Privacy Policy siti66 –
Data Protection & Information Security

01Information We Collect

In operating the siti66 platform, we collect several categories of information from our users. This is necessary to ensure we can deliver services that are safe, efficient, and compliant with applicable legal requirements in Malaysia.

Information you provide directly:

• Full name as stated on your identity card or passport.
• Identity card number (MyKad) or passport number.
• Date of birth for 18+ age verification.
• Active email address used for account communications.
• Active Malaysian mobile phone number.
• Full current residential address.
• Bank account or eWallet details for processing deposits and withdrawals.
• KYC supporting documents such as a photo of your identification card, bank statements, or utility bills.

Information collected automatically:

• IP address and network information collected when accessing the platform.
• Device type, operating system, and web browser version used.
• In-platform activity logs including games played, total wagering amounts, and session duration.
• Cookie data and tracking technologies that help improve the user experience.
• General geographic location data (based on IP) for legal compliance purposes.

02How We Use Your Information

Information collected by siti66 is used responsibly and only for legitimate purposes. Below is a detailed breakdown of how we use your data:

Siti66 will not use your data for any purpose beyond those stated above without first obtaining your consent. You will be notified of any material new use of your data via email or an in-platform notification.

03Sharing Information with Third Parties

Siti66 does not sell, rent, or disclose your personal information to third parties for marketing purposes. However, there are limited situations where sharing information is necessary and legally permissible:

• Payment Service Providers: Transaction details are shared with approved payment processors such as FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, GrabPay, and DuitNow to enable secure processing of deposits and withdrawals. All such providers are bound by strict data confidentiality agreements.
• Game Software Providers: Minimum game data required to be shared with our licensed game software providers to ensure smooth game functionality and maintain game integrity.
• Regulatory Body & Authority: siti66 will disclose the required information to government authorities, law enforcement bodies, or courts when mandated by Malaysian law, including the reporting of suspicious activity under anti-money laundering legislation.
• Audit & Security Services: Independent auditors and cybersecurity firms appointed by siti66 may access system data (not individual personal data) within the scope of controlled audit and penetration testing work.

04Data Security

Protecting your data from unauthorized access, loss, or disclosure is a top priority at siti66. We implement comprehensive security layers to ensure your data remains protected at all times:

• Transmission Encryption: All communications between your browser and the siti66 servers are secured with TLS 1.3 protocol and 256-bit SSL encryption. This ensures that no information can be intercepted in transit.
• Encryption of Stored Data: Sensitive data such as bank account numbers, identification details, and passwords are stored in encrypted format using AES-256 encryption. Passwords in particular are stored as hashed values that cannot be decrypted.
• Two-Factor Authentication (2FA): All siti66 accounts are supported by two-factor authentication using OTP codes via SMS or an authenticator app. We encourage all users to enable this feature.
• 24/7 Monitoring: Our automated security monitoring system detects and responds to suspicious activity around the clock, including unusual login attempts, access from new locations, and abnormal transaction patterns.
• Network Segregation: The siti66 infrastructure uses a segmented network architecture to isolate payment systems, user data, and gaming services, limiting the impact of any potential security incident.
• Regular Security Testing: siti66 conducts regular penetration testing and vulnerability assessments carried out by qualified independent cybersecurity firms.

05Cookies and Tracking Technologies

Siti66 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand how users interact with our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled as they are essential to platform operations.
• Performance Cookies: Collecting information on how users interact with our platform (such as most-visited pages and response times) in anonymized form. This helps us improve platform performance.
• Functional Cookies: Remembering your preferences and settings such as language, time zone, and display preferences to provide a more personalized experience.
• Analytics Cookies: We use first-party analytics tools to understand platform usage patterns in aggregate. This data is not shared with external advertising networks.

You can manage cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the siti66 platform. Please refer to your browser's help documentation for guidance on managing cookies.

06Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by siti66:

• Right to Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a readable format within 14 business days.
• Right to Rectification: If any personal data we hold about you is inaccurate or outdated, you have the right to request a correction. Some information can be updated directly through your account settings.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data. Please note that we may be required to retain some data to fulfil legal obligations such as financial records and anti-money laundering reporting.
• Right to Withdraw Consent: Where data processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting any processing carried out prior to the withdrawal.
• Right to Object: You have the right to object to the processing of your personal data under certain circumstances, particularly for direct marketing purposes.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format for transfer to another service provider, where technically feasible.

To exercise any of these rights, contact our privacy team via the 24/7 Live Chat available on the siti66 platform. All requests will be acknowledged within 3 business days and resolved within 14 business days.

07Data Retention & Deletion

Siti66 retains your personal data only for as long as it is needed for the purposes stated in this privacy policy, or as required by Malaysian law. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration of the active account and up to 7 years after account closure for tax compliance and financial reporting purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).
• Security Logs: Access and security activity logs are retained for 90 days for security incident investigation purposes.
• Support Communication Records: Customer support conversation histories are retained for 2 years for reference and service improvement purposes.
• Marketing Data (with Consent): Retained until you withdraw consent or request deletion.

Upon expiry of the applicable retention period, your personal data will be securely deleted or permanently anonymised using methods that ensure it cannot be recovered. Scheduled data deletion processes are run automatically by our system every quarter.

08Links to Other Platforms

The siti66 platform may contain links to other websites or platforms within informational content. Please note that siti66 has no control over the privacy practices of those platforms and is not responsible for their privacy policies.

We encourage you to read the privacy policy of any other platform you visit. The presence of a link on the siti66 platform does not mean we endorse or guarantee the privacy practices of that platform.

In all cases, outbound links from siti66 will open in a new tab and users remain in full control of whether to proceed to any such external platform.

09Children's Privacy

The siti66 platform is intended exclusively for users aged 18 and above. We do not knowingly collect, process, or store any personal information from individuals under the age of 18.

All new registrants are required to confirm they are at least 18 years of age during the registration process. Further age verification through KYC is conducted for all accounts before the first withdrawal is approved.

10Changes to This Privacy Policy

Siti66 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. The "Updated" date at the top of this document will always indicate the date of the most recent revision.

For material changes — such as changes to the types of data collected, significant new purposes of use, or changes to user rights — we will:

• Displaying a clear notice within the siti66 platform at least 14 days before changes take effect.
• Sending email notifications to all active registered users.
• In some cases, seeking your renewed consent before continuing to process data under the new terms.

Your continued use of the siti66 platform after the effective date of any changes will be considered your acceptance of the updated Privacy Policy. It is your responsibility to review this page periodically.

11Contact Us for Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the siti66 privacy and data protection team is ready to assist you.

You can reach us via:

• Live Chat 24/7: The fastest way to get help — available directly within the siti66 platform at all times.
• Support Email: [email protected] — we aim to respond to all privacy-related enquiries within 2 business days.

All personal data requests will be processed carefully and within the stipulated timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.