Privacy Policy

1. Introduction

sitislot ("We", "Us", "Our", "the Company") is committed to protecting the privacy and personal data of all players and visitors who access the sitislot platform at sitislot.co (the "Platform"). This Privacy Policy ("Policy") describes the types of personal data we collect, the purposes for which we process it, the circumstances under which we may share it, and the rights available to you in relation to your personal data.

By registering for an account, accessing the Platform, or using any sitislot service, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, please cease using the Platform and contact us to close your account.

This Policy is to be read in conjunction with the sitislot Terms & Conditions and the sitislot Responsible Gaming Policy, all of which form part of the agreement between you and sitislot.

2. Data Controller

sitislot acts as the data controller in respect of personal data collected through the Platform. As data controller, sitislot determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted in accordance with applicable data protection law and this Policy.

For all data protection enquiries, including requests to exercise your data subject rights, please contact us at: [email protected]

3. Personal Data We Collect

sitislot collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification — sitislot requires players to be aged 21 or above);
• Malaysian identity card (MyKad) number or passport number;
• Residential address, including postcode and state (e.g. Kuala Lumpur, Selangor, Penang, Johor);
• Email address and Malaysian mobile telephone number (+60 format).

3.2 Financial & Transaction Data

• Bank account details associated with your withdrawal method (Maybank, CIMB, Public Bank, Hong Leong, or other Malaysian financial institution);
• E-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay, or DuitNow where used as a deposit or withdrawal method;
• Transaction history, including all deposits, withdrawals, and in-game wagers on the sitislot Platform;
• Bonus and promotional credit history.

3.3 Technical & Usage Data

• IP address and approximate geolocation derived from IP address;
• Device type, operating system, browser type and version;
• Session duration, pages visited, and game activity logs on the sitislot Platform;
• Login timestamps and authentication event records.

3.4 KYC & Verification Data

• Copies of government-issued photo identification (MyKad, passport, or driver's licence);
• Proof of address documentation (utility bill, bank statement, or equivalent dated within 3 months);
• Source of funds documentation where required by our compliance team.

3.5 Communications Data

• Records of correspondence between you and sitislot's customer support team, including live chat transcripts, email threads, and any voice call recordings where applicable;
• Feedback and survey responses submitted through the Platform.

4. How sitislot Uses Your Personal Data

sitislot processes your personal data for the following purposes:

5. Legal Basis for Processing

sitislot relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and service delivery;
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, age verification obligations, and gaming licence conditions;
• Legitimate interests: Processing necessary for sitislot's legitimate business interests, including fraud detection, platform security, and service improvement, where such interests are not overridden by your data protection rights;
• Consent: Where we send you optional marketing communications, we do so only on the basis of your explicit consent, which may be withdrawn at any time by contacting [email protected] or via your account settings.

6. Sharing Your Personal Data

sitislot may share your personal data with the following categories of recipients, only to the extent necessary for the stated purpose:

• Game providers and software suppliers: Limited technical data necessary to deliver the game or service you have selected (e.g. session token, wallet balance reference). Game providers do not receive your full personal profile.
• Payment processors: Financial and identity data necessary to complete deposit and withdrawal transactions via Malaysian payment rails, including FPX, DuitNow, and e-wallet providers.
• KYC and AML compliance providers: Identity and verification data shared with third-party KYC service providers for the purpose of identity verification and sanctions screening, as required by our gaming licence conditions.
• Fraud prevention services: Technical and transaction data shared with fraud detection providers to identify and prevent suspicious activity on the sitislot Platform.
• Regulatory and law enforcement authorities: Personal data disclosed in response to a lawful request from a competent authority, court order, or as required by applicable law. sitislot will notify you of such disclosures where legally permitted to do so.

sitislot does not sell, rent, or exchange your personal data to unaffiliated third parties for their independent marketing or commercial purposes under any circumstances.

7. International Data Transfers

sitislot's primary data processing infrastructure is located within jurisdictions covered by our international gaming authority licence. Where personal data is transferred outside Malaysia to a jurisdiction that does not provide an equivalent level of data protection, sitislot implements appropriate safeguards, including contractual clauses that impose data protection obligations equivalent to those applicable to the original collection of the data.

By using the sitislot Platform, you acknowledge and consent to the transfer of your personal data to our processing infrastructure locations for the purposes described in this Policy.

8. Data Retention

sitislot retains personal data for the following periods:

• Active account data: Retained for the duration of your registered sitislot account plus a minimum of 5 years following account closure, to satisfy anti-money laundering and gaming licence record-keeping obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 7 years to comply with financial record-keeping requirements under applicable law.
• Technical and usage logs: Retained for up to 24 months, after which they are anonymised or deleted.
• Customer support communications: Retained for 3 years from the date of the most recent interaction.

At the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with sitislot's data destruction procedures.

9. Cookies and Tracking Technologies

sitislot uses the following categories of cookies on the Platform:

• Strictly necessary cookies: Required for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences such as language settings, display options, and game lobby configuration. These improve your sitislot experience but are not essential to Platform operation.
• Analytics cookies: Collect anonymised usage data to help sitislot understand how players navigate the Platform and identify areas for improvement. We use first-party analytics and do not share raw analytics data with advertising networks.

sitislot does not use third-party advertising or retargeting cookies. You can manage cookie settings in your browser at any time. Note that disabling strictly necessary cookies may prevent you from logging in to your sitislot account.

10. Your Data Subject Rights

As a data subject, you have the following rights in relation to your personal data held by sitislot:

• Right of access: Request a copy of the personal data sitislot holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations;
• Right to restrict processing: Request that we limit the processing of your personal data in certain circumstances;
• Right to data portability: Receive your personal data in a structured, machine-readable format where technically feasible;
• Right to object: Object to processing based on legitimate interests, including profiling for responsible gaming monitoring;
• Right to withdraw consent: Withdraw any consent previously given for optional data processing, including marketing communications, without affecting the lawfulness of prior processing.

To exercise any of the above rights, please submit a written request to [email protected], including your full registered name and account email address. sitislot will acknowledge your request within 5 business days and provide a substantive response within 30 days. In complex cases, this period may be extended by a further 30 days, of which you will be notified.

11. Security Measures

sitislot implements the following technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and sitislot's servers;
• AES-256 encryption for sensitive data at rest, including KYC documents and financial data;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Multi-factor authentication required for all administrative access to sitislot's data systems;
• Regular third-party penetration testing and security audits of the Platform;
• Incident response procedures for detecting, containing, and notifying affected parties of any personal data breach within the timeframes required by applicable law.

While sitislot takes all reasonable steps to protect your personal data, no online platform is entirely immune from security risks. You are responsible for maintaining the security of your sitislot account credentials. Please refer to Section 4 of our Terms & Conditions for your security obligations as a player.

12. Children and Minors

The sitislot Platform is strictly intended for users aged 21 and above. sitislot does not knowingly collect or process personal data from persons under the age of 21. If sitislot becomes aware that personal data has been collected from a person under 21, such data will be deleted immediately and the associated account closed. If you have reason to believe that a minor has registered on the sitislot Platform, please contact us immediately at [email protected].

13. Third-Party Links

The sitislot Platform may contain links to the websites of third-party game providers, payment processors, or other service partners. This Privacy Policy applies solely to the sitislot Platform and does not govern the data practices of any third-party website or service. sitislot accepts no responsibility for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party service you access via the sitislot Platform.

14. Amendments to This Policy

sitislot reserves the right to update or amend this Privacy Policy at any time. Amended versions will be published on the Platform with a revised "Last updated" date. Where changes are material — affecting the nature of personal data collected, the purposes for which it is used, or your data subject rights — sitislot will notify registered players by email at least 14 days before the amended Policy takes effect. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

15. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by sitislot, please contact our Data Protection team:

Email: [email protected]

sitislot will acknowledge all privacy enquiries within 5 business days and provide a substantive response within 30 days. If you are dissatisfied with sitislot's handling of your personal data, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.