Privacy Policy – stich888

1. Introduction

1.1 stich888 ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who access or use the stich888 platform at stich888.net ("the Platform"). This Privacy Policy sets out, in clear and transparent terms, how stich888 handles personal information in connection with the operation of its online gaming services.

1.2 This Policy applies to all players registered with stich888, prospective players who browse the platform, and any individual whose personal data is processed in connection with our services — including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and other locations throughout Malaysia.

1.3 This Privacy Policy should be read in conjunction with the stich888 Terms & Conditions and Responsible Gaming Policy, each of which forms part of your agreement with stich888.

2. Data Controller

2.1 stich888 is the data controller responsible for personal data collected through the stich888 platform. As data controller, stich888 determines the purposes and means of processing personal data in connection with its online gaming operations.

2.2 For any privacy-related queries, complaints, or data subject requests, players may contact stich888 using the contact details set out in Section 14 of this Policy.

3. Data We Collect

3.1 stich888 collects personal data through several channels, including account registration, identity verification, payment processing, platform usage, and customer support interactions. The categories of personal data collected include:

Category	Examples	Collection Point
Identity Data	Full name, date of birth, nationality, MyKad or passport number	Registration, KYC verification
Contact Data	Email address, mobile number, residential address	Registration, account settings
Financial Data	Bank account details, e-wallet identifiers (Touch 'n Go, Boost, DuitNow), transaction history	Deposits, withdrawals
Technical Data	IP address, device type, browser type, operating system, session timestamps	Automated on platform access
Usage Data	Games played, bets placed, session duration, wager amounts, game preferences	Automated during gameplay
Communication Data	Live chat transcripts, email correspondence, support ticket content	Customer support interactions
Verification Data	Copies of government-issued identification, selfie photos submitted for KYC	KYC / identity verification

3.2 stich888 does not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data for identification purposes) beyond what is strictly necessary for identity verification under applicable KYC requirements.

4. How We Use Your Data

4.1 stich888 uses personal data for the following purposes:

• Account Management: Creating, verifying, and maintaining your stich888 player account, including processing your stich888 login credentials and managing account security.
• Service Delivery: Providing access to games, processing bets and wagers, crediting winnings, and enabling all features of the stich888 platform.
• Payment Processing: Processing deposits and withdrawals through Malaysian payment channels including Touch 'n Go eWallet, DuitNow, FPX, and bank transfers in MYR.
• Identity Verification (KYC): Verifying player identity and age (21+) in compliance with international gaming authority standards and anti-money laundering obligations.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, account takeovers, multi-accounting, and other prohibited conduct on the stich888 platform.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and administering player-requested responsible gaming tools, including deposit limits and self-exclusion.
• Legal & Regulatory Compliance: Meeting obligations under applicable gaming, financial, and data protection laws and regulations.
• Platform Improvement: Analysing aggregated usage data to improve the stich888 user experience, game performance, and platform stability.
• Customer Support: Responding to account queries, technical issues, bonus questions, and complaints submitted through live chat or email.
• Marketing Communications: Sending promotional communications about stich888 offers and new features to Players who have opted in to receive such communications. Players may unsubscribe at any time.

5. Legal Basis for Processing

5.1 stich888 processes personal data under one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the stich888 player account agreement, including account operation, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable law, including KYC/AML obligations and regulatory reporting requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by Player rights.
• Consent: Processing for marketing communications and certain optional platform features, where you have provided express consent. Consent may be withdrawn at any time.

6. Data Sharing & Third Parties

6.1 stich888 does not sell personal data to third parties. Personal data is shared only in the following circumstances and only to the extent necessary:

• Licensed Game Providers: Game studios (e.g. Evolution Gaming, Pragmatic Play) receive technical session data necessary to deliver game services. These providers are contractually bound to confidentiality and data protection obligations.
• Payment Processors: Malaysian payment service providers (including e-wallet operators and FPX) receive financial data necessary to process deposits and withdrawals.
• KYC / Identity Verification Services: Third-party identity verification providers receive copies of identification documents to complete KYC checks.
• Fraud & Security Providers: Specialist fraud detection services may receive technical and behavioural data to identify and prevent platform abuse.
• Regulatory & Law Enforcement Authorities: stich888 will disclose personal data to competent authorities where required by law, court order, or legitimate regulatory demand.
• Professional Advisors: Legal, audit, and compliance advisors who are bound by professional confidentiality obligations.

6.2 All third parties with whom stich888 shares personal data are required to process that data only for the specified purpose and in accordance with applicable data protection standards.

7. Cookies & Tracking Technologies

7.1 stich888 uses cookies and similar tracking technologies to operate the platform, maintain session security, and improve user experience. The categories of cookies in use include:

• Strictly Necessary Cookies: Essential to the operation of the stich888 platform, including session authentication, stich888 login state maintenance, and security functions. These cannot be disabled.
• Functional Cookies: Remember your platform preferences such as language settings and display preferences across sessions.
• Analytical Cookies: Collect aggregated, anonymised data about how players use the stich888 platform to inform performance improvements. No individual Player is identified through analytical cookies.

7.2 stich888 does not use third-party advertising or behavioural tracking cookies. You may manage cookie settings through your browser; however, disabling strictly necessary cookies will impair platform functionality.

8. Data Retention

8.1 stich888 retains personal data for as long as your account is active and for a period thereafter as required by applicable law and regulatory obligations. Retention periods for key data categories are:

• Account & Identity Data: Retained for the duration of the account and for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory requirements.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of the transaction.
• Communication Data: Live chat transcripts and email correspondence retained for up to two (2) years.
• Technical & Usage Data: Retained for up to twelve (12) months in identifiable form; thereafter aggregated and anonymised.

8.2 Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with stich888's data destruction procedures.

9. Data Security

9.1 stich888 implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and stich888 servers.
• Encrypted storage of sensitive data, including financial credentials and identification documents.
• Access controls restricting personal data access to authorised stich888 personnel on a need-to-know basis.
• Regular security assessments and penetration testing of stich888 platform infrastructure.
• Two-factor authentication (2FA) available to Players for additional account security.

9.2 Notwithstanding the above, no internet-based system is completely secure. Players are advised to maintain strong, unique passwords for their stich888 account and to enable 2FA to reduce the risk of unauthorised access.

10. Your Rights

10.1 Subject to applicable law, stich888 Players have the following rights in respect of their personal data:

• Right of Access: The right to request a copy of the personal data stich888 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction: The right to request that stich888 restrict processing of your personal data in certain circumstances.
• Right to Data Portability: The right to receive personal data you have provided to stich888 in a structured, commonly used, machine-readable format.
• Right to Object: The right to object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

10.2 To exercise any of the above rights, please submit a written request to stich888 via live chat or the email address in Section 14. stich888 will respond within thirty (30) days of receipt. Identity verification may be required before a request is processed.

11. International Data Transfers

11.1 stich888 may transfer personal data to service providers and partners located outside Malaysia, including those operating servers in other jurisdictions. All such transfers are subject to appropriate safeguards to ensure that personal data receives a level of protection equivalent to that afforded under applicable Malaysian and international data protection standards.

11.2 Where data is transferred to a jurisdiction that does not provide an equivalent level of data protection, stich888 implements contractual safeguards (such as standard contractual clauses) to protect your data.

12. Children's Privacy

12.1 The stich888 platform is strictly intended for individuals aged 21 years and above. stich888 does not knowingly collect personal data from individuals under the age of 21. If stich888 becomes aware that personal data has been collected from a person under 21 years of age, that account will be suspended immediately and all associated personal data deleted without undue delay.

12.2 If you believe that a minor has registered an account with stich888, please contact us immediately using the details in Section 14.

13. Changes to This Privacy Policy

13.1 stich888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated to registered Players by email or platform notification.

13.2 The revised Privacy Policy will take effect on the date indicated at the top of the Policy. Your continued use of the stich888 platform following that date constitutes acceptance of the updated terms.

14. Contact Us

14.1 For any privacy-related queries, data subject access requests, or complaints regarding stich888's handling of your personal data, please contact our Privacy team via:

• Live Chat: Available 24/7 through the stich888 platform support channel.
• Email: [email protected] — mark your subject line "Privacy Request" for prioritised handling.

14.2 stich888 is committed to resolving privacy concerns promptly and fairly. If you are not satisfied with our response, you may have the right to lodge a complaint with a competent data protection supervisory authority in your jurisdiction.