Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by sgpools ("we", "us", "our") and applies to all personal data processed in connection with your use of the website located at https://sgpools.cam and all associated services, features and content (collectively, the "Platform").

sgpools operates as an English-language information and entertainment platform serving adult users in Malaysia. We are committed to processing personal data lawfully, fairly and transparently, in a manner consistent with the Personal Data Protection Act 2010 (PDPA) of Malaysia and any other applicable data-protection legislation.

By registering for an account on, or otherwise using, the sgpools Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

Definitions

For the purposes of this Policy, the following terms have the meanings assigned below:

Data Controller

sgpools is the data controller responsible for the personal data of Users of this Platform. Decisions about the purposes and means of processing personal data are made by sgpools and documented in our internal data-processing records.

Where third-party service providers process data on our behalf — including payment processors handling Maybank, CIMB, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX and USDT transactions, and identity-verification partners conducting KYC reviews — those providers act as Data Processors and are bound by contractual obligations that meet or exceed the data-protection standards described in this Policy.

Data We Collect

The categories of personal data we may collect about you are described in the table below. Collection occurs at the point indicated and is limited to what is necessary for the stated purpose.

Legal Basis for Processing

sgpools processes personal data only where a lawful basis exists under the Malaysian Personal Data Protection Act 2010 and, where applicable, equivalent international data-protection legislation. The principal legal bases we rely on are:

• Consent — where you have provided clear, informed consent for a specific processing activity, such as receiving promotional communications.
• Contractual necessity — where processing is required to perform the service agreement between you and sgpools, including account creation, identity verification and payment processing.
• Legal obligation — where processing is necessary to comply with a legal or regulatory requirement, including anti-money-laundering obligations, age-verification requirements and record-retention mandates.
• Legitimate interests — where processing is necessary for our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring and service improvement, provided those interests are not overridden by your rights and freedoms.

Purposes of Processing

We process personal data for the following purposes:

• Account creation and management — establishing your sgpools profile, maintaining account records and enabling login.
• Identity and age verification (KYC) — confirming that you are a Malaysian adult aged 21 or above and that payment instruments belong to you.
• Payment processing — facilitating deposits and withdrawals in MYR through supported Malaysian payment methods and USDT cryptocurrency.
• Customer support — responding to queries, resolving disputes and communicating important account or policy changes.
• Fraud prevention and security — detecting suspicious account activity, preventing unauthorised access, identifying bonus abuse and protecting Platform integrity.
• Responsible gambling compliance — monitoring usage patterns to identify potentially problematic behaviour, administering deposit limits, session controls and self-exclusion requests.
• Legal and regulatory compliance — maintaining records required by applicable law and responding to lawful requests from regulatory or law-enforcement authorities.
• Platform improvement — analysing anonymised usage data to improve the quality, reliability and relevance of Platform content and features.
• Marketing communications — where you have consented, sending information about promotions, offers and new features. You may withdraw marketing consent at any time.

Data Sharing and Disclosure

sgpools does not sell personal data to third parties. We may share your personal data only in the circumstances described below:

7.1 Service Providers and Data Processors

We engage third-party service providers to perform specific functions on our behalf, including payment processing (Maybank, CIMB, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, USDT cryptocurrency networks), identity verification, fraud-detection services, cloud infrastructure and customer-support tooling. Each processor is subject to a contractual data-processing agreement that restricts their use of personal data to the performance of the contracted service.

7.2 Legal and Regulatory Disclosures

We may disclose personal data to government bodies, regulatory authorities, courts or law-enforcement agencies where required by applicable law, court order or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect rights or comply with a legal obligation.

7.3 Business Restructuring

In the event of a merger, acquisition, reorganisation or asset sale involving sgpools, personal data held about Users may be transferred as part of that transaction. We will notify affected Users before such a transfer results in a material change to this Policy.

Data Retention

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, including to satisfy any legal, regulatory, accounting or reporting requirements. The following indicative retention periods apply:

When data is no longer required for any applicable purpose, it is securely deleted or anonymised so that it can no longer be associated with an identified individual.

Security Measures

sgpools implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or alteration. These measures include:

• Encryption of personal data in transit using TLS 1.2 or higher across all pages of the Platform (enforced HTTPS).
• Encryption of sensitive data at rest on our servers and storage infrastructure.
• Role-based access controls ensuring that only authorised personnel with a documented business need may access personal data.
• Regular vulnerability assessments and penetration testing of critical systems.
• Internal data-handling policies and mandatory training for staff with access to personal data.
• Incident response procedures for detecting, managing and notifying affected parties of personal data breaches within timeframes required by applicable law.

Cookies and Tracking Technologies

The sgpools Platform uses cookies and similar tracking technologies to support core functionality, analyse Platform performance and, where you have consented, to personalise your experience. The principal categories of cookies used are:

• Strictly necessary cookies — required for the Platform to function correctly, including maintaining your authenticated session, remembering language preferences and supporting security controls. These cannot be disabled without impairing Platform functionality.
• Analytical cookies — used to collect anonymous, aggregated information about how visitors use the Platform, including pages visited and session duration. This data is used to improve Platform performance and content relevance.
• Functional cookies — used to remember choices you have made, such as display preferences or responsible-gambling settings, to provide a more personalised experience.
• Marketing cookies — used only where you have provided explicit consent to receive targeted information about sgpools features and promotions. You may withdraw this consent at any time through your account settings or browser controls.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect the ability to use authenticated features of the Platform.

Your Rights

Subject to applicable law and certain limited exceptions, you have the following rights in relation to your personal data held by sgpools. These rights are consistent with the Malaysian Personal Data Protection Act 2010:

To exercise any of the above rights, please submit a written request to the contact address provided in Section 15. We will respond within 21 days of receiving a complete and verified request. We may need to verify your identity before processing a rights request in order to prevent unauthorised disclosure or modification of personal data.

Minors

The sgpools Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect, store or process personal data relating to persons under the age of 21. If we become aware that personal data of a minor has been collected without appropriate parental or guardian consent, we will take immediate steps to delete such data and close the associated account.

If you have reason to believe that a minor has provided personal data to sgpools, please contact us immediately using the details in Section 15.

International Data Transfers

In the course of delivering the sgpools Platform, personal data may be transferred to, and processed in, countries other than Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect the transferred data, including:

• Transfers to countries that have been assessed as providing an adequate level of data protection.
• Use of standard contractual clauses or equivalent contractual instruments that impose data-protection obligations on the recipient equivalent to those described in this Policy.
• Transfers to certified service providers operating under recognised data-protection frameworks where applicable.

Where personal data is transferred to a payment processor located outside Malaysia — for example, in connection with USDT TRC20 cryptocurrency transactions — the transfer is limited to the information strictly necessary to execute and record the transaction.

Policy Updates

sgpools reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law or operational requirements. The revised Policy will be published on this page with the "Last Updated" date amended accordingly.

Where a revision represents a material change to how we process your personal data, we will make reasonable efforts to notify you directly — for example, by displaying a prominent notice on the Platform or sending a communication to your registered email address — before the change takes effect.

Your continued use of the Platform following the posting of any updated Policy constitutes your acceptance of the revised terms. If you do not accept a revision, you should cease using the Platform and contact us to request account closure.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or need to report a potential data-protection concern, please contact sgpools using the following details:

Please note that the email address above is for written correspondence only. Do not transmit sensitive personal data — such as full identity document scans or complete financial account details — via unencrypted email unless specifically directed to do so by our verification team through a secure channel.

Malaysian residents who believe their data-protection rights under the PDPA have not been adequately addressed may seek recourse through the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi — JPDP) at the Ministry of Digital.