Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how Syabas888 ("we", "our", "us", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals who access or use the Syabas888 website, mobile platform, and associated services (collectively, the "Services") accessible at https://syabas888.cam.

Syabas888 is committed to the responsible handling of personal data in accordance with applicable international data protection principles. We process personal data only for legitimate, specified purposes and apply appropriate technical and organisational safeguards to protect it against unauthorised access, disclosure, alteration, or destruction.

By registering an Account, making a deposit, or otherwise using the Services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Services and close your Account.

2. Definitions

For the purposes of this Policy, the following terms shall carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, financial information, or online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means Syabas888, which determines the purposes and means of processing Personal Data collected through the Services.
• "Data Subject" means the natural person (you, the Member or Visitor) whose Personal Data is processed by Syabas888.
• "Third Party" means any natural or legal person other than you and Syabas888 who is authorised to process your Personal Data under this Policy.
• "KYC" means the identity verification process applied to Members prior to processing withdrawals, as required by our licensing and AML obligations.
• "Cookies" means small data files placed on your device by the Syabas888 platform to facilitate browsing functionality, session management, and analytics.

3. Personal Data We Collect

Syabas888 collects the following categories of Personal Data from Members and visitors, depending on the nature of your interaction with the Services:

3.1 Registration and Identity Data

• Full legal name;
• Date of birth (for age verification — minimum 21 years);
• Residential address, including city and postcode;
• Email address;
• Mobile phone number;
• Username and account credentials (passwords are stored in hashed, non-recoverable form).

3.2 Identity Verification (KYC) Data

• Copy of valid government-issued identification document (Malaysian MyKad, passport, or equivalent);
• Proof of residential address (utility bill, bank statement, or official correspondence);
• Payment method verification documentation where required for AML compliance.

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers;
• E-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow) — account number or registered phone number only; we do not store full card or banking credentials;
• FPX and online banking transaction reference numbers (Maybank, CIMB, Public Bank, Hong Leong Connect);
• Wagering history, game activity logs, and balance movements.

3.4 Technical and Usage Data

• IP address and geolocation data (country and city level);
• Device type, operating system, and browser information;
• Session logs, including login times, session durations, and platform navigation patterns;
• Cookie identifiers and analytics data.

3.5 Communications Data

• Records of communications with our support team via live chat, email, or messaging;
• Feedback, complaints, and dispute correspondence.

Data Category	Primary Purpose	Retention Period
Registration Data	Account creation and management	Duration of account + 5 years
KYC Documents	Age/identity verification, AML compliance	5 years post-account closure
Transaction Records	Payment processing, dispute resolution	7 years (regulatory requirement)
Usage & Technical Data	Platform security, fraud detection	24 months
Support Communications	Quality assurance, dispute records	3 years

4. How We Collect Personal Data

Syabas888 collects Personal Data through the following mechanisms:

• Directly from you: Information you provide during registration, KYC verification, deposit or withdrawal requests, support interactions, or promotional participation.
• Automatically: Technical and usage data collected through cookies, server logs, and platform analytics when you access and use the Services.
• From third-party payment providers: Transaction reference data and payment status information received from Malaysian e-wallet and banking partners (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, etc.) when you initiate deposits or withdrawals.
• From identity verification services: Confirmation data from third-party KYC service providers used to validate the authenticity of identity documents submitted during verification.
• From fraud prevention services: Risk signals and flags from our fraud detection and AML monitoring partners, which process anonymised or pseudonymised data about transaction patterns.

5. How We Process Your Personal Data

Syabas888 processes your Personal Data for the following specific purposes:

1. Account Registration and Management: To create and maintain your Syabas888 account, verify your identity, enforce the 21+ age requirement, and manage your profile settings.
2. Payment Processing: To facilitate deposits and withdrawals via your selected Malaysian payment method, verify the ownership of payment accounts, and maintain accurate transaction records.
3. KYC and AML Compliance: To fulfil our regulatory obligations under our international gaming licence, including identity verification, age checking, and anti-money laundering screening.
4. Platform Personalisation: To tailor your gaming experience, including language settings, preferred payment methods, and relevant promotional offers based on your activity history.
5. Customer Support: To investigate and resolve account disputes, technical issues, payment queries, and complaints submitted through any support channel.
6. Security and Fraud Prevention: To monitor accounts for suspicious activity, detect and prevent fraud, identify multiple account creation, and protect the integrity of the platform.
7. Responsible Gambling Compliance: To enforce self-exclusion requests, deposit limits, session restrictions, and cooling-off periods applied to your account at your request or as required by responsible gaming policy.
8. Marketing and Communications: To send promotional offers, VIP programme updates, and product notifications where you have provided consent. You may withdraw this consent at any time.
9. Analytics and Platform Improvement: To analyse aggregated usage data for the purpose of improving platform performance, game selection, payment integration, and user experience.

6. Legal Basis for Processing

Syabas888 processes your Personal Data on the following legal grounds, in accordance with internationally recognised data protection principles:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — including account management, payment processing, and customer support.
• Legal Obligation: Processing required to comply with regulatory requirements under our international gaming licence, including KYC, AML, and responsible gambling obligations.
• Legitimate Interests: Processing carried out in pursuit of our legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for non-essential marketing communications and certain analytics activities, where you have provided explicit, informed, and revocable consent.

7. Data Sharing and Disclosure

Syabas888 does not sell, rent, or commercially trade your Personal Data with any third party. We may share your Personal Data only in the following limited and controlled circumstances:

• Payment Service Providers: Transaction data shared with Malaysian payment processors and banking partners (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Connect) solely for the purpose of processing your deposits and withdrawals.
• KYC and Identity Verification Providers: Identity documents and biographic data shared with licensed third-party verification services to fulfill our regulatory age and identity check requirements.
• Fraud Detection and AML Services: Pseudonymised or anonymised transaction data shared with fraud prevention and anti-money laundering monitoring service providers under strict data processing agreements.
• Regulatory Authorities: Personal data and transaction records disclosed to licensing authorities, law enforcement agencies, or financial intelligence units where we are legally required to do so.
• Platform Technology Providers: Operational data shared with our hosting, infrastructure, and platform technology partners under binding data processing agreements that prohibit independent use of your data.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your Personal Data may be transferred to the acquiring entity subject to equivalent privacy protections.

8. Data Retention

Syabas888 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The principal retention periods applied are as follows:

• Active Accounts: Personal Data is retained for the duration of your membership and active account status.
• Closed Accounts: Following account closure, registration data and KYC documents are retained for a minimum of five (5) years to satisfy regulatory record-keeping requirements.
• Financial Transaction Records: Maintained for a minimum of seven (7) years to comply with anti-money laundering and audit requirements.
• Technical and Usage Data: Retained for up to twenty-four (24) months for security monitoring and platform improvement purposes.
• Support Communications: Retained for up to three (3) years for quality assurance and dispute resolution purposes.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents re-identification.

9. Data Security

Syabas888 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Syabas888 servers is encrypted using industry-standard Transport Layer Security protocols.
• Password Hashing: Account passwords are stored exclusively in hashed, non-recoverable form using secure cryptographic algorithms. Syabas888 staff cannot access your plaintext password.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. All staff with data access are bound by confidentiality obligations.
• Two-Factor Authentication: Available to all Members to provide an additional layer of Account security beyond username and password.
• Regular Security Audits: The platform undergoes periodic security assessments, penetration testing, and vulnerability scanning to identify and remediate potential threats.
• Segregated Data Storage: Member data is stored on servers physically and logically segregated from publicly accessible systems.

Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. We encourage you to protect your account credentials, use two-factor authentication, and report any suspected unauthorised access to our support team immediately.

10. Cookies & Tracking Technologies

Syabas888 uses cookies and similar tracking technologies on our platform to provide essential functionality, improve user experience, and support analytics. The categories of cookies we deploy are as follows:

10.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They manage session authentication, maintain your login state, and enable core platform features. They cannot be disabled without severely impairing your ability to use the Services.

10.2 Functional Cookies

These cookies remember your preferences — such as language settings, preferred payment method, and display options — to provide a personalised and consistent experience across your sessions.

10.3 Analytics Cookies

Used to collect aggregated information about how Members interact with the platform — including page views, session durations, and feature usage. This data is used exclusively to improve platform performance and user experience. Analytics data is pseudonymised and does not identify you personally.

10.4 Security Cookies

Used to detect and prevent fraudulent account activity, identify suspicious login patterns, and support our AML monitoring obligations.

11. Your Rights as a Data Subject

As a Data Subject, you hold the following rights in relation to the Personal Data held about you by Syabas888. To exercise any of these rights, please contact our Data Privacy team via the contact details set out in Section 15.

We will respond to all data rights requests within thirty (30) calendar days. Where the request is complex or voluminous, we may extend this period by a further two months and will notify you accordingly. We reserve the right to verify your identity before processing any data rights request.

12. Minors & Age Protection Policy

The Syabas888 platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain Personal Data belonging to individuals under the age of 21. Age verification is an integral part of our KYC process, and all new Members are required to confirm their age during registration and substantiate it with valid government-issued identification prior to their first withdrawal.

In the event that Syabas888 discovers or has reasonable grounds to believe that Personal Data has been collected from an individual under 21, we will take immediate steps to:

• Suspend the associated Account without delay;
• Prevent further access to the Services;
• Securely delete all Personal Data associated with the Account, subject to any legal retention obligations;
• Return any deposited funds in accordance with our Responsible Gambling Policy and applicable law.

If you believe that an individual under 21 has registered on our platform, please contact our support team immediately.

13. International Data Transfers

Syabas888 operates as an internationally licensed platform, and your Personal Data may be processed and stored on servers located outside of Malaysia. When your data is transferred to jurisdictions outside your country of residence, we take appropriate measures to ensure that equivalent protections apply, including:

• Contractual clauses requiring recipient entities to process data in accordance with our Privacy Policy and applicable data protection standards;
• Data processing agreements that restrict the use, disclosure, and retention of your Personal Data by third-party service providers in other jurisdictions;
• Technical safeguards including encryption during transit to protect data against interception during cross-border transfer.

By using the Syabas888 Services, you consent to the transfer of your Personal Data to servers and service providers located outside Malaysia, subject to the protections described above.

14. Amendments to This Policy

Syabas888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform functionality. We will notify registered Members of material changes by posting the revised Policy on our website and, where practicable, by sending a notification to your registered email address or via an in-platform message.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to remain informed of how your Personal Data is handled. Your continued use of the Services following any amendment constitutes your acceptance of the updated Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data, please contact our Data Privacy team through the following channels:

• Live Chat (Preferred): Available 24 hours a day, 7 days a week via the Syabas888 platform. Average response time under 90 seconds.
• Email: [email protected] (plain text — not a clickable link). Responses typically within 2 business hours. Please include "Privacy Request" in your subject line.

For data subject rights requests, please provide your full registered name, account username, and a clear description of your request. We may ask you to verify your identity before processing the request.

For general account assistance, please visit our FAQ page. For information about our responsible gambling practices, visit our Responsible Gambling page.