Super22 Official Privacy Document

Super22 Privacy Policy – Our Commitment to Protecting Every Malaysian Player's Personal Data

At Super22, your privacy is not merely a legal obligation — it is a moral responsibility we take seriously every day. This policy transparently explains how we collect, use, store, and protect your personal data.

Effective Date: 1 January 2026  |  Version: 3.2
256-bit SSL Full Encryption
None Data Sales
Compliance Malaysia PDPA
Security Audits Periodic

super22's Six Data Protection Principles

How Super22 protects the privacy and personal data of every Malaysian member, in line with the highest international standards

Minimum Data Collection
Super22 only collects personal data that is strictly necessary to manage your account, process financial transactions in Malaysian Ringgit (RM), and meet regulatory requirements. We do not request information that is irrelevant to the operation of our platform.
High-Grade Encryption & Security
All data stored on Super22's servers is protected with AES-256 industry-standard encryption. Communications between your browser and our servers are secured with 256-bit SSL/TLS — the same technology used by Malaysia's leading banks, including Maybank and CIMB.
No Sale of Data to Third Parties
Super22 has never sold, rented, or exchanged members' personal data to any third party for marketing or commercial purposes. Your data belongs to you — we hold it in trust and keep it secure.
Full Access & Control Rights
As a super22 member, you have the full right to access, correct, transfer, or request deletion of your personal data at any time. Requests can be submitted through our customer support team, available 24/7 year-round.
PDPA Compliance & Global Standards
Super22 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. Our compliance team ensures that all data collection and processing activities meet current legal requirements.
Marketing Communications Control
You may choose to opt in or out of any marketing communications from Super22 at any time through your account settings. We respect your preferences — no spam emails or unwanted promotional messages if you choose to opt out.

1 Introduction – super22's Privacy Commitment

Super22 ("we", "the Company") takes the privacy and security of our members' personal data extremely seriously. This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, and protection of personal information you provide to us when using the super22 platform at super22.biz.

This policy applies to all users of the Super22 platform — whether you are a registered player, a website visitor, or an individual in the process of registering. By using the Super22 platform in any way, you agree to the terms of this Privacy Policy.

Super22 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), which sets the minimum standards for processing personal data in the context of commercial activities. We also apply international best-practice data protection principles to ensure your privacy is always safeguarded.

Important Note: Super22 has never sold, and will never sell, your personal data to third parties for marketing purposes. Your data is a trust we take seriously and safeguard with full responsibility.

2 Types of Personal Data We Collect

Super22 collects various categories of information depending on how you interact with our platform. Below is a full breakdown of the data we may collect:

2.1 Data You Provide Directly

Data CategoryExample InformationRequirement
Personal Identity Full name, IC number (MyKad), date of birth, gender Mandatory
Contact Information Email address, phone number, residential address Mandatory
Financial Data Bank account number, account holder name, bank name (Maybank, CIMB, etc.) Required for transactions
e-Wallet Data TnG number, GrabPay ID, Boost ID, ShopeePay ID, DuitNow account Options
Verification Documents MyKad/passport copy, proof of address, verification selfie Required for KYC

2.2 Automatically Collected Data

  • Technical Data: IP address, browser type, operating system, screen resolution, device language
  • Usage Data: Pages visited, session duration, games played, bets placed
  • Location Data: Approximate location based on IP address (state/country only — not precise GPS)
  • Cookie Data: Login session information, language preferences, and display settings

Super22 does not collect biometric data such as fingerprints or facial recognition, except for specific identity verification purposes that require your explicit consent beforehand.

3 How We Use Your Personal Data

Super22 uses the personal data collected solely for the following purposes, and nothing beyond that:

3.1 Platform Operations & Services

  • Process account registration and verify your identity
  • Processing deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, and CIMB Clicks in Malaysian Ringgit (RM)
  • Enabling you to access and play all available games — including slots, live casino, Sports Betting (Malaysia Super League football, EPL, badminton, cricket), lottery, poker, and roulette
  • Sending important notifications related to your account, transactions, and security
  • Providing effective and responsive customer support

3.2 Security & Fraud Prevention

  • Detecting and preventing fraudulent activity, money laundering, and platform abuse
  • Complying with KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements
  • Monitor suspicious activity and report to authorities where required by law

3.3 Marketing & Communications (With Your Consent)

  • Sending relevant promotions, bonus offers, and Super22 VIP programme information
  • Notifying you about new games, progressive jackpots, and special events
  • Sending customer satisfaction surveys to help improve Super22's services

Marketing Controls: You can opt out of marketing communications at any time via the "unsubscribe" link in any email or through your super22 account settings. This preference does not affect essential operational communications related to your account.

4 Data Sharing & Disclosure to Third Parties

Super22 does not sell, rent, or share members' personal data with third parties for their own marketing purposes. However, there are limited situations where Super22 may need to share your data:

4.1 Trusted Service Providers

Super22 works with third-party service providers who assist us in operating the platform. These providers are given access only to the data necessary for their specific tasks and are bound by strict confidentiality agreements:

  • Payment processors: To process transactions via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, and CIMB Clicks
  • KYC service providers: To verify member identity and documents
  • Cloud service provider: For secure data storage with full encryption
  • Gaming software providers: Only data required for gaming operations — no personal financial information

4.2 Legal Requirements

Super22 may disclose personal data where required by law or court order, including to Malaysian law enforcement agencies, regulatory authorities, or other bodies with lawful jurisdiction. Super22 will endeavour to notify you of any such disclosure unless prohibited from doing so by law.

Where your data is transferred to another country for processing, Super22 ensures a level of protection equivalent to Malaysian and international standards through appropriate data transfer agreements.

5 Cookies, Pixels & Tracking Technologies

Super22 uses cookies and similar tracking technologies to enhance the user experience and analyse the performance of our platform.

Cookie TypeFunctionPeriod
Essential Cookies Maintaining login sessions and security settings Session only
Functional Cookies Stores language preferences, display settings, and game choices 30 days
Analytics Cookies Analyse usage patterns to improve the super22 platform 90 days
Marketing Cookies Displaying relevant Super22 promotions (requires consent) 180 days

You can control and manage cookies through your browser settings. However, disabling essential cookies may affect the functionality of the super22 platform. You can manage your cookie preferences through your super22 account settings or your internet browser settings.

6 Data Security Measures

Super22 implements a range of technical and organisational measures to protect your personal data against unauthorised access, use, disclosure, alteration, or destruction:

6.1 Technical Security

  • 256-bit SSL/TLS encryption: All communications between your device and Super22's servers are fully encrypted
  • AES-256 static data encryption: Data stored in our databases is protected with the strongest industry-grade encryption
  • Two-factor authentication (2FA): An additional security layer for account access
  • 24/7 Monitoring: An intrusion detection system that monitors for suspicious activity around the clock
  • Regular security audits: Penetration testing conducted regularly by independent security experts

6.2 Organisational Security

  • Access to members' personal data is restricted to staff with a legitimate operational need only
  • All Super22 staff who handle personal data undergo comprehensive data protection training
  • Established security incident response procedures to address data breaches swiftly

Shared Responsibility: While Super22 takes all reasonable steps to protect your data, your own actions also play a role in keeping it secure — including maintaining the confidentiality of your password and using a safe internet connection.

7 Data Retention Period

Super22 retains your personal data only for as long as necessary for the purposes stated in this Policy, or as required by applicable Malaysian law:

Data TypeRetention PeriodReason
Active account data For the duration of the active account Service operations
Closed account data 7 years after account closure AML Legal Requirements
Financial transaction records 7 years Tax compliance & AML
Support communication logs 3 years Dispute referral
Analytics cookie data 90 days Platform analytics

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity.

8 Your Personal Data Rights

As a Super22 member, you have the following rights regarding your personal data under Malaysia's PDPA and Super22's internal policies:

👁️
Access Rights

Request a copy of the personal data we hold about you in a readable format.

✏️
Right to Rectification

Request correction of any inaccurate or incomplete personal data held in our records.

🗑️
Right to Erasure

Request deletion of your personal data, subject to legal retention requirements.

🚫
Right to Object

Object to the processing of your data for direct marketing purposes at any time.

📦
Right to Data Portability

Request your data in a structured, machine-readable format for transfer to another platform.

⏸️
Right to Restriction

Request a restriction on the processing of your data while a dispute or review is in progress.

How to Exercise Your Rights: To exercise any of the rights above, contact the Super22 Data Privacy Officer at privacy@super22.biz or via our customer support live chat. We will process your request within 30 business days.

9 Children's Data Protection

Super22 is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

If you become aware that a child or minor has registered a Super22 account, please contact us immediately at support@super22.biz. We will take immediate action to close the account and delete all associated data.

Parents and guardians are encouraged to use parental control software and ensure that children do not have access to online betting platforms such as Super22.

10 Privacy Policy Amendments

Super22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, new legal requirements, or improvements to our data protection measures.

When we make material changes, we will:

  • Updating the "Effective Date" at the top of this page
  • Displaying a prominent notice on the super22 homepage for a minimum of 30 days
  • Sending email notifications to all registered members regarding significant changes

Continued use of the super22 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, please contact us to close your account.

11 Contact Us – Privacy-Related Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Super22 handles your personal data, please reach out to us through the following channels:

  • Privacy Email: privacy@super22.biz
  • General Support Email: support@super22.biz
  • Live Chat: Available 24/7 on the Super22 platform
  • WhatsApp: Number available upon logging in to your account

Super22's Data Privacy Officer (DPO) will respond to your enquiry within 30 working days of receiving your request. For more urgent matters involving data security or a suspected breach, our 24/7 support team will respond within a matter of hours.

If you are dissatisfied with super22's response to your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia or the relevant authority in your jurisdiction.

FAQ – Super22 Privacy Policy

super22 does not sell or share your personal data with third parties for their own marketing purposes. The only parties who may receive your data are the service providers we engage to operate the platform — such as payment processors (Touch 'n Go, DuitNow, GrabPay, and others) and KYC service providers — and they are bound by strict confidentiality agreements. Disclosure to authorities may also occur where required under Malaysian law.

To request deletion of your personal data, contact super22's Data Privacy Officer at privacy@super22.biz with the email subject "Data Deletion Request". Please include your full name and account ID. We will process your request within 30 business days. Please note that we may be required to retain certain data for periods prescribed by Malaysian law (e.g. financial transaction records for 7 years under AML requirements) even after a deletion request is received.

Super22 has a comprehensive Security Incident Response Plan in place. In the event of a data breach affecting members' personal information, we will: (1) Isolate and contain the breach as quickly as possible, (2) Notify the relevant authorities within the timeframe required by law, and (3) Inform affected members via email within 72 hours of the breach being confirmed. We will provide clear information on what occurred, what data was involved, and the steps you should take to protect yourself.

You can manage cookies through your browser settings or via the cookie management panel in your Super22 account settings. However, disabling essential cookies will affect core platform functionality — including the ability to stay logged in and access games. Analytical and marketing cookies can be disabled without affecting the platform's basic functionality. We recommend keeping at least essential cookies enabled for the best gaming experience on Super22.
🔐

Your Data Is Safe at super22 — Register with Confidence

Super22 protects every member's privacy with 256-bit SSL encryption, PDPA compliance, and a full commitment to data security. Join over 500,000 Malaysian players who trust super22 as their online betting platform of choice.

256-bit SSL PDPA Compliant No Data Sales 18+ Only
Bahasa Melayu