Siwa77 Privacy Policy – Malaysia Member Personal Data Protection

1 Our Introduction & Commitment

Siwa77 is an online sports betting and casino platform operating to serve the needs of Malaysian players. We understand that your trust is the most valuable asset we hold — and that trust begins with how we manage your personal data.

This Privacy Policy is drafted in accordance with international data protection principles and complies with applicable legal requirements. We are committed to ensuring that the personal data you provide is handled with full integrity, stored securely, and used only for legitimate purposes disclosed to you in advance.

This document explains in plain, easy-to-understand language — not confusing legal jargon — what we do with your information, who can view it, and what choices you have as the owner of that data. We believe you have the right to know, which is why we have prepared this clear and transparent document.

2 Information We Collect

Siwa77 collects various categories of information depending on how you interact with our platform. The following is a full explanation of the types of data we may collect:

A. Information You Provide Directly

• Full name as per identity card or passport
• Date of birth and gender
• Current residential address
• Active email address
• Mobile phone number
• Bank account or digital wallet details (bank name, account number)
• Copies of identification documents for the KYC process
• Account password (stored in hashed form — siwa77 does not store passwords in plain text)

B. Information Collected Automatically

• IP address and approximate location based on IP
• Device type, operating system, and web browser used
• Login session data including date, time, and session duration
• Records of wagering and gaming activity on the platform
• Deposit and withdrawal transaction history
• Clicks, page navigation, and platform usage patterns

C. Information from Third Parties

• Identity verification from an approved KYC provider
• Payment verification from payment gateway providers (FPX, TNG, GrabPay, Boost)
• Sanctions list screening information from relevant financial regulatory bodies

3 Data Collection & Usage Purpose

Siwa77 only uses your personal data for lawful and disclosed purposes. We do not collect unnecessary data, and every piece of information we collect has a clear purpose:

• Account Management: Creating, verifying, and managing your member account on the siwa77 platform.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• KYC & AML Compliance: Meeting legal requirements related to identity verification and anti-money laundering.
• Platform Security: Detecting and preventing fraud, unauthorised access, and suspicious activity.
• Customer Support: Providing effective support whenever you contact our support team.
• Service Communications: Sending important notifications relating to your account, transactions, and policy updates.
• Platform Improvements: Analysing usage patterns to improve the user experience and introduce relevant new features.
• Responsible Gaming: Monitoring wagering patterns to identify signs of problem gambling and providing appropriate support.
• Marketing (With Consent): Sending offers, promotions, and platform update information — only where you have given consent to receive marketing communications.

4 Data Sharing & Disclosure

Siwa77 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is our absolute commitment. However, there are certain situations where we need to share your information with trusted parties:

Approved Service Providers

Siwa77 works with third-party service providers that help us operate the platform. These include payment gateway providers (FPX, TNG, GrabPay, Boost), KYC service providers, server hosting service providers, and customer support service providers. All these providers are bound by strict confidentiality agreements and are only permitted to use your data for the purposes we specify.

Legal & Regulatory Requirements

Siwa77 may be required to disclose user information to relevant authorities if mandated by law, court order, or official investigation. In such situations, we will make every effort to notify you unless disclosure itself is prohibited by law.

Business Transfer

If siwa77 undergoes a merger, acquisition, or asset transfer, user data may be transferred as part of that transaction. You will be notified in advance and given the option to delete your account before the transfer takes place.

5 Security & Data Protection

The security of your personal data is siwa77's highest priority. We continuously invest in the latest security infrastructure to ensure your information is always protected:

• 256-bit SSL Encryption: All data transmitted between your browser and siwa77's servers is encrypted using the latest TLS protocol — no one can intercept your information while it is in transit.
• Hashed Password Storage: Your password is never stored in plain text. We use strong cryptographic hashing algorithms so that even the siwa77 team itself cannot view your password.
• Two-Factor Authentication (2FA): Members can enable 2FA for an extra layer of security on every login.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or unusual activity.
• Internal Access Controls: Only authorised staff with a legitimate business need may access user data, and every access is logged for audit purposes.
• Regular Security Testing: siwa77 conducts regular penetration testing and security audits by independent experts to identify and address any system vulnerabilities.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of a security breach affecting your personal data, siwa77 will notify you within 72 hours of becoming aware of it, in line with industry best practices.

6 Cookies & Tracking Technologies

Siwa77 uses cookies and similar tracking technologies to enhance the user experience and understand how our platform is used. The following are the types of cookies we use:

You can manage or delete cookies through your web browser settings at any time. Please note, however, that deleting or blocking essential cookies may affect platform functionality and your login experience. Analytics cookies can be declined without affecting access to any platform features.

7 Your Rights as a Data Owner

As a data subject, you have the following rights regarding the personal information siwa77 holds about you. We are committed to fulfilling every valid request within a reasonable timeframe:

To exercise any of the above rights, please contact the siwa77 support team via live chat or email. We will process your request within 30 working days. For complex cases, this period may be extended to 60 days with prior notice to you.

8 Data Retention & Deletion Period

Siwa77 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by law. The following are general guidelines for our data retention periods:

• Active Account Data: Retained for as long as your account remains active on the siwa77 platform.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with applicable financial and tax legal requirements.
• KYC Documents: Retained for a minimum of five (5) years after account closure, in line with anti-money laundering requirements.
• Support Communication Logs: Retained for three (3) years for reference and dispute resolution purposes.
• Anonymous Analytics Data: May be stored indefinitely as it contains no personally identifiable information.
• Account Closed: Data not required for legal compliance will be deleted within 90 days of confirmed account closure.

When data is no longer needed and there is no legal requirement to retain it, siwa77 will securely delete it using methods that ensure it cannot be recovered.

9 Child Protection

Siwa77 is a betting platform permitted for users aged 18 and above only. We do not intentionally collect or store personal data of individuals under the age of 18.

If we determine that a child's personal data has been collected without valid parental or guardian consent, we will take immediate steps to delete that information and close the relevant account. Our KYC process is specifically designed to detect and reject registrations by underage individuals.

If you believe a child has registered on our platform without authorization, please contact the siwa77 support team immediately so we can take the necessary action.

10 Privacy Policy Amendments

Siwa77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, legal requirements, or the technologies we use. When we make material changes to this policy:

• We will update the "Last Updated" date at the top of this document
• We will display a prominent notice on the platform's homepage for a minimum of 14 days
• For significant changes, we will send a notification directly to your registered email
• In the event of highly material changes that significantly affect your rights, we will request your consent again before those changes take effect.

Your continued use of the siwa77 platform after the effective date of any amendments will be considered your acceptance of the updated policy. We encourage you to review this page periodically.

11 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how siwa77 handles your personal data, please contact our Data Protection Officer through the following channels:

We are committed to treating every privacy enquiry seriously and providing a meaningful response within the stated timeframe. Your trust is our top priority.