Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how Siputri88 ("we", "us", "our", "the Operator", "the Platform") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "Player", "User") who access or use the Siputri88 website at siputri88.asia and all associated services, features, and digital content (collectively, the "Services").

Siputri88 takes data privacy seriously. We process personal data in accordance with the principles of lawfulness, fairness, and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability. These principles guide our data handling practices across all operations.

By registering an account on the Siputri88 platform and by continuing to use our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Siputri88 platform.

02 Definitions

The following terms carry specific meanings throughout this Policy:

03 Data Controller

Siputri88 acts as the Data Controller in respect of all personal data collected from Players through the platform. As Data Controller, Siputri88 is responsible for determining the purposes for which, and the manner in which, your personal data is processed.

For data protection enquiries, players may contact Siputri88 directly via our24/7 live chat facility or by email. We aim to acknowledge all privacy-related correspondence within two (2) business days and to resolve substantive requests within thirty (30) calendar days of receipt.

04 Categories of Personal Data We Collect

We collect personal data across the following categories, depending on the nature of your interaction with Siputri88:

05 How We Collect Personal Data

Personal data is collected through the following mechanisms:

• Direct submission: Information you provide when registering, completing KYC, updating your account profile, making deposits or withdrawals, or contacting our support team.
• Automated technical collection: Data collected automatically when you access the platform, including IP address, device identifiers, browser information, and session logs generated by our web server infrastructure.
• Cookies and tracking technologies: Information gathered through session cookies, persistent cookies, and similar technologies as described in Section 12 of this Policy.
• Third-party payment processors: Transaction reference data and confirmation records passed to us by payment service providers including FPX, DuitNow, and e-wallet operators when you make a deposit or withdrawal.
• Identity verification services: Confirmation data returned by our KYC verification partners when processing identity document checks.
• Fraud prevention and AML screening services: Risk signals and watchlist screening results from third-party compliance services used to satisfy our anti-money laundering obligations.

06 Legal Basis for Processing

Siputri88 processes your personal data on the following legal bases, depending on the specific processing activity:

• Performance of a contract: Processing necessary to create and maintain your account, process transactions, deliver gaming services, and fulfil our obligations under the Terms and Conditions.
• Legal obligation: Processing required to comply with our licensing conditions, anti-money laundering obligations, age verification requirements, and applicable financial regulations — including KYC document collection and retention.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gambling monitoring, and platform improvement activities, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time by contacting our support team or updating your account communication preferences.

07 Purposes of Data Processing

We process personal data for the following specific, documented purposes:

• Account creation, authentication, and ongoing account management
• Identity and age verification (21+) in fulfilment of our KYC obligations
• Processing deposits, withdrawals, and bonus transactions denominated in MYR or cryptocurrency
• Fraud detection, anti-money laundering screening, and suspicious activity investigation
• Responsible gambling monitoring — including detection of problem gambling indicators and administration of self-exclusion, deposit limits, and cooling-off periods
• Platform security, including prevention of unauthorised access, cheating, and multi-accounting
• Customer support delivery — responding to queries submitted via live chat, email, or other channels
• Sending transactional communications (deposit confirmations, withdrawal notifications, security alerts)
• Sending promotional communications where explicit consent has been given
• Platform analytics and performance optimisation to improve the player experience
• Compliance with our licensing authority's reporting and record-keeping requirements
• Exercising or defending legal claims

08 Data Sharing & Disclosure

Siputri88 does not sell personal data. We share personal data only in the following limited circumstances, and only to the extent strictly necessary for the purpose at hand:

• Payment service providers: Transaction data shared with FPX operators, DuitNow, e-wallet providers (Touch 'n Go, Boost, GrabPay), and banking partners (Maybank, CIMB, Public Bank, Hong Leong) strictly for payment processing purposes.
• KYC and identity verification partners: Identity document data shared with our authorised KYC verification service providers under strict data processing agreements.
• Fraud prevention and AML compliance services: Data submitted to industry-standard screening services for watchlist and sanctions checking as required by our licensing conditions.
• Licensing authority: Player data disclosed to our licensing authority when required by their oversight, investigation, or audit functions.
• Legal and regulatory authorities: Data disclosed in response to valid legal process — such as court orders, law enforcement requests, or regulatory investigations — to the extent legally required.
• Technology and hosting providers: Infrastructure who host and maintain platform systems, operating under data processing agreements that bind them to appropriate security and confidentiality standards.

09 International Data Transfers

As an internationally operated platform, Siputri88 may transfer personal data to, and process it in, countries outside of Malaysia. These countries may have data protection laws that differ from those applicable in your jurisdiction.

Where such transfers occur, Siputri88 implements appropriate safeguards to ensure your personal data remains protected to a standard consistent with this Policy. Safeguards used include standard contractual clauses incorporated into agreements with our service providers, and transfer only to organisations that have committed to equivalent data protection standards.

10 Data Retention

Siputri88 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, having regard to our legal, regulatory, and operational obligations. The following general retention guidelines apply:

• Active account data: Retained for the duration of the account's active status, plus a minimum of five (5) years following account closure, to satisfy AML record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of verification, in compliance with licensing requirements. Document images are stored in encrypted form.
• Transaction records: Financial transaction logs retained for a minimum of seven (7) years to support audit, fraud investigation, and regulatory reporting requirements.
• Gaming data: Player betting and gaming history retained for five (5) years from the date of each transaction for dispute resolution and responsible gambling monitoring purposes.
• Support communications: Live chat transcripts and email records retained for three (3) years from the date of correspondence.
• Technical logs: Server access logs and IP records retained for twelve (12) months for security and fraud investigation purposes, then securely deleted.
• Dormant account data: Where an account has been inactive for 12 consecutive months, we will notify the Player and initiate a data review process. Data required for legal compliance is retained; non-essential data is deleted.

11 Security Measures

Siputri88 maintains a comprehensive information security programme designed to protect personal data from unauthorised access, disclosure, alteration, or destruction. Our principal security measures include:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS) with256-bit encryption.
• Encryption at rest: Sensitive personal data, including identity documents and financial records, is encrypted at rest using AES-256 or equivalent industry-standard protocols.
• Access controls: Internal access to personal data is restricted to authorised personnel on a strict need-to-know basis. Access is governed by role-based controls and logged for audit purposes.
• Two-factor authentication: Players are offered optional two-factor authentication (2FA) for account access. Internal administrative access to systems holding personal data requires2FA.
• Regular security assessments: Our platform and infrastructure undergo regular security assessments and penetration testing to identify and remediate vulnerabilities.
• Data breach response: We maintain an incident response procedure. In the event of a personal data breach that poses a risk to Players, we will notify affected individuals promptly and take remedial action in accordance with our obligations.

While we implement robust security measures, no online platform can guarantee absolute security against all threats. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorised access to your account.

12 Cookies & Tracking Technologies

Siputri88 uses cookies and similar technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential to the operation of the platform. These include session authentication cookies and security tokens. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your preferences such as language settings, display preferences, and responsible gambling tool configurations to personalise your experience across sessions.
• Analytics cookies: Used to collect aggregated, anonymised data on how players use the platform — page views, navigation paths, session durations — to help us improve performance and usability. This data is not linked to individual player identities.
• Security and fraud prevention cookies: Used to identify and flag suspicious patterns of platform access, including bot activity, multi-accounting behaviour, and abnormal session patterns.

You may control cookie settings through your browser's privacy settings. Disabling non-essential cookies will not prevent you from using the core Siputri88 platform, though some preferences and personalisation features may not function as expected. Siputri88 does not use advertising or retargeting cookies.

13 Your Data Protection Rights

Subject to applicable law and certain limitations arising from our licensing and AML obligations, you hold the following rights with respect to your personal data held by Siputri88:

14 Minors & Age Verification

The Siputri88 platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. All registrations are subject to age verification, and accounts where the Player cannot confirm they are of legal age will be suspended pending KYC documentation review.

If we become aware that personal data has been collected from an individual below the minimum age, we will take immediate steps to delete that data, close the associated account, and return any deposited funds to the payment source from which they originated, subject to applicable verification requirements.

15 Amendments to This Policy

Siputri88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our licensing requirements. Material changes will be communicated to registered Players via email notification or a prominent notice on the platform at least seven (7) days prior to the effective date of the change.

The "Last Updated" date displayed at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically. Your continued use of the platform following any update constitutes acceptance of the revised Policy.

Prior versions of this Policy are retained and may be requested by contacting our Customer Support team.

16 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the Siputri88 Data Protection team through the following channels:

For concerns relating to responsible gambling data or self-exclusion records, please also refer to our Responsible Gambling page for dedicated guidance and support resources available to Malaysian players.