Privacy Policy — sambal88

This Privacy Policy applies to all personal data collected and processed by sambal88 in connection with the operation of the sambal88 Platform at sambal88.club, including all games, sportsbook services, account management functions, and customer support interactions.

sambal88 is committed to protecting the privacy of all registered Players and visitors. This Policy is intended to be transparent and readable — not deliberately obscure. If any part of this Policy is unclear, contact sambal88 support at [email protected] for clarification.

The data controller responsible for the personal data of sambal88 Players is the licensed operator of sambal88.club, operating under an international gaming authority licence. For all data-related enquiries, contact the sambal88 Data Protection Officer at [email protected].

sambal88 collects the following categories of personal data:

sambal88 does not collect sensitive personal data such as racial or ethnic origin, political opinions, or health data, except where directly relevant to responsible gaming self-declarations made voluntarily by the Player.

sambal88 uses the personal data collected for the following purposes:

• Account registration and management — to create, maintain, and secure your sambal88 account;
• Identity and age verification — to verify that Players are 21 years of age or older and to comply with KYC obligations;
• Payment processing — to process deposits and withdrawals via Touch 'n Go eWallet, Boost, Maybank2u, CIMB Clicks, Public Bank, and FPX;
• Regulatory compliance — to meet anti-money laundering (AML), counter-terrorism financing (CTF), and gaming licence obligations;
• Fraud detection and prevention — to detect and investigate suspicious activity, including account sharing and bonus abuse;
• Responsible gaming — to monitor gaming behaviour and enforce self-exclusion, deposit limits, and other responsible gaming tools set by the Player;
• Customer support — to respond to enquiries, resolve disputes, and improve the quality of sambal88 service;
• Platform communications — to send transactional emails, security alerts, and where consent has been given, promotional communications about sambal88 offers.

sambal88 processes personal data on the following legal bases:

• Contract performance — processing necessary to provide the sambal88 services to which you have subscribed;
• Legal obligation — processing required to comply with AML, KYC, and gaming regulatory requirements;
• Legitimate interests — processing necessary for fraud prevention, security monitoring, and Platform improvement, where such interests are not overridden by your fundamental rights;
• Consent — where you have expressly consented to specific processing, such as receiving sambal88 marketing communications. You may withdraw consent at any time by contacting sambal88 support.

sambal88 does not sell your personal data. sambal88 may share personal data with the following categories of recipient, strictly on a need-to-know basis:

• Payment service providers — including Touch 'n Go, Boost, FPX network participants, and Malaysian banking partners, to process financial transactions;
• Identity verification providers — third-party KYC and AML screening services to fulfil regulatory obligations;
• Game content providers — software studios supplying games to the sambal88 Platform may receive anonymised session data for technical integration purposes only;
• Regulatory authorities — gaming licence regulators and law enforcement agencies where sambal88 is legally required to disclose information;
• IT and hosting providers — cloud infrastructure and security service providers operating under contractual data processing agreements with sambal88.

All third-party processors engaged by sambal88 are subject to contractual obligations to process data only in accordance with sambal88's instructions and applicable data protection law.

7.1 sambal88 uses the following categories of cookies on the Platform:

• Strictly necessary cookies — required for the Platform to function, including session authentication and security tokens. These cannot be disabled.
• Functional cookies — remember your preferences such as language, display settings, and last-visited game lobby section.
• Analytics cookies — collect anonymised data about how Players interact with the sambal88 Platform to help us improve performance and navigation. No personally identifiable information is included in analytics data.

7.2 sambal88 does not deploy third-party advertising or behavioural tracking cookies. No player activity data from sambal88 is shared with advertising networks for retargeting purposes.

7.3 You may control cookie settings through your browser. Note that disabling strictly necessary cookies will prevent sambal88 from functioning correctly.

8.1 sambal88 retains personal data for no longer than is necessary given the purposes for which it was collected. Standard retention periods are as follows:

• Account data — retained for the duration of the account relationship and for 5 years following account closure, to comply with AML regulatory requirements;
• Transaction records — retained for a minimum of 5 years following the date of the transaction, in accordance with financial regulatory obligations;
• Customer support communications — retained for 3 years from the date of the last interaction;
• Technical and usage logs — retained for 12 months for security and fraud prevention purposes.

8.2 Where sambal88 is required by applicable law to retain data for a longer period, the statutory minimum retention period will apply.

sambal88 implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and the sambal88 Platform;
• Encrypted storage of passwords and sensitive account credentials;
• Two-factor authentication (2FA) available to all account holders;
• Automated anomaly detection to identify unusual login patterns;
• Restricted access controls ensuring personal data is accessible only to sambal88 staff with a genuine operational need.

No data transmission over the internet or electronic storage system is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, sambal88 will notify affected Players in accordance with applicable regulatory requirements.

As a data subject, you have the following rights in relation to personal data held by sambal88:

• Right of access — to request a copy of the personal data sambal88 holds about you;
• Right to rectification — to request correction of inaccurate personal data;
• Right to erasure — to request deletion of your personal data, subject to sambal88's legal retention obligations;
• Right to restriction of processing — to request that sambal88 restricts the processing of your data in certain circumstances;
• Right to data portability — to receive personal data in a structured, machine-readable format where technically feasible;
• Right to object — to object to processing based on legitimate interests, including for direct marketing;
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact sambal88 at [email protected]. sambal88 will respond to all valid requests within 30 days of receipt.

The sambal88 Platform is strictly for persons aged 21 years and above. sambal88 does not knowingly collect personal data from any person under the age of 21. If sambal88 becomes aware that personal data has been collected from a minor, the relevant account will be immediately suspended, all data will be deleted, and any funds held will be returned to the verified original deposit source where possible. If you believe a minor has registered on the sambal88 Platform, please notify sambal88 support immediately.

sambal88 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, Platform features, or applicable law. Material changes will be communicated to registered Players via the email address on file and will be posted on this page with a revised "Last updated" date. Continued use of the sambal88 Platform following notification of changes constitutes acceptance of the revised Policy.

For all privacy-related enquiries, data subject access requests, or concerns regarding this Policy, contact the sambal88 Data Protection Officer:

Email: [email protected] (plain text — not a clickable link)

sambal88 is committed to resolving all data-related concerns promptly and transparently. If you are unsatisfied with sambal88's response to a privacy concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.