spkt1 Privacy Policy
At spkt1, your privacy is treated as a core operational commitment — not a legal formality. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is used and protected, and what rights you hold as a data subject.
1 Introduction
This Privacy Policy (the "Policy") describes the practices of spkt1 ("we", "us", "our") with respect to the collection, use, storage, disclosure, and protection of personal data belonging to users ("you", "your") of the spkt1 online casino and sports betting platform accessible at spkt1.cam (the "Platform").
spkt1 is committed to protecting the privacy and personal data of its users, including players located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia. We take our responsibilities as a data custodian seriously, and this Policy is written in plain, accessible English so that every player understands how their information is handled.
This Policy applies to all personal data collected through the Platform, including data submitted during account registration, KYC verification, payment processing, customer support interactions, and general Platform usage. It applies regardless of whether you access the Platform through a desktop browser or a mobile device.
By creating an account on spkt1 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data processing activities described herein. This Policy forms an integral part of our Terms & Conditions.
2 Definitions
For the purposes of this Policy, the following definitions apply:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, identification number, contact details, financial data, device identifiers, and behavioural data. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, deletion, or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data — in this context, spkt1. |
| "Data Subject" | The natural person to whom Personal Data relates — in this context, a registered user or visitor of the spkt1 Platform. |
| "Consent" | Freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data, as provided through account registration or continued Platform use. |
| "Third Party" | Any natural or legal person other than spkt1 and the Data Subject, including service providers, payment processors, game suppliers, and regulatory bodies. |
| "KYC" | Know Your Customer — the mandatory identity and age verification process required prior to withdrawals and as part of responsible gambling compliance. |
| "Cookie" | A small text file placed on a user's device by the Platform to facilitate session management, analytics, and user experience personalisation. |
3 Data Controller
spkt1 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, spkt1 determines the purposes for which your Personal Data is processed and the means by which that processing is carried out.
spkt1 may engage third-party Data Processors — such as payment service providers, KYC verification platforms, game content suppliers, and cloud infrastructure providers — to process Personal Data on its behalf. All such processors are contractually bound to process data only in accordance with spkt1's instructions and applicable data protection requirements.
For all privacy-related enquiries, requests, or complaints, please contact us through the channels described in Section 16 of this Policy.
4 Personal Data We Collect
The categories of Personal Data collected by spkt1 depend on the nature of your interaction with the Platform. The following table summarises the key data categories and the circumstances under which they are collected:
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad / Passport number | Account registration, KYC verification |
| Contact Data | Email address, mobile phone number, residential address (including Malaysian city and postcode) | Account registration, support interactions |
| Financial Data | Bank account numbers, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), card details (last 4 digits), transaction history, deposit and withdrawal amounts in MYR | Payment processing, KYC verification |
| Identity Verification Documents | Copies of government-issued ID, proof of address, payment method ownership evidence | KYC verification process |
| Technical Data | IP address, device type, operating system, browser type, session token, cookie identifiers | Platform access, session management |
| Usage Data | Pages visited, game sessions played, bets placed, time spent on Platform, feature interactions | Ongoing Platform use |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Responsible Gambling Data | Self-exclusion requests, deposit limit settings, session time preferences | Responsible gambling tool usage |
5 How Personal Data Is Collected
spkt1 collects Personal Data through the following primary channels:
5.1 Direct Submission by You
The majority of Personal Data is collected directly from you when you complete the account registration form, submit KYC documents, initiate a deposit or withdrawal, use our live chat or email support, or interact with responsible gambling tools such as deposit limits or self-exclusion settings.
5.2 Automated Collection
Certain Technical Data and Usage Data is collected automatically when you access or use the Platform. This includes data gathered through session cookies, server logs, and analytics tools that record your interaction with the Platform interface. See Section 11 for detailed cookie information.
5.3 Third-Party Sources
In limited circumstances, we may receive Personal Data from third parties, including:
- KYC verification partners who confirm identity document authenticity and age;
- Payment processors including FPX, DuitNow, Touch 'n Go eWallet, Boost, Maybank, CIMB, and Public Bank, which provide transaction confirmation data;
- Fraud prevention and anti-money laundering screening services;
- Publicly available sources where legally permissible for identity verification purposes.
6 Purposes of Processing
spkt1 processes your Personal Data only for the following specific, legitimate purposes:
- Account Management: To create, maintain, and administer your spkt1 Account, including processing your registration details and verifying your identity;
- Service Delivery: To provide access to the Platform's casino games, sports betting markets, live dealer tables, and payment services;
- Payment Processing: To process deposits and withdrawals in MYR through your selected payment method (Touch 'n Go eWallet, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, FPX, cryptocurrency networks, or card);
- KYC Compliance: To verify your identity, age (21+), and payment method ownership as required by responsible gambling standards and internal compliance obligations;
- Anti-Fraud and Security: To detect, prevent, and investigate fraudulent transactions, money laundering, account takeover attempts, and other prohibited conduct;
- Responsible Gambling: To administer deposit limits, session reminders, self-exclusion tools, and related responsible gambling features;
- Customer Support: To respond to your enquiries, resolve disputes, and maintain records of support interactions;
- Platform Improvement: To analyse usage patterns, identify technical issues, and improve the Platform's performance and features;
- Legal Compliance: To meet legal obligations, including record-keeping requirements and responses to lawful requests from competent authorities;
- Direct Communications: To send you transactional notifications such as deposit confirmations, withdrawal updates, account security alerts, and, where you have opted in, promotional communications.
spkt1 does not use your Personal Data for automated decision-making that produces legal or similarly significant effects on you without human review, except where required by legal obligation.
7 Legal Basis for Processing
spkt1 processes your Personal Data on one or more of the following legal bases, as appropriate to the specific processing activity:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contractual Necessity | Account registration, payment processing, game access, withdrawal processing — all necessary to perform the contract between you and spkt1. |
| Legal Obligation | KYC identity verification, age verification (21+ requirement), anti-money laundering screening, record retention, and responses to lawful regulatory or law enforcement requests. |
| Legitimate Interests | Fraud prevention, platform security monitoring, analytics to improve service quality, and responsible gambling monitoring to protect player welfare. |
| Consent | Promotional email or messaging communications where you have explicitly opted in. Consent may be withdrawn at any time by contacting support or updating your notification preferences. |
8 Sharing Your Personal Data
spkt1 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We may share Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:
8.1 Payment Service Providers
To process your deposits and withdrawals, we share necessary transaction data with our payment partners, including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, RHB, Visa, Mastercard, and cryptocurrency network processors. Each provider operates under its own data protection terms.
8.2 Identity Verification Partners
KYC-related documents and identity data are shared with specialist verification services to confirm the authenticity of identification documents and to screen for sanctions and prohibited persons lists.
8.3 Game Content Suppliers
Where third-party game providers supply live dealer tables or RNG slot content, limited session and transaction data may be shared with those providers to facilitate gameplay and resolve technical disputes.
8.4 Cloud Infrastructure and IT Service Providers
spkt1 uses cloud hosting, data storage, and security infrastructure services. Providers of these services may process Personal Data on our behalf under strict data processing agreements.
8.5 Legal and Regulatory Authorities
spkt1 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or to protect the rights, safety, and property of spkt1, its users, or the public.
9 Data Retention
spkt1 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of account + 5 years post-closure | Contractual and legal obligation |
| KYC Documents | 5 years from date of submission | AML compliance requirement |
| Transaction Records | 7 years from transaction date | Financial records legal obligation |
| Support Correspondence | 3 years from date of interaction | Legitimate interests / dispute resolution |
| Technical / Usage Data | 13 months on a rolling basis | Analytics and security monitoring |
| Responsible Gambling Records | Duration of exclusion + 5 years | Responsible gambling compliance |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
10 Data Security
spkt1 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:
- Encryption in Transit: All data transmitted between your device and the spkt1 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to login credentials, payment data, KYC submissions, and all account interactions;
- Encryption at Rest: Sensitive data stored on spkt1's servers, including identity documents and financial records, is encrypted at rest using AES-256 or equivalent standards;
- Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo security training and are subject to confidentiality obligations;
- Network Security: spkt1's infrastructure employs firewalls, intrusion detection systems, and regular security assessments to identify and remediate vulnerabilities;
- Payment Security: Full card numbers and banking credentials are never stored on spkt1's systems. Payment data is processed by PCI-DSS compliant payment partners;
- Incident Response: In the event of a data breach that is likely to affect your rights, spkt1 will notify affected users and relevant authorities in accordance with applicable legal requirements.
While spkt1 takes all reasonable steps to secure your Personal Data, no online platform can guarantee absolute security. Users are advised to use strong, unique passwords, enable any available two-factor authentication features, and notify spkt1 immediately if they suspect unauthorised access to their Account.
11 Cookies & Tracking Technologies
spkt1 uses cookies and similar tracking technologies to operate the Platform effectively and to improve your user experience. The following categories of cookies are used:
11.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function. They include session authentication cookies that keep you logged into your Account, security tokens, and cookies that remember your preferences during a single browsing session. These cookies cannot be disabled without impairing the Platform's core functionality.
11.2 Analytics Cookies
We use analytics cookies to understand how users interact with the Platform — including which pages are visited most frequently, how long users spend on particular features, and where technical errors occur. This data is processed in aggregate form to improve Platform performance and is not linked to individual user identities where avoidable.
11.3 Functionality Cookies
Functionality cookies remember choices you have made on the Platform — such as language preferences, display settings, and responsible gambling tool configurations — so that you do not need to reconfigure them on each visit.
11.4 Cookie Management
You may manage cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including login functionality. Detailed browser-specific cookie management instructions are available through your browser's help documentation.
12 International Data Transfers
To deliver its services, spkt1 may transfer Personal Data to third-party service providers whose systems are located outside of Malaysia. Where such transfers occur, spkt1 ensures that appropriate safeguards are in place to protect your Personal Data to a standard consistent with this Policy and applicable data protection requirements. Safeguards may include:
- Contractual data processing agreements with service providers incorporating standard data protection clauses;
- Transfers only to jurisdictions that provide an adequate level of data protection as assessed by spkt1's compliance team;
- Technical security measures applied uniformly regardless of the location of data processing.
Where your Personal Data is transferred internationally in connection with payment processing — for example, through Visa or Mastercard's global networks — those transfers are governed by the respective provider's own privacy policies and applicable card scheme security requirements.
13 Your Data Subject Rights
As a data subject, you hold meaningful rights in relation to your Personal Data held by spkt1. We are committed to facilitating the exercise of these rights promptly and without undue formality. Your rights are summarised below:
You may request a copy of the Personal Data spkt1 holds about you, along with information about how it is processed.
If your Personal Data is inaccurate or incomplete, you may request that it be corrected. You may also update contact details directly within your Account settings.
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
You may request that spkt1 restrict the processing of your Personal Data in certain circumstances, such as while a data accuracy dispute is being resolved.
Where processing is based on your consent or a contractual necessity, you may request your Personal Data in a structured, machine-readable format.
You may object to processing carried out on the basis of legitimate interests. You may also withdraw consent for promotional communications at any time.
To exercise any of the above rights, please contact our support team via the channels described in Section 16. We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) calendar days, subject to identity verification and any applicable legal exemptions. We do not charge a fee for standard data subject requests.
14 Minors and Age Restriction
The spkt1 Platform is strictly intended for adults aged 21 years and above. spkt1 does not knowingly collect Personal Data from persons under the age of 21.
Age verification is a mandatory component of our KYC process. Where spkt1 discovers that an Account has been created by a person under the age of 21, the Account will be closed immediately, all balances will be forfeited in accordance with our Terms & Conditions, and all associated Personal Data will be deleted to the extent legally permissible.
If you have reason to believe that a minor has created an Account on spkt1 using false information, please notify us immediately through the support channels in Section 16 so that we may take appropriate action.
15 Changes to This Privacy Policy
spkt1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this Policy will be revised whenever material changes are made.
Where changes to this Policy materially affect your rights as a data subject — for example, by introducing new categories of data collection or new purposes of processing — spkt1 will endeavour to notify registered Account holders by email prior to those changes taking effect, where practicable.
Your continued use of the Platform following notification of Policy changes constitutes your acceptance of the revised terms. If you do not accept the revised Privacy Policy, you must cease using the Platform and contact support to request Account closure.
We encourage you to review this Privacy Policy periodically to stay informed about how spkt1 protects your Personal Data. The current version is always accessible at spkt1.cam/privacy-policy.
16 Contact Us
For any questions, requests, or complaints relating to this Privacy Policy or the handling of your Personal Data, please contact spkt1 through the following channels. We handle all privacy enquiries with confidentiality and respond in the language of your preference (Bahasa Melayu, Mandarin, or English):
- Data Privacy Enquiries — Support Email: [email protected] Please include "Privacy Request" in your subject line for faster routing. Typical response within 2–4 hours; data subject requests acknowledged within 5 business days.
- Live Chat: Available 24 hours a day, 7 days a week through the Platform — average response time 3–5 minutes. Suitable for urgent account security concerns.
- Written Requests: Formal data subject requests (access, erasure, rectification) submitted via email with your Account username, registered email address, and a description of the request will be processed within the 30-day statutory window.
spkt1 is committed to resolving all privacy concerns directly and promptly. If you believe your privacy rights have been infringed and we have been unable to resolve the matter to your satisfaction, you may seek guidance from the relevant data protection authority in your jurisdiction.
Our Privacy Commitments at a Glance
Six core privacy principles that govern how spkt1 handles every Malaysian player's personal data
Every connection between your device and the spkt1 Platform — login, payment, chat, and KYC submission — is protected by bank-grade 256-bit SSL encryption. Your data is never transmitted in plaintext.
spkt1 has never sold your personal data to third-party advertisers, data brokers, or commercial partners. Your information is processed exclusively to operate your account, process payments, and comply with legal obligations.
You have the right to access, correct, export, restrict, or request deletion of your personal data at any time. Submit requests to our support team and receive acknowledgment within 5 business days and resolution within 30 days.
We keep your data only as long as legally required or operationally necessary. Account data is retained 5 years post-closure; transaction records for 7 years per financial compliance requirements. Data beyond retention periods is securely deleted.
We use only strictly necessary, analytics, and functionality cookies. We do not use advertising tracking cookies or third-party marketing pixels. Cookie preferences can be managed through your browser settings at any time.
Our support team handles privacy enquiries 24/7 in Bahasa Melayu, Mandarin, and English. Formal data subject requests are routed to our data handling team and processed within the 30-day statutory window without charge.
Questions About Your Privacy?
Our support team is available around the clock to address any privacy-related enquiries. Whether you want to access your data, request a correction, or simply understand more about how your information is used, we are here to help — in Bahasa Melayu, Mandarin, or English.
spkt1 is for players aged 21 and above only. Please gamble responsibly. Gambling involves financial risk.