SpeedAU Privacy Policy – Malaysian Player Data Protection

1. Introduction – SpeedAU and Our Privacy Commitment

SpeedAU ("we", "platform", "SpeedAU") is an online betting platform operating at speedau.best, built specifically for players in Malaysia. We understand that player trust is the foundation of everything we do — and that trust starts with honest, responsible management of personal data.

This Privacy Policy explains in detail how SpeedAU collects, uses, stores, protects, and in certain circumstances shares your personal data when you use our platform — whether you are playing Live Casino, placing bets on the Malaysia Super League or EPL under Sports Betting, spinning jackpot slots, accessing VIP baccarat, wagering on e-sports, or simply browsing our website.

This Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. By registering and using SpeedAU, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

2. Personal Data SpeedAU Collects

SpeedAU collects your personal data through three main channels: (a) information you provide directly during registration and platform use, (b) data generated automatically when you use our platform, and (c) information we receive from relevant third-party service providers such as payment processors.

Data you provide directly:

• Full name as per Malaysian MyKad or passport
• Date of birth for minimum age verification (18 years and above)
• Active Malaysian mobile number
• Email address for communication and account verification
• Account password (stored in encrypted hash form — we do not retain your original password)
• Identity verification documents such as MyKad or passport during the KYC process
• Malaysian bank account or e-wallet details for withdrawal processing

Automatically generated data:

• IP address and general geolocation data (state within Malaysia)
• Device information including phone model, operating system, and browser version
• Platform activity logs including login times, logout times, and in-platform actions
• Complete records of betting and gaming history including Live Casino, slots, and sports
• Cookie data and session identifiers as described further in the cookies section

Data from third parties:

• Transaction confirmations from e-wallet payment processors including Touch 'n Go, GrabPay, Boost, and ShopeePay
• FPX transaction verification from Maybank2u and CIMB Clicks online banking systems
• Identity verification information from third-party KYC service providers appointed by SpeedAU

3. How SpeedAU Uses Your Personal Data

SpeedAU uses your personal data solely for the following purposes. We will not use your data for any other purpose without notifying you in advance:

Account Management & Core Services: Your data is used to create and manage your SpeedAU account, process deposits and withdrawals in MYR, settle bets and games, send transaction notifications, and provide 24/7 customer support. Without this data, SpeedAU cannot operate the services you signed up for.

Security & Fraud Prevention: We use technical data — including IP addresses, device information, and login patterns — to detect and prevent unauthorised access, fraud, multiple account usage, and any suspicious activity. This is to protect your account from misuse by unauthorised parties.

Legal and Regulatory Compliance: SpeedAU is legally required under Malaysian law to retain certain records relating to financial transactions and player identity. This data is used solely to fulfil legal obligations and is not used for any other purpose.

User Experience Improvements: Preference and behavioural data is used to personalise your experience on SpeedAU — for example, surfacing baccarat tables or slot games more relevant to your play history, or showing promotions related to the game types you enjoy.

Service Communications: SpeedAU uses your email address and phone number to send important account-related notifications such as deposit confirmations, successful withdrawal notices, terms updates, and security alerts. These are not marketing emails — they are essential service communications.

Marketing Communications (with consent): If you choose to receive promotional communications during registration or through your account settings, SpeedAU will send you updates on new bonuses, special promotions, and exclusive offers. You may unsubscribe at any time via the unsubscribe link in any email or through your SpeedAU account settings.

4. Sharing Data with Third Parties

SpeedAU does not sell, rent, or transfer players' personal data to any third party for their own marketing purposes. However, there are limited situations where SpeedAU needs to share data with certain parties for service operational purposes:

Game Providers: SpeedAU works with live casino table providers such as Evolution Gaming, Pragmatic Play Live, SA Gaming, and others. These providers receive only the minimum betting data necessary to operate the games — they do not receive your financial data or full identity information.

Payment Processors: To process your deposits and withdrawals in MYR, SpeedAU needs to share transaction details with payment processors such as FPX providers, e-wallet gateways, and local banks. This information is limited strictly to what is necessary to complete the transaction.

KYC Services: SpeedAU uses approved third-party identity verification services to process KYC documents. These providers operate under strict confidentiality agreements and are held to the same data security standards as SpeedAU.

Legal Authorities: SpeedAU will disclose personal data to law enforcement authorities, regulatory bodies, or courts where required by Malaysian law or a valid court order. In such situations, we will notify the affected players to the extent permitted by law.

5. Data Retention & SpeedAU Security Measures

SpeedAU stores players' personal data on servers protected by multiple layers of technical and organisational security measures. Below are the key security practices we employ to safeguard your data:

• 256-bit SSL Encryption: All communications between your device and SpeedAU's servers are encrypted using 256-bit TLS/SSL protocols — the same standard used by major banking institutions in Malaysia.
• Stored Data Encryption: Sensitive data such as payment information and identity documents are encrypted at rest on our servers using industry-standard encryption algorithms
• Strict Access Controls: Only SpeedAU staff with a clear business need and granted authorisation may access players' personal data — and all access is logged for audit purposes
• 24/7 Monitoring: SpeedAU's systems are continuously monitored to detect any unauthorised access attempts, cyberattacks, or other suspicious activity
• Regular Security Testing: SpeedAU conducts regular penetration testing and independent security audits to ensure there are no unknown vulnerabilities in our systems.
• Periodic Data Deletion: Data that is no longer required for operational or legal purposes will be securely deleted in accordance with SpeedAU's data retention policy.

Data Retention Period: SpeedAU retains active players' personal data for as long as their account remains active. After an account is closed, data is held for the minimum period required by Malaysian law (typically 7 years for financial records) before being securely deleted. Data collected for purposes other than legal obligations will be deleted within 12 months of account closure.

6. Cookies & Tracking Technologies at SpeedAU

SpeedAU uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit a website. They allow the site to "remember" information about your visit.

You can manage your cookie settings through your browser settings at any time. However, disabling certain cookies may affect the functionality or your experience on the SpeedAU platform. For guidance on managing cookies in your specific browser, refer to your browser's help section.

7. Your Rights as a SpeedAU Player

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), every SpeedAU player has the following rights regarding their personal data. SpeedAU is committed to facilitating the exercise of these rights without unnecessary obstacles:

To exercise any of the above rights, contact the SpeedAU privacy team via 24/7 live chat in Bahasa Melayu or email support@speedau.best with the subject line "Data Privacy Request", along with your full name and SpeedAU account number. SpeedAU will process your request within 30 business days.

8. Financial Data & Payment Security in Malaysia

As SpeedAU involves financial transactions in Malaysian Ringgit (MYR), we pay particular attention to the protection of players' financial data. Here is how we handle your financial data:

Malaysian E-Wallets: When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay, SpeedAU receives only the payment confirmation — not your login credentials or any card details associated with your e-wallet. Transactions are processed through a secure payment gateway that connects directly between your e-wallet account and your SpeedAU account, with SpeedAU never viewing or storing your e-wallet credentials.

DuitNow & FPX Online Banking: For payments via DuitNow, Maybank2u, or CIMB Clicks, SpeedAU uses the FPX system approved by Bank Negara Malaysia. You log in directly through your own bank's portal — SpeedAU does not receive or store your online banking username or password at any point.

Transaction Records: SpeedAU keeps complete records of all deposit and withdrawal transactions in RM, including the date, time, amount, method, and status of each transaction. These records are required for dispute resolution, internal audits, and compliance with Malaysian financial regulations. Transaction records are retained for a minimum of 7 years in line with legal requirements.

Withdrawal Verification: To protect your funds, SpeedAU carries out security checks on all withdrawals. This may involve additional identity verification for higher-value withdrawals. This measure ensures that only the legitimate account holder can access the funds in your SpeedAU account.

9. Cross-Border Data Transfers

SpeedAU works with a number of international service providers, including Live Casino table providers and cloud infrastructure services. This means that in some cases, your data may be processed or stored on servers located outside Malaysia.

When data transfers outside Malaysia occur, SpeedAU ensures that:

• The recipient country or region maintains data protection standards equivalent to or higher than those of Malaysia.
• Legally binding data transfer agreements exist between SpeedAU and the data recipients.
• Data recipients are bound by strict confidentiality and security requirements
• Data transfers are limited to what is strictly necessary for the relevant service

SpeedAU will not transfer your personal data to countries that do not provide adequate data protection without first obtaining your consent or putting appropriate safeguards in place.

10. Protection of Children's Data

SpeedAU is a platform strictly intended for individuals aged 18 years of age and above only. We do not knowingly collect personal data from individuals under the age of 18.

If SpeedAU discovers that personal data of a minor has been collected without parental or guardian knowledge or consent, we will take immediate steps to delete that data and close the associated account. Parents or guardians who discover that their underage child has registered on SpeedAU are welcome to contact us at support@speedau.best for prompt action.

SpeedAU applies age verification measures during registration and throughout the KYC process to ensure no underage individuals can access our platform. That said, parents and guardians also bear responsibility for monitoring their children's internet usage.

11. Links to Third-Party Websites

The SpeedAU platform may contain links to third-party websites or services, such as game provider sites or sports information pages. SpeedAU's Privacy Policy applies only to the speedau.best platform and does not cover the privacy practices of those third-party websites.

SpeedAU is not responsible for the privacy practices or content of third-party websites. We recommend reading the privacy policy of each website you visit separately from this SpeedAU policy. The decision to follow any link to a third-party website is entirely at your own discretion and is fully outside SpeedAU's control.

12. Amendments to This Privacy Policy

SpeedAU reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, relevant legislative developments, or service improvements. Whenever the Privacy Policy is updated, the "Last Updated" date at the top of this page will be revised to reflect the date of the most recent amendment.

For material amendments — that is, changes that significantly affect how we use your data — SpeedAU will notify players via:

• Email sent to the registered email address on your SpeedAU account
• A clear in-platform notification during the next login session
• Announcement on the speedau.best homepage

We encourage you to review this page periodically to stay informed about how we protect your data. Continued use of SpeedAU after any amendments take effect will be considered acceptance of the updated Privacy Policy.

13. Contact SpeedAU's Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how SpeedAU handles your personal data, please don't hesitate to get in touch:

• Live Chat 24/7: Use the live chat button available on every page of the SpeedAU platform — response time is under 2 minutes in Bahasa Melayu and English
• Email: support@speedau.best — include "Privacy Enquiry" in your email subject line for a faster response

SpeedAU is committed to responding to all privacy-related enquiries within 14 business days. For more complex data rights requests — such as full data deletion or data export — a response may take up to 30 business days.

If you are not satisfied with SpeedAU's response to your privacy complaint, you have the right to escalate the matter to the Department of Personal Data Protection Malaysia (JPDP) through their official channels.