Sity88 Privacy Policy – Personal Data Protection for Malaysian Players

Sity88 is a sports betting and online casino platform operating exclusively for users in Malaysia. We understand that your trust in us depends not only on the quality of our games or the speed of withdrawals, but also on how responsibly and respectfully we handle your personal information.

This Privacy Policy clearly and comprehensively outlines:

• What types of personal data we collect from you
• Why and how we use your data
• Who your information is shared with, if anyone
• How we protect your data against external threats
• What rights you have as a sity88 player regarding your personal data

This Privacy Policy forms part of the sity88 Terms & Conditions and should be read together with that document. We encourage you to read both documents carefully to fully understand your rights and obligations as a sity88 user.

Sity88 collects only the data genuinely necessary to provide our services, comply with legal requirements, and improve your user experience. The following are the categories of data we may collect:

We do not collect special category data such as biometric data, medical records, or political views. Financial data such as credit card numbers is not stored by sity88 — it is processed directly by certified payment providers who are committed to your data security.

Every piece of data sity88 collects is used for a specific and legitimate purpose. We never use your data for purposes not stated in this document without your consent. The primary purposes for data use are as follows:

• Account Management: Creating and maintaining your account, verifying your identity, and processing account requests
• Transaction Processing: Processing deposits and withdrawals in MYR (RM) via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, and unlawful use of the platform
• Legal Compliance (KYC/AML): Meeting the Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements mandated by regulators
• Service Improvement: Analysing usage patterns to enhance platform performance, improve the interface, and introduce new features
• Communications: Sending transaction notifications, security alerts, and (with your consent) relevant sity88 promotional updates
• Customer Support: Handling enquiries, complaints, and technical support requests effectively
• Responsible Gaming: Monitoring betting patterns to identify players who may benefit from responsible gaming support

Sity88 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, there are limited situations where sharing information is necessary and legally permissible:

• Trusted Service Provider: Technology providers, payment platforms, and game providers partnering with sity88 — all bound by strict confidentiality agreements and permitted to process data only for the specific purposes defined
• Legal Requirement: When required by a court, regulator, or Malaysian law enforcement agency pursuant to a valid order
• Fraud Prevention: Information that must be shared with fraud prevention bodies or financial institutions for legitimate security purposes
• Business Transfer: In the event of a merger, acquisition, or sale of sity88 assets — users will be notified before their data is transferred and equivalent protections will be maintained

Sity88 continually invests in the latest security infrastructure to ensure your personal data is always protected against cyber threats, unauthorised access, and data breaches. Key security measures we have implemented include:

• 256-Bit SSL Encryption: All communications between your browser and sity88's servers are encrypted to the highest industry standards
• Secure Servers: Data is stored in high-performance data centres with strict physical and digital access controls
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA for an added layer of security on their accounts
• 24/7 Monitoring: The sity88 security team continuously monitors systems to detect suspicious activity
• Regular Security Testing: Independent security audits are conducted periodically by accredited third parties
• Staff Access Controls: Only staff with a clear operational need are permitted to access user data, and all access is logged and audited

While sity88 takes all reasonable measures to protect your data, please note that no security system is 100% foolproof. We therefore encourage you to take your own protective steps — such as using strong passwords, not sharing your login credentials, and keeping your devices updated with the latest security patches.

Sity88 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. Our general retention policy is as follows:

• Active Account Data: Retained for the duration your account is active on sity88 and for 7 years after account closure for legal compliance and audit purposes
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial legislation and AML requirements
• Security Logs: Retained for 12 months for security investigation and dispute resolution purposes
• Inactive User Data: Accounts inactive for more than 3 years will receive a notification before data is archived or deleted
• Marketing Data (if permitted): Retained until you withdraw consent or request deletion

Once the specified retention period has elapsed, your data will be securely deleted or anonymised so that it can no longer be linked to your identity. The data deletion process follows methods that meet industry security standards.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and sity88's internal policies, you have the following rights regarding your personal data. All requests will be processed within 14 business days:

Sity88 uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and enable certain features. The following types of cookies are used:

You can manage or delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the sity88 platform — particularly essential cookies required for login and session security.

Sity88 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

We encourage parents and guardians to monitor their children's online activity and make use of parental control tools available on devices and web browsers. If you believe a minor has registered on sity88, please contact us immediately by email at support@sity88.bet and we will respond within 24 hours.

If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy, the sity88 team is here to help. We are committed to providing clear and helpful responses within a reasonable timeframe.

Sity88 reserves the right to update this Privacy Policy from time to time in line with changes to legislation, regulatory requirements, or business operations. Users will be notified of any material changes via email or in-platform notification at least 7 days before the changes take effect.

We encourage you to review this Privacy Policy page periodically. The "Last Updated" date at the top of this document will always reflect the most current version of our policy.