Privacy Policy
Last updated: 20 July 2026
1. Introduction
This Privacy Policy describes how the SuperDraw operator ("SuperDraw", "we", "us") collects, uses, discloses and protects your personal data when you use the SuperDraw website and app (the "Service"). By using the Service you consent to the processing described here.
2. Data we collect
We collect: (a) account data — your email address and, if you sign in with Google, your name and profile identifier provided by Google; (b) usage data — your draws, wallet and points balances, inventory, transactions, referral links and in-app activity; (c) device & technical data — IP address, browser/device type and similar diagnostics; (d) fulfilment data — a delivery name and address if you request a shipment; and (e) payment data — limited transaction records. Full card and banking details are handled by our payment providers, not stored by us.
3. How we use your data
We use personal data to: create and secure your account; operate draws, wallet, rewards and the referral programme; process top-ups and ship prizes; detect and prevent fraud and abuse; comply with legal obligations; provide support; and improve the Service. Where required, we rely on your consent, and you may withdraw it (see Your rights).
4. Legal basis & age
We process data to perform our contract with you, for our legitimate interests in running and securing the Service, to meet legal obligations, and with your consent where applicable. The Service is for users aged 18 and above; we do not knowingly collect data from minors.
5. Sharing your data
We share data only as needed with: authentication providers (e.g. Google) when you choose to sign in with them; payment processors to complete top-ups; logistics/fulfilment partners to ship prizes; infrastructure and analytics providers that host and operate the Service; and authorities where required by law. We do not sell your personal data.
6. Cookies & local storage
The app uses your browser's local storage and similar technologies to keep you signed in, remember your session, and cache app data for offline use. You can clear these through your browser settings, though doing so may sign you out.
7. Data retention
We keep personal data for as long as your account is active and as needed to provide the Service, then for any period required to meet legal, accounting, fraud-prevention or dispute-resolution obligations, after which it is deleted or anonymised.
8. Security
We use reasonable technical and organisational measures to protect personal data, including access controls and encryption in transit and at rest. No system is completely secure, so we cannot guarantee absolute security, and you are responsible for keeping access to your email or sign-in provider secure.
9. Your rights
Subject to the PDPA and applicable law, you may request access to, correction of, or deletion of your personal data, and you may withdraw consent or limit certain processing. To exercise these rights, contact us at privacy@superdraw.app. We may need to verify your identity before acting on a request.
10. International transfers
Some providers that help us run the Service may process data outside Malaysia. Where this happens, we take steps intended to ensure your data remains protected to a standard consistent with this policy and applicable law.
11. Changes
We may update this policy from time to time. Material changes will be notified in-app or by email, and the "Last updated" date above will change. Continued use after an update means you accept the revised policy.
12. Contact
For any privacy question or request, reach us at privacy@superdraw.app or through the support channel in the app.
This document is provided for general information and does not constitute legal advice.