samosir88 (hereinafter "the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who interacts with our services. This Privacy Policy constitutes a binding statement of how we handle personal information in connection with the operation of https://samosir88.cam.
This Policy applies to all data subjects who access the Platform, whether as registered account holders, visitors browsing without an account, or individuals who contact us through our support channels. It covers data collected through the website, account registration forms, payment processes, identity verification procedures and any other interaction with the samosir88 platform.
samosir88 operates as an English-language casino and sports entertainment platform directed primarily at users in Malaysia. Where personal data relates to Malaysian residents, we apply data handling practices aligned with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection standards. Nothing in this Policy creates or implies a guarantee of absolute data security, but the Platform takes all reasonable and proportionate measures to protect user information.
This Privacy Policy should be read alongside the Terms & Conditions. In the event of any conflict between the two documents on a privacy matter, this Privacy Policy prevails.
The following terms carry the meanings set out below throughout this Privacy Policy.
samosir88 collects personal data across the following categories. Only data necessary for the stated purpose is collected; the Platform does not engage in speculative or excessive data collection.
| Category | Examples of Data Points | Purpose |
|---|---|---|
| Identity data | Full name, date of birth, nationality, gender, national identity card number, passport number | Account registration, age verification (21+), KYC compliance |
| Contact data | Email address, phone number, residential address, city (e.g. Kuala Lumpur, Penang, Johor Bahru) | Account communications, support, address verification |
| Financial data | Payment method reference, deposit and withdrawal amounts in MYR, transaction identifiers | Payment processing via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay and bank channels |
| KYC documents | Scanned copy or photograph of MyKad, passport, proof of address | Identity and age verification; anti-money laundering obligations |
| Transactional data | Game history, bet amounts, wager outcomes, bonus redemptions, wagering progress | Account management, dispute resolution, responsible gambling monitoring |
| Technical data | IP address, browser type and version, operating system, device identifiers, session timestamps | Platform security, fraud prevention, service optimisation |
| Usage data | Pages visited, navigation paths, feature interactions, referral source | User experience improvement, analytics |
| Communications data | Support chat transcripts, email correspondence, feedback submissions | Support quality, dispute records, compliance documentation |
Data is collected directly from the data subject when they complete account registration, submit KYC documentation, make a deposit or withdrawal request, use live chat or email support, or respond to any Platform communication. All such submissions are voluntary, though refusal to provide required information may prevent the Platform from delivering certain services.
Technical and usage data is collected automatically through the Platform's server infrastructure and cookie mechanisms when a user visits the website. This includes IP address logging, session identifiers and browser capability data that the Platform receives as a standard consequence of internet communication, regardless of whether an account exists.
In limited circumstances, the Platform may receive data about a user from third-party sources. These include payment processors who confirm transaction status, identity verification service providers who validate document authenticity, and fraud-prevention services that flag high-risk patterns. Data received from third parties is handled under the same protections as directly submitted data.
samosir88 processes personal data for the following operational and compliance purposes. Processing is limited to what is necessary and proportionate for each stated purpose.
- Account creation and management — Identity and contact data are processed to create, maintain and administer user accounts, including login authentication and account preference settings.
- Age and identity verification — KYC data is processed to confirm that users are aged 21 or above and to satisfy anti-money laundering verification requirements before withdrawals or high-value account actions are completed.
- Payment processing — Financial data is processed to facilitate deposits and withdrawals through available Malaysian payment channels including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and online banking with Maybank, CIMB, Public Bank and Hong Leong.
- Responsible gambling monitoring — Transactional and behavioural data is processed to identify patterns consistent with problem gambling, to apply deposit limits requested by users, and to action self-exclusion requests promptly.
- Fraud prevention and security — Technical and identity data is processed to detect and prevent unauthorised account access, duplicate accounts, money laundering activity and other prohibited conduct described in the Terms & Conditions.
- Customer support — Communications data is processed to respond to account queries, resolve disputes and maintain records of support interactions for quality and compliance purposes.
- Platform improvement — Aggregated and anonymised usage data is processed to understand how users navigate the Platform and to inform decisions about feature development and interface design.
- Legal and regulatory compliance — Personal data may be processed as required by applicable law, court order or regulatory instruction, including record-keeping obligations under anti-money laundering requirements.
Contractual necessity: The majority of personal data processing by samosir88 is necessary for the performance of the contract established between the Platform and the user upon account registration. Processing for account management, payment facilitation, KYC verification and transactional records falls within this basis.
Legitimate interests: Processing for fraud prevention, security monitoring, platform analytics and responsible gambling pattern detection is conducted on the basis of the Platform's legitimate interest in maintaining a secure, fair and compliant service environment. This interest is balanced against the data subject's reasonable privacy expectations.
Legal obligation: Certain processing activities, including anti-money laundering record retention and age verification procedures, are required by applicable law. samosir88 processes and retains relevant data to the extent necessary to meet these obligations regardless of user preference.
Consent: Where processing is not required by contract or law, and where it does not fall within legitimate interests, samosir88 will seek explicit consent from the data subject. Consent-based processing is limited and can be withdrawn by contacting support, though withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
samosir88 does not sell, rent or trade personal data to third parties for commercial or marketing purposes. Data is shared with third parties only in the following defined circumstances, and only to the extent necessary for the stated purpose.
Payment processors: Transaction data is shared with payment service providers who facilitate deposit and withdrawal operations, including third-party processors operating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay and bank-linked transfer services. These processors receive only the data required to complete the specific transaction.
Identity verification providers: KYC documentation is shared with specialist identity verification service providers who validate document authenticity and confirm age eligibility. These providers operate under contractual data protection obligations and are not permitted to use the data for any other purpose.
Fraud prevention and security services: Technical and identity data may be shared with fraud detection services that help identify suspicious account activity, multi-account patterns or potentially unlawful transactions. Access is restricted to the minimum data set required for the specific check.
Legal and regulatory authorities: Personal data will be disclosed to competent authorities, law enforcement agencies or courts where the Platform is under a legal obligation to do so, or where disclosure is necessary to prevent or detect crime, protect persons from harm, or comply with a binding legal instrument.
samosir88 will never share your personal data with unrelated third-party businesses for advertising, data brokerage or profiling purposes. Any request purporting to be from samosir88 that asks you to share credentials or sensitive data through an unofficial channel should be treated as fraudulent.
samosir88 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. Once the retention period expires and there is no ongoing legal basis for storage, data is securely deleted or irreversibly anonymised.
Account data, transactional records and KYC documentation for active accounts are retained for the duration of the account relationship and for a minimum period of five (5) years following account closure, to meet anti-money laundering record-keeping requirements. Where a legal proceeding or regulatory investigation is ongoing, data may be retained beyond the standard period until the matter is concluded.
Support communications and dispute records are retained for a minimum period of two (2) years following the resolution of the relevant matter. Technical log data and IP records used for security purposes are retained for a shorter operational period consistent with the security purpose for which they were collected, typically not exceeding twelve (12) months unless flagged for investigation.
Where a user submits a deletion request under their data rights (see Section 11), the Platform will action the request to the extent permitted by law. Data that must be retained to satisfy a legal obligation will not be deleted ahead of the required retention period, but will be restricted from further processing beyond that purpose.
samosir88 implements technical and organisational security measures appropriate to the risk level associated with the personal data it holds. These measures are reviewed and updated on a regular basis to address evolving threat patterns and changes to the Platform's data processing activities.
Technical measures applied by the Platform include encryption of data in transit using industry-standard TLS protocols, access controls that restrict data access to personnel with a defined operational need, session timeout mechanisms, and server-side security configurations designed to limit exposure to common web-based attack vectors.
Users are responsible for the security of their own account credentials. samosir88 will never request a user's password through any communication channel including email, live chat or telephone. Choosing a strong, unique password and not sharing login credentials with any third party significantly reduces the risk of unauthorised account access.
Despite the security measures in place, no internet transmission or electronic storage system is entirely free from risk. samosir88 cannot guarantee absolute security but will notify affected users promptly if a data breach occurs that is likely to result in a risk to their rights or interests.
samosir88 uses cookies and similar tracking technologies to support the functional operation of the Platform, maintain authenticated sessions, store user preferences and gather aggregated analytics data about how the Platform is used. Cookies do not contain financial information or identity documentation.
Essential cookies are required for the Platform to function correctly. They maintain login sessions, preserve language and preference settings, and enable security token validation. Essential cookies cannot be disabled without significantly impairing the user experience.
Analytics cookies collect anonymised data about page visits, navigation behaviour and session duration. This data is used in aggregate form to understand usage patterns and improve Platform design. Analytics cookies do not identify individual users and cannot be linked to a specific account without additional information.
Users may manage cookie preferences through their browser settings. Disabling all cookies may affect the Platform's ability to maintain an authenticated session and may impair certain account functions. The Platform does not use third-party advertising cookies or cross-site tracking technologies for commercial profiling.
Subject to applicable law and the limitations set out in this Policy, data subjects hold the following rights with respect to personal data processed by samosir88. Requests may be submitted to [email protected] and will be addressed within a reasonable timeframe.
Right of Access
You may request a copy of the personal data samosir88 holds about you, along with information about how it is processed and the purposes for which it is used.
Right to Rectification
If personal data held by the Platform is inaccurate or incomplete, you may request that it be corrected or updated. Identity verification may be required before changes are applied.
Right to Erasure
You may request deletion of personal data where there is no longer a legal basis for its retention. This right is subject to the Platform's legal record-keeping obligations described in Section 8.
Right to Restrict Processing
You may request that processing of your personal data be restricted to storage only, pending the resolution of a specific objection or accuracy dispute.
Right to Data Portability
Where processing is based on consent or contractual necessity, you may request that your personal data be provided in a structured, commonly used and machine-readable format.
Right to Object
You may object to processing carried out on the basis of legitimate interests. The Platform will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
Exercising a data right will not affect any ongoing self-exclusion or responsible gambling restriction applied to your account. Safety restrictions remain in force independently of data processing decisions.
samosir88 does not knowingly collect or process personal data belonging to individuals under the age of 21. The Platform is strictly intended for adults aged 21 and above. Age verification is a mandatory requirement of the account registration and KYC process.
If the Platform becomes aware that personal data has been submitted by or on behalf of an individual under the age of 21, the relevant account will be immediately suspended and the data will be deleted to the extent permitted by applicable law. Any activity on the account during the period of ineligibility may be voided in accordance with the Terms & Conditions.
Strict 21+ enforcement: If you are aware that a minor has submitted personal data to samosir88 or has accessed the Platform, please notify us immediately at [email protected] so that the account can be reviewed and the data removed without delay.
samosir88 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform functionality or data processing practices. The effective date displayed at the top of this document will be updated whenever a material change is made.
Users are encouraged to review this Policy periodically. Where a change materially affects the way personal data is processed, the Platform will take reasonable steps to notify registered users through their registered email address or through an in-Platform notice. Continued use of the Platform following the effective date of any revised Policy constitutes acceptance of the updated terms.
For any questions, concerns or requests relating to this Privacy Policy or to personal data held by samosir88, please contact the support team. All privacy-related enquiries are handled with priority and will receive a substantive response within a reasonable period, typically within five (5) business days for written requests.
Requests to exercise data rights, including access, rectification, erasure or portability, must be submitted in writing with sufficient detail to identify the account and describe the specific request. The Platform may require identity verification before actioning a data rights request to prevent unauthorised access to another person's information.
Privacy and data enquiries: [email protected] (plain text — not a clickable link). Support is available 24 hours daily in Malaysia Time (MYT, UTC+8). For urgent security matters such as suspected unauthorised account access, please indicate "URGENT — SECURITY" in the subject line of your email.