Privacy Policy sm506 — Your Personal Data Protection

1. Introduction and Scope of This Policy

This Privacy Policy explains how sm506 ("we", "our platform") collects, processes, stores and protects your personal information when you use the sm506.pro website and its related services. This document is written in clear, plain language because we believe every member has the right to know exactly what happens to their data.

This Policy applies to all users who access the sm506 platform, whether as a guest without an account, a registered member, or an active playing member. By registering an account or continuing to use the sm506 platform, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, you are advised to stop using our platform.

This Privacy Policy should be read together with Terms and Conditions sm506 which also governs the use of this platform. Any privacy-related disputes will be resolved in accordance with applicable Malaysian law.

2. Information We Collect

Sm506 only collects information that is strictly necessary to provide you with a safe, legal, and quality service. The following are the categories of information we may collect:

2.1 Account Registration Information

• Full name as per identity card or passport
• Malaysian identity card number (MyKad) or passport number
• The active email address you use
• Valid mobile phone number
• Date of birth (for age verification)
• Current residential address

2.2 Financial Information

• Bank account number or FPX details for deposits and withdrawals
• Digital wallet number (Touch 'n Go eWallet, Boost, etc.)
• Deposit and withdrawal transaction history
• Wagering records and gaming activity

2.3 Technical Information

• Your device's IP address
• Web browser type and version
• Device operating system information
• Login session data and access timestamps
• Cookie and similar tracking technology data

2.4 Identity Verification Documents (KYC)

As part of the account verification and legal compliance process, sm506 may require copies of documents such as:

• National identity card (MyKad) — front and back
• Passport — biodata page
• Recent bank statement or utility bill as proof of address
• Selfie with identification document for live verification

3. How We Use Your Information

All collected information is used solely for lawful purposes directly related to the operation of the sm506 platform. We do not use your data for any purposes not stated in this policy.

Purpose of Use	Types of Data Used	Legal Basis
Identity verification and account opening	Personal information, KYC documents	Contract, Legal Obligation
Processing of deposits and withdrawals	Financial information, transaction history	Contract
Fraud prevention and anti-money laundering	All data categories	Legal Obligation
Customer service communications	Email, phone number	Contract, Legitimate Interest
Platform enhancement and development	Technical data, usage data	Legitimate Interest
Regulatory requirements compliance	Personal information, transaction records	Legal Obligation

4. Disclosure of Information to Third Parties

Sm506 takes a highly restricted approach to sharing user information. We do not sell or disclose your personal data to third parties for marketing purposes. However, there are certain situations where data sharing is necessary and legally permissible:

• Payment Providers: Only the minimum necessary data is shared with payment service providers such as FPX, DuitNow, Touch 'n Go and Boost, solely for the purpose of processing your transactions.
• Auditors and Compliance: sm506 may be required to disclose data to licensed auditors or regulatory bodies as part of operational compliance requirements.
• Legal Authority: If required by a court, court order, or competent authority in Malaysia, sm506 will comply with any lawful data disclosure request.
• Technical Service Providers: Third parties providing hosting, analytics, or technical support services to sm506 may have limited access to data, subject to strict confidentiality agreements.

5. Cookies and Tracking Technologies

Sm506 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• User Preference Cookies: Saves your personal settings such as preferred language and display layout for a more convenient experience.
• Analytics Cookies: Helps us understand how users interact with the platform for continuous improvement purposes. This data is collected in aggregate form without identifying individuals.
• Security Cookies: Used to detect and prevent suspicious activity, fraud, and unauthorised access attempts on your account.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the sm506 platform and your gaming experience.

6. Data Security

Sm506 continuously invests in security infrastructure to ensure your data is always protected. The technical and organisational security measures we practise include:

• 256-bit SSL/TLS encryption for all data in transit
• Sensitive data stored in the database is encrypted using the AES-256 algorithm
• Use of multi-layer firewall and intrusion detection system (IDS)
• Regular internal and external security audits
• Role-based access control (RBAC) for sm506 staff
• Two-factor authentication (2FA) for internal system access
• Tested and verified incident response plan

While sm506 takes all reasonable steps to protect your data, no system is entirely free from risk. You also play an important role in keeping your account secure by using a strong password and never sharing your login credentials with anyone.

7. Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection, you have the following rights regarding your personal information held by sm506:

To exercise any of the above rights, please contact the sm506 support team via email at [email protected]. We will process your request within the timeframe required by applicable law.

8. Cross-Border Data Transfers

In operating the sm506 platform, your personal data may be processed or stored on servers located outside Malaysia. This may occur when we use cloud service providers or international technical infrastructure.

Sm506 ensures that any cross-border data transfers are carried out with adequate safeguards, including the use of recognised standard contractual clauses, binding data transfer agreements, or the requirement that the recipient country maintains a level of data protection equivalent to Malaysia's. Your data will not be transferred to countries lacking adequate data protection laws without appropriate additional safeguards.

9. Data Retention and Deletion

Sm506 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by Malaysian law. Retention periods vary by data type:

• Active Account Data: Retained for the duration your account is active and for a reasonable period after account closure.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the transaction date, to comply with Malaysian tax and financial legal requirements.
• KYC Documents: Retained for a minimum of five (5) years after the business relationship ends, to comply with anti-money laundering (AML) legal requirements.
• Technical Access Logs: Retained for 90 days for security and incident investigation purposes.

Once the relevant retention period has expired, data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

10. Changes to This Privacy Policy

Sm506 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data. Any significant changes will be communicated to you via a prominent notice on the platform or through your registered email before the changes take effect.

The "Updated" date shown at the top of this page indicates when this Privacy Policy was last revised. You are encouraged to review this page periodically. Your continued use of the sm506 platform after changes take effect will be considered your acceptance of the updated Privacy Policy.

11. How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how sm506 handles your personal data, please contact our Data Protection Officer via:

Sm506 is committed to addressing all privacy-related enquiries and complaints seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia, who is responsible for enforcing the PDPA 2010.