This Privacy Policy explains how sga508 collects, uses, stores, and protects the personal data of players and visitors across our platform. We are committed to handling your information with transparency, security, and respect.
Six principles that guide every decision we make about your personal data at sga508.
All personal data is protected by256-bit SSL encryption in transit and AES-256 encryption at rest. Access to personal data is restricted to authorised personnel on a strict need-to-know basis.
sga508 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used solely to operate and improve the platform and services you use.
Data collected by sga508 is used only for the specific purposes described in this Policy. We do not repurpose your data for activities unrelated to the provision and improvement of our services to you.
You have the right to access, correct, restrict, and request deletion of your personal data. These rights are not theoretical — our support team is available to handle data requests within the timeframes stated in this Policy.
We tell you exactly what data we collect, why we collect it, how long we keep it, and who we share it with. No hidden processing, no unexplained data collection. If our practices change, we update this Policy and notify you.
We explain every cookie category used on sga508, distinguish between essential and non-essential cookies, and provide guidance on how to manage your cookie preferences through your browser settings.
This Privacy Policy (hereinafter referred to as the"Policy") is published by sga508 (hereinafter referred to as "sga508", "we", "us", or "our") and governs the collection, processing, storage, use, and disclosure of personal data obtained from individuals (hereinafter referred to as "you", "your", or the "Data Subject") who access or use the sga508 platform at https://sga508.click and all associated services (collectively, the "Platform").
sga508 recognises the importance of protecting the privacy and personal information of our players, particularly those based in Malaysia. We are committed to processing personal data lawfully, fairly, and transparently, in accordance with applicable data protection principles and international best practice.
This Policy should be read in conjunction with our Terms & Conditions, which are incorporated by reference. By accessing the Platform, registering an account, or otherwise interacting with our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.
For the purposes of this Policy, the following definitions apply:
sga508 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, sga508 is responsible for determining the purposes and means by which your Personal Data is processed, and for ensuring that such processing is conducted in accordance with the commitments set out in this Policy.
sga508 operates under international licensing from an established offshore gaming jurisdiction. Our data processing practices are designed to meet the standards expected under internationally recognised data protection frameworks, including principles drawn from the General Data Protection Regulation (GDPR) as a benchmark for international best practice, notwithstanding the specific jurisdiction of operation.
For all data protection enquiries, including requests to exercise your data rights, you may contact our designated Data Privacy Point of Contact using the details provided in Section 17 of this Policy.
sga508 collects the following categories of Personal Data from registered players and platform visitors:
sga508 collects Personal Data through the following channels:
sga508 processes your Personal Data on the basis of one or more of the following lawful grounds, depending on the specific processing activity:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contractual Necessity | Account creation and management, processing deposits and withdrawals, provision of betting and casino services, customer support |
| Legal Obligation | KYC identity verification, AML/CTF transaction monitoring, age verification (21+ enforcement), fraud prevention reporting |
| Legitimate Interests | Platform security and fraud detection, product improvement and analytics, responsible gambling monitoring, IT systems maintenance |
| Consent | Marketing communications (email, SMS), non-essential cookies, personalisation of promotional content |
Where processing is based on your consent, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent to marketing communications will not affect your ability to use the Platform.
sga508 uses your Personal Data for the following specific purposes:
sga508 does not sell your Personal Data to third parties. We may share your data with the following categories of third parties, strictly for the purposes described in this Policy:
All third-party Data Processors engaged by sga508 are subject to contractual data processing agreements that require them to process data solely for the purposes specified, implement appropriate security measures, and not retain data beyond the period necessary for the purpose.
Given that sga508 operates under an international licensing framework and engages service providers located in multiple jurisdictions, your Personal Data may be transferred to, stored in, or processed in countries outside of Malaysia. Such countries may have data protection laws that differ from those in your home jurisdiction.
Where Personal Data is transferred internationally, sga508 takes steps to ensure that appropriate safeguards are in place to protect your data, including the use of contractual clauses, data processing agreements, and engagement of processors that adhere to internationally recognised security standards.
By registering an account and using the Platform, you acknowledge and consent to the international transfer of your Personal Data under the conditions described in this Policy.
sga508 retains Personal Data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any applicable legal retention obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML/KYC legal obligation |
| Financial Transaction Records | 7 years from transaction date | Financial records legal obligation |
| Betting & Gaming History | 5 years from last activity | Licensing obligation / dispute resolution |
| Customer Support Correspondence | 3 years from last interaction | Legitimate interest / dispute resolution |
| Technical & Log Data | 12 months | Security and fraud prevention |
| Marketing Preferences | Until consent withdrawn + 1 year | Consent |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with sga508's data disposal procedures. Where data is anonymised rather than deleted, the resulting anonymised data is no longer considered Personal Data and may be retained indefinitely for statistical or analytical purposes.
sga508 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve user experience, and gather analytical insights. The following categories of cookies are used:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Session authentication, account security, login state management, fraud prevention tokens. These cookies are strictly necessary for the Platform to function and cannot be disabled. | No — strictly necessary | |
| Remembering your language preference (English, Bahasa Melayu, Chinese), display settings, and responsible gambling tool configurations such as deposit limits and session reminders. | Yes | |
| Aggregated, anonymised data on Platform usage patterns, page performance, and navigation flows. Used solely to improve Platform design and functionality. No personally identifiable information is shared with analytics tools. | Yes |
You may manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to view, restrict, or delete cookies via the settings or preferences menu. Please be aware that disabling essential cookies may impair the functionality of the Platform, including your ability to log in or maintain a session.
Instructions for managing cookies in commonly used browsers are available on the respective browser developers' support pages. sga508 does not provide links to external sites, but guidance is available through standard browser help documentation.
As a Data Subject whose Personal Data is processed by sga508, you are entitled to the following rights in respect of your Personal Data. These rights may be exercised by contacting sga508 using the contact details provided in Section 17 of this Policy.
Request a copy of the Personal Data sga508 holds about you, along with information on how it is processed.
Request correction of any inaccurate or incomplete Personal Data held on your account.
Request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Request that sga508 restrict the processing of your data in certain circumstances, such as while accuracy is contested.
Request a copy of Personal Data provided by you in a structured, commonly used, machine-readable format.
Object to the processing of your Personal Data for direct marketing purposes. This right is absolute and will be actioned promptly.
Withdraw consent for any processing activity that relies on consent as its legal basis, at any time, without penalty.
Unsubscribe from promotional communications at any time via the unsubscribe link in any marketing email or by contacting support.
sga508 will respond to valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it. There is no charge for exercising your rights under normal circumstances.
sga508 strictly prohibits access to and use of the Platform by individuals under the age of 21 years. The Platform is intended exclusively for adults who meet the minimum age requirement.
sga508 does not knowingly collect Personal Data from individuals under the age of 21. Our KYC verification process is specifically designed to detect and prevent underage registration. If sga508 becomes aware that Personal Data has been collected from an individual under 21 years of age, we will immediately suspend the account, delete the associated Personal Data, and take appropriate remedial action.
Parents and guardians who believe that a minor in their care may have accessed the Platform or provided Personal Data to sga508 are encouraged to contact our support team immediately using the contact details in Section 17.
sga508 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
Notwithstanding these measures, no online platform can guarantee absolute security. sga508 encourages all players to use strong, unique passwords and to enable two-factor authentication on their accounts.
The sga508 Platform may contain references to or integrations with third-party services, including game content providers, payment processors, and customer communication tools. This Policy applies only to Personal Data collected and processed by sga508 directly.
Third-party services integrated into the Platform — such as live dealer game studios and payment gateways — operate under their own privacy policies. sga508 is not responsible for the privacy practices of third parties and recommends that you review the privacy documentation of any third-party service with which you interact.
sga508 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy will be communicated to registered players via email notification or a prominent notice displayed on the Platform, prior to the changes taking effect.
The version of this Policy bearing the most recent "Last Updated" date displayed at the top of this page shall be the current and operative version. Where required by applicable law, changes that involve new or materially different processing activities will be subject to renewed consent from affected Data Subjects.
Continued use of the Platform following notification of material changes to this Policy will be treated as acceptance of the updated terms. If you do not accept the updated Policy, you must discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.
For all enquiries relating to this Privacy Policy, the processing of your Personal Data, or the exercise of your data rights, please contact sga508 through any of the following channels:
When submitting a formal data rights request, please provide your registered account email address, a clear description of the request, and any supporting information that may assist our team in processing your request efficiently. Identity verification may be required to ensure the security of your data.
Our multilingual support team handles privacy enquiries in English, Bahasa Melayu, and Chinese —24 hours a day, 7 days a week. You can also review our full Terms & Conditions for the complete picture. For players aged 21 and above only.