sitislot Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") applies to all personal data processed by sitislot in connection with the sitislot Platform, accessible at sitislot.club, and all related mobile-optimised interfaces and services (collectively, the "Platform"). This Policy applies to all registered Players, visitors, and any other individuals whose personal data is processed by sitislot.

sitislot is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection legislation. The Platform is intended for adult users aged 21 and above. sitislot does not knowingly collect or process personal data from individuals under the age of 21.

This Policy should be read alongside the sitislot Terms & Conditions. Terms defined in the Terms & Conditions carry the same meaning in this Policy unless otherwise stated.

2. Data Controller

sitislot is the data controller responsible for personal data collected through the Platform. As data controller, sitislot determines the purposes and means of processing personal data and is responsible for ensuring that processing is carried out in compliance with applicable data protection law.

For all data protection enquiries, access requests, or complaints, you may contact sitislot via the support email address set out in Section 15 of this Policy.

3. Personal Data We Collect

sitislot collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, and copies of identity documents provided during KYC verification (e.g., Malaysian MyKad, passport).
• Contact Data: Email address, mobile phone number, and residential address.
• Account Data: Username, password (stored in hashed form), account preferences, and communication preferences.
• Financial Data: Payment method details, transaction history, deposit and withdrawal records, and wallet balance information.
• Transaction Data: Records of all bets placed, games played, bonuses claimed, and promotional activities.
• Technical Data: IP address, device type and operating system, browser type and version, session duration, and login timestamps.
• Usage Data: Information about how you navigate and interact with the sitislot Platform, including pages visited, games accessed, and features used.
• Communications Data: Records of correspondence between you and sitislot support, including chat logs and email exchanges.
• Responsible Gaming Data: Records of any responsible gaming tools you have activated, including deposit limits, self-exclusion periods, and cooling-off selections.

4. How We Collect Your Data

sitislot collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, claiming bonuses, or contacting customer support.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies and server logs.
• Third parties: Identity verification data received from KYC and anti-fraud service providers; payment data from payment processors; fraud prevention data from third-party screening services.

5. How We Use Your Data

sitislot uses personal data for the following purposes:

• To register, verify, and manage your sitislot account;
• To process deposits, withdrawals, and other financial transactions;
• To verify your identity and age in compliance with KYC obligations;
• To provide access to games, sportsbook services, promotions, and other Platform features;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To administer responsible gaming tools and self-exclusion programmes;
• To communicate with you about your account, transactions, promotions, and Platform updates;
• To comply with legal and regulatory obligations including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements;
• To improve and optimise the Platform through analysis of aggregated usage data;
• To enforce the sitislot Terms & Conditions and resolve disputes.

6. Legal Basis for Processing

sitislot processes personal data on the following legal bases:

• Contract performance: Processing necessary to provide the sitislot service under the Terms & Conditions, including account management, transaction processing, and game access.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and CTF obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, Platform improvement, and responsible gaming administration, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and optional profiling, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

sitislot does not sell, rent, or trade personal data to third parties for their own marketing purposes. Personal data may be shared with the following categories of recipients, strictly on a need-to-know basis:

• Game providers: Licensed software providers (e.g., Pragmatic Play, PG Soft, Evolution Gaming) receive limited session data necessary to deliver game functionality.
• Payment processors: Payment service providers (including Touch n Go eWallet, Boost, GrabPay, and local bank transfer facilitators) receive financial data necessary to process transactions.
• Identity verification services: KYC and anti-fraud service providers receive identity documents and related data for verification purposes.
• Regulatory and law enforcement authorities: Data may be disclosed to relevant authorities where required by law, court order, or regulatory instruction.
• Group entities and successors: Data may be transferred to affiliated entities or business successors in the event of a corporate restructuring, merger, or acquisition, subject to equivalent data protection standards.

All third-party recipients are contractually required to process personal data only for the specified purpose and in accordance with applicable data protection standards.

8. International Data Transfers

As an internationally operated Platform, sitislot may transfer personal data to service providers and infrastructure located outside Malaysia. Where personal data is transferred to countries that do not provide an equivalent level of data protection, sitislot implements appropriate safeguards including contractual data protection clauses to ensure your data remains protected.

9. Data Retention

sitislot retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and accounting requirements. In practice:

• Account data is retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations.
• Transaction and financial records are retained for a minimum of five (5) years as required by applicable financial regulations.
• KYC documents are retained for the period required by licensing authority regulations.
• Marketing preference records are retained until you withdraw consent or for a maximum of two (2) years of Platform inactivity.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

10. Security Measures

sitislot implements technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the sitislot Platform;
• Encryption of sensitive data at rest including payment information and identity documents;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Multi-factor authentication options for Player accounts;
• Regular security assessments and penetration testing of Platform infrastructure;
• Incident response procedures for timely detection and management of data security events.

While sitislot employs industry-standard security practices, no online platform can guarantee absolute security. You are responsible for keeping your sitislot login credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

11. Cookies & Tracking Technologies

sitislot uses cookies and similar technologies (including local storage and session tokens) on the Platform. Cookies serve the following purposes:

• Essential cookies: Required for Platform functionality, including maintaining your login session and wallet state. These cannot be disabled without affecting Platform usability.
• Analytics cookies: Used to collect aggregated data about how users navigate the Platform, enabling us to identify and improve usability issues.
• Preference cookies: Store your language, display, and notification preferences between sessions.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the sitislot Platform.

12. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by sitislot:

• Right of access: Request a copy of the personal data sitislot holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to legal retention obligations.
• Right to restriction: Request that processing of your data be restricted in specified circumstances.
• Right to data portability: Request transfer of your data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Withdraw consent for consent-based processing at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact sitislot customer support with your request. We will respond within thirty (30) days. We may require identity verification before processing requests.

13. Minors

The sitislot Platform is strictly for adults aged 21 years and above. 21+ sitislot does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a minor, that data will be deleted immediately and the associated account will be closed. If you believe a minor has registered on the Platform, please contact us immediately at the address in Section 15.

14. Changes to This Policy

sitislot reserves the right to update this Privacy Policy at any time. Material changes will be notified to registered Players by email or by prominent notice on the Platform at least fourteen (14) days before taking effect. Your continued use of the sitislot Platform following notification of changes constitutes your acceptance of the revised Policy. We recommend reviewing this Policy periodically.

15. Contact Us

For all data protection queries, access requests, complaints, or concerns, please contact sitislot via: