Sama88 Privacy Policy – Your Personal Data Protection

01Introduction & Scope of This Policy

Sama88 ("we", "Platform") is committed to protecting the privacy of every user who uses our services. This Privacy Policy explains our practices for collecting, using, disclosing, and protecting your personal information when you access or use the sama88 platform.

This policy applies to all Sama88 platform users, including those registering a new account, using gaming services, making financial transactions, or simply browsing our website. By using the Sama88 platform, you agree to the collection and use of information as described in this Privacy Policy.

Sama88 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection legislation in Malaysia. We also adhere to international security standards to ensure your data is always protected.

02Personal Data We Collect

We collect various types of information depending on how you interact with the Sama88 platform. Below is a full explanation of the data we collect and the reasons for doing so:

03How We Use Your Data

Every piece of data we collect is used for a clear and legitimate purpose. We do not use your data beyond the scope stated below without prior notice and your consent:

• Account management and verification: Verifying that your identity is legitimate and protecting your account from unauthorised access.
• Financial transaction processing: Verifying and processing all deposits and fund withdrawals securely and promptly.
• KYC compliance and anti-money laundering (AML): Meeting legal and financial regulatory requirements applicable in Malaysia.
• Customer support: Helping you resolve technical issues, account enquiries, and complaints more effectively.
• Platform security: Detecting and preventing fraudulent activity, hacking attempts, and suspicious behaviour.
• Experience personalisation: Personalising game recommendations and promotional offers based on your gaming preferences.
• Platform improvement: Analysing usage patterns in aggregate to improve the quality and performance of the Sama88 platform.
• Important communications: Sending account-related notifications, policy updates, and critical security information.

If you have consented to receive marketing communications, we will also use your email address and phone number to send information about promotions, new bonuses, and relevant special offers. You may withdraw this consent at any time through your account settings.

04Data Sharing & Disclosure

Sama88 takes great care in determining who can access your personal data. As a principle, we do not share your data except in the following limited and strictly controlled situations:

• Trusted third-party service providers: We work with vendors that support platform operations, including payment processors (FPX, DuitNow, Touch 'n Go), cloud infrastructure providers, and identity verification services. All vendors are bound by strict confidentiality agreements and may only use your data for specified purposes.
• Legal and regulatory requirements: sama88 may be required to disclose certain data upon receipt of a valid court order, or when cooperating with Malaysian authorities in financial crime investigations.
• Platform security protection: In cases of suspected fraud, we may share relevant information with financial institutions, identity verification agencies, or industry bodies to prevent further losses.
• Business merger or acquisition: In the event of a change in company ownership, your data may be transferred as part of the business assets. You will be notified in advance should this occur.

05Encryption & Data Security Measures

Your data security is Sama88's top priority. We continuously invest in the latest security technologies and procedures to ensure your information is always protected against cyber threats.

• 256-bit SSL Encryption: All data transmitted between your web browser and sama88's servers is encrypted using TLS 1.3 protocol with 256-bit encryption — the same standard used by leading banking institutions.
• Secure password storage: Your password is never stored in plain text. We use the bcrypt hashing algorithm with a unique salt value for each account.
• Two-factor authentication (2FA): sama88 offers an additional layer of security through two-factor authentication, which can be activated via an authenticator app or SMS.
• 24/7 security monitoring: Our security team continuously monitors platform activity using sophisticated anomaly detection systems to identify and respond to threats in real time.
• Periodic security audit: The sama88 platform undergoes penetration testing and security audits conducted by independent cybersecurity firms at least twice a year.
• Internal access controls: Your personal data is accessible only to staff with a legitimate business need, and all access is logged and monitored.

06Cookies, Analytics & Tracking Technologies

The sama88 platform uses cookies and similar tracking technologies to enhance user experience, analyse platform performance, and deliver more relevant content to you.

• Essential Cookies: Required for core platform functions such as maintaining login sessions, security, and language preferences. These cookies cannot be disabled as they are critical to platform operation.
• Analytics cookies: We use internal analytics tools to understand how users interact with the platform — the most frequently visited pages, time spent in each section, and navigation paths. This data is used in aggregate form and cannot identify you personally.
• Functional cookies: Saving your preferences such as language selection, display settings, and last-used account information for your convenience.
• Performance cookies: Helping us identify and resolve technical issues faster by recording technical information when errors occur.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling essential cookies may affect platform functionality. For more information on managing cookies, refer to your web browser's help guide.

07Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have clear rights regarding your personal data held by Sama88. We fully respect and facilitate the exercise of these rights:

08Data Retention Period

Sama88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

• Active account data: Retained for as long as your account is active and for 7 years after account closure, in accordance with Malaysia's financial legal requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with the Financial Services Act 2013 and applicable AML regulations.
• KYC Documents: Retained for 5 years after the business relationship ends or the date of the last transaction, whichever is later.
• Security and access logs: Retained for 2 years for security investigation and audit purposes.
• Support communication data: Retained for 3 years for service quality reference and improvement.

Once the designated retention period has lapsed and there is no legal requirement to retain the data, sama88 will securely delete or anonymise your data using industry-standard methods.

09KYC Process & Identity Verification

As a responsible online entertainment platform, sama88 is required to conduct a thorough Know Your Customer (KYC) process to comply with anti-money laundering (AML) legislation and consumer protection requirements in Malaysia.

• Required documents: You may be required to submit a copy of your MyKad, passport, or other official identity document for verification purposes.
• Address verification: Bank statements, utility bills, or other official documents confirming your current residential address may be required, particularly for large withdrawal amounts.
• Source of funds verification: For transactions above a certain threshold, we may require proof of legitimate source of funds in accordance with AML compliance requirements.
• KYC document confidentiality: All documents you submit for KYC purposes are stored in an encrypted environment and can only be accessed by authorised compliance personnel.
• KYC processing: The KYC verification process is typically completed within 24–48 business hours. You will receive an email notification once verification is complete.

10Privacy Policy Amendments

Sama88 reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, technology, or our business practices. The "Updated" date at the top of this document will always reflect the latest version.

• For material or significant amendments, we will send a notification to your registered email address at least 14 days before the changes take effect.
• Minor amendments such as text clarifications or spelling corrections take effect immediately upon publication without prior notice.
• Continued use of the sama88 platform after any amendments take effect constitutes your acceptance of the updated policy.
• You are encouraged to review this Privacy Policy periodically to stay informed about how we protect your information.

11Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we encourage you to contact us directly. Sama88 is committed to addressing every enquiry seriously and within a reasonable timeframe.

• Live Chat: The fastest option — available 24/7 directly within the Sama88 platform with an average response time of under 2 minutes.
• Data Protection Email: [email protected] — for privacy-related inquiries that require detailed explanation or document attachments.
• FAQ: Many frequently asked questions related to privacy and security have been answered in the FAQ ours.

We will endeavour to respond to all personal data enquiries within 14 business days. For more complex requests, we may require up to 21 business days and will notify you if this is the case.