Privacy Policy Suncity APK – Malaysian Player Data Protection

This Privacy Policy is published by Suncity APK ("we", "our platform") and applies to all platform users — including visitors who browse the site without registering, active registered members, and users who have closed their accounts but whose data is retained for legal compliance purposes.

Suncity APK serious about protecting the privacy of every Malaysian player who trusts us. We understand that personal information is sensitive — your name, phone number, financial details and usage habits are things you entrust to us, and we do not take that trust lightly.

This policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs the collection and processing of personal data in the country. We also adhere to applicable data security standards in the financial services and online gaming industries.

Suncity APK only collects data that is strictly necessary to deliver platform services safely and effectively. We do not collect excessive data that is unrelated to platform operations.

A. Data You Provide Directly

This is information you enter directly while interacting with Suncity APK:

• Registration information — Full name, Malaysian phone number, email address and password (stored in encrypted form)
• Identity verification (KYC) — A copy of your MyKad or other identity document, a verification selfie, and proof of address such as a utility bill or bank statement
• Financial information — Bank account numbers, account holder names, and registered payment methods (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX)
• Support communications — Contents of live chat conversations, emails, and any other communications with the Suncity APK customer support team

B. Automatically Collected Data

When you use the Suncity APK platform, our system automatically records the following technical information:

Suncity APK uses collected data for legitimate, clearly stated purposes. We will not use your data for any other purpose without first obtaining your additional consent.

Purposes of Data Use

• Account Management — Processing registrations, verifying identity, managing logins, and maintaining the security of your account on Suncity APK
• Financial transaction processing — Verifying and processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay and FPX, as well as processing withdrawals to your Malaysian bank account
• Provision of gaming services — Enabling access to all games including slots, live casino, EPL and Malaysia Super League football betting, e-sports and table games
• AML legal compliance — Maintaining records of financial transactions as required under Malaysia's applicable Anti-Money Laundering regulations
• Fraud prevention — Identifying and preventing fraudulent activity, money laundering, underage access and other violations of our terms
• Customer support — Resolving complaints, responding to enquiries and providing technical support to Suncity APK players
• Marketing (with consent) — Sending bonus offers, promotions, and platform updates to players who have opted in to receive marketing communications
• Platform improvements — Analysing usage patterns on an aggregate (not individual) basis to improve platform design, speed and features
• Responsible gaming — Monitoring gameplay patterns to identify players who may need assistance and to enforce self-imposed limits set by players

Every use of data by Suncity APK is based on one of the following legal grounds: performance of a contract, compliance with a legal obligation, our legitimate interests as a platform operator, or explicit consent you have provided.

Suncity APK does not sell players' personal data to any third party. This is our core commitment. However, there are limited situations where data sharing is necessary and lawful:

Third Parties That May Receive Your Data

• Payment processors — Payment service providers that handle transactions via Malaysian eWallets and FPX are required to receive only the minimum transaction information necessary to process payments. They are bound by strict confidentiality agreements.
• IT and security service providers — Companies that provide the server infrastructure, cybersecurity and cloud storage services we use to operate the Suncity APK platform.
• Game providers — Third-party game studios that provide slots, live casino or table games for our platform may receive minimal technical data related to gaming sessions for the purpose of resolving technical disputes.
• Law enforcement agencies — When required by a valid court order, warrant, or official request from a competent Malaysian authority in the context of a criminal investigation or regulatory compliance.
• Identity verification services — Third-party KYC services used to verify player identity for AML compliance and fraud prevention purposes.

In all data-sharing arrangements, Suncity APK ensures that recipients are bound by data protection agreements that are equivalent to or stricter than our own policy.

Data security is the single largest and most ongoing investment Suncity APK makes in its platform operations. We employ multiple layers of security technology and procedures to ensure your data is always protected.

Technical Security Measures

• 256-bit SSL Encryption — All data transmitted between your device and Suncity APK's servers is encrypted using Transport Layer Security (TLS) with a 256-bit key length — the same standard used by Malaysian online banking platforms such as Maybank2u and CIMB Clicks.
• Data encryption at rest — Data stored in our databases is also encrypted, meaning that even if an unauthorised party were to gain access to our servers, the data cannot be read without the encryption key.
• Two-factor authentication (2FA) — 2FA is available for all Suncity APK accounts and is strongly encouraged to be activated for added account protection.
• 24/7 security monitoring — Our security team continuously monitors platform traffic to detect suspicious activity, intrusion attempts, and transaction anomalies.
• Regular security audits — Suncity APK conducts regular penetration testing and security audits by independent cybersecurity firms to identify and address vulnerabilities before they can be exploited.
• Sensitive data segregation — Sensitive financial data is stored separately from general profile data and is protected by additional, stricter layers of access controls.

Operational Security Measures

• Suncity APK staff are granted only the minimum access required to perform their duties — a strict "need to know" principle
• Mandatory data security training for all staff who handle player data
• A clearly defined and tested security incident response procedure
• Secure data deletion when data is no longer required in accordance with retention policies

Suncity APK uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better user experience. Cookies are small text files stored on your device when you visit our website or use our application.

Types of Cookies We Use

• Essential Cookies (Required) — Required for core platform functions such as maintaining your login session, saving cart contents, or processing transactions. These cookies cannot be disabled as they are fundamental to the operation of Suncity APK.
• Performance Cookies — Collecting information on how you use the platform — pages visited, time spent and error messages. This data is used in aggregate to improve platform performance and usability.
• Functional Cookies — Saving your preferences such as language, display settings, and game preferences so you do not have to reconfigure them each time you log in.
• Security Cookies — Used to detect suspicious login attempts, verify legitimate sessions and prevent CSRF (Cross-Site Request Forgery) attacks.

Managing Cookie Settings

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the Suncity APK platform — you may be unable to log in or complete transactions. For non-essential cookies, you can indicate your preferences via the cookie notice banner displayed on your first visit.

Suncity APK does not retain your personal data longer than necessary. Our data retention policy balances legitimate operational needs with respect for your privacy rights as a player.

Retention Periods by Data Category

• Active account data — Retained for as long as your account remains active on Suncity APK. Profile data is updated whenever you make changes.
• Financial transaction records — Retained for a minimum of 7 years from the transaction date, in line with Malaysia's anti-money laundering (AML) and taxation legal requirements.
• Game logs — Recorded for 2 years for dispute resolution and responsible gaming reporting purposes.
• Support communication records — Retained for 3 years for service quality purposes and as evidence of complaint resolution.
• KYC document data — Retained for a minimum of 5 years after the business relationship ends, in line with AML compliance requirements.
• Closed account data — Basic information from closed accounts is retained for the minimum statutory retention period required by law, after which it is securely deleted.

Once the retention period expires, data is securely deleted using procedures that ensure it cannot be recovered. Any data held in physical form (where applicable) is destroyed using a certified document shredder.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Suncity APK's internal policies, you have the following rights regarding your personal data. All rights-related requests can be submitted by email to support@suncityapk.best or via the in-platform 24/7 live chat.

Suncity APK is a platform intended exclusively for adult users aged 18 years and above. We do not knowingly collect, process or store personal data from individuals under the age of 18.

Suncity APK's registration system includes age verification steps designed to identify and prevent underage users. That said, we recognise that no online age verification system is 100% foolproof, which is why we also rely on reports from concerned parents and guardians.

If you are a parent or guardian and discover that your child under the age of 18 has registered or used the Suncity APK platform without your knowledge, please contact us immediately at support@suncityapk.best. We will:

• Immediately closing the account in question
• Delete all data associated with the account
• Returning any remaining account balance to the original payment method
• Providing a report of actions taken to the reporting party

Suncity APK takes all data privacy enquiries and complaints seriously. If you have any questions about this Privacy Policy, wish to exercise your rights as a data subject, or would like to report a privacy concern, we are here to help.

How to Contact Us

• Privacy Email: support@suncityapk.best — Use the email subject "Privacy Enquiry" to help us prioritise your request
• 24/7 Live Chat: Click the live chat icon within the Suncity APK platform — our Malay-speaking support agents are available to assist you at any time
• Response time: Privacy enquiries are responded to within 48 business hours. Requests to access or delete data are processed within 14 working days.

Amendments to This Privacy Policy

Suncity APK reserves the right to update this Privacy Policy from time to time in response to changes in law, technology or business practices. Where significant changes occur, we will notify you via an in-platform notification or your registered email address at least 7 days before the changes take effect. The "Updated" date at the top of this document will always reflect the latest version in force.