Speedau Privacy
Policy — Your Data, Your Rights

Speedau ("the Company", "we", "us", or "our") is the operator of the online casino and sports betting platform available at speedau.cam (the "Platform"). We take our obligations as a data controller seriously and are committed to protecting the privacy and personal data of all users who access or register on the Platform ("you", "your", or "the User").

This Privacy Policy describes in full detail the types of personal data we collect, the purposes for which that data is processed, the parties with whom it may be shared, the measures we take to keep it secure, and the rights you hold as a data subject. This Policy applies to all interactions with the Platform, including registration, deposit and withdrawal transactions, customer support communications, and general browsing.

This Privacy Policy should be read together with our Terms & Conditions, which govern your overall use of the Platform, and our Responsible Gambling Policy. All three documents form part of your agreement with Speedau.

The following terms are used throughout this Privacy Policy with the meanings assigned below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other available data.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, Speedau is the Data Controller in respect of User data.
• "Data Processor" means any third party that processes personal data on behalf of the Data Controller under a contractual arrangement and in accordance with this Policy.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data for a stated purpose.
• "KYC Data" means identity and address verification documents submitted as part of the Know Your Customer process, including government-issued identification and proof of address.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia, which governs the processing of personal data of individuals in Malaysia in commercial transactions.
• "Cookies" means small text files stored on your device by the Platform for the purposes of session management, analytics, and personalisation.

The categories of personal data we collect depend on how you interact with the Platform. The following categories apply across standard account use:

3.1 — Identity & Contact Data

3.2 — Financial & Transaction Data

3.3 — Technical & Usage Data

3.4 — Communications Data

Records of your communications with our support team via live chat or email, including timestamps, query content, and resolution outcomes, are retained for quality assurance and compliance audit purposes.

Speedau collects personal data through the following channels:

• Direct Submission: Information you provide when registering an account, completing the KYC process, making a deposit or withdrawal, or contacting our support team.
• Automated Technical Collection: Data collected automatically through cookies, log files, and analytics tools when you browse or interact with the Platform.
• Payment Service Providers: Limited transaction data received from payment processors such as FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong in the course of processing your financial transactions.
• Identity Verification Partners: Data received from third-party KYC and fraud-screening service providers engaged to verify your identity and detect fraudulent activity.
• Publicly Available Sources: In limited circumstances, we may supplement your information with publicly available data for fraud prevention or regulatory compliance purposes.

Speedau processes your personal data on one or more of the following lawful bases, consistent with applicable data protection legislation including Malaysia's Personal Data Protection Act 2010 (PDPA):

Speedau uses collected personal data for the following purposes:

6.1 — Account & Service Delivery

• Creating, maintaining, and securing your Speedau account.
• Processing financial transactions, including deposits via DuitNow, Touch 'n Go eWallet, FPX, and withdrawals to your verified Malaysian bank account or e-wallet.
• Delivering customer support and responding to queries submitted via live chat or email.
• Administering bonuses, promotions, and loyalty programme benefits.

6.2 — Regulatory Compliance

• Performing identity verification (KYC) in accordance with applicable anti-money laundering obligations.
• Screening against sanctions and politically exposed persons (PEP) lists.
• Retaining transaction records as required by applicable financial regulations.
• Reporting to regulatory authorities where legally required.

6.3 — Fraud Prevention & Security

• Detecting and investigating suspicious account activity, bonus abuse, and fraudulent transactions.
• Monitoring for multiple accounts, identity fraud, and collusion.
• Enforcing our Terms & Conditions and protecting the integrity of the Platform.

6.4 — Platform Improvement

• Analysing usage patterns and game performance to optimise the Platform experience.
• Conducting internal research and business analytics.

6.5 — Marketing Communications (Consent-Based)

With your explicit consent, we may send you promotional communications about Speedau offers, new games, and platform updates. You may withdraw consent at any time by contacting [email protected] or updating your communication preferences in your account settings.

Speedau does not sell, rent, or trade your personal data to third parties for commercial purposes. We may disclose your data only in the following limited circumstances:

• Payment Processors: To facilitate deposit and withdrawal transactions, we share necessary financial data with payment service providers including FPX operators, DuitNow, Touch 'n Go eWallet, Boost, and GrabPay. These processors are bound by data processing agreements and applicable payment industry security standards.
• KYC & Identity Verification Services: We engage accredited identity verification and fraud screening providers who process your KYC documents on our behalf under strict contractual data protection obligations.
• Game Content Providers: Your anonymised gameplay data may be shared with certified game providers for RNG audit and technical support purposes. No personally identifiable information is shared for this purpose.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or regulatory directive, we will disclose personal data to competent authorities without prior notice to you.
• Group Companies: Personal data may be shared within the Speedau corporate group for the purposes of service delivery, compliance, and fraud prevention, subject to equivalent data protection standards.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of the Company's assets, User data may form part of the transferred assets. You will be notified of any such transfer via your registered email address.

Speedau's infrastructure and certain third-party service providers may be located outside of Malaysia. Where your personal data is transferred to, stored in, or processed in a jurisdiction outside Malaysia, the Company takes all reasonably practicable steps to ensure that the receiving entity provides a level of data protection comparable to that required under Malaysia's PDPA.

Such steps include the use of standard contractual data protection clauses, processing agreements that impose equivalent obligations on the receiving party, and selecting service providers that maintain recognised international security certifications.

Speedau retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulation.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be linked to any individual.

Speedau implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the Platform.
• AES-256 encryption for personal data stored at rest on our servers.
• Role-based access controls limiting internal access to personal data to authorised personnel with a documented business need.
• Multi-factor authentication for administrative systems and sensitive data access.
• Regular penetration testing and vulnerability assessments conducted by qualified independent security professionals.
• Real-time fraud monitoring systems that flag anomalous account activity for human review.
• Dedicated incident response procedures covering detection, containment, investigation, and notification of data security events.

The Platform uses cookies and similar tracking technologies to operate effectively and improve the user experience. A cookie is a small text file stored on your device by your browser when you visit a website.

11.1 — Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function — these include session cookies that maintain your login state and security tokens. These cannot be disabled without severely disrupting Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated data on how users interact with the Platform, which pages are most visited, and where errors occur. This data is used to improve the Platform experience.
• Functionality Cookies: Enable the Platform to remember your preferences such as language settings, display options, and responsible gambling limit configurations.
• Marketing Cookies (Consent-Required): Used to display relevant promotional content. These cookies are only placed with your prior consent and can be withdrawn at any time.

11.2 — Cookie Management

You may manage or disable non-essential cookies through your browser's privacy settings. Note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled through browser settings as they are required for core Platform operation.

Subject to applicable data protection law, you hold the following rights in respect of your personal data held by Speedau. To exercise any of these rights, please contact us at [email protected] (plain text — not a clickable link).

• Right of Access: You may request confirmation of whether Speedau processes your personal data and, if so, obtain a copy of that data together with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held about you. You can update most account details directly via your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding retention obligations under applicable law.
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to Data Portability: You may request a copy of the personal data you have provided to us in a structured, machine-readable format for transfer to another data controller.
• Right to Object: You may object to the processing of your personal data on the basis of legitimate interests, including for direct marketing purposes. An objection to marketing will be honoured immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Age verification is conducted as part of the standard account registration and KYC process. If the Company becomes aware that personal data has been collected from an individual under the age of 21, that account will be closed immediately, all associated funds returned where applicable, and the relevant data deleted without undue delay.

If you are a parent or guardian and believe that a minor has accessed the Platform or submitted personal data to Speedau, please contact us immediately at [email protected] so that we may investigate and take appropriate action.

Speedau reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Where a material change is proposed, we will notify registered users via their registered email address and/or by prominent notice on the Platform at least fourteen (14) days before the change takes effect.

The current version of this Privacy Policy, including the effective date, is always available at speedau.cam/privacy-policy. We encourage you to review this page periodically to remain informed of how your data is handled.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must discontinue use and contact us to close your account.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the Speedau Data Protection team through the following channels:

• Live Chat: Available 24/7 via the Platform — our English-speaking support agents are available at all hours to assist players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam.
• Email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Request" or "Data Subject Request" for prioritised routing. Response within 5 business hours during standard operating periods.

When submitting a data subject request, please include your registered username and a clear description of the right you wish to exercise. We may require you to verify your identity before processing your request to protect against fraudulent data access attempts.