superbola Privacy Policy

1Introduction and Scope

This Privacy Policy applies to personal information processed through the superbola website, player accounts, customer support channels, sports betting products, live casino games, slots, payment functions and related services. It should be read together with the superbola Terms & Conditions.

By accessing superbola or providing personal information, you acknowledge the processing described in this policy. Where consent is required for a particular activity, superbola will request it separately. If you do not provide information that is necessary for account verification, security or payment processing, some services may be unavailable.

This policy is written for Malaysian users in natural English. References to data protection principles include recognised standards for lawful, fair and proportionate processing. Where a law applies to a particular player or processing activity, superbola will handle information in accordance with the relevant requirement.

2Information We Collect

Depending on how you use superbola, the following categories of information may be collected:

• Identity information: legal name, date of birth, nationality, gender where relevant, MyKad or passport details, photographs and verification results.
• Contact information: residential address, email address, mobile number and preferred communication settings.
• Account information: username, encrypted password credentials, account status, security settings, language and currency preferences.
• Financial information: deposit and withdrawal records, partial bank or e-wallet details, payment references, balances and transaction reviews.
• Gaming information: sports selections, stakes, odds, casino activity, wins, losses, bonus use, session history and responsible gambling settings.
• Technical information: IP address, device type, browser, operating system, session identifiers, approximate location, login times and diagnostic records.
• Support information: live chat transcripts, complaint details, submitted documents and records of account assistance.

superbola seeks to collect information that is relevant to account operation and risk management. Players should not send complete card security codes, online banking passwords or one-time verification codes to superbola support.

3How Information Is Collected

Information is collected directly when you register, update your profile, complete KYC, deposit MYR, request a withdrawal, set a limit or contact superbola support. It is also generated automatically when you sign in, navigate the website, place a wager or interact with a casino game.

Some information may come from payment processors, identity verification services, game suppliers, security providers and fraud prevention tools. For example, when a player deposits through Touch 'n Go eWallet, Maybank2u, CIMB Clicks, DuitNow or FPX, superbola may receive a transaction reference, payment status and limited account-holder details needed to reconcile the payment.

Publicly available or lawfully obtained sources may be consulted when enhanced verification is necessary. This may occur where account activity presents a fraud, identity or source-of-funds concern. superbola does not use such checks to collect unrelated personal information.

4Purposes of Data Processing

superbola may process personal information to:

• register, maintain and secure a superbola player account;
• confirm that a player is aged 21 or above and eligible to use the platform;
• verify identity, payment ownership and source-of-funds information where required;
• accept wagers, settle results and maintain accurate sports and casino records;
• process deposits, withdrawals, refunds and transaction investigations;
• detect account sharing, collusion, bonus abuse, fraud and security threats;
• operate deposit limits, cooling-off periods, self-exclusion and player protection measures;
• respond to support requests, disputes and complaints;
• maintain platform performance, diagnose errors and improve usability; and
• send essential service messages or permitted promotional communications.

5KYC, Banking and E-Wallet Data

Identity verification is a core security requirement. superbola may request a MyKad, passport, proof of address, bank statement, e-wallet screenshot or other documentation reasonably required to confirm identity and payment ownership. Verification records help prevent underage gambling, unauthorised transactions, duplicate accounts and financial crime.

Malaysian payment methods may include Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank online, Hong Leong Connect, DuitNow and FPX. The payment details visible to superbola depend on the method and service provider. Full online banking login credentials are not requested or stored by superbola.

Transaction information may be reviewed when a deposit name does not match the registered player, a withdrawal route changes, unusual activity occurs or an account requires enhanced checks. Withdrawals may remain pending while reasonable verification is completed.

6Cookies and Device Information

superbola may use cookies and similar storage technologies to maintain login sessions, remember preferences, secure accounts, measure website performance and understand how platform features are used. Essential cookies support functions such as authentication, transaction security and navigation.

Performance information may show which pages load slowly, whether a browser encounters an error or how users move through the platform. This information supports technical improvements for players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other locations.

Browser settings may allow you to block or delete cookies. Disabling essential cookies can prevent sign-in, payment or security features from working correctly. Where optional analytics or marketing technologies require consent, choices may be presented through the relevant platform controls.

7Sharing Personal Information

superbola may disclose limited personal information to service providers that support platform operations. These may include identity verification companies, payment processors, banks, e-wallet operators, game suppliers, hosting providers, security specialists, customer support systems and professional advisers.

Service providers should receive only information reasonably required for their assigned function and are expected to apply suitable confidentiality and security measures. For example, a payment processor may need a player name, transaction value and reference, while a technical security provider may receive an IP address and device event.

Information may also be disclosed where reasonably necessary to investigate fraud, protect players, enforce the superbola Terms & Conditions, respond to a valid legal request or establish and defend legal rights. superbola does not claim supervision by a Malaysian gambling regulator and does not use Malaysian government branding or regulator logos.

8International Data Processing

Online gaming services may rely on suppliers and infrastructure located outside Malaysia. As a result, personal information may be processed in other jurisdictions where superbola, payment providers, verification partners, hosting services or game systems operate.

Privacy laws and enforcement standards vary between countries. Where information is processed internationally, superbola uses reasonable contractual, organisational and technical safeguards appropriate to the sensitivity of the information and the purpose of processing.

International processing does not change the purposes described in this Privacy Policy. superbola remains committed to using player information for legitimate platform, security, payment and compliance functions.

9Information Security

superbola applies administrative, technical and organisational safeguards designed to protect personal information against accidental loss, unauthorised disclosure, alteration, misuse and unlawful access. Measures may include encryption in transit, controlled staff access, account monitoring, authentication procedures, system logging and periodic security reviews.

No online system can guarantee absolute security. Players also have an important role. You should use a strong, unique password, secure your registered mobile device, avoid sharing verification codes and sign out when using a shared computer. Suspected account compromise should be reported to superbola promptly.

Where a personal data incident creates a material risk to affected players, superbola will investigate, contain the issue and provide notifications where required by applicable law or appropriate under the circumstances.

10Data Retention

superbola retains personal information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate security, dispute, accounting and compliance requirements. Different categories may have different retention periods.

Account and transaction records may be retained after closure where they are needed to resolve disputes, investigate fraud, honour self-exclusion, prevent duplicate registrations or meet applicable record-keeping obligations. A self-exclusion record may be retained to help stop a restricted player from reopening access.

When information is no longer required, superbola may securely delete it, anonymise it or isolate it from routine use. Anonymised statistical information that no longer identifies a player may be retained for platform analysis.

11Your Privacy Rights

Subject to applicable law, account security and reasonable verification, a player may ask superbola to review how personal information is handled. Requests are assessed individually because financial and gaming records may need to be preserved for security or compliance purposes.

superbola may request identity verification before responding to protect player information from unauthorised access. A request may be limited or declined where disclosure would affect another person's rights, reveal security controls or conflict with lawful retention obligations.

12Marketing and Communication Choices

With the appropriate permission or other lawful basis, superbola may send information about sports markets, casino promotions, VIP updates or platform features. Marketing preferences may be changed through available account settings or by asking support.

Opting out of marketing does not stop essential communications. superbola may still send messages about account security, KYC, deposits, withdrawals, service interruptions, policy changes or responsible gambling controls. These messages are necessary to operate and protect the account.

superbola does not knowingly direct gambling promotions to persons under 21 or to players who are actively self-excluded.

13Age Restriction and Responsible Gambling

superbola is strictly intended for players aged 21 and above. Personal information may be used to verify age and prevent underage access. If superbola reasonably believes that an account belongs to a person under 21, the account may be suspended while verification is completed.

Gaming information may also be reviewed to support responsible gambling measures. This can include deposit patterns, repeated limit changes, unusually long sessions or attempts to bypass self-exclusion. Such information helps superbola provide warnings, apply restrictions or conduct appropriate account reviews.

Privacy rights do not require superbola to remove a valid self-exclusion record where retention is necessary to protect the player and enforce the restriction.

14Changes to This Privacy Policy

superbola may update this Privacy Policy to reflect changes in services, payment methods, security practices, technology or applicable legal requirements. The revised policy will be published on this page with a new effective date.

Material changes may also be communicated through an account message or another appropriate channel. Players should review this page periodically to remain informed about how superbola processes personal information.

15Contact Us

Privacy requests and questions may be submitted through live chat on the superbola platform or by writing to [email protected]. The email address is displayed as plain text and is not a clickable link.

Please identify the nature of your request and provide enough information for superbola to locate the relevant account. Do not send your password, full banking credentials or one-time verification codes. Identity checks may be required before account-specific information is disclosed.

superbola aims to review privacy concerns fairly and within a reasonable period, taking account of request complexity, security requirements and any applicable legal obligations.