sikowd Privacy Policy

Section 1

Introduction

sikowd ("we", "us", "our") operates the online platform accessible at https://sikowd.lat ("Platform"). As the data controller for personal information processed through this Platform, we are committed to handling your data responsibly, transparently and in accordance with applicable data protection principles.

This Privacy Policy ("Policy") describes the categories of personal data we collect from users ("you", "User", "Player") when you register, deposit, play, request withdrawals, contact support or simply browse the Platform. It also sets out the purposes for which we use that data, the parties with whom we may share it, the period for which we retain it and the rights you hold in relation to it.

By creating an account with sikowd or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood its contents. If you have questions about any aspect of this Policy, please contact us using the details provided in Section 14.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which form part of the overall agreement governing your use of the Platform.

Section 2

Definitions

For the purposes of this Policy, the following terms have the meanings assigned below:

Section 3

Data We Collect

sikowd collects personal data through several channels. The categories and specific data points we gather are described below.

3.1 Registration data

When you create a sikowd account, we collect: full legal name, date of birth, residential address, email address, telephone number and preferred language. This information is necessary to establish your identity, confirm your eligibility and manage your account.

3.2 Identity verification (KYC) data

Before processing your first withdrawal and at any subsequent point required by our compliance procedures, we may request: a copy of your Malaysian identity card (MyKad) or equivalent government-issued photo ID, proof of residential address, and confirmation of the payment method used. For Malaysian users, this typically involves a clear photograph of the front and back of your MyKad together with a recent selfie.

3.3 Financial and transactional data

Each deposit or withdrawal generates a transaction record that includes: deposit amount (in MYR), payment method used (e.g., FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, BTC, USDT), transaction reference number, timestamp and processing status. We retain this data to resolve disputes, satisfy anti-money laundering requirements and produce accurate account statements.

3.4 Gaming activity data

sikowd logs game session information including games played, bet amounts placed, outcomes, session duration and account balance changes. This data is used to manage promotions accurately, detect fraud or abnormal betting patterns, and support responsible gambling assessments.

3.5 Device and technical data

When you access the Platform, our servers automatically collect: IP address, browser type and version, device type and operating system, referring URL, and session timestamps. This information helps us maintain Platform security, investigate unauthorised access and improve overall performance.

3.6 Communications data

If you contact our support team via live chat, WhatsApp or email, we retain records of those communications. These records are used to resolve your query, train our support team and improve service quality. Communication logs may also be reviewed where a complaint or dispute arises.

Section 4

How We Use Your Data

sikowd processes your personal data for the following purposes:

Section 5

Legal Basis for Processing

sikowd processes personal data on the following legal grounds:

• Contractual necessity: Processing your registration data, transactional records and KYC information is necessary to perform the contract between sikowd and you as a registered Player, as set out in our Terms & Conditions.
• Legal obligation: Certain processing activities — including anti-money laundering checks, identity verification and retention of financial records — are required by applicable law and regulatory guidance. sikowd cannot waive these obligations at a User's request.
• Legitimate interests: Processing for fraud detection, Platform security, abuse prevention and service improvement is conducted on the basis of sikowd's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on consent — for example, sending promotional email communications — we will obtain your clear, affirmative consent before proceeding. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

Section 6

Data Sharing & Disclosure

sikowd does not sell, rent or trade your personal data. We share personal data only in the following limited circumstances:

• Payment processors and financial partners: When you make a deposit or request a withdrawal via FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay or any supported cryptocurrency network, your transactional data is shared with the relevant payment service provider to the extent necessary to complete the transaction.
• KYC and identity verification providers: Your identity documents and related personal data may be shared with specialist third-party KYC verification services that process this information on our behalf under binding data processing agreements.
• Cloud infrastructure and hosting providers: sikowd uses reputable cloud hosting services to store Platform data securely. These providers act as Data Processors and are contractually obligated to maintain appropriate technical and organisational security measures.
• Fraud prevention and security services: Where abnormal account behaviour is detected, relevant data may be shared with specialist fraud detection partners to investigate and mitigate potential harm.
• Regulatory and law enforcement authorities: sikowd will disclose personal data to competent authorities where required by law, court order or regulatory directive. We will not notify Users of such disclosures where doing so would be unlawful or would compromise an ongoing investigation.
• Business transfers: In the event of a merger, acquisition, reorganisation or sale of substantially all assets, your personal data may be transferred as part of that transaction. We will provide reasonable notice of any such transfer and the privacy protections that will apply.

All third parties with whom sikowd shares personal data are required to maintain appropriate security standards and to use that data only for the purposes specified in our agreement with them.

Section 7

Cookies & Tracking Technologies

sikowd uses cookies and similar technologies to operate the Platform, maintain your session, remember preferences and analyse usage patterns. The main categories of cookies used are described below.

You may control cookie settings through your browser preferences. Disabling certain cookies may affect Platform functionality. sikowd does not deploy third-party advertising or cross-site tracking cookies.

Section 8

Data Retention

sikowd retains personal data for the period necessary to fulfil the purpose for which it was collected, comply with legal obligations and resolve disputes. General retention periods are outlined below:

• Account and registration data: Retained for the duration of your active account relationship plus a minimum of five years following account closure to satisfy anti-money laundering record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of five years from the date of verification or the date of account closure, whichever is later.
• Transactional and financial records: Retained for a minimum of five years from the date of each transaction to support audit, dispute resolution and regulatory review requirements.
• Gaming activity logs: Retained for a minimum of two years for operational and responsible gambling purposes, and for longer periods where a dispute or investigation is pending.
• Support and communications records: Retained for a minimum of two years from the date of each communication, or for the duration of any unresolved complaint, whichever is longer.
• Technical and device logs: Typically retained for 90 days unless required for an ongoing security investigation or legal proceeding.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not technically feasible within standard systems, the data is isolated and restricted from further processing until secure deletion is possible.

Section 9

Data Security

sikowd implements a range of technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, accidental loss or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the sikowd Platform.
• Encrypted storage of sensitive data at rest, including password hashes, payment method references and identity document copies.
• Role-based access controls that restrict employee access to personal data to those with a demonstrable operational need.
• Regular internal security reviews, vulnerability assessments and monitoring of Platform infrastructure for abnormal activity.
• Contractual data security obligations imposed on all third-party Data Processors who handle personal data on sikowd's behalf.

While sikowd takes reasonable steps to secure personal data, no electronic transmission or storage system is entirely free from risk. You also play an important role in protecting your account: use a strong, unique password, do not share your credentials and log out of your account when using shared or public devices.

In the event of a personal data breach that is likely to pose a risk to your rights and freedoms, sikowd will take prompt remedial action and notify affected individuals and relevant authorities in accordance with applicable law.

Section 10

User Rights

Subject to applicable data protection law and any overriding legal obligations, you have the following rights in relation to your personal data held by sikowd:

To exercise any of these rights, please contact sikowd's support team using the details in Section 14. We will acknowledge your request within five business days and provide a substantive response within 30 days. In complex cases, this period may be extended by an additional 30 days, and you will be informed of any such extension.

Section 11

Children's Privacy

The sikowd Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data relating to individuals under the age of 21. Where we become aware that personal data has been collected from an individual below the minimum age, we will promptly close the associated account, delete the data and, where applicable, report the matter to appropriate authorities.

Parents and guardians who have reason to believe that a minor has accessed or registered on the Platform are strongly encouraged to contact our support team immediately. Parental control software and device-level restrictions may assist in preventing underage access to online gambling services.

Section 12

International Data Transfers

sikowd's primary services are targeted at players in Malaysia. Where the use of cloud infrastructure, KYC verification partners or payment processors requires personal data to be transferred outside Malaysia, sikowd ensures that such transfers are subject to appropriate contractual safeguards — including standard data protection clauses in contracts with Data Processors — to maintain a level of protection equivalent to that applied within Malaysia.

sikowd does not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing appropriate supplementary measures. Where you have concerns about specific cross-border transfers affecting your data, please contact us as described in Section 14.

Section 13

Amendments to This Policy

sikowd reserves the right to update this Privacy Policy at any time. Revisions will be published on this page with an updated effective date. Where changes are material — such as a new category of data being collected, a new purpose being introduced or a change in retention periods — registered Users will be notified by email or through a prominent Platform notice before the changes take effect.

Continued use of the Platform following the effective date of any revision constitutes your acknowledgement of the updated Policy. If you do not agree with the revised terms, you should cease using the Platform and request account closure before the effective date.

Section 14

Contact Us

If you wish to exercise a data right, submit a privacy-related complaint, ask a question about this Policy, or report a potential data security concern, please reach the sikowd support team through any of the following channels. Contact details are presented as plain text for reference — please do not attempt to click any address as no mailto links are included.