Information We Collect
Sti88 collects your personal information through various touchpoints throughout your use of our platform — from the moment you register an account, make a deposit, and play games, to when you interact with our customer support team. This data collection is not only necessary to provide you with a seamless service, but also to fulfil our legal obligations, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
A. Information You Provide Directly
- Identity Information: Full name, date of birth, identity card number (MyKad), passport number for non-citizens.
- Contact Information: Active phone number, email address, current residential address.
- Financial Information: Bank account number, bank name, account holder name for processing deposits and withdrawals.
- Verification Documents: Copies of identity cards, utility bills, or other official documents submitted during the KYC process.
- Profile Information: Username, password (stored in encrypted form), language preference, and account settings.
B. Information Collected Automatically
- Technical Data: IP address, browser type, operating system, screen resolution and device version.
- Session Data: Login times, session duration, pages visited, and actions performed within the platform.
- Transaction Data: Deposit history, withdrawal history, betting history, games played, and wins recorded.
- Location Data: General geographic location based on IP address for compliance and account security purposes.
- Device Data: Unique device identifier for the sti88 mobile app to enable convenient login and detection of suspicious access.
How We Use Your Data
Every piece of information we collect has a clear and specific purpose. sti88 does not use your data for purposes unrelated to platform operations or our legal obligations. Below is a detailed table of data usage purposes:
| Purpose of Use | Data Type | Retention Period |
|---|---|---|
| Account Management Registration, login, identity verification |
Identity, contacts, profile | Throughout the active account period |
| Financial Processing Deposits, withdrawals, transaction records |
Finance, transactions | 7 years (compliance) |
| KYC/AML Compliance Identity verification, statutory reporting |
Identity, documents | 5–7 years |
| Platform Security Fraud detection, threat monitoring |
Technical, session, location | 90-day active log |
| Customer Support Resolving complaints, communication history |
Contacts, sessions, transactions | 2 years |
| Product Improvement Usage analytics, A/B testing |
Technical, session (anonymous) | 1 year (anonymised) |
Sti88 uses your betting and gaming activity data in aggregated, anonymised form to evaluate and improve the overall user experience. This data is never re-linked to your personal identity in internal analytics.
Sharing Information with Third Parties
Sti88 maintains a strict data-sharing policy. We do not sell or rent your personal information to any third party for any purpose. However, there are limited situations where data sharing is necessary and legally justified:
Approved Service Providers
Sti88 works with selected service providers that help us operate the platform — including certified payment gateway providers, cloud service providers, analytics systems, and customer support platforms. All such providers are bound by strict data confidentiality agreements and are only permitted to use your data for specified purposes.
Legal and Regulatory Requirements
Sti88 may be required to disclose your personal information to government authorities, law enforcement bodies, or courts when mandated by law, court order, or direction from a legitimate regulatory authority. In such situations, sti88 will endeavour to notify you in advance where permitted by law.
Business Transfers
Should sti88 be involved in any merger, acquisition, or sale of business assets, member information may be transferred as part of those assets. In such situations, the receiving party will be bound by this Privacy Policy or one offering equivalent or greater protection.
Data Storage and Security Measures
Data security is the foundation of trust that defines sti88's relationship with its members. We continuously invest in world-class security infrastructure to ensure your personal and financial information remains protected at all times.
Technical Security Measures
- Data Encryption in Transit: SSL/TLS 256-bit encryption for all communications between your browser/app and sti88 servers.
- Data Encryption at Rest: Sensitive data such as identification numbers and banking details are encrypted using AES-256 before being stored in the database.
- Layered Access Controls: A role-based access control (RBAC) system ensures that only authorised personnel can access specific data based on their job requirements.
- Two-Factor Authentication (2FA): Available to all member accounts and mandatory for all sti88 internal staff access.
- Comprehensive Audit Log: Every access to sensitive data is recorded in tamper-proof audit logs for accountability purposes.
- Regular Penetration Testing: sti88 conducts regular security testing through independent cybersecurity firms to identify and address any system vulnerabilities.
Data Retention Period
Sti88 retains your personal data only for as long as necessary to fulfil the purpose of collection or to comply with applicable legal requirements. Generally, active account data is retained throughout the active account period, while financial and KYC data is retained for up to 7 years after account closure in accordance with Malaysia's financial compliance requirements.
Cookies and Tracking Technologies
Sti88 uses cookies and similar tracking technologies to ensure the platform runs smoothly, enhance the user experience, and understand aggregate usage patterns. The following are the types of cookies we use:
Types of Cookies Used
- Essential Function Cookies (Required): Required for core platform operations — including maintaining your login session, saving language preferences and ensuring session security. These cookies cannot be disabled as they are essential to platform functionality.
- Performance Cookies: Collecting information on how you use the platform (pages visited, errors encountered) in anonymised format. This data helps us improve the performance and functionality of sti88.
- Advanced Function Cookies: Remembering your preferences and settings such as display size, theme, and favourite game selections to deliver a more personalised experience.
- Analytics Cookies: Used to analyse platform traffic in aggregate to understand usage patterns and plan product improvements. Analytics data is processed in anonymised form.
How to Manage Cookies
You can manage or disable cookies through your web browser settings at any time. Please note that disabling essential cookies may affect the functionality of the sti88 platform — including the ability to stay logged in and access games. Cookie management instructions vary by browser — please refer to your browser's help section for detailed guidance.
Your Rights Regarding Personal Data
As a sti88 member, you have certain rights regarding your personal data that we fully respect. These rights may be exercised at any time by contacting the sti88 customer support team.
- Right of Access: You have the right to request a copy of all personal information we hold about you. This request will be processed within 14 business days.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal information in our records. Some corrections can be made directly through your account settings.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data when it is no longer needed for its original purpose, subject to legally mandated retention requirements.
- Right to Restrict Processing: In certain situations, you may request that the processing of your data be restricted while a dispute is being resolved.
- Right to Data Portability: You have the right to receive a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
- Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time — and sti88 will stop immediately.
Children's Data Protection
Sti88 takes the protection of children and minors seriously. The sti88 platform is strictly for adult users aged 18 and above. We do not knowingly collect or process personal information from individuals under 18 years of age.
Should sti88 discover that information from a minor has been collected without our knowledge, the account in question will be immediately closed, all associated data will be deleted from our systems, and any balance in that account will be disposed of in accordance with our policy.
Parents or guardians who have reason to believe their minor child has registered for or used the sti88 platform are urged to contact our customer support immediately through official channels.
Links to Third-Party Websites
The sti88 platform may contain links or references to third-party websites or services in certain contexts, such as payment guides or compliance information. Please note that this Privacy Policy applies exclusively to the sti88 platform — namely sti88.pro and the official sti88 mobile app.
Sti88 is not responsible for the privacy practices, content, or security policies of any third-party website. Before providing any personal information to any external website, we encourage you to read and understand that website's privacy policy first.
Cross-Border Data Transfers
In the course of its operations, sti88 may transfer and store your personal information on servers located outside Malaysia. This includes transfers to cloud service providers and server infrastructure in countries with recognised data protection standards.
Sti88 ensures that any cross-border data transfers are carried out with adequate safeguards, including the use of data processing agreements that comply with international data protection standards. We only partner with providers located in countries offering a level of data protection equivalent to or greater than Malaysia's standards.
Amendments to This Privacy Policy
Sti88 reserves the right to update or modify this Privacy Policy at any time in line with changes in legislation, industry practices, or platform developments. The "Updated" date at the top of this page reflects the effective date of the latest version.
For material and significant changes to the way we process your data, sti88 will notify you via an in-platform notification upon your next login, a notification email to your registered email address, and an announcement on the sti88.pro homepage.
Your continued use of the sti88 platform following the publication of any amendments constitutes your acceptance of the latest version of the Privacy Policy. If you disagree with any amendment, you have the right to close your account and discontinue use of the sti88 platform.
Contact Us Regarding Privacy
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way sti88 handles your personal data, our team is available to assist you 24 hours a day, 7 days a week through the following channels:
- Live Chat: Our fastest support channel — available directly within the sti88.pro platform after login.
- Privacy Email: [email protected] — please state "Privacy Enquiry" in your email subject line for faster processing.
- Response Time: We aim to respond to all privacy enquiries within 3 business days, and to data rights requests within 14 business days.
Sti88 treats every privacy-related enquiry with the utmost seriousness. All privacy communications are handled by a dedicated team trained in data protection management and will be treated with complete confidentiality.