Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by sportzfy2 ("we", "us", "our"), the operator of the online sports betting and casino platform accessible at https://sportzfy2.cam. sportzfy2 is an English-language platform built for the Malaysian market, offering sports betting, live dealer casino games, slots, and instant games, with payment services denominated in Malaysian Ringgit (MYR).

This Policy describes how sportzfy2 collects, uses, stores, processes, and protects the personal data of individuals ("you", "the User") who visit, register on, or otherwise interact with the sportzfy2 platform. It applies to all data collected through the website, its mobile interface, and all associated services.

By using the sportzfy2 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform immediately.

2. Definitions

In this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, either directly or in combination with other information held by sportzfy2.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" means sportzfy2, as the entity that determines the purposes and means by which personal data is processed.
• "Data Processor" means any third party engaged by sportzfy2 to process personal data on our behalf, under our documented instructions.
• "Sensitive Personal Data" means a subset of personal data that warants a heightened level of protection, including but not limited to identity document details, financial account information, and KYC verification materials.
• "Cookie" means a small text file stored on your device by your browser when you access the sportzfy2 platform, used to recognise your session and preferences.
• "KYC" means Know Your Customer — the identity verification process conducted to confirm the identity of registered users and satisfy compliance obligations.
• "Third Party" means any natural person or legal entity other than you and sportzfy2, including payment processors, game studio providers, and technology service providers.

3. Data We Collect

sportzfy2 collects personal data through multiple channels — directly from you when you register or interact with the platform, automatically as you use our services, and in limited cases from third-party verification providers. The categories of personal data we collect are described in the table below.

Data Category	Examples	Collection Method
Identity Data	Full legal name, date of birth, nationality, MyKad or passport number	Registration form, KYC submission
Contact Data	Email address, mobile telephone number, state of residence (e.g., Kuala Lumpur, Penang, Johor Bahru)	Registration form, account settings
Account Credentials	Username, encrypted password hash, 2FA configuration	Registration, account security settings
Financial Data	Payment method details (FPX bank code, e-wallet mobile number, cryptocurrency wallet address), transaction history in MYR	Deposit and withdrawal actions
KYC Verification Documents	Photographic copies of MyKad, passport, or other government-issued ID; proof of payment method	KYC submission prior to first withdrawal
Usage & Behavioural Data	Pages visited, games played, betting history, session duration, click patterns, deposit frequency	Automatically via platform logging and cookies
Device & Technical Data	IP address, browser type and version, operating system, device identifiers, time zone	Automatically on platform access
Communication Data	Records of live chat conversations, support ticket content, email correspondence with sportzfy2	Customer support interactions

sportzfy2 does not collect any personal data beyond what is reasonably necessary for the operational, compliance, and service delivery purposes described in this Policy. We do not knowingly collect sensitive personal data categories such as biometric data, health information, or political opinions.

4. How We Use Your Data

sportzfy2 uses the personal data we collect for the following purposes:

• Account Registration & Management: To create, maintain, and manage your sportzfy2 account, including processing your login credentials, account preferences, and security settings.
• Identity Verification (KYC): To verify your identity and age as part of our compliance obligations. We are required to confirm that all users are aged 21 or above before processing withdrawal requests.
• Payment Processing: To process deposits via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency, and to process withdrawal requests to your nominated payment method.
• Platform Delivery & Technical Operation: To operate, maintain, and improve the sportzfy2 platform — including sports betting markets, live dealer tables, slot games, and instant games — and to ensure platform availability and performance.
• Fraud Prevention & Security: To detect and prevent fraudulent transactions, account takeovers, money laundering, collusion, and other prohibited activities. Your usage data and device data are used to identify anomalous patterns that may indicate security threats.
• Responsible Gambling: To monitor player activity for signs of problem gambling behaviour, to enforce deposit limits and self-exclusion periods, and to send welfare check communications where appropriate.
• Promotions & Marketing: To notify you of bonuses, promotions, and platform updates relevant to your account — where you have not opted out of such communications.
• Legal & Regulatory Compliance: To meet our obligations under applicable gaming licensing requirements, anti-money laundering (AML) regulations, and any lawful requests from regulatory or law enforcement authorities.
• Customer Support: To investigate and respond to support queries, complaints, and disputes submitted via live chat or email.
• Analytics & Platform Improvement: To analyse aggregated, anonymised usage patterns to improve platform design, payment flow efficiency, and the overall user experience.

5. Legal Basis for Processing

sportzfy2 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between sportzfy2 and you — including account registration, payment processing, and platform access — is carried out on the basis that it is necessary for the performance of that contract.
• Legal Obligation: Processing required to comply with our obligations under applicable gaming licences, AML regulations, and lawful regulatory requests is carried out on the basis of legal obligation.
• Legitimate Interests: Certain processing activities — including fraud prevention, platform security monitoring, responsible gambling monitoring, and aggregated analytics — are carried out on the basis of sportzfy2's legitimate interests, where those interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent as the basis for processing — example, for certain marketing communications — you may withdraw that consent at any time by contacting customer support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Data Sharing & Disclosure

sportzfy2 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your personal data with the following categories of recipients where strictly necessary:

6.1 Payment Service Providers

Your payment-related data is shared with our payment processing partners — including FPX gateway operators, DuitNow service providers, e-wallet platforms (Touch 'n Go eWallet, Boost, GrabPay), and cryptocurrency processing services — solely to the extent necessary to execute your deposit and withdrawal transactions.

6.2 Identity Verification Providers

KYC verification documents may be shared with accredited third-party identity verification service providers engaged by sportzfy2 to conduct document authentication and age verification checks. These providers operate under strict contractual data processing agreements.

6.3 Game Studio Partners

Certain technical and gameplay data (such as session tokens and in-game transaction records) may be shared with our licensed game studio partners for the purpose of game delivery, dispute resolution, and RTP auditing. These partners do not receive your identity or payment data.

6.4 Regulatory & Law Enforcement Authorities

sportzfy2 may disclose personal data to regulatory bodies, law enforcement agencies, or other governmental authorities where required to do so by applicable law, court order, or a lawful formal request. We will notify you of such a disclosure where we are legally permitted to do so.

6.5 Internal Group Companies

Where sportzfy2 operates as part of a group related companies, personal data may be shared with group entities for internal administrative purposes, subject to the same data protection standards described in this Policy.

7. Data Retention

sportzfy2 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as we are required to retain it under applicable laws and licensing obligations.

As a general guideline, the following retention periods apply:

• Account Data: Retained for the duration of your active account, and for a minimum of five (5) years following account closure, to meet anti-money laundering and gaming regulatory requirements.
• KYC Documents: Retained for a minimum of five (5) years following the completion of verification, consistent with standard AML record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, or longer where required by applicable law.
• Communication Records: Customer support interactions are retained for a minimum of two (2) years from the date of the last interaction.
• Technical & Log Data: Server logs and technical data are retained for up to twelve (12) months, unless retained longer for security investigation purposes.

Following the expiry of the applicable retention period, your personal data will be securely deleted or irreversibly anonymised so that it can no longer be attributed to you.

8. Cookies & Tracking Technologies

sportzfy2 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device by your browser when you visit the sportzfy2 website. They allow us to recognise your session, remember your preferences, and gather analytical data about platform usage.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function correctly — including session management, login authentication, and payment security. These cannot be disabled without disrupting core platform functionality.
• Functional Cookies: Used to remember your preferences — such as your preferred language, display settings, and responsible gambling tool configurations.
• Analytical Cookies: Used to collect anonymised data about how users interact with the sportzfy2 platform, including pages visited, session lengths, and navigation patterns. This data is used to improve platform design and performance.
• Security Cookies: Used to detect and prevent fraudulent access attempts, bot activity, and other security threats.

You may configure your browser to refuse or delete cookies. However, disabling strictly necessary cookies will prevent you from accessing core sportzfy2 features, including login and payment processing. Please consult your browser's help documentation for instructions on cookie management.

9. Data Security

sportzfy2 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and sportzfy2 servers is encrypted in transit using the same SSL standard employed by Malaysian online banking platforms including Maybank2u and CIMB Clicks.
• Encrypted Password Storage: User passwords are stored as one-way cryptographic hashes. sportzfy2 does not store plaintext passwords and cannot recover your password — only reset it.
• Two-Factor Authentication (2FA): Optional 2FA is available to all registered users to provide an additional layer of login security.
• Access Controls: Strict role-based internal access controls ensure that personal data is accessible only to sportzfy2 personnel with a documented operational need.
• Security Monitoring: Our systems are subject to continuous automated security monitoring for anomalous access patterns, potential data breaches, and fraudulent activity.
• Penetration Testing: sportzfy2 conducts periodic security assessments and penetration testing to identify and remediate potential vulnerabilities in our platform infrastructure.

10. International Data Transfers

As an internationally operated platform, sportzfy2 may process or store your personal data in jurisdictions outside of Malaysia, including the jurisdiction which our gaming licence is held and the locations in which our data processors operate.

Where personal data is transferred internationally, sportzfy2 ensures that appropriate safeguards are in place to protect your data in accordance with the standards described in this Policy. These safeguards may include contractual data processing agreements with receiving parties, requiring them to maintain equivalent data protection standards.

By using the sportzfy2 platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia as described in this Section, subject to the protections outlined herein.

11. Your Rights

As a user of sportzfy2, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our customer support team via live chat or email as set out in Section 15.

sportzfy2 will respond to all verified data rights requests within a reasonable period and in any event within thirty (30) calendar days of receipt. In complex cases, we may request additional information to verify your identity before processing the request.

12. Minors & Age Verification

sportzfy2 is strictly an adult platform. We do not knowingly collect or process personal data from individuals under the age of 21. Our registration process requires users to confirm they are aged 21 or above, and we conduct KYC age verification for all accounts prior to their first withdrawal.

If sportzfy2 discovers that personal data has been submitted by an individual who does not meet the minimum age requirement of 21 years, we will immediately suspend the relevant account, delete the associated personal data to the extent permitted by our legal obligations, and return any deposited funds to the original payment source.

If you have reason to believe that a minor has registered a sportzfy2 account, please contact our support team immediately via live chat so that we can investigate and take appropriate action.

13. Third-Party Services

The sportzfy2 platform integrates with a number of third-party services to deliver its core functionality — including payment gateways (FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay), cryptocurrency payment processors, and licensed game studio platforms.

These third-party services are operated independently of sportzfy2 and have their own privacy policies governing collection and use of data within their respective services. sportzfy2 is not responsible for the privacy practices of third-party services and encourages users to review those policies where relevant.

sportzfy2 does not embed third-party social media tracking pixels, third-party advertising networks, or external analytics platforms that share your personal data with unrelated third parties.

14. Policy Amendments

sportzfy2 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — such as changes to the categories of data we collect, the purposes for which we use data, or the rights available to you — we will make reasonable efforts to notify registered users via the email address on file or via a prominent notice on the platform.

The updated Policy will be published on this page with a revised "Last Updated" date. Your continued use of the sportzfy2 platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should cease using the platform and contact our support team to arrange account closure and data deletion.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by sportzfy2, please contact our Data Support team. Our customer support team is available 24 hours a day, 7 days a week via live chat on the platform.

For formal data rights requests — including requests for access, rectification, erasure, or portability of your personal data — please contact us via the details below. We will respond within 30 calendar days of receiving a verified request.