Privacy Policy — squid44

1. Introduction

This Privacy Policy ("Policy") issued by squid44 ("squid44", "we", "us", "our") and governs the collection, use, storage, disclosure, and protection of personal data provided by or collected from users ("Member", "User", "you", "your") of the squid44 platform accessible at https://squid44.cam and all associated services, features, and interfaces.

squid44 is committed to protecting the privacy of all individuals who interact with our platform. We process personal data in accordance with applicable data protection legislation and the principles of transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

By registering an account with squid44, accessing the Platform, or otherwise providing us with your personal data, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform.

2. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject").
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. For this Policy, the Data Controller is squid44.
• "Data Processor" means a third party that processes personal data on behalf of squid44 under a data processing agreement.
• "Sensitive Personal Data" means data revealing racial or ethnic origin, political opinions, religious beliefs, health information, biometric data, or financial credentials beyond those strictly necessary for payment processing.
• "Cookies" means small text files placed on your device by a website to record your browsing preferences and activity.
• "KYC" means Know Your Customer — the identity verification process required before certain account actions can be performed.
• "MYR" means Malaysian Ringgit, the primary transactional currency of the Platform.

3. Data Controller

squid44 acts as the Data Controller in respect of all personal data collected through the Platform. As Data Controller, squid44 is responsible for ensuring that personal data is processed lawfully, fairly, and transparently in accordance with this Policy and applicable data protection law.

For all privacy-related matters, enquiries, or requests to exercise your data subject rights, you may contact squid44 at:

• Email: [email protected]
• Live Chat: Available daily9:00 AM – 1:00 AM (Malaysian Time, MYT) via the Platform
• Telegram: @squid44support

4. Data We Collect

squid44 collects personal data in the following categories, depending on your interaction with the Platform:

4.1 Account Registration Data

• Full legal name
• Date of birth (for age verification —21+ requirement)
• Residential address (including city and postcode)
• Email address
• Mobile phone number
• Chosen username

4.2 Identity Verification (KYC) Data

• Copy of Malaysian MyKad, Driver's Licence, or valid Passport
• Proof of address document (e.g., Tenaga Nasional utility bill, bank statement)
• Selfie photograph holding identity document

4.3 Financial & Payment Data

• Deposit and withdrawal transaction records (amount, date, method status)
• Payment method type (e.g., FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank)
• Partial payment identifiers (e.g., masked bank account or card last-four digits) where necessary for transaction matching
• Cryptocurrency wallet addresses (for crypto transactions only)

4.4 Activity & Behavioural Data

• Betting and gaming history (event, stake amount, outcome, timestamp)
• Login history (date, time, IP address, device type)
• Session duration and navigation patterns
• Bonus claim and wagering activity
• Customer support interactions and correspondence

4.5 Technical Data

• IP address and approximate geographic location
• Browser type and version
• Device type, operating system, and screen resolution
• Cookie identifiers and session tokens
• Referring URL and page view data

5. Legal Basis for Processing

squid44 processes personal data on the following lawful bases:

Processing Purpose	Legal Basis
Account registration and management	Performance of contract
Processing deposits and withdrawals	Performance of contract
KYC identity and age verification	Legal obligation / Legitimate interest
Anti-money laundering (AML) checks	Legal obligation
Fraud detection and prevention	Legitimate interest
Customer support communications	Performance of contract / Legitimate interest
Marketing and promotional communications	Consent (opt-in)
Platform analytics and improvement	Legitimate interest
Responsible gambling monitoring	Legal obligation / Legitimate interest

6. How We Use Your Data

squid44 uses your personal data for the following purposes:

1. To create, manage, and maintain your squid44 Account.
2. To process deposits and withdrawals in MYR through your chosen Malaysian payment channels (FPX, DuitNow, e-walets, bank transfers, cryptocurrency).
3. To verify your identity and age (21+) in compliance with our KYC obligations.
4. To detect and prevent fraud, money laundering, underage gambling, and prohibited activity on the Platform.
5. To provide responsive customer support via live chat, email, and Telegram.
6. To send you transactional notifications (deposit confirmations, withdrawal updates, KYC status).
7. To send you promotional communications where you have opted in to receive them.
8. To monitor and analyse Platform usage patterns for the purposes of improving service quality, security, and user experience.
9. To comply with applicable gaming licence conditions, anti-money laundering regulations, and other legal obligations.
10. To enforce our Terms & Conditions and resolve disputes.

7. Payment Data Processing

squid44 processes payment-related personal data in connection with Malaysian payment channels including FPX (Financial Process Exchange), DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Bank, RHB Bank, Visa/Mastercard, and supported cryptocurrency networks.

Payment transactions are processed by our verified third-party payment service providers under strict data processing agreements. squid44 does not store, log, or retain full bank account numbers, full card numbers, internet banking credentials, or cryptocurrency private keys. Payment data retained by squid44 is limited to:

• Transaction reference numbers
• Payment method type and partial identifier (where technically necessary)
• Transaction amount in MYR or cryptocurrency equivalent
• Transaction date, time, and status

All payment processing infrastructure used by squid44 is PCI-DS compliant where applicable and operates exclusively over HTTPS-encrypted connections.

8. Data Sharing & Disclosure

squid44 does not sell, rent, or trade personal data. We may share your personal data with the following categories of third parties, strictly for the purposes described and under appropriate legal safeguards:

• Payment Processing Partners: To facilitate deposits and withdrawals through FPX, DuitNow, e-wallets, and banking networks. These partners are bound by PCI-DSS standards and contractual data protection obligations.
• KYC and Identity Verification Providers: To verify the identity and age of Members as required by our licensing conditions.
• Fraud Prevention and AML Services: To screen transactions and account activity against financial crime risk indicators.
• Cloud Infrastructure Providers: To host platform data in secure, access-controlled server environments.
• Customer Support Platforms: To facilitate live chat, email ticketing, and Telegram-based support interactions.
• Regulatory and Law Enforcement Authorities: Where required to do so by applicable law, court order, regulatory directive, or to protect the safety and rights of Members and the public.

All third-party service providers engaged by squid44 are subject to contractual data processing agreements that restrict the use of personal data to the specific purpose for which it was shared and require equivalent standards of data protection to those applied by squid44.

9. International Data Transfers

As squid44 operates internationally, personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, squid44 ensures that appropriate safeguards are in place, including contractual clauses that require the receiving party to protect personal data to standards equivalent to those applicable in the originating jurisdiction.

squid44 will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without first implementing the necessary protective measures and, where required, obtaining your consent.

10. Data Retention

squid44 retains personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Data Category	Retention Period
Account registration data	Duration of account + 5 years after closure
KYC verification documents	Duration of account + 5 years after closure
Transaction and payment records	7 years (AML regulatory requirement)
Betting and gaming history	Duration of account + 3 years after closure
Customer support records	3 years from last interaction
Technical and log data	Up to 12 months
Marketing consent records	Until consent is withdrawn + 3 years

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with squid44's data disposal procedures.

11. Cookies & Tracking Technologies

squid44 uses cookies and similar tracking technologies to enable core Platform functionality, remember your preferences, analyse usage patterns, and support security and fraud prevention systems.

Types of Cookies Used

• Essential Cookies: Required for the Platform to function. These include session authentication tokens, security identifiers, and load balancing cookies. These cannot be disabled without impairing Platform functionality.
• Preference Cookies: Record your language settings, display preferences, and region settings to personalise your experience.
• Analytics Cookies: Collect aggregate, anonymised data about how Members use the Platform — including pages visited, time on page, and navigation paths — to help us improve the service.
• Security Cookies: Used to detect and prevent fraudulent access attempts, credential stuffing, and other malicious activity.

You may configure your browser to block or delete cookies. Please note that disabling essential cookies will impair your ability to log in to and use the Platform. For detailed cookie settings, consult your browser's help documentation.

12. Your Data Subject Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data:

To exercise any of the above rights, please submit your request in writing to [email protected]. squid44 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. We may request proof of identity before processing a data subject rights request.

13. Data Security

squid44 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• End-to-end 256-bit SSL/TLS encryption for all data transmitted to and from the Platform.
• Encrypted storage of all sensitive personal data at rest.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning.
• Multi-factor authentication requirements for all administrative access to Platform systems.
• Continuous monitoring for suspicious access patterns and anomalous activity.
• Documented incident response and data breach notification procedures.

14. Minors & Age Restriction

The squid44 Platform is strictly intended for individuals aged21 years and above. We do not knowingly collect personal data from persons under the age of 21. Age verification is conducted as mandatory step during the KYC process for all Members.

In the event that squid44 becomes aware that personal data has been collected from a person under the age of 21, the associated Account will be immediately closed, all balances will be forfeited, and all personal data related to that Account will be securely deleted (subject to any mandatory retention obligations under applicable law). The incident may also be reported to relevant authorities.

15. Third-Party Services & Links

The Platform may reference or display information about third-party services, including but not limited to payment providers such as FPX, DuitNow, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, and GrabPay. squid44 is not responsible for the privacy practices of any third-party service provider.

When you interact with a third-party payment gateway or service — for example, by authorising a DuitNow transfer or an FPX payment — that interaction is governed by the privacy policy and terms of the respective third-party provider. We encourage you to review the privacy policies of all third-party services you use.

16. Amendments to this Policy

squid44 reserves the right to update this Privacy Policy at any time. Where material change is made to this Policy, we will provide notification by updating the "Last Updated" date at the top of this page and, where appropriate, by notifying registered Members via email.

Your continued use of the Platform following the posting of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any revision to this Policy, please cease using the Platform and contact us to arrange account closure and data processing cessation.

17. Contact Us

For all privacy-related enquiries, data subject rights requests, complaints, or concerns regarding this Privacy Policy, please contact squid44 through the following channels:

• Privacy & Data Protection Enquiries: [email protected]
• Live Chat: Available daily 9:00 AM – 1:00 AM (MYT) via the Platform
• Telegram: @squid44support

All privacy-related requests will be acknowledged within 5 business days. For formal data subject rights requests, squid44 commits to a substantive response within 30 calendar days of receipt and verification of your identity.