Siti Casino Privacy Policy – Malaysia Personal Data Protection

Siti Casino ("we", "platform") is the data controller responsible for processing your personal information. This Privacy Policy sets out in detail the types of data we collect, the purposes for collection, how it is used, retention periods, and your rights as a data subject under applicable data protection laws in Malaysia.

This policy applies to all your interactions with Siti Casino, including visits to our website, account registration, use of games (slots, live casino, baccarat, Sports Betting, poker, and others), financial transactions, communications with our support team, and participation in promotional or VIP Rewards programmes.

By accessing and using the platform Siti Casino, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

Siti Casino collects various categories of personal data depending on the nature of your interactions with our platform. Below is a detailed breakdown:

We may also receive personal data about you from legitimate third-party sources such as identity verification agents, payment service providers, and security databases for the purposes of fraud prevention and Anti-Money Laundering (AML) compliance.

Siti Casino uses your personal data only for the purposes stated below, and no further than what those purposes require:

• Account management: Creating, verifying, and maintaining your member account on the Siti Casino platform, including required KYC processes.
• Service provision: Granting access to all platform games and services — slots, Live Casino, baccarat, Malaysia Super League & EPL Sports Betting, cricket, badminton, e-sports, and more.
• Payment processing: Processing deposits and withdrawals via supported Malaysian payment methods including DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u, and CIMB Clicks.
• Fraud prevention & security: Detecting and preventing fraudulent activity, money laundering, and security threats to your account and our platform.
• Customer support: Responding to your enquiries, complaints, and requests via live chat, WhatsApp, and email in Bahasa Melayu.
• Responsible gambling: Monitoring gameplay patterns to detect signs of problem gambling and providing appropriate intervention where necessary.
• Marketing communications: Sending information about promotions, bonuses, and new offers at Siti Casino — only where you have given your consent to receive such communications.
• Platform improvement: Analysing usage patterns to improve the user experience, platform performance, and the development of new features.
• Legal compliance: Meeting applicable legal and regulatory obligations, including AML/KYC reporting requirements.

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, Siti Casino processes your personal data on the following legal bases:

• Consent: For marketing communications and direct marketing, we rely on your explicit consent given during registration or via the communication preferences settings in your account. You may withdraw this consent at any time.
• Contractual requirement: For processing required to fulfil our contractual obligations to you as a Siti Casino member — including account management, payment processing, and the provision of gaming services.
• Legitimate interests: For fraud prevention, platform security, internal analytics, and service improvement — where our legitimate interests do not override your fundamental rights and freedoms.
• Legal obligation: To meet regulatory compliance requirements, including AML (Anti-Money Laundering), KYC (Know Your Customer), and reporting to the relevant authorities where mandated by law.

Siti Casino does not sell or trade your personal data. We share personal data only in limited, necessary circumstances as outlined below:

• Game providers: Minimal account information required is shared with game providers (Pragmatic Play, Evolution Gaming, Microgaming, etc.) solely to enable access to their games on our platform.
• Payment processors: Required transaction data is shared with payment service providers (DuitNow gateway, FPX, digital wallet providers) to process your deposits and withdrawals.
• Identity verification provider: Verification data is shared with authorised third-party KYC agents to confirm your identity for compliance purposes.
• Legal authorities: Data is shared with government agencies, law enforcement bodies, or courts where required by court order, Malaysian law, or legitimate regulatory obligations.
• Technical service provider: Cloud, analytics, and technical infrastructure providers bound by strict data processing agreements, who are not permitted to use your data for their own purposes.

Siti Casino implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure:

• 256-bit SSL encryption: All communications between your device and Siti Casino's servers are encrypted using 256-bit SSL/TLS protocol — the same security standard used by Malaysia's leading banking institutions.
• Secure password storage: Account passwords are never stored in readable form — we retain only a one-way cryptographic hash that cannot be reversed.
• Two-factor authentication (2FA): SMS verification for login, withdrawals, and changes to sensitive account information.
• Real-time threat monitoring: Our security system monitors account activity 24/7 to detect suspicious patterns and respond immediately.
• Data segregation: Member funds are held in accounts completely separate from the company's operational funds, with additional layers of security in place.
• Staff training: All Siti Casino staff with access to personal data undergo rigorous data protection training and are bound by confidentiality agreements.

Siti Casino uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

• Essential cookies (required): Required for core platform functionality — session login, security, and language preferences. These cookies cannot be disabled without affecting platform performance.
• Performance cookies: Collecting information on how visitors use our platform (most visited pages, error messages, etc.) to help us improve performance.
• Functional cookies: Stores your preferences such as your chosen language, set betting limits, and display settings for a more personalised experience.
• Analytics cookies: Used to understand aggregate and anonymised platform usage patterns for product development purposes.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality and your experience on the platform. Siti Casino.

Siti Casino retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by Malaysian law:

• Active account data: Retained for as long as your account remains active and for a period of 7 years following account closure to meet legal and tax requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering and tax legislation.
• Customer support data: Conversation logs and support tickets are retained for 3 years for reference and quality control purposes.
• Marketing data: Retained until you withdraw your marketing consent or request deletion, whichever comes first.
• Cookie data: Session cookies are deleted when you close your browser. Persistent cookies have a lifespan of between 30 days and 2 years depending on their function.

Your personal data is stored on servers located in jurisdictions with data protection laws equivalent to or stricter than Malaysia's PDPA. Any cross-border data transfers are carried out with appropriate contractual safeguards in place.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Siti Casino:

Siti Casino does not knowingly collect personal data from individuals under the age of 18. Our platform is strictly intended for adults aged 18 and above only.

If we discover that we have inadvertently collected data from a minor, we will take immediate action to delete that data and close the account in question. If you are a parent or guardian who believes your child has registered an account at Siti Casino, please contact us immediately at support@siticasino.bet.

Platform Siti Casino includes integrations with third-party services such as game providers and payment gateways. When you interact with these services, the respective third party's privacy policy may apply to their own data processing.

Siti Casino is not responsible for the privacy practices or content of any third-party websites or services that may be accessed through our platform. We recommend that you read the privacy policy of each third-party service you use.

Siti Casino reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes to the services we offer.

For material amendments — that is, changes that significantly affect how we use your data — we will:

• Publish a prominent notice on the Siti Casino platform homepage
• Sending notifications to your registered email address
• Updating the "Last Updated" date at the top of this page

Continued use of the platform Siti Casino after the effective date of the amendment constitutes your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account before the effective date.

For any enquiries, requests, or concerns regarding your privacy and the processing of your personal data at Siti Casino, please contact us via:

We will make every effort to respond to all privacy-related enquiries promptly and thoroughly. If you are not satisfied with our response, you have the right to appeal to the Personal Data Protection Commissioner of Malaysia.