Privacy Policy — How Sity88 Protects Your Data

This Privacy Policy ("Policy") sets out the data practices of Sity88 ("Platform", "we", "us", "our") in relation to the personal information of registered users ("Player", "User", "you") collected through the Sity88 website at https://sity88.cam and all associated services, features, and applications.

Sity88 is committed to protecting the privacy and personal data of all players who use our online casino, sports betting, and gaming services. We handle your personal information in accordance with applicable data protection principles, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

By creating a Sity88 account or using our platform in any capacity, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions, which are incorporated by reference.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or is capable of identifying a living individual, either directly or in combination with other available data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, alteration, retrieval, consultation, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means Sity88, as the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" means any third-party service provider that processes personal data on behalf of Sity88, pursuant to a written data processing agreement.
• "KYC Data" means identity verification documentation submitted by a Player, including government-issued identification documents and payment method proof.
• "Cookies" means small text files placed on a user's device by a website to store session or preference information.
• "AML" means Anti-Money Laundering — a set of regulatory obligations requiring financial service providers to monitor and report suspicious financial activity.

Sity88 collects personal data across several categories, depending on your level of engagement with the platform. The table below sets out each category, the specific data points within it, and the primary purpose for which it is collected:

Sity88 does not collect biometric data, racial or ethnic origin data, political opinions, religious beliefs, health data, or genetic data as part of standard account operations. Where sensitive data categories are inadvertently disclosed through support communications, they are handled with heightened care and not retained beyond the period necessary to resolve the relevant query.

Sity88 collects personal data through the following means:

• Direct Submission: Data you provide voluntarily during account registration, KYC verification, deposit or withdrawal requests, support interactions, or promotional participation — including your name, date of birth, MyKad number, email address, and Malaysian mobile number.
• Automated Technical Collection: Data generated automatically when you use the platform, including your IP address, device identifiers, browser type, session duration, pages visited, and gameplay activity. This data is collected through server logs and cookies.
• Payment Processing Partners: When you make a deposit via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Boost, GrabPay, or a cryptocurrency network, transaction reference data is received from those payment processors to confirm funding of your account.
• Third-Party Verification Services: During KYC, we may use approved identity verification service providers to cross-check submitted documentation against authoritative databases, in accordance with applicable AML regulations.
• Communications: If you contact us via live chat or email at [email protected], the content of that communication — including any personal data you choose to share — is stored as part of your support record.

Sity88 processes your personal data only for the specific, legitimate purposes outlined in this Policy. The primary purposes for which we process player data are as follows:

• Account Creation and Management: To register, maintain, and authenticate your Sity88 account, including verifying your identity and age (minimum 21 years) in accordance with regulatory requirements.
• Transaction Processing: To process deposit and withdrawal requests made via Malaysian payment methods including Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and cryptocurrency networks.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, multi-accounting, bonus abuse, money laundering, and other prohibited conduct.
• Regulatory Compliance: To fulfil our obligations under applicable AML, KYC, and age verification regulations, including maintaining records of identity verification and transaction history for the periods required by law.
• Responsible Gambling: To monitor gameplay patterns that may indicate problem gambling behaviour, enforce deposit limits and self-exclusion requests, and deliver responsible gambling tools to players who request them.
• Customer Support: To respond to your queries, resolve disputes, and provide technical assistance across our live chat and email support channels.
• Platform Improvement: To analyse aggregated usage data (anonymised where possible) to improve game performance, platform stability, and user experience across devices used by Malaysian players.
• Legal and Compliance Obligations: To respond to lawful requests from regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where disclosure is required by applicable law.

Sity88 processes personal data on the basis of one or more of the following legal grounds:

• Contractual Necessity: Processing required to fulfil the services described in our Terms & Conditions — including account registration, payment processing, and gameplay operations — is carried out on the basis that it is necessary for the performance of the contract between you and Sity88.
• Legal Obligation: Processing required to comply with applicable AML, KYC, age verification, and financial regulatory requirements is carried out on the basis of our legal obligations as a licensed gaming operator.
• Legitimate Interests: Processing conducted for fraud prevention, platform security, responsible gambling monitoring, and abuse detection is carried out on the basis of Sity88's legitimate interests in maintaining a safe, fair, and legally compliant gaming environment.
• Consent: Where you have provided explicit consent to specific forms of data processing (such as receiving promotional communications), processing is carried out on that consent basis. You may withdraw consent at any time by contacting [email protected].

Sity88 does not sell your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: Transaction data is shared with Malaysian payment processors (including Touch 'n Go eWallet, DuitNow operator networks, FPX clearing systems, and banking partners such as Maybank, CIMB, and Public Bank) to the extent necessary to process deposit and withdrawal transactions.
• Identity Verification Providers: KYC documentation may be shared with approved, contracted identity verification service providers for the purpose of document authentication and AML screening. These providers are contractually bound to process data only for the specified verification purpose.
• Game Technology Providers: Technical session and gameplay data is shared with our game studio and platform technology partners to the extent necessary for game delivery, RNG certification, and technical support. All such partners are bound by data processing agreements.
• Regulatory Authorities: We are required by law to report certain categories of transactions and account activity to applicable regulatory and law enforcement bodies where a legal obligation or court order requires us to do so.
• Fraud Prevention Networks: Where there is reasonable suspicion of fraud, money laundering, or identity theft, relevant account and transaction data may be shared with industry fraud prevention bodies and, where necessary, law enforcement.

Sity88 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any individual. Where deletion is not technically feasible (e.g., backup archives), the data is isolated and protected from further processing until deletion becomes possible in the ordinary course of system maintenance.

As a Sity88 player, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected]. We will acknowledge your request within 5 business days and respond substantively within 30 business days.

Please note that certain rights are subject to limitations where Sity88 is required to retain or process data to comply with legal obligations — for example, AML regulations require us to retain KYC and transaction records for specified minimum periods regardless of account closure. Where a right cannot be exercised in full due to such an obligation, we will explain the limitation clearly in our response.

Sity88 uses cookies and similar tracking technologies to ensure the platform operates correctly, to remember your preferences, and to understand how players interact with the site. The following categories of cookies are used:

• Essential
  Strictly Necessary Cookies: These are required for the platform to function and cannot be disabled. They include session authentication tokens, security cookies, and load-balancing cookies. Without them, the site cannot be accessed. No consent is required for these cookies.
• Functional
  Functional Cookies: These remember your preferences, such as language settings, interface layout choices, and previously accessed game categories. They improve your experience but are not strictly necessary. You may disable them via your browser settings without losing core platform access.
• Analytics
  Analytics Cookies: These collect anonymised or aggregated data about how players navigate the Sity88 platform — which pages are visited most, where sessions end, and how long typical sessions last. This data is used to improve platform performance and content. Individual players are not identifiable from analytics data in its processed form.

You can manage cookie preferences by adjusting your browser settings. Blocking essential cookies will affect your ability to use the Sity88 platform. Blocking functional or analytics cookies will not prevent you from playing but may reduce some personalisation features. Sity88 does not use cookies for cross-site advertising tracking or for building behavioural profiles for sale to third parties.

Sity88 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in Transit: All data transmitted between your browser or application and Sity88 servers is encrypted using TLS 1.2 or higher (effectively presenting as 256-bit SSL). This protects your credentials, payment data, and personal information from interception.
• Encryption at Rest: Sensitive personal data stored on Sity88 servers — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Sity88 employees and contractors are granted access only to the data categories required for their specific role, and all access is logged and audited.
• Two-Factor Authentication: Sity88 supports and encourages two-factor authentication (2FA) for all player accounts. Admin and internal system access requires 2FA as a mandatory control.
• Penetration Testing: The Sity88 platform undergoes regular security assessments, including periodic penetration testing by qualified security professionals, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that may affect your personal data, Sity88 will notify affected players within 72 hours of becoming aware of the breach, describe the nature of the incident, and provide guidance on steps to protect yourself.

While Sity88 takes all reasonable measures to protect your personal data, no method of electronic transmission or storage is 100% immune to interception or breach. Players are also responsible for maintaining the security of their own account credentials and should never share their password with any third party.

Sity88 is a platform exclusively for adults aged 21 years and above. The platform is not intended for use by persons under the age of 21, and we do not knowingly collect personal data from individuals below this age threshold.

During the registration and KYC verification process, Sity88 verifies the age of all applicants using government-issued identity documentation. Accounts found to belong to individuals under the age of 21 are immediately closed, all associated data is securely deleted (except where required to be retained for reporting purposes), and deposits are returned to the originating payment method.

Parents and guardians are encouraged to use parental control software to restrict access to online gambling platforms on devices accessible to minors. Sity88 recommends age-verification tools be applied at the household level where children share devices with adults.

Sity88 primarily processes player data within its operating jurisdiction. However, some of our technology and service providers — including game studios, infrastructure providers, and analytics partners — may be based in jurisdictions outside Malaysia. Where personal data is transferred to these providers, Sity88 ensures adequate protections are in place through one or more of the following mechanisms:

• Contractual data processing agreements incorporating appropriate safeguards for the protection of personal data transferred to third countries.
• Engagement only with service providers in jurisdictions that maintain data protection standards equivalent to, or exceeding, those applicable in Malaysia.
• Standard contractual clauses or equivalent contractual protections binding the recipient to comply with Sity88's data protection requirements.

Sity88 does not transfer personal data to jurisdictions that lack adequate data protection frameworks without first implementing appropriate contractual safeguards and, where required, obtaining your explicit consent to such a transfer.

Sity88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or operational procedures. When material changes are made to this Policy, we will update the "Last Updated" date displayed at the top of this page and, where appropriate, notify active account holders via email or platform notification.

Your continued use of the Sity88 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should cease using the platform and may request account closure in accordance with the process described in our Terms & Conditions.

The most current version of this Privacy Policy will always be accessible at https://sity88.cam/privacy-policy. We recommend reviewing this page periodically to stay informed of any updates to our data practices.

For any questions, concerns, or formal requests relating to this Privacy Policy or the handling of your personal data by Sity88, please contact us through any of the following channels:

• Privacy Enquiries — Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" for faster routing.
• Live Chat: Our support team is available 24 hours a day, 7 days a week, via the live chat feature on the Sity88 platform.
• Response Commitment: We acknowledge all privacy-related correspondence within 5 business days and provide a substantive response within 30 business days. Complex requests may take longer; we will notify you of any extension.

Sity88 takes all privacy queries and complaints seriously. If you are dissatisfied with the outcome of a privacy-related complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction. For players based in Malaysia, this may include the Department of Personal Data Protection (JPDP) under the Personal Data Protection Act 2010.

We serve players across Malaysia — from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — and our support team is available to assist all registered players regardless of location within Malaysia.