Siti Casino Privacy Policy – Personal Data Protection for Malaysian Players

Siti Casino cares about the privacy of every user on our platform. This Privacy Policy has been developed in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 and international best practices in personal data protection.

This policy applies to all individuals who:

• Visiting the siticasino.app website, whether as a guest or a registered member.
• Registered and holding an active account with Siti Casino.
• Contacting our customer support team through any available channel.
• Using any service or feature provided on the Siti Casino platform.

This Policy does not apply to third-party websites or services that may be linked through our platform. Siti Casino is not responsible for the privacy practices of any external websites.

Siti Casino collects your personal data through several means: directly when you register or complete a form, automatically through your use of the platform, and (in limited cases) via legitimate third parties such as payment providers.

Every piece of data we collect has a specific and legitimate purpose. Siti Casino uses your personal data only for the following purposes:

• Service Provision: Creating and managing your account, processing deposits and withdrawals via DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and providing access to games and Sports Betting.
• Identity Verification (KYC): Meeting legal compliance requirements related to member identity verification, anti-money laundering, and fraud prevention.
• Account Security: Detecting suspicious activity, preventing unauthorised access, and ensuring that only you can access your account.
• Customer Support: Addressing enquiries, resolving complaints, and providing technical assistance via Live Chat, WhatsApp, or email.
• Platform Improvements: Analysing aggregated (not individual) usage patterns to improve platform features, user experience, and game offerings.
• Marketing Communications: Sending information about promotions, bonuses, and new offers — only if you have consented to receive marketing communications.
• Legal Compliance: Fulfilling legal obligations, including reporting to authorities where required under Malaysian law.

We do not use your data for automated decision-making that could have a serious impact on you without human oversight.

Siti Casino retains your personal data only for as long as necessary for the stated purposes or as required by law. Our general retention schedule is as follows:

• Active Account Data: Retained for as long as your Siti Casino account remains active.
• Transaction & Financial Data: Retained for seven (7) years after account closure, in line with Malaysian financial regulatory requirements.
• Game Logs: Retained for three (3) years for dispute resolution and audit purposes.
• Support Communication Records: Retained for two (2) years after the issue is resolved.
• KYC Data: Retained for five (5) years after account closure in accordance with Malaysia's anti-money laundering laws.

Once the relevant retention period has elapsed, your personal data will be securely deleted or anonymised in accordance with industry-standard procedures.

Siti Casino never sell, rent, or trade your personal data to any party for marketing or commercial purposes. However, in the course of our normal operations, we share limited data with the following third parties:

• Payment Providers: DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay receive only the transaction information necessary to process your deposits and withdrawals. This sharing is kept to a minimum and is solely for payment processing purposes.
• Game Software Providers: Game providers such as Pragmatic Play or Evolution Gaming may receive anonymised session IDs for technical purposes only. They do not receive your full name or any personally identifiable information.
• Governing Authority: We are required to disclose certain data to Malaysian law enforcement agencies when ordered by a court or where a valid legal obligation exists.
• Independent Auditors: Independent audit firms conducting security and compliance reviews may access data in a limited, controlled format for audit purposes only.

All third parties we work with are bound by strict confidentiality agreements and are required to uphold privacy standards no less rigorous than those of Siti Casino itself.

As a Siti Casino player residing in Malaysia, you have the following rights under the Personal Data Protection Act (PDPA) 2010:

Siti Casino implements multiple layers of technical and organisational safeguards to protect your personal data from unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS Encryption: All communications between your browser and Siti Casino's servers are encrypted using the highest available encryption standards.
• Data Encryption at Rest: Sensitive data stored on our servers is encrypted using AES-256 standards, ensuring it remains protected even in the event of unauthorised physical access.
• Multi-Layered Access Controls: Only authorised staff with a legitimate business need may access player personal data. All access is logged and regularly audited.
• Two-Factor Authentication (2FA): All internal systems containing player data require two-factor authentication for staff access.
• Penetration Testing: siti casino undergoes penetration testing by independent security experts every six months to identify and address vulnerabilities.
• 24/7 Monitoring: Security monitoring systems operate around the clock to detect and respond to threats or suspicious activity.

While we take all reasonable security measures, no system is 100% secure. You also play an important role in protecting your account by using a strong password and keeping it confidential.

Siti Casino uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit our website.

You can manage your cookie preferences at any time through your browser settings or the privacy settings page in your Siti Casino account. Please note that disabling certain cookies may affect platform functionality.

When you make a deposit or withdrawal via Malaysian payment methods such as DuitNow, FPX (Maybank2u or CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay, your transaction details are processed securely by the respective payment provider.

Siti Casino does not store your full bank card number, PIN, or internet banking password. All sensitive payment information is handled directly by payment providers who maintain their own security standards.

For the KYC (Know Your Customer) process, we may require:

• A copy of your MyKad (front and back) as proof of identity.
• Proof of payment method (screenshot of eWallet app or bank statement) to verify ownership of the payment account.
• In certain cases, proof of address such as a utility bill dated no more than three months ago.

KYC documents are stored in a separate encrypted system with restricted access. These documents are used solely for identity verification and anti-money laundering compliance purposes.

Siti Casino may update this Privacy Policy from time to time to reflect changes in our data processing practices, evolving legal requirements, or service improvements.

When we make material changes, we will:

• Updating the "Last updated" date at the top of this page.
• Sending notifications to all registered members via email or a pop-up upon login.
• In the case of highly significant changes, we may ask for your consent again before you can continue using the platform.

We encourage you to review this page periodically. Continued use of the Siti Casino platform after notification of policy changes constitutes your acceptance of the latest version of our Privacy Policy.

If you have any questions, concerns, or complaints about how Siti Casino handles your personal data, please do not hesitate to reach out. We are committed to responding to all privacy enquiries within the stipulated timeframe.