siti88 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how siti88 ("siti88", "we", "us", "our"), operating the online gaming platform at siti88.club, collects, uses, discloses, retains, and protects the personal data of individuals who register as Members or otherwise interact with the siti88 Platform and Services.

By registering a siti88 account or using any siti88 Service, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not register an account or use any siti88 Service.

siti88 processes personal data in accordance with applicable data protection laws and the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

2. Data We Collect

2.1 Registration Data

When you create a siti88 account, we collect information you provide directly, including:

• Full legal name;
• Date of birth (for age verification — 21+ requirement);
• Malaysian mobile phone number (beginning with +60);
• Email address;
• Username and password (password stored in hashed form — never in plain text);
• Preferred language (English, Bahasa Malaysia, or Mandarin).

2.2 Identity Verification (KYC) Data

To comply with our anti-money laundering obligations and to process withdrawal requests, siti88 may collect:

• Copy of Malaysian NRIC (MyKad) or Passport;
• Proof of address (utility bill, bank statement);
• Proof of payment method (screenshot of e-wallet or bank account showing your name).

2.3 Financial Transaction Data

We collect data relating to all deposits and withdrawals processed through your siti88 account, including payment method type, transaction reference numbers, amounts in MYR, timestamps, and transaction status. We do not store full card numbers or full bank account numbers — only tokenised or masked references provided by our payment processors.

2.4 Gaming Activity Data

We collect detailed records of all gaming activity on the siti88 Platform, including game titles played, bets placed, outcomes, session durations, wagering turnover, and win/loss history. This data is used for account management, responsible gaming monitoring, fraud detection, and regulatory compliance.

2.5 Technical and Device Data

When you access the siti88 Platform, we automatically collect:

• IP address and approximate geographic location (city/region level);
• Device type, operating system, and browser type;
• Session timestamps and page interaction data;
• Cookie identifiers and similar tracking data (see Section 7).

2.6 Communications Data

If you contact siti88 support via live chat or email, we retain records of those communications, including chat transcripts, email content, and any attachments, for quality assurance and compliance purposes.

3. How We Collect Data

siti88 collects personal data through the following channels:

• Directly from you — via the registration form, KYC submission process, support communications, and any voluntary information you provide in your account profile;
• Automatically — through cookies, server logs, and similar tracking technologies when you access the Platform;
• From third-party service providers — including payment processors (who confirm transaction details), identity verification services (who confirm KYC document authenticity), and fraud detection providers;
• From game providers — certified game studios integrated into the siti88 Platform may share session and result data with siti88 for account reconciliation and dispute resolution purposes.

4. How We Use Your Data

siti88 uses the personal data we collect for the following purposes:

• Account creation and management — to register your account, verify your identity, maintain your profile, and manage your MYR balance;
• Service delivery — to provide access to live casino games, sportsbook markets, and slots, and to process your bets and transactions;
• Age and identity verification — to enforce the 21+ age restriction and comply with KYC obligations;
• Financial processing — to process deposits via Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, Boost, and other supported payment methods, and to execute withdrawal requests;
• Fraud and security — to detect, investigate, and prevent fraud, money laundering, duplicate accounts, bonus abuse, and other prohibited conduct;
• Responsible gaming — to monitor gaming behaviour for indicators of problem gambling and to apply deposit limits, loss limits, or self-exclusion where requested or required;
• Customer support — to respond to your inquiries and resolve account issues via live chat or email;
• Legal compliance — to comply with applicable laws, regulatory requirements, and court orders;
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates, subject to your communication preferences (you may opt out at any time via account settings);
• Platform improvement — to analyse aggregate, anonymised usage data to improve the siti88 product experience.

5. Legal Basis for Processing

siti88 processes your personal data on the following legal bases:

• Contractual necessity — processing required to create your account, deliver Services, and process transactions under your membership agreement with siti88;
• Legal obligation — processing required to comply with applicable AML, KYC, age verification, and other regulatory obligations;
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics, where these interests are not overridden by your data protection rights;
• Consent — processing for marketing communications, where you have provided explicit consent at registration or thereafter. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing

siti88 does not sell your personal data to third parties. We share personal data only in the following circumstances:

• Payment processors — transaction data is shared with the relevant payment processor (e.g., DuitNow operator, FPX provider, Touch 'n Go eWallet) to the extent necessary to complete the transaction;
• Identity verification providers — KYC document data is shared with our contracted identity verification partner for authentication purposes;
• Game providers — session and result data is exchanged with certified game studios for reconciliation and dispute resolution;
• Fraud and security providers — technical data (IP address, device fingerprint) may be shared with fraud detection services to identify prohibited conduct;
• Legal and regulatory authorities — siti88 will disclose personal data to law enforcement, regulatory bodies, or courts where required by applicable law or a valid legal process;
• Corporate transactions — in the event of a merger, acquisition, or restructuring, Member data may be transferred as part of the relevant transaction, subject to equivalent privacy protections.

All third-party service providers engaged by siti88 are contractually required to handle personal data securely and exclusively for the purposes for which it was shared.

7. Cookies & Tracking Technologies

siti88 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use include:

• Essential cookies — necessary for Platform functionality, including session authentication and security. These cannot be disabled without impairing Platform use.
• Functional cookies — store your preferences such as preferred language and game lobby layout.
• Analytics cookies — collect anonymised data about how Members navigate the Platform, used solely to improve the product experience. No personally identifiable information is included.
• Fraud prevention cookies — device fingerprinting data used to detect suspicious login patterns and duplicate account attempts.

You may manage non-essential cookies via your browser settings. Note that disabling certain cookies may affect Platform functionality. siti88 does not use third-party advertising cookies or share cookie data with advertising networks.

8. Data Retention

siti88 retains personal data for the period necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Account and registration data — retained for the duration of membership and for a minimum of 5 years following account closure, in compliance with AML record-keeping obligations;
• Transaction and gaming records — retained for a minimum of 5 years from the date of each transaction;
• KYC documentation — retained for a minimum of 5 years following account closure;
• Support communications — retained for 3 years from the date of the communication;
• Technical logs — retained for 12 months and then anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

9. Data Security

siti88 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and siti88 servers;
• Encrypted storage of passwords using industry-standard one-way hashing algorithms;
• Encrypted storage of KYC documents and sensitive financial identifiers;
• Access controls limiting employee access to personal data on a strict need-to-know basis;
• Two-factor authentication available to all Members for account access;
• Regular security assessments and penetration testing of Platform infrastructure.

In the event of a personal data breach that poses a risk to Member rights, siti88 will notify affected Members and, where required by applicable law, the relevant supervisory authority, within the legally required timeframe.

10. Your Rights

Subject to applicable law, siti88 Members hold the following rights in respect of their personal data:

• Right of access — the right to request a copy of the personal data siti88 holds about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure — the right to request deletion of your personal data, subject to our legal retention obligations;
• Right to restriction — the right to request that we restrict processing of your personal data in certain circumstances;
• Right to data portability — the right to receive your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity;
• Right to object — the right to object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent — where processing is based on consent, the right to withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact siti88 via the support channels listed in Section 14. siti88 will respond to all data rights requests within 30 days. Identity verification may be required before a request is processed.

11. Children's Privacy

siti88 Services are strictly prohibited to persons under the age of 21. siti88 does not knowingly collect personal data from anyone under 21 years of age. If siti88 becomes aware that personal data has been collected from a person under 21, the relevant account will be immediately closed, all data will be deleted, and any associated funds will be forfeited in accordance with siti88's Terms & Conditions.

Parents and guardians who believe that a minor may have registered a siti88 account should contact siti88 support immediately via the channels in Section 14.

12. International Data Transfers

siti88's server infrastructure and some of our third-party service providers may be located outside of Malaysia. Where personal data is transferred internationally, siti88 ensures that appropriate safeguards are in place — including contractual data protection clauses — to maintain a level of protection equivalent to that described in this Policy. By using siti88's Services, you acknowledge and consent to the transfer of your personal data outside of Malaysia where necessary to deliver the Services.

13. Changes to This Policy

siti88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform Services. Material changes will be communicated to Members via the mobile number or email address registered to their account, with a minimum of seven (7) days' notice prior to the effective date of the change. The current version of this Policy, with its effective date, is always available on this page. Continued use of siti88 Services after a Policy update constitutes acceptance of the revised Policy.

14. Contact Us

For all privacy-related inquiries, data rights requests, or concerns regarding how siti88 handles your personal data, please contact us via:

• Live Chat: Available 24/7 on the siti88 Platform — average response time under 2 minutes. Available in English, Bahasa Malaysia, and Mandarin.
• Email: [email protected] — responses to data-related matters within 5 business days.

When submitting a data rights request via email, please include your registered siti88 username and a description of your request. Identity verification will be required before any personal data is disclosed or deleted.