Privacy Policy

Siti33 Privacy Policy – Malaysian User Data Protection

At siti33, your privacy is our priority. This document details how we collect, use, store, and protect your personal data as a user of our entertainment platform. We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best standards in data protection.

Updated: 1 January 2026 Language: English PDPA 2010 Compliant
OUR COMMITMENT

Siti33 does not sell, rent, or share your personal data with third parties for marketing purposes without your explicit consent. All data is encrypted using SSL 256-bit and stored on secure servers with restricted access.

Privacy Principles
siti33's Six Core Data Protection Principles

Every aspect of how siti33 handles your personal data is grounded in six core principles that ensure your information remains safe and is used ethically at all times.

Advanced-Level Encryption

All data transmitted between your device and siti33's servers is protected by SSL 256-bit encryption — the same technology used by leading banking institutions. Your data cannot be intercepted or read by any unauthorised party during transmission.

Strict Access Control

Only specifically authorised siti33 staff may access your personal data, and only for legitimate purposes such as identity verification, transaction processing, or resolving complaints. All access is automatically logged and monitored.

PDPA 2010 Compliance

Siti33 operates in full compliance with Malaysia's Personal Data Protection Act 2010. We only process personal data for legitimate purposes, obtain your consent before any new use of your data, and allow you to access or amend your data at any time.

Secure Data Storage

Your data is stored in enterprise-grade data centres with strict physical and digital security controls. Automated backup systems ensure your data is never lost, while a clear data deletion policy ensures outdated information is not retained longer than necessary.

No Data Sales

Siti33 has never and will never sell, rent, or trade your personal data to advertisers or third-party data brokers. Your trust is our most valuable asset — we will not exchange it for any commercial gain.

Periodic Review & Updates

This Privacy Policy is reviewed and updated periodically to reflect changes in business practices, new technologies, and current legal requirements. Whenever a significant change occurs, you will be notified via an in-platform notification and email.

01 Personal Information We Collect

In operating the siti33 platform, we collect several categories of user personal data. This collection is carried out transparently and only for legitimate purposes. The following are the types of data we collect:

Identity Data: Full name, identity card number (MyKad), date of birth, gender, and nationality. This data is required to verify that you meet the minimum age requirement and for KYC (Know Your Customer) compliance purposes.

Contact Data: Mobile number, email address, and residential address. We use this information for service communications, delivery of important notifications, and two-factor authentication (2FA) to secure your account.

Financial Data: Payment method details such as bank account numbers, account holder names, and e-wallet information (TNG, GrabPay, Boost, ShopeePay). Full card numbers are not stored on our servers — we only retain secure tokens generated by licensed payment processors.

Technical Data: IP address, device type, operating system, browser type, screen resolution, time zone, and login session data. This data is used to detect suspicious activity and ensure the security of your account.

Platform Activity Data: Game history, betting records, deposit and withdrawal transactions, and interactions with platform features. This data is used to deliver better services and meet compliance audit requirements.

We do not collect credit card numbers directly. All payments are processed through licensed, PCI-DSS certified third-party payment gateways, ensuring your sensitive financial data never passes through our servers.

02 How We Collect Your Personal Data

Siti33 collects personal data through several different channels. Understanding how this works helps you make more informed decisions about the information you share with us:

  • Account Registration: When you register at siti33, you voluntarily provide basic information such as your name, email, phone number, and password.
  • KYC Process: When you submit identity verification documents for withdrawal purposes or when requested by our compliance team.
  • Platform Usage: Data is collected automatically as you use our services, including activity logs, session data, and game preferences.
  • Financial Transactions: Information is recorded when you make a deposit, withdrawal, or receive a bonus through the platform.
  • Support Communications: When you contact our support team via live chat or email, we retain conversation records to ensure service continuity.
  • Cookies and Similar Technologies: Through your web browser or mobile app when visiting or using the siti33 platform.
03 Personal Data Usage Purpose

Siti33 only uses your personal data for legitimate, necessary, and relevant purposes in connection with the delivery of our services. Below is a summary table of the primary purposes for data use:

Purpose Types of Data Used Legal Basis
Account Management Identity data, contact data Contract Fulfilment
KYC Verification Identity data, official documents Legal Obligation
Payment Processing Financial data, identity data Contract Fulfilment
Security & Fraud Prevention Technical data, activity data Legitimate Interests
Customer Support Contact data, interaction records Contract Fulfilment
Marketing & Promotions Contact data, preferences User Consent
Platform Improvement Technical data, activity data Legitimate Interests
Regulatory Compliance All data categories Legal Obligation

Regarding Marketing Communications: You may opt out of marketing emails or notifications at any time by clicking the "unsubscribe" link in our emails or via the notification settings in your account. This will not affect important service communications.

04 Data Sharing With Third Parties

Siti33 does not sell your personal data. However, in the course of our operations, there are limited situations where we need to share data with certain parties:

  • Payment Service Providers: Licensed payment gateways such as FPX, DuitNow, and e-wallet providers to process your transactions. They receive only the data required for the transaction and are bound by strict confidentiality agreements.
  • Game Providers: Gaming software companies that provide game content on the siti33 platform. Data sharing is minimal and strictly for game operation purposes.
  • Identity Verification Service: Licensed third-party KYC providers to verify your identity securely and efficiently.
  • Statutory Authority: Law enforcement agencies, regulatory bodies, or government authorities when required by law or court order.
  • Analytics Services: Analytics tools that help us understand how the platform is used for improvement purposes. This data is anonymised as much as possible.

All of siti33's third-party partners are required to comply with data protection standards equivalent to or higher than those of siti33. We conduct periodic reviews of these third parties to ensure ongoing compliance.

05 Data Security Measures

The security of your personal data is a responsibility we take extremely seriously. siti33 implements multiple layers of technical and organisational protection to keep your information safe:

  • Data Encryption in Transit: All communications between your device and siti33's servers are protected by TLS 1.3 protocol with AES-256 encryption.
  • Data Encryption at Rest: Sensitive data such as passwords and financial information is stored in encrypted form using the latest cryptographic algorithms.
  • Two-Factor Authentication (2FA): Available and strongly recommended for all users to add an extra layer of security to your account.
  • Continuous Monitoring: An intrusion detection system (IDS) monitors account activity 24/7 and triggers immediate alerts if any suspicious activity is detected.
  • Periodic Security Testing: Security audits and penetration testing are conducted regularly by independent security experts.
  • Staff Training: All staff with access to user data undergo comprehensive data protection training and are bound by confidentiality agreements.

While we take all reasonable steps to protect your data, no security system is one hundred percent foolproof. In the event of a security breach affecting your data, we will notify you and the relevant authorities within the timeframe required by law.

06 Cookies and Tracking Technologies

Siti33 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting information on how you use our platform (pages visited, time spent) to help us improve the user experience.
  • Functional Cookies: Remembering your preferences such as language selection, display settings, and login details for your convenience.
  • Analytics Cookies: Helping us understand platform usage patterns in aggregate and anonymised form for continuous improvement.

You can manage or delete cookies through your web browser settings. Please note, however, that deleting or blocking essential cookies may affect the functionality of the siti33 platform.

07 Your Rights as a User

Under Malaysia's PDPA 2010 and siti33's internal policies, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

User Rights
Your Rights Under the siti33 Privacy Policy

Siti33 fully recognises and respects your personal data rights. Below are the rights you may exercise at any time.

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.

Right to Rectification

If your personal data is inaccurate or outdated, you have the right to request a correction through the account settings section or by contacting our support team.

Right to Erasure

You may request the deletion of your personal data, subject to our legal obligations to retain certain records.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing a reason.

Right to Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.

Right to Restriction of Processing

In certain circumstances, you may request that we restrict the processing of your data while a related issue is being resolved.

To exercise any of the above rights, contact our Data Protection Officer at [email protected]. We will respond within 14 business days. For complex cases, the response period may be extended to 30 days, with prior notice given to you.

08 Data Retention Period

Siti33 does not retain your personal data longer than necessary for the purposes for which it was collected, or as required by law. Below are our data retention guidelines:

  • Active Account Data: Retained for the duration that your account remains active at siti33.
  • Post-Account Closure Data: Basic account information is retained for 7 years after closure to comply with legal requirements and financial audit obligations.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial services legal requirements.
  • KYC Documents: Retained for 5 years after the business relationship ends, as required by anti-money laundering regulations.
  • Support Communication Logs: Retained for 2 years to assist in resolving any disputes that may arise.
  • Technical Log Data: Automatically deleted after 12 months unless required for an ongoing security investigation.

Once the retention period expires, your personal data will be securely deleted using methods that ensure the data cannot be recovered. If you wish to know the specific retention period for a particular data category, you may contact our Data Protection Officer.

09 Child Data Protection

Siti33 is an adult entertainment platform permitted only for users aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

If we discover that personal data of an individual under the age of 18 has been collected without our knowledge, we will immediately take the following steps:

  • Immediately suspending the account in question while an investigation is carried out.
  • Deleting all personal data associated with that account.
  • Cancelling all transactions and returning any related funds.
  • Reporting cases to the relevant authorities where required.

If you become aware that a child has registered for or is using the siti33 platform, please contact us immediately at [email protected] so that we may take the appropriate action promptly.

10 Changes To This Privacy Policy

Siti33 reserves the right to modify this Privacy Policy from time to time to reflect changes in our business practices, new technology requirements, legal developments, or user feedback. When changes are made:

  • The "Updated" date at the top of this page will be updated to reflect the date of the latest change.
  • For significant changes, we will display a prominent notice on the platform's main page and send a notification to your registered email at least 14 days before the changes take effect.
  • For minor changes such as language corrections or additional clarifications, we may not send a special notice, but the updated date will be refreshed.
  • Continued use of the siti33 platform after the effective date constitutes your acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically so you are always aware of how we protect your information. If you disagree with any changes, you have the right to close your account and stop using the platform.

11 Contact Us – Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the siti33 Data Protection Officer (DPO):

  • Official Email: [email protected]
  • General Support Email: [email protected]
  • Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform
  • Response Time: 14 business days for written enquiries; 4 hours for urgent cases via live chat

If you feel that we have not handled your privacy complaint satisfactorily, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.

Our DPO team operates during office hours Monday to Friday, 9 AM to 6 PM. For enquiries outside office hours, your email will be responded to on the next business day. Urgent data security cases are handled around the clock.

FAQ
Frequently Asked Questions About siti33 Privacy

Below are answers to the most frequently asked questions by siti33 users regarding the Privacy Policy and personal data protection.

Absolutely not. siti33 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data is only shared with service partners necessary for platform operations (such as payment processors and KYC providers), and only to the extent required, under strict confidentiality agreements.

All financial transactions at siti33 are protected by SSL 256-bit encryption. We do not store full credit or debit card numbers on our servers — payment processing is handled entirely by PCI-DSS certified payment gateways. For e-wallets such as TNG, GrabPay, and Boost, only secure tokens are stored. Your bank account details are also encrypted before being stored in our database.

Yes, you may request deletion of your personal data by contacting our DPO at [email protected]. However, please note that certain data may need to be retained for a specified period to fulfil legal obligations, such as financial records (7 years) and KYC documents (5 years). After the mandatory retention period, your data will be fully deleted. We will clearly inform you which data can be deleted immediately and which must be retained in accordance with the law.

Should siti33 cease operations, we will provide adequate notice to all users. Personal data will either be securely deleted or transferred to a successor entity that agrees to uphold the same or stricter Privacy Policy. You will be informed before any such transfer takes place and given the option to request deletion of your data beforehand.

There are two easy ways to stop receiving promotional emails. First, click the "Unsubscribe" link found at the bottom of every marketing email we send. Second, log in to your account and go to Settings > Notifications > Email Preferences, then uncheck the promotional email option. Changes will take effect within 48 hours. Please note that you will still receive important service emails such as transaction confirmations and account security notifications.
Join siti33 Today
Your Data Is Safe. Time to Play!

You now know how siti33 protects your personal data with full transparency and accountability. Register now and enjoy over 500 top games — fish shooting, Live Casino, bingo, and more — in a safe, fair, and exciting environment. A welcome bonus of up to RM 500 awaits you!

100% Data Secure SSL 256-bit Bonus Up to RM 500 PDPA 2010 Compliant
Bahasa Melayu