Privacy Policy
— Sakti26 Platform

This Privacy Policy ("Policy") sets out how Sakti26 ("we", "us", "our", "the Platform") collects, uses, stores, discloses, and otherwise processes personal data obtained from individuals ("you", "User", "Player", "Account Holder") who access or use the sakti26 platform at sakti26.cam.

Sakti26 is committed to handling personal data responsibly and in accordance with applicable data protection law. This Policy is intended to provide you with clear and transparent information about our data processing practices so that you can make informed decisions about your use of our platform.

This Policy applies to all personal data collected through: (a) account registration and management; (b) deposits, withdrawals, and payment processing; (c) customer support interactions; (d) use of gaming and betting features; (e) promotional participation; and (f) technical interaction with our website and platform infrastructure, including cookies and analytics.

The following defined terms apply throughout this Privacy Policy:

For the purposes of applicable data protection law, Sakti26 is the Data Controller in respect of the Personal Data collected and processed through the sakti26 platform. As Data Controller, Sakti26 is responsible for determining the purposes for which and the manner in which Personal Data is processed.

Where Sakti26 engages third-party service providers to process Personal Data on its behalf (for example, payment processors handling transaction data, or KYC providers conducting identity verification), such parties act as Data Processors and are contractually bound to process data only in accordance with Sakti26's documented instructions and applicable data protection obligations.

Questions, access requests, or complaints relating to the processing of your Personal Data may be directed to our support team using the contact details set out in Section 15 of this Policy.

Sakti26 collects Personal Data through several channels and at various points during your interaction with our platform. The categories of data collected, and the context in which each is collected, are as follows:

4.1 Registration Data. When you create a sakti26 account, we collect: your full legal name, date of birth, email address, mobile phone number, username, password (stored in encrypted form), and the country and city of residence you provide (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya).

4.2 Identity Verification (KYC) Data. To comply with applicable age verification and anti-money laundering obligations, we may collect: copies of your MyKad (front and back), passport, or other government-issued identification document; a recent proof of address; and in some cases, a selfie photograph for liveness verification. This data is processed by our KYC compliance team and authorised verification service providers.

4.3 Financial Data. When you make deposits or request withdrawals, we collect: your selected payment method (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, USDT wallet address), transaction reference numbers, transaction amounts, and timestamps. We do not store full payment credentials; all payment processing is handled by PCI-DSS compliant payment gateway providers.

4.4 Transactional & Gaming Data. We collect records of all wagers, game sessions, sports bets, bonus claims, promotional interactions, and account balance movements. This data is used for dispute resolution, fraud prevention, regulatory compliance, and service improvement.

4.5 Communications Data. When you contact our support team via live chat, email, or other channels, we retain records of those communications for quality assurance, dispute resolution, and compliance purposes.

4.6 Technical & Device Data. We automatically collect certain technical data when you access our platform, including: IP address, browser type and version, operating system, device identifiers, screen resolution, time zone, and referring URL. This data is used for security monitoring, fraud prevention, and platform optimisation.

4.7 Cookies & Analytics Data. We use cookies and similar tracking technologies to collect information about your browsing behaviour on our platform. Please refer to Section 9 for full details of our cookie practices.

Sakti26 processes your Personal Data only where a lawful basis exists for doing so. The following table sets out the primary purposes for which we process Personal Data and the corresponding legal basis for each:

Sakti26 does not sell, rent, or trade your Personal Data to any third party for that party's own marketing or commercial purposes. We share Personal Data only in the limited circumstances described below:

• Payment Service Providers: Your transaction data is shared with our authorised payment processors (including the operators of supported Malaysian payment methods such as Touch 'n Go eWallet, DuitNow, FPX, and banking institutions) to the extent necessary to process deposits and withdrawals.
• KYC and Identity Verification Providers: Where we engage third-party KYC service providers to conduct identity and age verification, your identification documents and related data will be processed by those providers under strict contractual data protection obligations.
• Technology and Infrastructure Providers: We engage cloud hosting, cybersecurity, and platform infrastructure providers who may process data on our behalf as Data Processors. These providers are bound by data processing agreements and are not permitted to use your data for any other purpose.
• Game Studio Partners: Licensed game studios providing games on the sakti26 platform may receive anonymised session data for game performance and RTP auditing purposes. No personally identifiable information is shared with game studios without your explicit consent.
• Legal and Regulatory Authorities: We may disclose Personal Data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required to do so by applicable law, court order, or legal process.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of Sakti26's business, Personal Data may be transferred to the successor entity, subject to equivalent data protection obligations.

Sakti26 retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general data retention guidelines are as follows:

• Account Data: Retained for the duration of your account and for a period of five (5) years following account closure, in order to comply with anti-money laundering record-keeping obligations and to resolve any post-closure disputes.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of verification or account closure, as required under applicable AML and compliance frameworks.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction to fulfil financial record-keeping and regulatory reporting obligations.
• Communications Data: Live chat transcripts, email correspondence, and support ticket records are retained for a period of two (2) years from the date of the last communication, unless a longer retention period is required for ongoing dispute resolution or legal proceedings.
• Technical and Log Data: Server logs, IP address records, and device data are retained for up to twelve (12) months for security monitoring purposes.
• Cookie and Analytics Data: Retained in accordance with the specific cookie type; session cookies are deleted when you close your browser, while persistent cookies may be retained for periods stated in our cookie settings.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised so that it can no longer be associated with you as an identifiable individual.

Sakti26 implements and maintains technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and the sakti26 platform is encrypted using TLS (Transport Layer Security), providing 256-bit encryption for all sessions.
• Encryption at Rest: Sensitive Personal Data stored on our servers, including identity documents and financial data, is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to Personal Data within Sakti26's systems is restricted to authorised personnel on a strict need-to-know basis. Access rights are reviewed regularly and revoked upon staff departure or role change.
• PCI-DSS Compliance: Payment data is handled through PCI-DSS compliant payment processors. Sakti26 does not store full payment instrument numbers on its own servers.
• Security Monitoring: Our platform infrastructure is subject to continuous security monitoring for intrusion attempts, anomalous access patterns, and other indicators of compromise.
• Penetration Testing: We engage independent security professionals to conduct regular penetration tests and vulnerability assessments of our platform and infrastructure.

While we implement robust security measures, no system can guarantee absolute security. In the event that a security breach is detected, Sakti26 will take immediate containment action and notify affected users and relevant authorities as required by applicable law.

Sakti26 uses cookies and similar tracking technologies on our platform. This section explains what cookies we use, why we use them, and how you can manage your preferences.

9.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. They enable the website to remember your actions and preferences over a period of time.

9.2 Types of Cookies We Use.

9.3 Managing Cookies. You may manage your cookie preferences through your browser settings. Disabling cookies may affect the functionality of the sakti26 platform. Strictly necessary cookies cannot be disabled as they are essential for platform operation. For all other cookie categories, you may adjust your preferences via your browser's cookie management settings.

Subject to applicable data protection law, you have the following rights in relation to the Personal Data we hold about you. To exercise any of these rights, please contact our support team as detailed in Section 15.

The sakti26 platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from any person under the age of 21.

During account registration, we require users to confirm that they are at least 21 years of age. We further verify age during the KYC process through review of government-issued identification documents. Any account found to be operated by a person under the age of 21 will be immediately closed, all associated balances and bonuses forfeited, and the matter escalated in accordance with applicable law.

If you believe that Sakti26 has inadvertently collected Personal Data from a person under 21 years of age, please contact us immediately at the details in Section 15 so that appropriate action can be taken without delay.

In the course of providing our services, your Personal Data may be transferred to and processed in jurisdictions outside Malaysia, including by our third-party Data Processors (such as cloud hosting providers or KYC verification services) who may operate in other countries.

Where such transfers occur, Sakti26 ensures that appropriate safeguards are in place to protect the security and integrity of your Personal Data. These safeguards include: contractual data processing agreements incorporating standard data protection clauses; transfer impact assessments where required; and selection of third-party providers located in jurisdictions with adequate data protection frameworks.

By using the sakti26 platform and providing your Personal Data, you acknowledge that your data may be transferred to, stored in, and processed in jurisdictions other than Malaysia, subject to the protections described in this Policy.

The sakti26 platform may integrate third-party services, including payment gateways, live game streaming technology, analytics tools, and customer support software. While we select third-party providers carefully and require them to comply with data protection obligations, we are not responsible for the privacy practices of third parties operating their own independent services.

This Privacy Policy applies solely to Personal Data processed by Sakti26 in connection with your use of the sakti26 platform. It does not extend to data processing conducted by payment providers in connection with your e-wallet or banking accounts, or by any third party operating independently of the sakti26 platform.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of sakti26.

Sakti26 reserves the right to update, modify, or replace this Privacy Policy at any time. Where amendments are material — for example, where we introduce new categories of data collection, change our data sharing practices, or update retention periods — we will provide reasonable prior notice via email to your registered address or via an on-platform notification.

The "Last Reviewed" date at the top of this Policy reflects the date of the most recent review. Your continued use of the sakti26 platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, please cease using the platform and contact us to request account closure.

We recommend that you review this page periodically to remain informed of how Sakti26 handles your Personal Data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by Sakti26, please contact our support team using the following details:

Email: [email protected]

Live Chat: Available 24/7 via the Platform — English, Bahasa Melayu, and Chinese supported.

Support Hours: 24 hours a day, 7 days a week.

We will acknowledge data rights requests and privacy complaints within five (5) business days. Where a complaint relates to a potential data breach or an urgent security matter, please contact us immediately via live chat for the fastest response.

If you are not satisfied with our response to a privacy complaint, you have the right to refer the matter to your applicable national or regional data protection supervisory authority. For players based in Malaysia, the relevant authority is the Department of Personal Data Protection Malaysia (JPDP), operating under the Personal Data Protection Act 2010.