Stm88 values the privacy of every player. We are committed to ensuring your personal data is handled transparently, securely, and responsibly in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Your personal data is more than just a number in a database — it is a trust we uphold with full responsibility every day.
All data transmitted between your device and stm88's servers is protected by TLS 1.3 and SSL 256-bit encryption. Sensitive information such as passwords and payment details is never stored in plain text.
Identity verification documents submitted during the KYC process are stored in an isolated environment and accessed only by authorised personnel. Original documents are not retained after verification is complete.
Stm88 servers are equipped with multi-layered firewalls, intrusion detection systems, and 24/7 security monitoring. All database access is audited and logged for security audit purposes.
Stm88 never sells, rents, or trades players' personal data to any third party for marketing purposes. Your data belongs entirely to you and will not be exploited for the benefit of others.
Players have the full right to access, update, correct, or request deletion of their personal data at any time via account settings or by contacting our support team.
In the event of any security incident involving player data, stm88 is committed to notifying affected players within 72 hours, in line with global data protection best practices.
Important Note: This Privacy Policy explains how STM88 collects, uses, stores, and protects your personal data. By using the STM88 platform, you agree to the practices described in this document. Please read it carefully before registering.
To provide a secure, reliable, and seamless service, stm88 collects several categories of personal information from our players. Data collection is carried out directly through the registration process, and indirectly through platform usage.
Information collected during registration:
Financial transaction information:
Technical information collected automatically:
Minimum Collection Principle: stm88 only collects data that is strictly necessary for specific purposes. We do not collect excessive or irrelevant information beyond what is required to operate the platform and deliver services to players.
Every piece of data we collect has a clear and legitimate purpose. stm88 does not use player data for any purpose beyond the scope stated here without first obtaining your additional consent.
| Purpose of Use | Types of Data Involved | Legal Basis |
|---|---|---|
| Identity verification & KYC | Name, IC/Passport, date of birth | Legal requirement |
| Deposit & withdrawal processing | Bank / e-wallet details | Contract performance |
| Fraud prevention & security | IP, device, transaction history | Legitimate interest |
| Customer support | Email, phone number, account history | Contract performance |
| Regulatory compliance & reporting | All data related to | Legal requirement |
| Product & service improvement | Usage & analytics data (anonymised) | Legitimate interest |
| Promotional communications (with consent) | Email, phone number | Consent |
Players may withdraw consent to receive promotional communications at any time via account settings or by contacting our support team. Withdrawing this consent will not affect data processing carried out for existing contractual or legal purposes.
Stm88 does not sell or rent players' personal data to any third party for marketing or commercial gain. However, there are specific situations where sharing data with selected third parties is necessary for platform operations.
Third parties that may receive your data:
All third-party service providers working with stm88 are bound by strict data confidentiality agreements and are only permitted to use your data for the specific purposes outlined in those agreements.
Business Transition: Should stm88 undergo a merger, acquisition, or any business transfer, player data may be transferred as part of the business assets. Players will be notified in advance and have the right to request deletion of their data if they do not agree with the new ownership.
Player data security is stm88's highest priority. We continuously invest in the latest cybersecurity infrastructure to ensure your data is always protected against both internal and external threats.
Technical protection layers we use:
Shared Responsibility: While stm88 takes all reasonable steps to protect your data, account security also depends on your own actions. Always use a strong password, enable 2FA, and never share your login credentials with anyone.
Stm88 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain login session security, and understand how players use our platform.
Types of cookies we use:
You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality and user experience of the STM88 platform. Essential cookies cannot be disabled as they are critical to the security of your session.
Third-party cookies from our analytics providers use data in anonymised form only and cannot be used to personally identify you.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. STM88 fully respects and facilitates the exercise of these rights.
You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 business days.
If your data is inaccurate or outdated, you have the right to request an immediate correction. Changes will be confirmed via email.
You may request the deletion of your personal data, subject to any legal retention requirements we are obligated to comply with.
You have the right to object to the processing of your data for direct marketing purposes or in certain situations relating to legitimate interests.
You may request your data in a machine-readable format for the purpose of transferring it to another service provider.
In certain circumstances, you have the right to request that we restrict the processing of your data while a dispute is being resolved.
To exercise any of the above rights, contact our privacy team via email at [email protected] or via live chat. We will verify your identity before processing any request related to personal data.
Stm88 does not retain your personal data longer than necessary for processing purposes or as required by law. Retention periods vary by data category.
| Data Category | Retention Period | Reason |
|---|---|---|
| Active account information | Throughout the active account period | Ongoing service requirements |
| Financial transaction records | 7 years after transaction | Financial legal requirements |
| KYC Documents | 5 years after account closure | AML/KYC Compliance |
| Support communication logs | 2 years | Dispute reference |
| Session data & technical logs | 90 days | Security & Monitoring |
| Analytics data (anonymised) | Unlimited | Product improvement (non-personal) |
Upon expiry of the retention period, data will be securely deleted using methods that ensure it cannot be recovered. For data stored in backup format, deletion will be carried out in the next backup cycle.
Legal Deletion Limits: Even if you request account deletion, certain data such as financial transaction records and KYC documents must be retained for the period stipulated by the Anti-Money Laundering Act 2001 and Malaysian financial regulations. We are unable to delete this data earlier without breaching our legal obligations.
Stm88 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. Each new version will display a clear "Updated" date at the top of this document.
For material or significant changes to how we handle your data, STM88 will:
Continued use of the stm88 platform after the effective date of any Privacy Policy changes constitutes acceptance of the new terms. If you disagree with the changes made, please close your account before the changes take effect and contact us to request deletion of your data.
Archived versions of previous Privacy Policies are available upon request. Contact our support team if you wish to compare changes between versions.
If you have any questions, concerns, or complaints regarding how stm88 handles your personal data, we encourage you to contact us directly. Our privacy team is ready to assist and committed to providing accurate and professional responses.
For formal complaints regarding data protection, please include the following details in your message: full name, account number, a clear description of the issue experienced, and your expected resolution. We aim to resolve all privacy complaints within 30 business days.
If you are not satisfied with our response, you also have the right to submit a complaint to Department of Personal Data Protection (JPDP) Malaysia which is the official regulatory body under the PDPA 2010.
Our Commitments: stm88 believes that player trust is our most valuable asset. We never take any privacy complaint or inquiry lightly. Every issue will be handled seriously, transparently, and within the designated timeframe.