Siputri88 Privacy Policy – Personal Data Protection for Malaysian Members

Introduction & Scope of Privacy Policy

This Privacy Policy is issued by siputri88 ("Platform", "we", "us") and applies to all individuals ("Members", "Users", "you") who register, visit, or use any services offered through siputri88.biz. Siputri88 is the data controller responsible for personal data collected through this platform.

We understand that your trust in siputri88 depends largely on how we handle your personal information. This Policy is written in clear, plain language — free from confusing legal jargon — so every Malaysian member can fully understand their rights and the protections available to them. We are committed to handling your data responsibly, transparently, and with full respect for your privacy.

This Privacy Policy should be read together with Terms & Conditions siputri88 and Responsible Gaming Guide us, all of which together form a comprehensive protection framework for members of this platform.

Personal Data Collected by Siputri88

Siputri88 collects your personal data through several means: information you provide directly during registration or platform use, data generated automatically as you browse our website, and in limited cases, information obtained from legitimate third-party sources. The following are the categories of data we collect:

Siputri88 does not collect sensitive data such as health information, religious beliefs, or political views. We only collect data that is genuinely necessary to provide a secure, fair, and legally compliant platform service.

Purpose of Data Collection & Processing

Siputri88 collects and processes your personal data only for legitimate, specific, and transparent purposes. The following are the primary purposes for which your data is processed:

• Account Management & Identity Verification – To register your account, verify your age (18+), and ensure membership is valid in accordance with siputri88's terms of use.
• Provision of gaming services – To give you access to Live Casino, Sports Betting (Malaysia Super League football, EPL, badminton, MLBB e-sports), poker, table games, and all other games available on siputri88.
• Financial transaction processing – To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX Maybank2u/CIMB Clicks, as well as to process winnings withdrawals to your account.
• Legal compliance and anti-money laundering (AML) – To fulfil statutory obligations under applicable Malaysian law, including know-your-customer (KYC) requirements and suspicious transaction reporting.
• Fraud detection and platform security – To detect, investigate, and prevent fraudulent activity, multiple accounts, or any activity that violates siputri88's terms of use.
• Responsible Gaming – To monitor gaming patterns, identify signs of problem gambling, and provide effective responsible gaming tools.
• Customer Support – To effectively handle member enquiries, complaints, and requests for assistance.
• Marketing and communications (with your consent) – To send promotional information, exclusive offers, and relevant platform updates — subject to your communication preferences.

Data Retention & Security Measures

Siputri88 employs comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL Encryption on all communications between your browser and siputri88's servers.
• Data encryption at rest for sensitive data such as passwords (stored in hashed form) and identity information.
• Strict access controls — only siputri88 staff who require data access for their specific duties are permitted to do so, and all access is automatically logged for audit purposes.
• Regular security testing including penetration testing and system vulnerability assessments conducted by independent security experts.
• Two-factor authentication (2FA) available to members who wish to add an extra layer of security to their account.
• Separate data storage — members' funds are held in accounts separate from siputri88's operational funds.

Your personal data will be retained for as long as your account remains active, or for as long as necessary to fulfil the purposes stated in this Privacy Policy. Following account closure, siputri88 will retain your data for a minimum period of 7 years for legal compliance and financial audit purposes — after which it will be securely deleted in accordance with our established data disposal procedures.

While siputri88 takes all reasonable steps to protect your data, no security system is completely infallible. In the unlikely event of a data breach that may affect your rights and freedoms, siputri88 will notify the relevant authorities and affected members within the timeframes required by law.

Disclosure of Data to Third Parties

Siputri88 does not sell, rent, or disclose members' personal data to third parties for their own marketing purposes. However, there are limited circumstances where siputri88 needs to share your data with certain parties to keep the platform running properly and to comply with applicable laws:

• Payment processors – Transaction information required for processing is shared with certified payment processors such as FPX gateway, Touch 'n Go, GrabPay, DuitNow, and others to facilitate your deposits and withdrawals. These processors are bound by strict confidentiality agreements.
• Game software providers – To deliver a seamless gaming experience, minimal game data may be shared with licensed live casino and sports software providers authorised by siputri88. These providers comply with international data protection standards.
• Legal authorities – Siputri88 will disclose data to the police, courts, or regulatory bodies if required by a court order, warrant, or direction from a competent authority under Malaysian law.
• Technical service providers – For platform operations, siputri88 engages technical service providers (such as cloud services and security analytics) that may process personal data on siputri88's behalf. All such providers are bound by data processing agreements that meet PDPA standards.

In all of the above cases, siputri88 ensures that data recipients have adequate confidentiality and data protection obligations in place. Siputri88 will not disclose your data beyond what is strictly necessary for the stated purposes.

Cookies & Tracking Technologies

The siputri88.biz website uses cookies and similar tracking technologies to enhance your browsing experience, enable essential platform functionality, and understand how members use our platform. The following are the types of cookies we use:

• Essential Cookies – These cookies are strictly necessary for the siputri88 platform to function properly. They enable login, page navigation, and session security. They cannot be disabled without affecting the platform's core functionality.
• Performance Cookies – To collect information about how you use siputri88 — which pages are visited most frequently, time spent in each section, and any errors encountered. This information is used to continuously improve the platform.
• Functional Cookies – To remember your preferences such as language, preferred odds format (EU/HK/MY), and display settings, so you do not need to reconfigure them each time you log in.
• Session Cookies – Temporary cookies that are automatically deleted when you close your browser. Used to maintain your login session while you are active on the platform.

You can control or disable cookies through your browser settings. However, disabling certain cookies may affect your experience on the siputri88 platform and some features may not function correctly. For more information on managing cookies in your browser, please refer to your browser's help documentation.

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), siputri88 recognises and respects the following rights that you hold as a data subject:

• Right of Access (Section 30 PDPA) – You have the right to request access to your personal data held by siputri88. We will provide a copy of the data in a usable format within 21 working days of receiving a valid request.
• Right to Rectification (Section 34 PDPA) – If your personal data is inaccurate, incomplete, misleading, or outdated, you may request a correction. siputri88 will process such requests within 21 business days.
• Right to Withdraw Consent – You may withdraw consent given for data processing at any time. Such withdrawal does not affect the validity of any processing carried out prior to that point.
• Right to Prevent Processing Likely to Cause Damage – You may request that siputri88 stop or refrain from processing your personal data if doing so is likely to cause you unnecessary harm or distress.
• Right to Object to Direct Marketing – You may object to the use of your data for direct marketing purposes at any time, and siputri88 is required to cease such use immediately.

To submit any request relating to the rights above, please contact the siputri88 Data Protection Officer by email at support@siputri88.biz with the subject line "Data Subject Rights Request". Please include your full name, siputri88 account number, and a clear description of your request. Identity verification may be required before we can process your request.

Marketing & Promotional Communications

From time to time, siputri88 may contact you by email or SMS to inform you about new promotions, exclusive offers, platform enhancements, or important account-related information. Any marketing communications we send are based on consent provided during registration or through updates to your communication preferences within your account.

You have the full right to opt out of marketing communications from siputri88 at any time. To do so, you may:

• Click the "Unsubscribe" link included in every siputri88 promotional email.
• Update your communication preferences in your siputri88 account settings under the "Notification Preferences" section.
• Contact the siputri88 support team via live chat or email at support@siputri88.biz, stating that you wish to opt out of marketing communications.

Unsubscribe requests will be processed within 5 business days. Please note that even after opting out of marketing communications, siputri88 will continue to send important account-related messages — such as security notices, transaction confirmations, and legally required compliance information.

Siputri88 will not send any marketing communications to members who are currently within a self-exclusion active. If you receive any promotional communications during your self-exclusion period, please contact us immediately so we can investigate and rectify the situation.

Changes to This Privacy Policy

Siputri88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or platform operations. All amendments take effect immediately upon publication on siputri88.biz unless stated otherwise.

For material amendments — meaning changes that significantly affect how we use your data or your privacy rights — siputri88 will provide members with adequate notice through one of the following: a prominent notice on the platform's homepage, an email to the address registered to your account, or an in-account notification upon login. It is your responsibility to review this Privacy Policy page periodically and ensure you remain aware of the latest version.

Contact Us – Privacy Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way siputri88 handles your personal data, please do not hesitate to reach out. We take every privacy enquiry seriously and are committed to providing a prompt and helpful response.

• Email: support@siputri88.biz (Subject: "Privacy Enquiry – [Your Name]")
• Live Chat: Available 24 hours at siputri88.biz
• Service languages: Malay and English
• Response time: Within 24 hours for general enquiries; 21 working days for formal data subject rights requests

If you are not satisfied with siputri88's response to your privacy enquiry or complaint, you have the right to refer the matter to the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body established under PDPA 2010.