Privacy Policy – Personal Data Protection for stich888 Members

Stich888 is an online casino platform operating in Malaysia, offering its members a wide range of entertainment services including slots, baccarat, poker, live casino, roulette, badminton betting, and football betting covering the Malaysia Super League and EPL.

We understand that trust is the foundation of the relationship between a platform and its members. That trust can only be built when you know exactly how your personal information is handled. That is why we have made this Privacy Policy available so that it is clear and accessible to all our Malaysian members.

This Privacy Policy applies to all information collected through the stich888.ws website, mobile applications (if any), live chat, email, and any other communication channels used by members to interact with our platform.

Stich888 collects members' personal information through two main channels — information you provide directly to us, and information collected automatically through your use of our platform.

Information You Provide Directly:

• Full name as stated on your identity document (MyKad)
• An active Malaysian mobile phone number
• A valid and active email address
• Date of birth (for minimum age verification of 18 years)
• Current residential address (for certain KYC processes)
• National identity card number (MyKad) for identity verification
• Payment account details — Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay or FPX account (Maybank2u / CIMB Clicks) used for deposits and withdrawals

Automatically Collected Information:

• The IP address of your device when accessing the stich888 platform
• Browser type and version
• Device operating system (iOS, Android, Windows, etc.)
• Pages visited and time spent on each page
• In-platform gaming and betting history
• Login session data, including time, location, and device used

Stich888 only uses the personal information collected for legitimate, stated purposes. We do not use your data for any purpose outside the scope described below:

• Account Management: Creating, verifying, and maintaining your stich888 member account.
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, or FPX, as well as withdrawal of winnings.
• Identity Verification (KYC): Required by law to verify member identities and to prevent fraud and money laundering.
• Customer Support: Assisting with issues, enquiries and complaints submitted through stich888 support channels.
• Platform Security: Detecting and preventing unauthorised access, fraud, abuse and suspicious activity on the platform.
• Marketing Communications: Sending promotional information, bonuses, and special offers from stich888 to members who have opted in to receive them. You may unsubscribe at any time.
• Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate assistance.
• Platform Improvements: Analysing usage data (in aggregated, anonymised form) to improve the stich888 user experience.

Stich888 does not sell, rent, or trade members' personal data to any party. However, in the course of operating the platform, certain third parties may require limited access to your information for the purposes set out below:

The categories of third parties that may receive your limited data are:

• Payment Processors: Malaysian local payment service providers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX) receive the transaction information necessary to process your deposits and withdrawals.
• Game Providers: Companies such as Pragmatic Play, PG Soft and Spadegaming receive a player ID to enable gameplay, but do not receive your full personal identity information.
• KYC Services: Licensed third-party identity verification providers for KYC purposes as required by law.
• Authorities: Where required by Malaysian law or a court order, stich888 will disclose the necessary information to the relevant authorities.

The security of your personal data is stich888's top technical priority. We continuously invest in cybersecurity infrastructure to keep your information protected against both internal and external threats.

The technical security measures we have implemented include:

• 256-bit SSL/TLS Encryption: All communications between your browser and stich888's servers are encrypted using the latest TLS protocol, ensuring data cannot be intercepted in transit.
• Data-at-Rest Encryption: All sensitive data stored in our databases is encrypted using AES-256 standards.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an added layer of security that prevents unauthorised access even if your password is compromised.
• 24/7 Monitoring: Intrusion detection systems and anomaly monitoring operate around the clock to identify suspicious activity promptly.
• Regular Security Audits: Penetration testing and independent security audits are conducted on a regular basis by external cybersecurity experts.
• Internal Access Controls: Only stich888 staff who require access to specific data in order to perform their duties are authorised to do so, based on the principle of least privilege.

Stich888 uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage patterns. Cookies are small text files stored on your device when you visit our website.

The types of cookies we use are:

• Essential Cookies: Required for core platform functions such as login session verification. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how you use the platform — such as most frequently visited pages and page load times — to help us improve the user experience.
• Functional Cookies: Saves your preferences such as language, preferred bet size, and display settings to make your experience on the platform smoother.

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the stich888 platform. Further details on cookie management are available through your browser's help section.

Stich888 does not retain your personal data for longer than is necessary for the purpose for which it was collected, or longer than is required under Malaysian law.

• Active Account Data: Retained for the duration of your active account and for 7 years following account closure, in accordance with anti-money laundering legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian accounting standards and legal requirements.
• Communication Logs: Support chat records and emails are retained for 2 years for quality control and dispute resolution purposes.
• Technical Data (Logs): Server logs and technical data are retained for a maximum of 90 days before being automatically deleted.

Once the retention period expires, your data will be securely deleted or anonymised in a form that can no longer be linked back to you.

As a stich888 member and a Malaysian resident protected under the Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

To exercise any of the rights above, contact the stich888 data protection team by email at support@stich888.ws with the subject line "Privacy Rights Request". We will respond within 14 business days.

Stich888 strictly prohibits the use of its platform by individuals under the age of 18. Our platform is not designed for children, and we do not knowingly collect or store personal data of minors.

If we discover that personal data of a child has been collected without parental or guardian knowledge, we will take immediate steps to delete the information and close the account in question.

If you believe that a person under the age of 18 is using the stich888 platform, please contact us immediately at support@stich888.ws so that prompt action can be taken.

Stich888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in privacy practices, legal requirements or platform operations. Any amendments will be published on this page with a new effective date.

For significant amendments that affect how we use your personal data, stich888 will notify members via email or an in-platform notice at least 7 days before the changes take effect. Continued use of the platform after the effective date will be considered acceptance of the updated privacy policy.

If you have any questions, concerns or complaints regarding this Privacy Policy or how stich888 handles your personal data, please contact us through the following channels:

Stich888 is committed to responding to all privacy-related enquiries within a reasonable timeframe and in a fully transparent manner. Your trust is the asset we value most.