Privacy Policy — Shio88

Shio88 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every player, visitor, and user ("you", "User") who interacts with our online casino and sports betting platform, accessible at shio88.cam.

This Privacy Policy ("Policy") describes in detail how Shio88 collects, processes, stores, shares, and protects your personal data in connection with your use of the Platform. It also sets out your rights as a data subject and explains how to exercise those rights.

This Policy is to be read together with our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated herein by reference. By accessing or using the Shio88 Platform, you confirm that you have read and understood this Policy and consent to the data processing practices described herein.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly, including but not limited to name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means Shio88, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party engaged by Shio88 to process Personal Data on its behalf, including payment gateways, KYC verification providers, and fraud prevention services.
• "KYC" means Know Your Customer — the identity and age verification process required under applicable regulations.
• "Cookies" means small text files placed on your device by the Platform that collect certain usage and preference data.
• "Sensitive Personal Data" means Personal Data revealing racial or ethnic origin, political opinion, religious belief, health condition, biometric or genetic data, and similar categories that warrant heightened protection.

Shio88 collects the following categories of personal data in connection with your use of the Platform:

We collect your personal data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or participating in promotions.
• Automated Technical Collection: Data collected automatically when you interact with the Platform, including IP addresses, browser and device data, and session activity through cookies and similar technologies.
• Payment Processors: Transaction confirmation data received from Malaysian payment providers including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong, as necessary to process and verify your transactions.
• KYC and Identity Verification Services: Identity verification results received from third-party KYC providers used to verify the age, identity, and residency of players.
• Fraud Prevention and AML Services: Risk signals and verification data received from third-party anti-fraud and anti-money laundering screening services.

Shio88 processes your personal data only where there is a valid legal basis to do so. The applicable legal bases are:

• Contractual Necessity: Processing required to perform the contract between you and Shio88 — including operating your account, processing deposits and withdrawals via DuitNow and FPX, and providing access to games and betting markets.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, age verification (21+ policy), anti-money laundering (AML) obligations, and financial record-keeping requirements.
• Legitimate Interests: Processing for purposes of fraud prevention, platform security, responsible gambling monitoring, and the improvement of our services — where such interests are not overridden by your rights.
• Consent: Where required by law, we will obtain your explicit consent before processing data for specific purposes such as direct marketing communications. You may withdraw consent at any time by contacting our support team.

Shio88 uses your personal data for the following specific purposes:

• To register and maintain your player account on the Shio88 platform.
• To verify your identity and age (21+ requirement) in accordance with our KYC procedures.
• To process deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen payment method.
• To fulfil anti-money laundering (AML) and fraud prevention obligations by monitoring account and transaction activity.
• To administer bonuses, promotions, loyalty rewards, and VIP programme benefits.
• To provide customer support through our 24/7 live chat team and email channel.
• To send you account-related transactional communications including deposit confirmations, withdrawal status updates, KYC notifications, and security alerts.
• To monitor your gameplay patterns for responsible gambling indicators and to intervene proactively where appropriate (e.g., flagging potential problem gambling behaviour and providing access to self-exclusion tools).
• To maintain the security, integrity, and performance of the Platform.
• To comply with applicable legal obligations, respond to regulatory enquiries, and fulfil reporting requirements.
• To send promotional communications, newsletters, and offers — only where you have provided consent or where applicable law permits, and only via your registered contact details.

Shio88 does not sell, rent, or commercially transfer your personal data to third parties. We may share your data only in the circumstances described below, and only to the minimum extent necessary:

• Payment Service Providers: We share relevant transaction and identity data with Malaysian payment processors (including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong) as required to process deposits and withdrawals.
• KYC and Identity Verification Providers: We share identity documents and information with third-party KYC service providers engaged to verify player identity and age.
• Fraud and AML Screening Services: We share transaction data with fraud prevention and anti-money laundering screening providers to detect and prevent financial crime.
• Technology and Platform Service Providers: We share necessary operational data with cloud hosting, cybersecurity, and platform technology providers operating on our behalf under binding data processing agreements.
• Legal and Regulatory Authorities: We may disclose your data to law enforcement, regulatory bodies, courts, or government authorities where required or permitted by applicable law, including to report suspicious financial activity under AML obligations.
• Business Transfers: In the event of a merger, acquisition, or transfer of assets, your data may be transferred to the successor entity, subject to the same privacy protections set out in this Policy.

All third parties with whom we share personal data are contractually required to process that data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection requirements.

Shio88 takes the security of financial data with particular seriousness. When you make a deposit or withdrawal using a Malaysian payment method — whether via DuitNow instant transfer, FPX bank transfer, Touch 'n Go eWallet, Boost, GrabPay, or direct bank transfer from Maybank, CIMB, Public Bank, or Hong Leong — the following data handling practices apply:

• Full bank account numbers and e-wallet credentials are not stored in Shio88's primary databases. Only tokenised or masked references sufficient to process future transactions are retained.
• All financial data is transmitted over encrypted connections. No payment credentials are transmitted in plain text at any stage of processing.
• Payment data is shared with the relevant payment processor only to the extent required to complete the transaction.
• Transaction records (amounts, dates, payment method type) are retained for a minimum of seven (7) years to meet applicable financial record-keeping and AML obligations.
• Cryptocurrency transaction data (BTC / USDT wallet addresses and transaction hashes) is handled in accordance with the same data minimisation and security standards applied to fiat currency transactions.

Shio88 uses cookies and similar tracking technologies on the Platform to provide a functional and personalised experience. The following categories of cookies may be placed on your device:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies and security tokens. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and display options to personalise your experience across sessions.
• Analytics Cookies: Collect anonymised data about how visitors use the Platform — pages visited, session duration, features used — to help us improve performance and user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, multiple account abuse, and bot access attempts.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Shio88 Platform, including the speed and reliability of payment processing flows.

Shio88 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our general retention schedule is as follows:

• Active Account Data: Retained for the duration of your account's existence on the Platform.
• KYC and Identity Records: Retained for a minimum of five (5) years following account closure, or longer if required by applicable AML regulation.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with applicable financial record-keeping requirements.
• Customer Support Communications: Retained for three (3) years from the date of the communication, or longer if the communication relates to an ongoing dispute.
• Technical and Log Data: Typically retained for ninety (90) days to two (2) years, depending on the security and fraud prevention purpose.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to technical constraints, it will be isolated from active processing until deletion is completed.

Shio88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers — the same standard used by major Malaysian banks.
• Encrypted storage of sensitive account and financial data at rest.
• Multi-factor authentication (MFA) for player accounts and administrative access.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Role-based access controls ensuring that only authorised Shio88 personnel can access personal data, and only to the extent required for their specific function.
• Continuous monitoring and intrusion detection systems to identify and respond to security incidents in real time.

In the event of a personal data breach that poses a risk to your rights, Shio88 will notify you via your registered email address without undue delay. We will also notify relevant authorities in accordance with applicable data protection requirements.

Subject to applicable law, you have the following rights with respect to your personal data held by Shio88. You may exercise any of these rights by contacting our support team through the details provided in Section 16.

Shio88 will respond to all data rights requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it. We may require identity verification before processing a data rights request to prevent unauthorised access.

The Shio88 Platform is intended exclusively for adults aged 21 years and above. We do not knowingly collect personal data from individuals under 21. Age verification is a mandatory step in the account registration and KYC process.

Where Shio88 becomes aware, or reasonably suspects, that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data to the extent permitted by law, and refund any deposited funds to the original payment method following identity confirmation.

If you are a parent or guardian and believe your minor child has registered on or accessed the Shio88 Platform, please contact our support team at once. We will handle your report with urgency and strict confidentiality.

The Shio88 Platform primarily serves players in Malaysia. However, some of the third-party service providers we engage — including cloud infrastructure providers, KYC verification services, and cybersecurity platforms — may process your data in jurisdictions outside Malaysia.

Where your personal data is transferred internationally, Shio88 takes appropriate steps to ensure that the transfer is subject to appropriate safeguards, such as binding contractual clauses with the receiving party that impose equivalent data protection obligations. We do not transfer personal data to jurisdictions that offer materially lower protections without implementing compensating safeguards.

Shio88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform functionality. The date of the most recent revision is displayed at the top of this Policy.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will provide notice via email to your registered address and post a prominent notice on the Platform at least seven (7) days before the changes take effect. Your continued use of the Shio88 Platform after the effective date of revised Terms constitutes your acceptance of the updated Policy.

We encourage you to review this Policy periodically to stay informed of how Shio88 protects your privacy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data Shio88 holds about you, please contact us through one of the following channels:

Please include your registered username and a clear description of your request or concern. Where your request relates to access, deletion, or rectification of personal data, we may require identity verification before processing the request to protect your account security.