Platform" — the sakura188 website at sakura188.cam and any associated digital services.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, transmission, alteration and deletion.
• "User" — any person who accesses, registers on or uses the Platform, whether or not a deposit has been made.
• "KYC" — Know Your Customer verification, the process of confirming a User's identity, age and payment instrument ownership through documentary evidence.

2 Data We Collect

sakura188 may collect the following categories of Personal Data, depending on how you interact with the Platform:

3 How Data Is Collected

Personal Data is collected through the following channels:

• Direct submission: information you enter during registration, KYC verification, payment transactions or support interactions.
• Automated collection: technical and usage data gathered automatically when you access the Platform, through server logs, cookies and similar tracking technologies.
• Payment providers: confirmation data received from Malaysian payment services such as Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost and GrabPay when a transaction is initiated or completed.
• Identity verification services: where an independent KYC or document verification provider is used to confirm identity on our behalf.
• Fraud and security tools: risk-scoring data derived from device fingerprinting and behavioural analytics used to detect unusual account activity.

4 Lawful Basis for Processing

sakura188 processes Personal Data under the following lawful bases:

• Contractual necessity: processing required to create and maintain your Account, process transactions and deliver the services you have requested.
• Legal obligation: processing required to comply with applicable licensing conditions, anti-money-laundering obligations and identity verification requirements.
• Legitimate interests: processing carried out to detect fraud, prevent account abuse, improve Platform security and maintain service quality, where such interests are not overridden by your data protection rights.
• Consent: where we have specifically requested and you have provided consent for a particular processing activity, such as receiving optional promotional communications. You may withdraw consent at any time by contacting support.

5 How We Use Your Data

Personal Data collected by sakura188 is used for the following purposes:

• Creating, managing and securing your Account, including password recovery and two-factor authentication.
• Verifying your identity and age to confirm eligibility (adults 21 years and above only).
• Processing MYR deposits and withdrawals through your chosen payment method.
• Administering bonuses, VIP tier memberships and promotional reward claims, subject to applicable terms.
• Monitoring account activity to detect and prevent fraud, money laundering, underage access and other prohibited conduct.
• Providing customer support via live chat and email, and maintaining a record of interactions for quality and dispute-resolution purposes.
• Monitoring platform usage to identify responsible gambling indicators and, where appropriate, proactively reaching out to users who may benefit from support tools.
• Improving Platform navigation, game category presentation, payment flow and mobile performance based on aggregated usage data.
• Sending essential account communications including transaction confirmations, security alerts and policy updates. These communications are not optional for active account holders.
• Sending promotional communications only where you have separately consented to receive them, or where permitted by applicable law.

6 Sharing Your Data

sakura188 does not sell Personal Data to third parties. Data may be shared in the following limited circumstances:

• Payment processors: transaction data is shared with the relevant payment provider (e.g. bank networks, e-wallet operators) to complete or refund a transaction.
• KYC and identity verification providers: identity documents and personal details may be shared with licensed verification services operating on our behalf under confidentiality agreements.
• Fraud and risk management partners: technical and behavioural data may be shared with specialist providers for fraud detection and anti-money-laundering screening.
• Game and platform technology providers: certain usage and account data may be shared with game studios or platform infrastructure providers where required to deliver the service.
• Legal and regulatory disclosures: where required by a valid legal order, court direction licensing authority instruction or applicable law, we may disclose Personal Data to the relevant authority.
• Business transfers: in the event of a merger, acquisition or sale of all or part of the business, Personal Data held may form part of the transferred assets, subject to equivalent privacy protections.

7 Data Retention

Personal Data is retained for as long as is necessary to fulfil the purposes described in this Policy or to comply with legal and regulatory obligations. The following general retention principles apply:

• Active Account data is retained throughout the life of the Account and for a reasonable period after closure to facilitate dispute resolution and regulatory reporting.
• KYC documents and identity verification records are retained for the minimum period required by applicable anti-money-laundering and gaming licensing regulations, which may extend to several years following account closure.
• Financial transaction records are retained for the period required by applicable financial reporting and tax laws.
• Support communications are retained for a rolling period sufficient to support quality monitoring and dispute resolution.
• Technical and usage data is retained in aggregated or anonymised form for platform analytics purposes.

When data is no longer required, it is either securely deleted or anonymised so that it can no longer be attributed to an individual.

8 Cookies & Tracking Technologies

sakura188 uses cookies and similar technologies to support Platform functionality and collect technical data. The following types may be in use:

• Essential cookies: required to maintain your login session, remember language preferences and ensure Platform security. These cannot be disabled without affecting core functionality.
• Functional cookies: used to remember user preferences, such as preferred game categories or display settings, across sessions.
• Analytics cookies: used to collect aggregated data about page visits, session duration and navigation paths, helping us improve the Platform. This data does not identify individual users by name.
• Security cookies: used to support fraud detection, bot identification and anomalous-activity monitoring.

Most browsers allow you to manage or delete cookies through their settings. Disabling essential cookies may prevent certain Platform features from functioning correctly. sakura188 does not use cookies to serve third-party advertising based on your individual browsing behaviour.

9 Data Security

sakura188 applies reasonable technical and organisational measures to protect Personal Data against unauthorised access, accidental loss or destruction. These include:

• TLS/SSL encryption for data transmitted between your browser and our servers.
• Access controls limiting staff access to Personal Data on strict need-to-know basis.
• Regular monitoring of systems for potential vulnerabilities and intrusion attempts.
• Use of reputable, contractually bound third-party processors for payment and KYC functions.

Despite these measures, no internet-connected system can provide absolute security. Users are responsible for maintaining the confidentiality of their Account login credentials and should contact support immediately if they suspect unauthorised access.

10 Your Rights

Subject to applicable law and the circumstances of your Account, you may have the following rights in relation to your Personal Data:

• Right of access: request confirmation of whether we hold Personal Data about you and obtain a copy of that data.
• Right of rectification: request correction of inaccurate or incomplete Personal Data.
• Right of erasure: request deletion of Personal Data where it is no longer necessary for its original purpose, subject to legal retention obligations.
• Right to restrict processing: request that we limit how we use your data in certain circumstances, such as during a dispute about accuracy.
• Right to object: object to processing carried out on the basis of legitimate interests, where your individual circumstances warrant it.
• Right to withdraw consent: where processing is based on consent, withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact the sakura188 support team at the email address provided in the Contact section below. We will respond within a reasonable period and may need to verify your identity before processing the request. Some rights may be limited by legal obligations, such as mandatory financial record-keeping periods.

11 Minors

sakura188 services are exclusively for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under this age. If we become aware that data has been collected from a person under 21, the Account will be suspended and the data will be deleted promptly. If you believe a minor has registered on the Platform, please notify us immediately through our support channel.

12 Cross-Border Data Transfers

sakura188 operates within an international licensing context, and Personal Data may be processed by our service providers in countries outside Malaysia. Where such transfers occur, we apply contractual safeguards to ensure that your data receives a level of protection consistent with this Policy and applicable international standards. By using the Platform, you acknowledge that your data may be processed in jurisdictions outside your country of residence.

13 Contact Us

For privacy-related enquiries, data subject requests or concerns about this Policy, please contact the sakura188 data team through the following channel:

• Website email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week on Malaysia Time.

When submitting a data-related request, please include your registered Account username and a clear description of your request so that we can identify your records and respond accurately. We will acknowledge receipt and aim to resolve substantive requests within a reasonable timeframe, consistent with applicable obligations.