Saba Sports Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Players

This Privacy Policy transparently explains how Saba Sports collects, uses, stores, and protects your personal information when you use our online sports betting and casino platform at sabasports.best. It applies to all users of our platform, including website visitors, registered members, and former members whose accounts have been closed.

By registering an account or using any Saba Sports service, you confirm that you have read and understood this Privacy Policy and agree to the practices described within it. If you do not agree, please discontinue use of our platform.

Saba Sports acts as the data controller for all personal information collected through the platform sabasports.best. This means saba sports is responsible for determining the purposes and means by which your personal data is processed, and for ensuring that such processing is carried out in accordance with applicable data protection laws and regulations, including Malaysia's Personal Data Protection Act 2010 (PDPA).

Saba Sports is an online sports betting and casino platform designed for Malaysian players aged 18 and above. We offer a wide range of services, including sports betting on the Malaysia Super League, EPL, badminton, e-sports, virtual sports, as well as live casino games such as baccarat, roulette, and blackjack.

If you have any questions or concerns about how we handle your personal data, please contact our Privacy Officer at support@sabasports.best with the subject line "PRIVACY INQUIRY".

Saba Sports collects various types of personal data depending on how you interact with our platform. Below is a detailed breakdown of the data we collect:

Data You Provide Directly:

• Full name as stated on your Malaysia identity card;
• An active Malaysian phone number;
• A valid email address;
• Date of birth for age verification purposes;
• Payment method details used (Touch 'n Go eWallet, GrabPay, DuitNow, ShopeePay, Boost, or FPX via Maybank2u/CIMB Clicks) – account numbers or e-wallet IDs, but not PINs or passwords;
• A copy of your identity document (for KYC/identity verification purposes when required).

Automatically Collected Data:

• IP address and device location information;
• Web browser type and version;
• Device type and operating system (Android, iOS);
• Login session data including time, duration, and in-platform activity;
• Full records of all deposit and withdrawal transactions;
• Betting history and gaming activity;
• Cookie data and similar tracking technologies (see Section 8).

Saba Sports only uses your personal data for legitimate and reasonable purposes. The following are the primary purposes for which your data is used:

• Service Provision: Processing account registrations, verifying identity, processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, ShopeePay, Boost, and FPX, and managing your betting activity;
• Security & Fraud: Detecting and preventing fraudulent activity, duplicate accounts, money laundering, and any misuse of the platform;
• Legal Compliance: Fulfilling legal obligations under Malaysia's PDPA and applicable anti-money laundering (AML) requirements;
• Platform Improvements: Analysing aggregated and anonymised usage patterns to improve platform features, technical performance, and the overall user experience;
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling and taking appropriate preventive action;
• Service Communications: Sending important notifications relating to your account, transactions, policy changes, and security information;
• Marketing (with your consent): Sending promotional offers, bonus information, and relevant content to members who have opted in to receive marketing communications.

Saba Sports will not use your data for any other purpose without first obtaining your written consent.

Saba Sports does not sell, rent, or commercialise members' personal data to any third party. However, there are limited situations where we may need to share your data with certain parties:

• Third-Party Service Providers: We work with service providers that help us operate the platform – including payment gateway providers (to process Touch 'n Go, GrabPay, DuitNow, and other transactions), cloud service providers, and gaming software providers such as Evolution Gaming and Playtech. All such providers are bound by strict confidentiality agreements and may only use your data for purposes we have authorised.
• Legal Requirements: Saba Sports may be required to disclose your data to Malaysian government authorities, law enforcement bodies, or courts where mandated by law or a valid court order.
• Rights & Safety Protection: In cases where disclosure is necessary to protect Saba Sports's legal rights, prevent serious fraud, or safeguard the safety of players or the general public;
• Business Transfer: If Saba Sports is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction, with appropriate notice provided to affected users.

Saba Sports invests seriously in security infrastructure to ensure all members' personal data remains protected at all times. The technical and organisational security measures we have in place include:

• 256-bit SSL Encryption: All data communications between your browser/app and saba sports servers are encrypted using the latest TLS 1.3 protocol, rendering any intercepted data unreadable;
• Static Data Encryption: All personal data stored in our databases is also encrypted using AES-256 algorithms;
• Tiered Access Control: Only authorised Saba Sports staff with a legitimate work requirement may access members' personal data, with full audit logs recorded;
• Intrusion Detection System: Our infrastructure is equipped with an IDS/IPS (Intrusion Detection/Prevention System) that monitors suspicious activity in real time, 24 hours a day;
• Regular Security Assessments: We conduct regular penetration testing and independent security audits to identify and address vulnerabilities;
• Two-Factor Authentication: Saba Sports' internal systems use multi-factor authentication for all access to sensitive databases;
• Incident Response Plan: Saba Sports has clear procedures in place to respond to any data breaches, including notifying affected users within the timeframes prescribed by law.

While we take all reasonable precautions, no security system can guarantee 100% protection against every threat. You also share responsibility for keeping your account secure by using a strong password and never sharing your login credentials with anyone.

Saba Sports retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable law. The following are our data retention guidelines:

• Active Account Data: For as long as your account remains active and registered with Saba Sports, all account data and activity history will be retained in full;
• Financial Records & Transactions: Deposit, withdrawal, and betting history records are retained for a minimum of 7 years after a transaction is executed, as required under Malaysian financial law;
• KYC Documents: Identity verification documents are retained for 5 years after account closure or the date of the last transaction, in accordance with AML legal requirements;
• Communication Data: Customer support communication logs are retained for 3 years;
• Technical Log Data: Server logs and technical data are retained for 12 months for security and fraud detection purposes.

Once the applicable retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data as processed by Saba Sports. We respect and facilitate the exercise of these rights:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you;
• Right to Rectification: If your data is inaccurate or incomplete, you have the right to request that we correct it;
• Right to Erasure ("Right to be Forgotten"): Under certain circumstances, you may request that we delete your personal data – subject to our legal obligations to retain specific records;
• Right to Restrict Processing: You may request that we restrict how we process your data in certain circumstances;
• Right to Data Portability: You have the right to receive a copy of your data in a machine-readable format;
• Right to Object: You may object to the processing of your data for certain purposes, in particular for direct marketing;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of the rights above, please contact us by email at support@sabasports.best with the subject line "PRIVACY RIGHTS REQUEST". We will respond within 14 business days. We may need to verify your identity before processing your request.

The saba sports platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyse platform performance. The following are the types of cookies we use:

You can manage your cookie settings through your web browser's preferences. Please note that disabling essential cookies may affect the functionality of the platform. For more information on how to manage cookies in your browser, please refer to the documentation for the browser you use, such as Chrome, Safari, or Firefox.

As an online platform that works with international service providers — including live casino game providers such as Evolution Gaming and cloud infrastructure providers — some of your personal data may be processed or stored on servers located outside Malaysia.

When this occurs, saba sports ensures that:

• Data transfers are only made to countries or entities that provide an adequate level of data protection;
• Data Processing Agreements compliant with international standards have been signed with all third-party providers;
• The same or higher technical security standards apply to data transferred outside Malaysia;
• Sensitive data such as KYC documents is stored on servers located within the Southeast Asian region wherever possible.

Saba Sports does not transfer members' personal data to countries without adequate data protection laws unless appropriate additional safeguards are in place.

The saba sports platform is strictly prohibited for individuals under the age of 18. We do not knowingly collect or process personal data from minors.

If you believe that someone under the age of 18 has provided their personal data to Saba Sports or has been using our platform, please contact us immediately at support@sabasports.best. We will take immediate steps to delete that data and close the account in question.

Parents and guardians are responsible for monitoring their children's internet use and preventing access to betting platforms. Saba Sports recommends the use of parental control software on devices shared with children.

Saba sports reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or the technologies we use. We are committed to keeping you informed of any significant changes.

When we make significant changes to this policy, we will:

• Updating the "Last Updated" date at the top of this document;
• Sending email notifications to all registered members before changes take effect;
• Displaying a prominent notice on the platform's main page for a minimum of 30 days;
• In cases of material changes that significantly affect your privacy rights, seeking your renewed consent where required.

Your continued use of the saba sports platform after the effective date of an updated Privacy Policy constitutes your acceptance of those changes. The latest version of this Privacy Policy is always available at sabasports.best/privacy-policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Saba Sports handles your personal data, please reach out to us through the following channels:

• Privacy-Dedicated Email: support@sabasports.best – include the subject line "PRIVACY INQUIRY" to ensure your email is routed to the right team;
• Live Chat: Contact our support team directly through the 24/7 platform — please state that your enquiry is privacy-related;
• Response Time: We will respond to all privacy enquiries within 14 business days. For urgent data security issues, we aim to respond within 48 hours.

We also encourage you to visit our Frequently Asked Questions page, where you may find answers to common privacy questions. For information on how we handle responsible gambling, please visit the Responsible Gaming us.