ShioKambing Privacy Policy — Protection of Your Personal Data

ShioKambing collects various types of information from members for clear and legitimate purposes. We only collect data that is strictly necessary to provide a safe, fair, and seamless service to all users. Below are the categories of information we process:

• Personal Identification Information: Full name, identity card or passport number, date of birth, residential address, and mobile number registered during sign-up or the KYC process.
• Account Information: Username, password stored in encrypted hash form, email address, and account preference settings.
• Financial Information: Bank account details, e-wallet account numbers (Touch 'n Go, GrabPay), deposit and withdrawal history, and transaction records.
• Gaming Activity Data: Wagering records, game history, wins and losses, bonuses used, and the time and duration of game sessions.
• Technical Data: IP address, device type and operating system, web browser, session cookie data, access logs, and approximate location based on IP.
• Communications: Customer support chat records, emails sent to our team, and feedback submitted via forms.

Every piece of information we collect has a specific and legitimate purpose. ShioKambing does not process your data beyond what is required for the following purposes:

You may withdraw consent for marketing communications at any time via your account settings or by contacting our support team. Withdrawal of consent does not affect the validity of any processing carried out prior to that withdrawal.

ShioKambing does not share your personal data with external parties except in the situations clearly described below. All partners who receive your data are bound by strict data processing agreements and must comply with equivalent or higher privacy standards.

• Payment Providers: FPX, local bank gateways, and e-wallet providers receive only the data necessary to process your financial transactions. This data is not used for any other purpose on their end.
• Game Providers: Game software providers (third parties) receive the session data needed to operate games. Full names or financial information are not shared with game providers.
• Regulatory Authority: We may be required to disclose certain information to the relevant regulatory authorities when mandated by law or court order.
• KYC Providers: The identity verification process is carried out in partnership with trusted and certified KYC service providers, subject to strict confidentiality agreements.
• Not Sold to Advertisers: We never sell or share your personal data with third-party marketing companies or advertisers for any commercial purpose.

ShioKambing continuously invests in the latest security infrastructure to protect members' personal data from cyber threats, unauthorised access, and data breaches. Our approach to security is multi-layered and comprehensive.

• Data Encryption at Rest: All sensitive data stored in our databases is encrypted using AES-256, including financial information and personal identification details.
• Data Encryption in Transit: All communications between your app and ShioKambing servers use TLS 1.3 protocol with verified 256-bit SSL certificates.
• Internal Access Controls: Internal staff access to user data follows the principle of least privilege — only employees who need it to perform their duties are granted access, and every access is logged for audit purposes.
• 24/7 Monitoring: Our security systems are continuously monitored by a dedicated cybersecurity team. Any suspicious activity is flagged for immediate investigation.
• Penetration Testing: ShioKambing's infrastructure undergoes regular penetration testing by recognised independent security firms to identify and address any technical vulnerabilities.
• Two-Factor Authentication (2FA): We provide and encourage the use of 2FA for all member accounts to add an extra layer of protection against unauthorised access.

ShioKambing uses cookies and similar technologies to enhance the user experience, maintain session security, and understand how members interact with our platform. Below is an explanation of the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how pages are visited to help us understand platform performance and identify areas for improvement.
• Functional Cookies: Saves user preferences such as font size, favourite game selections, and display settings to enhance your personalised experience.
• Security Cookies: Used to detect and prevent fraudulent activity, suspicious login attempts, and platform abuse.

You can manage or delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the ShioKambing platform.

As a shiokambing member based in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010. shiokambing fully respects and facilitates the exercise of these rights.

• Right to Access: You have the right to obtain a copy of the personal data we hold about you. Requests will be processed within 14 business days.
• Right to Rectification: If your data is inaccurate or out of date, you have the right to request a correction. You can update much of your information directly through your account settings.
• Right to Deletion: In certain circumstances, you have the right to request deletion of your personal data. This request is subject to our legal obligations to retain certain records.
• Right to Opt Out of Marketing: You may opt out of receiving any marketing communications from us at any time without affecting your account status.
• Right to Lodge a Complaint: If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

ShioKambing retains your personal data only for as long as necessary to fulfil the purposes set out in this policy or as required by law. Below are our data retention guidelines:

• Active Account Data: Retained for the duration your account is active and for any additional period required after account closure in accordance with legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in line with the Companies Act and Malaysian financial audit requirements.
• KYC Records: Retained for a minimum of 5 years after account closure or the date of the last transaction, whichever is later, in line with AML requirements.
• Communication Logs: Customer support chat records and emails are retained for 2 years for quality control and dispute resolution purposes.
• Technical Data (Logs): Access logs and technical data are retained for 90 days for security and technical troubleshooting purposes.

Once the relevant retention period expires, your personal data will be securely deleted or anonymised using industry-standard methods.

ShioKambing reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other relevant factors. When we make material changes, we will notify you through one or more of the following methods:

• An in-account notification upon your next login after changes take effect.
• Push notifications via the shiokambing mobile app (if you have enabled notifications).
• Email sent to the address registered on your account for any significant changes.
• A prominent notice at the top of this Privacy Policy page with a clear effective date.

The "Updated" date at the top of this page will always reflect the latest version of this policy. Your continued use of the ShioKambing platform after any changes are published constitutes your acceptance of the updated policy. We encourage you to review this page periodically.