stich88 Privacy Policy

1 Who We Are

The stich88 Platform, accessible at stich88.net, is operated by the stich88 group of companies (collectively referred to in this Policy as "stich88", "we", "us", or "our"). stich88 is the data controller in respect of the personal data collected from users of the Platform in the course of providing online gaming services.

If you have any questions about this Privacy Policy or about how stich88 handles your personal data, you may contact our Data Protection team at [email protected].

2 Scope of This Policy

This Privacy Policy applies to all personal data collected by stich88 in connection with your use of the stich88 Platform, including the website at stich88.net, any stich88 mobile applications, and all associated services including the Sportsbook, Live Casino, Slots, and 4D Lottery verticals.

This Policy does not apply to third-party websites, services, or applications that may be accessible via links from the stich88 Platform. stich88 has no control over and accepts no responsibility for the privacy practices of such third parties. You should review the privacy policies of any third-party services you access independently.

3 Data We Collect

stich88 may collect the following categories of personal data from you:

Identity & Contact Data:

• Full legal name as it appears on government-issued identification.
• Date of birth (to verify the 21+ age requirement).
• Residential address, including postcode and state within Malaysia or internationally.
• Email address and mobile phone number.
• Government-issued identification document number (e.g., MyKad number, passport number) where required for KYC verification.

Financial Data:

• Payment method details, including bank account numbers, eWallet identifiers (Touch 'n Go, Boost), or card details (Visa/Mastercard) as applicable.
• Transaction history including deposits, withdrawals, and wager amounts.
• Source of funds documentation where requested for compliance purposes.

Technical & Usage Data:

• IP address, device type, operating system, and browser type.
• Login timestamps, session duration, and navigation patterns within the Platform.
• Geolocation data at the city or region level where technically available and relevant to service delivery.
• Game and betting activity including bet amounts, game selections, and outcomes.

Communications Data:

• Records of communications with stich88 customer support, including live chat transcripts and email correspondence.
• Responses to surveys, promotions, or feedback requests where you choose to participate.

4 How We Collect Data

stich88 collects personal data through the following means:

• Directly from you when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically through cookies, session tracking technologies, and server logs when you access and navigate the stich88 Platform.
• From third parties including identity verification service providers, payment processors, fraud detection services, and, where applicable, publicly available data sources used for compliance screening.

5 Lawful Basis for Processing

stich88 processes your personal data on the following lawful bases:

• Contractual necessity: Processing is necessary to perform the contract between stich88 and you — i.e., to operate your Account, process bets and transactions, and deliver the Platform services you have requested.
• Legal obligation: stich88 is subject to regulatory requirements including anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) obligations. Processing is necessary to comply with these obligations.
• Legitimate interests: stich88 processes certain data on the basis of its legitimate interests, including fraud prevention, security monitoring, and Platform improvement, where those interests are not overridden by your rights and interests.
• Consent: For non-essential processing such as marketing communications, stich88 will rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

6 How We Use Your Data

stich88 uses your personal data for the following purposes:

• Creating, managing, and securing your stich88 Account.
• Verifying your identity and age (21+) as required by these Terms and applicable regulations.
• Processing deposits, withdrawals, and bet settlements.
• Detecting, investigating, and preventing fraud, money laundering, and other illegal activities.
• Providing customer support and responding to enquiries and complaints.
• Sending transactional communications including deposit confirmations, withdrawal notifications, and account security alerts.
• Administering promotions, bonuses, and loyalty programmes in which you participate.
• Analysing Platform usage to improve features, performance, and the overall player experience.
• Fulfilling responsible gaming obligations including monitoring for problem gambling indicators and facilitating self-exclusion requests.
• Sending marketing communications about stich88 products, promotions, and services where you have consented to receive them.
• Complying with applicable laws, regulations, and requests from regulatory or law enforcement authorities.

7 Cookies & Tracking Technologies

The stich88 Platform uses cookies and similar tracking technologies to operate correctly, maintain your login session, remember your preferences, and analyse how the Platform is used. The categories of cookies used include:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled without affecting your ability to use the Platform.
• Performance and analytics cookies: Collect anonymised information about how visitors use the Platform to help stich88 improve its services.
• Functionality cookies: Remember your preferences such as language settings and game preferences to personalise your experience.
• Targeting cookies: Used where you have consented to deliver relevant promotional content within the stich88 Platform.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the stich88 Platform.

8 Third-Party Sharing

stich88 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment processors and eWallet providers (including Touch 'n Go, Boost, Maybank, CIMB, Public Bank, and card processors) to facilitate deposits and withdrawals.
• Identity verification and KYC service providers engaged to assist with document verification and compliance screening.
• Fraud detection and cybersecurity service providers that help stich88 identify and mitigate security risks.
• Game content providers and platform technology partners where data sharing is technically necessary to deliver the game services you access.
• Regulatory and law enforcement authorities where stich88 is required by applicable law to disclose information.
• Professional advisors including lawyers, auditors, and accountants bound by professional confidentiality obligations.

9 International Data Transfers

As an online platform serving players across Malaysia, stich88 may transfer personal data to third-party service providers or technology partners located in other countries. Where such transfers occur, stich88 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by relevant data protection authorities.
• Data processing agreements with contractual obligations equivalent to applicable data protection law.
• Transfers to jurisdictions that have been assessed to provide an adequate level of data protection.

By using the stich88 Platform, you acknowledge that your personal data may be transferred to and processed in countries other than Malaysia.

10 Data Retention

stich88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, having regard to applicable legal and regulatory requirements. Retention periods applied by stich88 include:

• Account and identity data: Retained for the duration of the Account relationship and for a minimum of five (5) years following Account closure, to comply with AML/CTF record-keeping requirements.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of the transaction or bet, or such longer period as required by applicable law.
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship or completion of the applicable transaction.
• Customer support communications: Retained for a minimum of two (2) years from the date of the interaction, unless the communication relates to a dispute, in which case it is retained until the dispute is finally resolved.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of the consent history.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

11 Security Measures

stich88 implements and maintains appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption on all data transmissions between your device and stich88 servers.
• Encryption of sensitive data fields at rest within stich88 databases.
• Multi-factor authentication requirements for stich88 administrative systems.
• Role-based access controls limiting staff access to personal data to those with a legitimate need.
• Regular security audits, penetration testing, and vulnerability assessments.
• Incident response procedures for detecting, investigating, and responding to data security incidents.

While stich88 takes data security seriously and implements robust measures, no system connected to the internet can be guaranteed to be completely secure. You are responsible for maintaining the security of your stich88 Account credentials.

12 Your Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by stich88:

• Right of access: You may request a copy of the personal data stich88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where there is no compelling lawful basis for stich88 to continue processing it. Note that regulatory retention requirements may limit the extent to which erasure can be fulfilled.
• Right to restrict processing: You may request that stich88 restrict its processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, or to direct marketing, at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact stich88 at [email protected]. stich88 will respond to data subject requests within 30 days of receipt, subject to identity verification.

13 Children's Privacy

The stich88 Platform is strictly for adults aged 21 years and above. stich88 does not knowingly collect personal data from persons under the age of 21. If stich88 becomes aware that personal data has been collected from a person under 21, that data will be deleted and the associated Account terminated immediately.

If you are a parent or guardian and believe that a minor has registered on the stich88 Platform, please contact us immediately at [email protected] so that appropriate action can be taken.

14 Changes to This Policy

stich88 may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or the services we offer. Where changes are material, stich88 will notify registered Players via email or by posting a prominent notice on the Platform prior to the changes taking effect.

The date at the top of this Policy indicates when it was last reviewed. Continued use of the stich88 Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

15 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the personal data stich88 holds about you, please contact our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 via the stich88 Platform

If you are not satisfied with stich88's response to a privacy concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.