Privacy Policy

This Privacy Policy ("Policy") describes how Siri888 ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("Player", "User", "you") who register for and use the services available at siri888.cam.

Siri888 is committed to handling your personal data with integrity, transparency, and respect. We process personal data in accordance with applicable international data protection principles and the requirements of our international gaming licence. This Policy applies to all players, regardless of whether they are located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere.

By registering an account or continuing to use the Siri888 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not use our services.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and behavioural data.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" — Siri888, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — A third party that processes personal data on behalf of Siri888 in accordance with our instructions and data processing agreements.
• "Consent" — A freely given, specific, informed, and unambiguous indication of agreement by which you consent to the processing of your personal data.
• "KYC Data" — Identity and verification documents submitted as part of the Know Your Customer process, including government-issued identification and proof of address.
• "Cookies" — Small text files placed on your device by a website to store information about your preferences and behaviour across sessions.

Siri888 collects personal data across several categories depending on the nature of your interaction with the Platform. The table below summarises the main data categories, specific data points, and the context in which they are collected.

Siri888 collects personal data through the following channels and mechanisms:

• Direct submission — Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your profile.
• Automated technical collection — Data collected automatically when you access the Platform, including IP addresses, device identifiers, browser metadata, and session activity logs.
• Cookies and tracking technologies — Data collected via first-party cookies placed on your device during Platform usage. See Section 8 for details.
• Payment processors — Transaction confirmation data returned by third-party payment processors including DuitNow, FPX, and cryptocurrency network validators upon deposit or withdrawal completion.
• Third-party identity verification services — Where we engage external KYC or AML screening providers to assist with identity verification and fraud detection.

We do not purchase or obtain personal data from data brokers or any third-party marketing lists. All personal data held by Siri888 is data that you or the Platform's own systems have generated in the course of your use of our services.

Siri888 processes your personal data only for specific, documented purposes. The primary purposes for which we process personal data are:

• Account creation and management — To register, authenticate, and maintain your Siri888 player account;
• Identity and age verification (KYC) — To verify that you are who you claim to be and that you meet the minimum age requirement of 21 years;
• Payment processing — To facilitate deposits and withdrawals via your chosen payment method, including Touch 'n Go, Maybank, CIMB, DuitNow, FPX, or cryptocurrency;
• Game and sports betting service delivery — To enable you to access and participate in all Platform services, including live casino, slot games, and sports betting markets;
• Fraud prevention and security — To detect and prevent fraudulent activity, money laundering, account compromise, and Terms violations;
• Regulatory compliance — To satisfy obligations under our international gaming licence, including AML reporting requirements and responsible gambling programme administration;
• Customer support — To respond to enquiries, resolve disputes, and provide technical assistance;
• Responsible gambling — To monitor betting patterns, administer player-requested limits and exclusions, and identify players who may need support;
• Marketing communications — To send you promotional offers and platform updates, where you have given your express consent or where we have a legitimate interest in doing so;
• Platform analytics and improvement — To understand how players use the Platform and identify areas for technical improvement and content development.

Each instance of personal data processing at Siri888 is conducted under one of the following recognised legal bases:

• Contractual necessity — Processing required to perform the contract between you and Siri888, such as account management, payment processing, and game service delivery;
• Legal obligation — Processing required for compliance with applicable regulations, including AML obligations under our gaming licence and KYC requirements;
• Legitimate interests — Processing for fraud prevention, security monitoring, platform analytics, and responsible gambling monitoring — where these interests are not overridden by your privacy rights;
• Consent — Processing for marketing communications and the use of non-essential cookies, where you have provided specific, informed consent. You may withdraw consent at any time without affecting prior processing.

Siri888 does not sell your personal data to third parties. We may share your personal data with the following categories of third parties, strictly for the purposes outlined in this Policy:

• Payment service providers — Banks, e-wallet operators, and payment gateways (such as FPX, DuitNow, Touch 'n Go, Boost, GrabPay, Maybank, CIMB, and Public Bank) to process your transactions;
• Identity verification providers — Third-party KYC and AML service providers engaged to assist with document authentication and identity screening;
• Game content providers — International game studios whose content is hosted on the Platform may receive session-level data for game integrity purposes;
• Fraud and security services — Third-party providers engaged specifically to detect, investigate, and prevent fraudulent activity;
• Technology and hosting providers — Cloud infrastructure, server hosting, and software service providers that process data on our behalf under contractual data processing agreements;
• Regulatory and law enforcement authorities — Where required by law, court order, or regulatory requirement, we may disclose personal data to competent authorities. Siri888 will seek to notify you of any such disclosure where legally permissible.

All third-party data processors engaged by Siri888 are required to process personal data only in accordance with our instructions and are contractually bound by data protection obligations consistent with this Policy.

Siri888 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain your session state, and gather analytics data that helps us improve our services.

We use the following categories of cookies:

Siri888 does not use third-party advertising cookies or cross-site tracking technologies. You may manage non-essential cookie preferences through your browser settings. Note that disabling strictly necessary cookies may affect your ability to use certain Platform features, including secure login and payment processing.

Siri888 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulation;
• KYC documents: Retained for five (5) years following account closure or the completion of the most recent transaction, whichever is later;
• Gaming activity logs: Retained for a minimum of three (3) years for responsible gambling monitoring and dispute resolution purposes;
• Support communications: Retained for up to two (2) years from the date of the last interaction;
• Marketing consent records: Retained for the duration of the active consent period plus one (1) year following withdrawal, to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes.

Siri888 implements a multi-layered approach to data security that includes both technical and organisational safeguards proportionate to the sensitivity of the data we hold:

• Encryption at rest and in transit: All personal and financial data is encrypted using AES-256 at rest and TLS 1.2+ in transit;
• Access controls: Role-based access controls ensure that internal personnel can only access the personal data categories necessary for their specific function;
• Infrastructure security: Platform infrastructure is hosted on enterprise-grade cloud infrastructure with regular security patching, penetration testing, and vulnerability assessments;
• Audit logging: All access to personal data records is logged, time-stamped, and monitored for anomalies;
• Incident response: A formal data breach response plan is in place. In the event of a breach likely to result in a risk to player data, Siri888 will notify affected players within 72 hours of becoming aware of the incident, where feasible.

While we implement industry-standard security measures, no online system is entirely immune to risk. You are encouraged to maintain strong, unique passwords and to enable two-factor authentication on your Siri888 account.

Given Siri888's international licensing structure and the global nature of our technology infrastructure, your personal data may be processed in countries outside of Malaysia. This may include jurisdictions within the European Economic Area (EEA), the Curacao gaming jurisdiction, or other countries in which our third-party service providers operate.

Where personal data is transferred internationally, Siri888 takes appropriate steps to ensure that such transfers are subject to adequate data protection safeguards, including the use of contractual data processing agreements with receiving parties that incorporate internationally recognised data protection standards.

By using the Siri888 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Malaysia, and you consent to such transfers in accordance with this Policy.

As a registered Siri888 player, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, please contact our Data Support team via the contact details in Section 15.

• Right of access: You may request a copy of all personal data we hold about you, along with information about how it is being processed;
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your account profile;
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
• Right to restrict processing: You may request that we restrict our processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to a particular processing activity;
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request your personal data in a structured, machine-readable format;
• Right to object: You may object to processing based on legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

All data rights requests will be processed within thirty (30) days of receipt. Where a request is complex or where a large volume of requests has been received, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and its reason.

All account registrations are subject to KYC identity and age verification. Where Siri888 discovers that personal data has been submitted by or on behalf of a person under the age of 21, the associated account will be closed immediately, all funds will be returned to the source payment method following review, and all personal data associated with that account will be permanently deleted.

If you are a parent or guardian and believe that a minor in your care has registered an account with Siri888, please contact our support team immediately at [email protected] — the matter will be treated as a priority.

Siri888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, technology, regulatory requirements, or business operations. When material changes are made, we will notify registered players via their registered email address and/or via a prominent notice on the Platform.

The version date displayed at the top of this Policy indicates the date of the most recent revision. Your continued use of the Siri888 Platform following publication of an updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data Siri888 holds about you, please contact us through the following channels:

When submitting a data rights request, please include your registered Siri888 username, a clear description of your request, and a copy of your identity document so that we can verify your identity before processing the request.