sambal88 Privacy Policy

1. Scope & Application

This Privacy Policy applies to all personal data processed by sambal88 in connection with your use of the sambal88 platform at sambal88.co, including all associated pages, features, mobile-optimised interfaces, and communications channels operated by or on behalf of sambal88. It applies to registered account holders, prospective users who interact with the platform without completing registration, and any individual whose personal data is submitted through the platform's forms or support channels.

This Policy should be read alongside the sambal88 Terms & Conditions, which govern your overall use of the platform. Where this Policy and the Terms & Conditions address the same subject matter, both documents apply concurrently.

2. Data Controller Identity

For the purposes of applicable data protection legislation, sambal88 acts as the data controller in respect of personal data collected through sambal88.co. sambal88 operates under an international online gaming licence and maintains data processing standards consistent with recognised international frameworks for the protection of personal information.

All data protection enquiries, subject access requests, and complaints should be directed to the sambal88 Data Protection contact at [email protected]. sambal88 will acknowledge data-related requests within five (5) business days and respond substantively within thirty (30) calendar days of receipt.

3. Personal Data We Collect

sambal88 collects the following categories of personal data from users:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification number (e.g., Malaysian NRIC / IC number or passport number) collected during registration and KYC verification.
• Contact Data: Email address, Malaysian mobile phone number, and correspondence address.
• Financial Data: Payment method details sufficient to process deposits and withdrawals, including e-wallet identifiers (Touch 'n Go, Boost), bank account numbers, and transaction reference data. sambal88 does not store full card numbers or CVV codes.
• Account Data: Username, encrypted password, account balance history, bonus balances, wagering history, and responsible gaming limit settings.
• Technical Data: IP address, device type, browser type and version, operating system, screen resolution, session duration, and login timestamps.
• Usage Data: Pages visited, games played, bet amounts, game session durations, and navigation paths within the sambal88 platform.
• Communications Data: Records of support chat interactions, email correspondence, and feedback submitted to sambal88.
• Marketing Preferences: Records of your opt-in or opt-out choices for promotional communications from sambal88.

4. How We Collect Your Data

sambal88 collects personal data through the following means:

• Direct submission: Information you provide during account registration, KYC verification, deposit and withdrawal requests, support interactions, and voluntary feedback submissions.
• Automated technical collection: Data collected automatically as you navigate sambal88, including through cookies, web beacons, server logs, and analytics tools. See Section 9 for details on cookies.
• Third-party sources: Identity verification data obtained from licensed KYC and anti-fraud service providers; payment transaction data from payment processors including e-wallet operators and bank payment gateways; and fraud-prevention data from licensed screening services.
• Publicly available sources: Where permitted by applicable law and necessary for fraud prevention or legal compliance, sambal88 may consult publicly available records to verify information you have provided.

5. Purposes & Legal Bases for Processing

sambal88 processes your personal data for the following purposes and on the following legal bases:

• Account administration and service delivery — necessary for the performance of the contract between you and sambal88, including processing deposits, settling bets, and managing withdrawals.
• Identity verification and KYC compliance — necessary for compliance with anti-money laundering obligations and sambal88's licensing conditions.
• Fraud prevention and security — constitutes a legitimate interest of sambal88 in protecting the integrity of the platform and its users.
• Responsible gaming monitoring — necessary for compliance with responsible gambling obligations under sambal88's licence, and in furtherance of sambal88's legitimate interest in player welfare.
• Customer support — necessary for the performance of the service contract and sambal88's legitimate interest in resolving user issues efficiently.
• Platform analytics and improvement — constitutes a legitimate interest of sambal88 in understanding platform usage patterns to enhance user experience.
• Direct marketing communications — based on your consent, where you have opted in to receive promotional communications from sambal88. You may withdraw consent at any time through Account Settings or by contacting support.
• Legal compliance — necessary to comply with applicable laws, regulatory requirements, and lawful requests from competent authorities.

6. Disclosure of Personal Data to Third Parties

sambal88 does not sell your personal data to third parties. sambal88 may share personal data with the following categories of recipients where necessary and proportionate to the stated purpose:

• Payment processors and e-wallet operators — including Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, and Visa/Mastercard networks — for the processing of deposits and withdrawals.
• KYC and identity verification providers — licensed third-party services engaged to verify identity documents and screen against sanctions and PEP (Politically Exposed Persons) lists.
• Game studios and software providers — who may receive anonymised session data for the purpose of game performance monitoring and anti-fraud analysis.
• IT infrastructure and cloud service providers — engaged to host sambal88's platform, databases, and communications systems under binding data processing agreements.
• Legal and regulatory authorities — where sambal88 is required by law, court order, or regulatory direction to disclose user data, including disclosures required under anti-money laundering legislation.
• Professional advisers — including lawyers, auditors, and compliance consultants engaged under strict confidentiality obligations.

All third-party service providers engaged by sambal88 are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with sambal88's documented instructions.

7. International Data Transfers

As an internationally licensed platform, sambal88 may transfer personal data to processors and service providers located outside Malaysia. Where such transfers occur, sambal88 implements appropriate safeguards — including data processing agreements incorporating standard contractual clauses or reliance on equivalent adequacy determinations — to ensure that your personal data receives a level of protection consistent with applicable international data protection standards.

8. Data Retention

sambal88 retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following specific retention periods:

• Active account data: Retained for the duration of your account registration plus a period of five (5) years following account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of seven (7) years following each transaction date in accordance with applicable financial record-keeping requirements.
• KYC documentation: Retained for five (5) years from the date of collection or from the date of account closure, whichever is later.
• Support communications: Retained for three (3) years from the date of the relevant interaction.
• Marketing preference records: Retained for three (3) years from the date of the last marketing communication or opt-out action.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data may be retained indefinitely for aggregate analytical purposes.

9. Cookies & Tracking Technologies

sambal88 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for login session management, security, and basic platform functionality. These cannot be disabled without impairing your ability to use sambal88.
• Analytical Cookies: Used to collect anonymised data on how users navigate sambal88, which pages are visited most frequently, and where users exit the platform. This data informs ongoing platform improvement.
• Functional Cookies: Enable sambal88 to remember your preferences, such as language settings, previously viewed game categories, and deposit method defaults.
• Marketing Cookies: Used where you have consented, to track interactions with promotional content and to deliver relevant promotional messaging consistent with your gaming interests.

You may manage cookie preferences through your browser settings. Disabling analytical or functional cookies will not prevent you from accessing sambal88 but may reduce the personalisation of your experience.

10. Your Rights as a Data Subject

Subject to applicable law, you have the following rights in relation to your personal data held by sambal88:

• Right of Access: To request a copy of the personal data sambal88 holds about you.
• Right to Rectification: To request correction of inaccurate or incomplete personal data.
• Right to Erasure: To request deletion of your personal data where sambal88 no longer has a lawful basis to retain it, subject to applicable legal retention obligations.
• Right to Restriction: To request that sambal88 restrict processing of your data in certain defined circumstances.
• Right to Data Portability: To receive a machine-readable copy of personal data you have provided to sambal88 where processing is based on consent or contract performance.
• Right to Object: To object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact sambal88 support via live chat or email at [email protected]. sambal88 will not charge a fee for standard requests and will respond within thirty (30) calendar days.

11. Data Security Measures

sambal88 implements technical and organisational security measures appropriate to the risk presented by the data processed, including:

• 256-bit SSL/TLS encryption for all data transmitted between users and sambal88's servers;
• Encrypted storage of passwords using industry-standard hashing algorithms; raw passwords are never stored;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of the sambal88 platform;
• Two-factor authentication available to all registered users and mandatory for administrative accounts;
• Automated session timeout controls to protect inactive sessions.

While sambal88 takes all reasonable precautions, no digital transmission or storage system is unconditionally secure. In the event of a personal data breach that poses a risk to your rights and freedoms, sambal88 will notify affected users and relevant authorities as required by applicable law.

12. Children & Underage Users

sambal88 is strictly an adult platform. Registration and use of the platform is prohibited for any person under the age of 21. sambal88 does not knowingly collect personal data from individuals under 21 years of age. If sambal88 becomes aware that personal data has been collected from an underage individual, that data will be deleted promptly and the associated account will be closed. If you believe an underage individual has registered on sambal88, please notify support immediately at [email protected].

13. Changes to This Policy

sambal88 reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, legal requirements, or platform functionality. Material changes will be communicated to registered users via the email address on file or through a prominent notice on sambal88 prior to the effective date. The "Effective Date" at the top of this Policy indicates when the current version took effect. Your continued use of sambal88 following notification of a policy update constitutes your acknowledgement of the revised terms.

14. Contact & Complaints

For all privacy-related enquiries, subject access requests, or complaints, please contact sambal88 via:

• Live Chat: Available 24/7 through the sambal88 platform — the fastest route for urgent queries.
• Email: [email protected] — for written requests and formal complaints. Response within 48 hours on business days for general enquiries; within 30 calendar days for formal data subject requests.

If you are not satisfied with sambal88's response to a privacy complaint, you may have the right to escalate your complaint to the relevant data protection supervisory authority applicable in your jurisdiction.